last executing test programs: 2m31.169858177s ago: executing program 3 (id=2100): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb00000000000000000000000032fcff00073500000a00020000000000000000000005020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000) 2m31.125153208s ago: executing program 3 (id=2101): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x14, 0x0, 0x101}}) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='zonefs\x00', 0x208800, 0x0) 2m31.044817796s ago: executing program 3 (id=2102): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './file1/../file0', [{0x20, '@&,,\\{$'}, {0x20, '\f\xc2x?\x00\x00W\xca\xb7\xb1\x8e\xeb\xdc\xbbQ-\xee\x80\xf3\xc2\xe5\xedj|\x9b\xd9) \vL\x1b_m9\xa4\xd5\x15\x01\xa7\x19\x92q\x85D\x8b~\xffH9\x88\x8a\xddf0\xea1\xf1*]\xc3\x9agH\x01\x9b\xe8*%\x8d\xe0}\xed\xc8%\xban2\xfd\x1e^\x02*q0\xc5\xcbc\xc1\a\xee\xf1~\xdb\xae\'\x05r\xb1\xb4R e^\xa0\xdf\xf9'}, {0x20, '\x00\x00\x00\x00Z\x00-\x9e\v\xed?\xa3\xe4S\tSD\xb0\x9fU\xa9L\xc3\x9f\x18\x89\xc7\x1fc\xc8UEN\xfaZH\xd3\xact\x8e\xefN?kr\xe8?1y\t\r\xe1\xd7\x81\xf0\x9e\x9e\xa5\x92m\xa6\x87Uy\xeav\xb7Y4\xe0\xb9\xf9!\xdbY!\xder\x81\x8d\xfa\v.\xbb\xe0Q\xdb\xa4\xcd5\xcf\x04fm]\xd9\x1b\xe5`\xb2\xd6\x9fV\xb9D\xfa\xe9\xe0\xdcEJ\xef\'\x0fZu\f\v\xc2\xaf\xdd\x80\xac\xe7!g|\a\x00\xbb\x80FK\x94\x7f\x8a \x94\xc5\xfb\xe0\x03W#\x1c\x9au\xf6\xb1N\xdaL\xdb/c\x84\xf8b\r\x90\x94\n\x93\xd5\x00\x00\x00\x00\x00\x00\x00'}]}, 0x133) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e4", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000000000000400", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 2m30.673570441s ago: executing program 3 (id=2104): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x74}}, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r7 = accept4(r0, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000000)=0x7f, 0x4) sendmmsg$alg(r7, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) getsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000040), 0x2) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0) 2m30.321619697s ago: executing program 3 (id=2107): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100"/65], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000a00000000000000000001ac14143e0000000000c8b10000000000ac1414bb0000000000000000000000006cfcff00073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000) 2m30.229618511s ago: executing program 3 (id=2110): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x6, @mcast2={0xff, 0x5}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000580)}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) 2m14.71177189s ago: executing program 32 (id=2110): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x6, @mcast2={0xff, 0x5}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000580)}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) 1m39.922251397s ago: executing program 2 (id=2483): r0 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x48043) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r1, 0x3) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000080)={"a0453822", 0x0, 0x6, 0x1, 0xfffffffd, 0x0, "33793ed2edede2df2a87ba3158b8da", "0054946a", "0600", '\x00', ["d8ef5781ae0cff02223446fe", "51f3917dc9ed6f291acb3a10", "2ce50f0a285d9500c5e100"]}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$SIOCAX25DELUID(r3, 0x89e2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x402000, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) socket$packet(0x11, 0x2, 0x300) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x280984, 0x155) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) read$msr(r5, &(0x7f000001a380)=""/102399, 0x18fff) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) ioctl$SIOCAX25CTLCON(r6, 0x89e8, &(0x7f0000000180)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, 0x6, 0x4, 0x15, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext3\x00', 0x400, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 1m39.66896452s ago: executing program 2 (id=2484): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x8918, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000580)={'wlan1\x00', &(0x7f0000000240)=@ethtool_link_settings={0x4c, 0x0, 0x4, 0x4, 0x5, 0x3, 0xff, 0x4, 0x3, 0x1, [0x9, 0x1a, 0x6, 0x0, 0x10004, 0x8, 0x5, 0x10]}}) socket$nl_generic(0x10, 0x3, 0x10) (async) setreuid(0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = geteuid() (async) r9 = geteuid() (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) (async) statx(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x800, 0x20, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x114, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmget$private(0x0, 0x4000, 0x9b1839de62dade51, &(0x7f0000ff9000/0x4000)=nil) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) (async) fstat(r3, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) (async) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r16 = getegid() read$FUSE(0xffffffffffffffff, &(0x7f0000000780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r18 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000027c0)={{}, {0x1, 0x4}, [{0x2, 0x1}, {}, {0x2, 0x4, r4}, {0x2, 0x2, 0xee00}, {0x2, 0x4, r6}, {0x2, 0x5, r7}, {0x2, 0x5, 0xee00}, {0x2, 0x0, r8}, {0x2, 0x8, r9}, {0x2, 0x6, r10}], {0x4, 0x5}, [{0x8, 0x3, r11}, {0x8, 0xf, r12}, {0x8, 0x0, r13}, {0x8, 0x7, r14}, {0x8, 0x7, r15}, {0x8, 0x5, r16}, {0x8, 0x2, r17}, {0x8, 0x1, r18}, {0x8, 0x1, 0xee01}, {0x8, 0x5, 0xee01}], {}, {0x20, 0x4}}, 0xc4, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r1, 0x7dfff000) 1m39.498219635s ago: executing program 2 (id=2488): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x1000200, 0x0, 0x80000000, 0xdfff, 0x4, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 1m39.245682604s ago: executing program 2 (id=2493): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000380)="4da237a456087290", 0x8}], 0x1}}], 0x1, 0x1) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) r2 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0), 0x6db6e559) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000002c0)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000036c0)=r4) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) connect$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x201, 0x44, 0x0, 0x5, 0x9, @random="429825e40c16"}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x10000, 0x0, 0x1000, 0x1000, &(0x7f00003fe000/0x1000)=nil}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002100)=@getae={0x98, 0x1f, 0x1, 0x70bd2d, 0x25dfdbfd, {{@in=@loopback, 0x4d2, 0x2, 0x46}, @in=@rand_addr=0x64010100, 0xc, 0x3506}, [@algo_aead={0x4c, 0x12, {{'gcm-aes-ce\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x8000}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) add_key$keyring(&(0x7f00000101c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) writev(r7, &(0x7f0000019440)=[{&(0x7f0000000200)='H', 0x1}], 0x1) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) openat$cgroup_ro(r9, &(0x7f0000000100)='freezer.self_freezing\x00', 0x0, 0x0) 1m38.838428813s ago: executing program 2 (id=2497): openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0xc2, 0x0) (async) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0xc2, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x1, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) sendfile(r0, r4, 0x0, 0x7) 1m38.028495667s ago: executing program 2 (id=2509): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8c6a6728f0822698, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r5 = dup(r4) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r7, 0x4068aea3, &(0x7f0000000140)={0xdf, 0x0, 0x10000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0) madvise(&(0x7f0000146000/0x4000)=nil, 0x4000, 0x17) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r8, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) write$6lowpan_enable(r5, &(0x7f00000001c0)='1', 0x1) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r10 = dup3(r9, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 1m37.632884562s ago: executing program 33 (id=2509): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8c6a6728f0822698, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r5 = dup(r4) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r7, 0x4068aea3, &(0x7f0000000140)={0xdf, 0x0, 0x10000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0) madvise(&(0x7f0000146000/0x4000)=nil, 0x4000, 0x17) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r8, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) write$6lowpan_enable(r5, &(0x7f00000001c0)='1', 0x1) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r10 = dup3(r9, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 52.034665262s ago: executing program 1 (id=2859): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="dd", 0x1}], 0x1}}], 0x1, 0x24004c41) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) fadvise64(r1, 0x3, 0x3, 0x5) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r1, 0x7dfff000) set_mempolicy_home_node(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0) mremap(&(0x7f0000787000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) 51.897774736s ago: executing program 1 (id=2860): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './file1/../file0', [{0x20, '@&,,\\{$'}, {0x20, '\f\xc2x?\x00\x00W\xca\xb7\xb1\x8e\xeb\xdc\xbbQ-\xee\x80\xf3\xc2\xe5\xedj|\x9b\xd9) \vL\x1b_m9\xa4\xd5\x15\x01\xa7\x19\x92q\x85D\x8b~\xffH9\x88\x8a\xddf0\xea1\xf1*]\xc3\x9agH\x01\x9b\xe8*%\x8d\xe0}\xed\xc8%\xban2\xfd\x1e^\x02*q0\xc5\xcbc\xc1\a\xee\xf1~\xdb\xae\'\x05r\xb1\xb4R e^\xa0\xdf\xf9'}, {0x20, '\x00\x00\x00\x00Z\x00-\x9e\v\xed?\xa3\xe4S\tSD\xb0\x9fU\xa9L\xc3\x9f\x18\x89\xc7\x1fc\xc8UEN\xfaZH\xd3\xact\x8e\xefN?kr\xe8?1y\t\r\xe1\xd7\x81\xf0\x9e\x9e\xa5\x92m\xa6\x87Uy\xeav\xb7Y4\xe0\xb9\xf9!\xdbY!\xder\x81\x8d\xfa\v.\xbb\xe0Q\xdb\xa4\xcd5\xcf\x04fm]\xd9\x1b\xe5`\xb2\xd6\x9fV\xb9D\xfa\xe9\xe0\xdcEJ\xef\'\x0fZu\f\v\xc2\xaf\xdd\x80\xac\xe7!g|\a\x00\xbb\x80FK\x94\x7f\x8a \x94\xc5\xfb\xe0\x03W#\x1c\x9au\xf6\xb1N\xdaL\xdb/c\x84\xf8b\r\x90\x94\n\x93\xd5\x00\x00\x00\x00\x00\x00\x00'}]}, 0x133) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000000000000000002000", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 51.654623919s ago: executing program 1 (id=2861): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000f00)=""/259, 0x103}, {&(0x7f00000005c0)=""/238, 0xee}, {&(0x7f0000000d00)=""/239, 0xef}, {&(0x7f0000002040)=""/4068, 0xfe4}, {&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000500)=""/184, 0xb8}, {&(0x7f0000003040)=""/4102, 0x1006}, {&(0x7f00000006c0)=""/228, 0xe4}, {&(0x7f0000000940)=""/232, 0xe8}, {&(0x7f00000043c0)=""/4096, 0x1000}], 0xb}, 0x40014080) 50.707577039s ago: executing program 1 (id=2866): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000009c0)=ANY=[@ANYBLOB="08000000000000000a004e2100000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"/132], 0x290) 50.425830596s ago: executing program 1 (id=2867): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb00000000000000000000000032fcff00073500000a00020000000000fc0000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000) 50.397062042s ago: executing program 1 (id=2868): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68200, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r3) sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000ffdbbc2515000000080014007881217d08000100", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x94) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) (async) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 35.34375742s ago: executing program 34 (id=2868): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68200, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r3) sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000ffdbbc2515000000080014007881217d08000100", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x94) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) (async) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 15.156722433s ago: executing program 5 (id=3191): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = semget(0x0, 0x3, 0x200) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x2c) mount$afs(&(0x7f0000000380)=ANY=[@ANYBLOB="2373797a31276261636b757000b4aeeefc9d4c414e257c865b1d864633a6633033f20d2b6c0a71057308c2c07e3efd23f87349b9dd25fc92b9ee74f134afda11926be5b271b997efeb53bb16"], &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x800, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYRES32, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000006280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7463e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda451852e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa248000000f858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd6510100000000000080931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x4, 0x10000000000, 0x0, 0x5, 0x0, 0x0, {0x0, 0x1, 0x101, 0x8000000000000000, 0x80000000000, 0x0, 0x10, 0x4, 0x0, 0x2000, 0x2, r4, r5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000080)=[0xee00, 0x0, 0xee01]) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SCSI_IOCTL_DOORLOCK(r8, 0x5380) r9 = dup(r7) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000000e0ffff8904"]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x6}}, {@blksize={'blksize', 0x3d, 0x1200}}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x12}}, {@default_permissions}], [{@context={'context', 0x3d, 'system_u'}}]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8010, r0, 0xce353000) r10 = socket(0x40000000015, 0x5, 0x0) getsockopt(r10, 0x200000000114, 0x2711, 0x0, &(0x7f0000000180)) 15.013792228s ago: executing program 5 (id=3193): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100"/65], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0001a80000c8b10000000000ac1414bb0000000000000000000000006cfcff00073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000) 14.990158985s ago: executing program 5 (id=3194): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x1e4, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_TX_RATES={0xfc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x98, 0x8, 0x9, 0x1, 0x23, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x2, 0x8}, {0x3, 0x5}, {0x5, 0x3}, {0x4, 0xa}, {0x3, 0x9}, {0x5, 0x4}, {0x4, 0xa}, {0x7, 0x3}, {0x3, 0x8}, {0x3}, {0x1, 0x7}, {0x1, 0x9}, {0x6, 0x1}, {0x3, 0x5}, {0x2, 0x5}, {0x1, 0x4}, {0x1}, {0x6, 0x6}, {0x6, 0xa}, {0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd9c, 0x3, 0x7, 0x7b0, 0x1, 0xfa, 0x0, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0xffc0, 0xff, 0x1f78, 0x5, 0xb, 0x7f, 0x638]}}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x87a, 0x9, 0x74db, 0x2, 0x7, 0x212, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x66, 0x3, 0x9, 0x43, 0x44, 0x2, 0x4, 0x3, 0x9, 0x22, 0x6c, 0x24, 0x6c, 0x2, 0x2, 0x4, 0x30, 0x16, 0x18, 0x9, 0xc, 0x5e, 0x4, 0x2, 0x24, 0x0, 0x60, 0xb, 0xb, 0x6, 0x16, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1, 0x1}, {0x7, 0x1}, {0x7, 0x5}, {0x2, 0x3}, {0x4, 0x5}, {0x1, 0x7}, {0x6, 0x5}, {0x0, 0x2}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x100, 0x4, 0x60, 0x1, 0x3, 0x7, 0xd]}}]}]}, @NL80211_ATTR_TX_RATES={0x28, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x24, 0x3, 0x60, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x4, 0x4, 0x9e74, 0x1000, 0x3, 0xdf]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x4, 0x1}, {0x7, 0xa}, {0x6, 0x9}, {0x1}, {0x7, 0x2}, {0x0, 0x1}, {0x3, 0x3}, {0x1, 0x4}, {0x3, 0x7}, {0x0, 0x7}, {0x7, 0x6}, {0x0, 0x6}, {0x1, 0xa}, {0x1, 0x2}, {0x6, 0xa}, {0x2, 0xa}, {0x0, 0x9}, {0x1, 0x6}, {0x0, 0x1}, {0x4, 0xa}, {0x1, 0x2}, {0x1, 0x9}, {0x2, 0x9}, {0x6, 0x7}, {0x1, 0x3}, {0x2, 0x8}, {0x5, 0x6}, {0x0, 0x8}, {0x3, 0x1}, {0x4, 0x2}, {0x7, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x4}, {0x0, 0x4}, {0x3, 0x5}, {0x7, 0x9}, {0x4, 0x1}, {0x7, 0x2}, {0x6, 0x6}, {0x3}, {0x7, 0x4}, {0x1, 0x8}, {0x2, 0x4}, {0x0, 0x1}, {0x0, 0x4}, {0x0, 0x8}, {0x0, 0x4}, {0x1, 0x8}, {0x2, 0x7}, {0x2, 0x5}, {0x4, 0x9}, {0x2, 0x6}, {0x4, 0x1}, {0x6, 0x6}, {0x4, 0x3}, {0x4, 0x4}, {0x4, 0x2}, {0x0, 0x2}, {0x4}, {0x1, 0x6}, {0x0, 0x9}, {0x6, 0x2}, {0x7, 0xa}, {0x4, 0x6}, {0x3, 0x7}, {0x0, 0x1}, {0x1, 0x6}, {0x1, 0x8}, {0x7, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x3, 0x3b2, 0x6, 0x5490, 0x4, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xd, 0x4, 0x9, 0xffff, 0x3, 0x7, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x94, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x13}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x449}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}]}, @NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xf776}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0xc, 0xaf, 0x3, 0x64d, 0x9, 0x4, 0xffffffff, 0xfff, 0x7]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x81}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x81}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0xc4040}, 0x8806) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) (async) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) 14.862745467s ago: executing program 5 (id=3197): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x110, 0x0, 0x308, 0x308, 0x110, 0x4, 0x0, {[{{@arp={@local, @local, 0xffffffff, 0xff, 0x10, 0x8, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x527, 0x6f6, 0x7, 0x5, 0x2, 0x1, 'batadv_slave_0\x00', 'sit0\x00', {0xff}, {}, 0x0, 0x2e8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @local, 0x8, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8001, 0x3}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x1a}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@sr0, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='fusectl\x00', 0x0, 0x0) 14.749473833s ago: executing program 5 (id=3199): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xf82}}, './file0\x00'}) (async, rerun: 32) openat$iommufd(0xffffffffffffff9c, 0x0, 0x200440, 0x0) (rerun: 32) chdir(&(0x7f0000000000)='.\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 14.723748554s ago: executing program 5 (id=3201): ioprio_set$pid(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) capset(&(0x7f0000004240)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000000, 0x0, 0x7fff}) prctl$PR_CAPBSET_DROP(0x18, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000002580)=[{{&(0x7f0000001a40)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, 0x0, 0x0, &(0x7f0000001ec0)=""/127, 0x7f}, 0x7dd0cfda}], 0x1, 0x40000102, &(0x7f0000002680)={0x0, 0x989680}) syz_genetlink_get_family_id$tipc(&(0x7f0000002d80), r0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r1, 0x7dfff000) 4.825592652s ago: executing program 0 (id=3277): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000009c0)=ANY=[@ANYBLOB="08000000000000000a004e2100000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/132], 0x290) 4.78326345s ago: executing program 0 (id=3278): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) creat(&(0x7f0000002000)='./file0\x00', 0xa) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x2201) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000100)=0x6) modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) 4.189812835s ago: executing program 6 (id=3279): creat(&(0x7f0000001380)='./file0\x00', 0x100) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 4.181307937s ago: executing program 6 (id=3280): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x814081, &(0x7f0000000100)='\x18\xb8\xceY\x11\xc3;,\xc3\xc0g\xb6\xdc8\xff\x90\xc5\xaf\x16\xa2\xdfRzf\xd60\xac\x7f?9\x82\x16\xec\x1c\x85\xf9\xa0t\'7i\'{A^\xffhA3S') syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r2, 0x0, 0x0, 0x8081, 0x0, 0xfffffefe) (async, rerun: 32) getsockopt$sock_int(r1, 0x1, 0x9, 0x0, &(0x7f0000000200)) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, 0x1405, 0x1, 0x70bd26, 0x25dfdbfb, "", [{{0x8}, {0x8, 0x3, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000000) (async, rerun: 64) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x434382, 0x0) (rerun: 64) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 4.094339472s ago: executing program 6 (id=3281): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68200, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68200, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) accept4$inet(r2, 0x0, 0x0, 0xc0000) dup(r1) (async) r3 = dup(r1) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8) syz_io_uring_setup(0x110, &(0x7f0000000580)={0x0, 0x38c2, 0x8, 0x0, 0x400000}, &(0x7f0000000240), &(0x7f0000000400)) (async) syz_io_uring_setup(0x110, &(0x7f0000000580)={0x0, 0x38c2, 0x8, 0x0, 0x400000}, &(0x7f0000000240), &(0x7f0000000400)) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0xffffffff}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYRES64, @ANYRESHEX=r4, @ANYBLOB], 0x24}}, 0x1) r10 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r11, 0x11, 0x65, &(0x7f0000000200)=0x5, 0x4) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @local}, 0x2}}, 0x2e) (async) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @local}, 0x2}}, 0x2e) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/notes', 0x20000, 0x20) connect$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) (async) connect$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r10, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={0x0}, 0x1, 0x0, 0x0, 0x4000011}, 0x8010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x12, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 4.041254286s ago: executing program 0 (id=3282): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x130, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r4 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4}) (async) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xf82}}, './file0\x00'}) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000029000b00ffffffff0000000005000000180001"], 0x2c}}, 0x0) (async) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000029000b00ffffffff0000000005000000180001"], 0x2c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r9 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r9, &(0x7f0000000080)={0x1d, r8, 0x1, {0x0, 0xff}, 0x2}, 0x18) (async) bind$can_j1939(r9, &(0x7f0000000080)={0x1d, r8, 0x1, {0x0, 0xff}, 0x2}, 0x18) sendmsg$can_j1939(r9, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000002c0)="92a00c028f76d58ddd", 0x9}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000006c0)={'vcan0\x00', 0x0}) syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) (async) r11 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r11, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_disconnect(0xffffffffffffffff) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) ioctl$FS_IOC_GETVERSION(r12, 0xc0105b08, &(0x7f0000000040)) r13 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r13, &(0x7f0000000080)={0x1d, r10, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r13, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}}, 0xee) openat$iommufd(0xffffffffffffff9c, 0x0, 0x200440, 0x0) (async) openat$iommufd(0xffffffffffffff9c, 0x0, 0x200440, 0x0) 3.744181502s ago: executing program 6 (id=3283): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 32) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0000102}]}) (async) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 3.251511569s ago: executing program 6 (id=3284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000130a030000000000000000000200000a0900020073797a30000000000800034000000009122f15c9b404435da8e7ee7609f7369d134358675473bba64dfdb0a210b73537b2f4ebadf28bd2bc90f3631f5c14d9aa949bb6e999137a755f04d1e93db4cecb6c8345cdcf524262c6b25a8f17f3460282ba8423c5b0c6ba8c25d9a1406e5ad3600360073c1a30ffa6a111c878d0512c76edb740370bbeaca3fd396fbb813a143852d5"], 0x28}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup\x00', 0x0, 0x0, 0x400) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="10cf05d503", 0x5}], 0x1, 0xa) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x9, 0x0}}, {0x2, 0x4e1d, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x121, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x8, 0x4}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f00000000c0)={0x0, 0x13, 0x4, 0x3, 0x400020, 0x18, 0xfca}) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) r4 = open(&(0x7f0000000180)='./file4\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) fcntl$setsig(r4, 0xa, 0x21) landlock_restrict_self(r1, 0x0) preadv2(r0, &(0x7f0000001800)=[{&(0x7f0000000280)=""/6, 0x6}, {&(0x7f0000002600)=""/4106, 0x100a}, {&(0x7f00000008c0)=""/267, 0x10b}, {&(0x7f0000001600)=""/188, 0xffffffffffffff7f}, {&(0x7f0000000600)=""/203, 0xd6}], 0x5, 0x9, 0x2, 0x8) mmap(&(0x7f000040a000/0x400000)=nil, 0x400000, 0x6, 0x10, r2, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r2, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffffb, 0x200) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r7, 0x4004ae86, &(0x7f00000000c0)) ioctl$KVM_INTERRUPT(r7, 0x4004ae86, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000740)='net/vlan/config\x00') syz_usb_connect(0x6, 0x5a, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="83cb22168d3b315eaf26d73fc2321e9c4321f7729b77b594f9247bdcc72ec00a24747bc5e009be5cf85f66264b3524edc002e6389f11bdf71d425acaaed052fd36"], 0x0) mount(&(0x7f00000002c0)=@filename='./file4\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000480)='vxfs\x00', 0xa9d002, 0x0) 992.249071ms ago: executing program 0 (id=3288): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80000) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)=0x0) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"695e450a88f01441345ba9c3ecf96668", r1, r2, {0x6198, 0x9}, {0xb7, 0x400}, 0x293800000, [0x8, 0xfffffffffffff000, 0xcfc7, 0x7, 0x40, 0x3, 0xfce, 0x6, 0x1, 0x3, 0x1, 0x971, 0x7, 0x7, 0x9, 0x2f]}) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x8002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000280)) (async) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r5, 0x89e1, &(0x7f00000002c0)={@loopback, @remote}) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x58, r3}) (async) ftruncate(r5, 0x7) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x3, 0x7, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xf96}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0xc000) read(r5, &(0x7f0000000480)=""/113, 0x71) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x1407, 0xa12, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x40835) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x78, r7, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff9, 0x3f}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000780)=0x4) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r8, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20001}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x78, 0x2, 0x9, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000040}, 0x8015) (async) syz_open_dev$sndctrl(&(0x7f0000000900), 0xb, 0x8000) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r9, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, r10, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x100, 0x6b}}}}, [@NL80211_ATTR_TESTDATA={0x5c, 0x45, "686863e60693f3d583b6dbf5877bcdcf80101772925a308b3cd3663da9a0ea85bbf91fc9436ef28ca8baf73f6ee2243ee0fad327eb735ed83e909b55707b32a37eb877965b2c60656f2247a42245e7db59d328ca4a905e14"}, @NL80211_ATTR_TESTDATA={0x5b, 0x45, "8fb6a316e5a3adfaae881b101ef63bad71886c675c5664e50ba89760eea2e0169fa0dbcc9ba0c75c9526cbcf70b56ed424c593410c7135914f2f782b9c50dbce785096e0b4558e8c2cd67c92014de6317252e3752081aa"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x2400c094}, 0x400c1) (async) r11 = syz_open_procfs(0x0, &(0x7f0000000b40)='net/ip_tables_names\x00') sendmsg$AUDIT_SIGNAL_INFO(r11, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x10, 0x3f2, 0x100, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) (async) fsopen(&(0x7f0000000c80)='binfmt_misc\x00', 0x1) (async) r12 = gettid() sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, 0x3e9, 0x10, 0x70bd2a, 0x25dfdbfb, {0x1, 0x1, 0x1, r12, 0x6, 0x55c, 0x7, 0xa80, 0x0, 0x0, 0x80}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x40408e0) 853.505643ms ago: executing program 0 (id=3289): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000300)={r2, 0x0, 0x9, 0x1, 0x0, [0x0], [0x9, 0x0, 0x0, 0x8], [0x3, 0x0, 0xfe, 0xd], [0x9da, 0x0, 0xfffffffffffffffd, 0x80000000000000]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x4f6ff, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000004, 0x13, r4, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r3, 0x80000}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030"], 0x15) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x29202, 0x0) fremovexattr(r5, &(0x7f00000000c0)=@random={'security.', '/dev/rnullb0\x00'}) r6 = socket$kcm(0x10, 0x400000002, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="12955d3a54296490adc300002e8000003e02482100d3a8a624c9574a74bc35bf823b0bb8074302b0b1385fa00b84700c89d6b085498ba839db504b40221de050cf44dd9779e8c69f936e2c1b63dfdfe4c92acc3b385659bc7b5724a651b1d36300b882cd728b6fd8b3f1e18ea0bf21e006f56d308f239a05f47a1963c1ee8c87b07ca1b2a7833b8b9a3fae4b0956e7bf7be60940ff7fb9180d7203f53cf3c1a4314bc95f708774f9ba927387c57c33e547", 0xb1}], 0x1, 0x0, 0x0, 0x39c}, 0x4044004) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000069"], 0xfe33) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) 772.424274ms ago: executing program 4 (id=3290): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async, rerun: 64) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) (rerun: 64) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000001c0)={0x0, 0x0, 0xffffffc4, 0x0, 0x0, "83847901000000000000002000", 0x0, 0x3}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) (async) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000400)={0xf0f002, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000200)='qnx6\x00', 0x2000, &(0x7f0000000300)='\xa1+\xde\xff\xdd\x1c\x00') (async) personality(0x4000000) 693.508579ms ago: executing program 4 (id=3291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x8000, 0x210000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 572.387377ms ago: executing program 4 (id=3292): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000400)=[@increfs_done={0x40106308, 0x0, 0xfc}], 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$PPPIOCGMRU(r1, 0x80047453, 0x0) syz_open_dev$swradio(&(0x7f0000000200), 0x1, 0x2) (async) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname(r3, 0x0, &(0x7f0000000340)) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r4 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000000000000100000004"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) (async) r6 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x240) ioctl$SNDRV_PCM_IOCTL_LINK(r6, 0x40044160, &(0x7f00000004c0)=0x10) (async, rerun: 64) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) (async) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r8, 0x891d, &(0x7f0000000080)={'veth1_to_bridge\x00'}) (async) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r9, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b0014000000000000000000000007000000df038b0100000000"], 0x38}, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x11e, 0xd, 0x0, 0x0) (async) r10 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r10, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000440)=ANY=[@ANYBLOB="1d03000000000000003adf003a18747ef0750a7cd4a1093d5a5d98a6532f60aacd13e30292a4866612bdb273c7815f2993f7124abd6c7540fc95517f34869ccfae388d185fa57b6c1e2034d6a4e4157e4439e630bf44a8f29573b085ddad97550f519497911e4d8d4aa8d442399828933161cf87fb04326d9d061a9123b9d8b25660e4430f3b53bc69934e79d5ea66e98146d5c20d408d112e26fe8e547f5961b05a5624f66c9268b37b84bb02f5a0335705ca2a64e08316a3933416a2303c2faa985323d4938dae7d0d75"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) 461.903387ms ago: executing program 4 (id=3293): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) 423.230173ms ago: executing program 4 (id=3294): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT(r0, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000010c0)=0x4) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r1, 0x7dfff000) 377.923267ms ago: executing program 4 (id=3295): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x610000, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000040)) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080)) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x9, 0x800c0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000100)) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r1, 0x80184153, &(0x7f0000002640)={0x0, &(0x7f0000002600)=[&(0x7f0000000180)="eb4273f46a6e24e279746214a8fc5352e294bb2f7ae963193ee3817ab616e25f5a0f42c22350715cd1388fc922572ab28c2e86449fa26ba26e5643dc74f4b224d6dccd39b013fecbc0b77f54bc422b5081f8acb8423aa3e414b98d6ac72986aa9870f954ee8b9c51785047908761f988702f2025798d8b9f563868d92505282c47097fc21c2c5eaeb506f085c1ae09bd52752e5ccd2bb9019e5983b324c8b9ff219349380ca154f23243d5b0e61267b9b790164abdf1d9b962b0cbdb0cbc0707a80bc896887f1e92b312c4ae5994e1a915c408b9c400f1e76b25ef7fad6e", &(0x7f0000000280)="3392034d3ce9411c42af8fdf21aa15928b03ccfb33b6e6e58c6a79c76044695f12cf4fca1d52997b1830de652b931e8e5c3b040e0f1f7b709873670512f74874ee958bdb51efab60a01d4044fb9088f58d2d17b5419f143122f1e82b0fea9a828bb9c52ad4f69526fc29d1353d9d43622acc06b9a58083c8c05561223ab9823da0d2980fa14f86482e745d49a30ea75bf79369c1e4d9351b0d54b0818985f16bd86f847a03864757f111fd58c50cc7bb5e12f6e3cc432aeb5ac92a", &(0x7f0000000340)="d6c50df9a413f639a32e5b2257cffe13c4f43c2925b170744f736c5c6d9a78944820c5a354e2f5c00f2d42418ea419ef441336d2da5fc30869d0dd4600ef47bbe6", &(0x7f00000003c0)="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", &(0x7f00000013c0)="742abc2718520ee40221d5224e2f95966f6c522c6241b6a35a3092b5fafbe58bf310d124a13cf5e296b1d3a24ac8c0eaf0185bc95df412e6af9ae1e7d9f489c315621b5309e84f55b8850666ac630e62710d4071e443e2eb206f8286c74529c7626dd5de31b8c61f2f4608f0c0ef1e95bd139032ec675871e6f417c3a387f3ffc6085d0f72af6d8ab73e70c20a7bfaae1590e84c54c1d2fa3a4c80862b8e1dbbaa622164f2909335b3778200c42a0a3f0821afeb0d0cc14fda12c9a23f64b188f2dbc2fb8e2f97ead00355c24d5d0b8bcd28b8e0182756d9e777e3ed592e3a7f7114b9bfd2b6", &(0x7f00000014c0), &(0x7f0000001500)="32ec0497f8c975ec7a8aeb5b8fb3952adac112f0f5cfaeea6c516291d216990131174f107967e8eb3e55ddb9ebf0fce10f692883844ce150d7ebc7e2d4deaa9c0a99a770f909e68df971ab1fa661c0dff6845fbadc004630a777ec73416dca0998fdd36facb28ed001db61271017544814c883fc025a04ec4291b26ad30959457801d3280be435bec12f013b2f2eb5142517f12c8b41d21c2a02b2edc5bef950bc3b9f39284c85e7ff1b943594a32222eba709d64fb5c7dc2d13de71417702932e175ec56b967dafa9f7a24469a6ef495f35738d681e42c4451b68179700eb4856416551692a40453b2ea7", &(0x7f0000001600)="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"]}) r2 = syz_usb_connect$uac1(0x4, 0xd1, &(0x7f0000002680)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x3, 0x1, 0x10, 0x40, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x6}, [@mixer_unit={0x8, 0x24, 0x4, 0x5, 0x4, "55e807"}, @selector_unit={0xb, 0x24, 0x5, 0x6, 0x5, "67ed0b80ee25"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x5, 0x1, "83"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0x5, 0xd, {0x7, 0x25, 0x1, 0x3, 0xb, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x3, 0x6, 0x1, '0', "1acf"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x8, 0x8, 0x4, "285c9067e0e9"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x1, 0x3}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x6, 0x2, 0xf, 0x56, '.'}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x1, 0x4, 0x2, 0xd, "9c217fe7c3"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8, 0x3, 0x8, 0x8, "f4d7a1", "ee05"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x5, 0xf, {0x7, 0x25, 0x1, 0x80, 0x81, 0xfffa}}}}}}}]}}, &(0x7f0000002a00)={0xa, &(0x7f0000002780)={0xa, 0x6, 0x200, 0xe, 0x0, 0x3e, 0x0, 0x6}, 0x38, &(0x7f00000027c0)={0x5, 0xf, 0x38, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "f949e5688e3e2b571fa9bf4139cfeea9"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xe3, 0x8, 0x1, 0x94}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "760c9b98f20164c71d19f045dc949259"}]}, 0x3, [{0xa6, &(0x7f0000002800)=@string={0xa6, 0x3, "cb143e6dda28143d32e0e4255e4babea8f774519fa02b6321850c3ed66285fc6e2b5c861c3b8527899b83ca046a6087a03fc3196a51538924da84890906c9d661c769ea0ded0a793e4df92fec399b5a3a38957e9e20d995392eb67e57133972277858693fbe735b0cd4c1e6882653cfa86aa5971f3a8f75dd94ddcafb316941e162f541f5b286a4f502b2067a5430bb8cb5549e074c157e318d7716e949157d4d32fda28"}}, {0xcb, &(0x7f00000028c0)=@string={0xcb, 0x3, "988ddb83181e899a2bbd6211be8df983e3237821e8c832aa564b6ada534c83db1a1eb66552eb416f57922027c033a5d4ae4a7cfdf9a35852e4e5f0a655367db67741c0b92c5bdd089a963c6f36ea83f528d28ce677b03726d4753fd69d13227c69404155d178106ac2aef1945df5de1088a76174f5907bb6be5a921565c23268af298bd0fff8640717b4e49f892049b95883b0d8c3f564adc0ac49a6b8e8c33105901d79c2869bbce77516cfa5ac661faa4ecef8f310fe2cde2e368f03803bbcb3c66a09d2062f85ee"}}, {0x4, &(0x7f00000029c0)=@lang_id={0x4, 0x3, 0x404}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000002b00)={0x14, &(0x7f0000002a40)={0x40, 0x31, 0x3b, {0x3b, 0xc, "459cba224d5190022b3506b53436500c7324c998d52eab190f9af3b8146898f965dace5f73d607382af9e9e7e539bf25e0e08fa13359e0f83c"}}, &(0x7f0000002ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}}, &(0x7f0000002d40)={0x44, &(0x7f0000002b40)={0x0, 0x1, 0x2c, "4d62ac605fb60b9383dce65afaf6a9f31dc8f6943e42ebdf377993e943da23b4513d69a2a4efd9f11dd05cc6"}, &(0x7f0000002b80)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002bc0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000002c00)={0x20, 0x81, 0x1, "f1"}, &(0x7f0000002c40)={0x20, 0x82, 0x2, "0120"}, &(0x7f0000002c80)={0x20, 0x83, 0x2, "e523"}, &(0x7f0000002cc0)={0x20, 0x84, 0x1, "85"}, &(0x7f0000002d00)={0x20, 0x85, 0x3, "4c7c8b"}}) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000002dc0)={0x2, 0x4}) r3 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000002e00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x90, 0x95, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x22c, 0x1f, 0x1, {0x22, 0x8b4}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x6, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x2, 0x6, 0x4}}]}}}]}}]}}, &(0x7f0000003040)={0xa, &(0x7f0000002e40)={0xa, 0x6, 0x201, 0x5, 0x7, 0x2, 0xff, 0xc9}, 0x15, &(0x7f0000002e80)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x8, 0xf00, 0x7d58, [0xc030]}]}, 0x4, [{0x4, &(0x7f0000002ec0)=@lang_id={0x4, 0x3, 0x3c01}}, {0x97, &(0x7f0000002f00)=@string={0x97, 0x3, "25022f8072f110a66b8783e96c32c3b29f3735ac751274c2e148bc609d724da3db3233094b769af176a817eaab0dd5f2503a42173b02641eff2b405c1a639acb40e249aeb8e43b5774df224b5c109dbe78318ee822726dab82bbdb525f6777b8792e9805b4ddf3b1103c14c2bb3fe5d7cb713f610369bdbe54b9e83639adf3c522627d9848b3c99739e4c61f56d3c1da7b396a045c"}}, {0x4, &(0x7f0000002fc0)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000003000)=@lang_id={0x4, 0x3, 0x804}}]}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) tee(r0, r0, 0x100000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000003100)={0x2, 0xb535}) sendmsg$nl_generic(r4, &(0x7f0000003340)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003300)={&(0x7f0000003140)={0x1a8, 0x21, 0x200, 0x70bd2a, 0x25dfdbfe, {0x3}, [@generic="f3de82a8a44ca3fdeb854c6e11e93a0f235678c778600105e9", @typed={0x5, 0x84, 0x0, 0x0, @str='\x00'}, @generic="ed0847f24ba37dd45a537208ead4fa043be93e9cce52804c70", @nested={0x156, 0xc1, 0x0, 0x1, [@typed={0x8, 0x34, 0x0, 0x0, @fd=r5}, @generic="8fcdcc14bbb465e44437dac0616408bc71cf66af4822c9160419c02df59b87375ecd0f623679c21f0f2248d1a0d29156ca96d67564c1d0f8c4d3e53787529d1d38fabf86b4b8a8964b9177c7058092357a84fa03f7e842b498be5bd4c60989400a5577e7a51f09", @typed={0xc, 0x13f, 0x0, 0x0, @u64=0x1ff}, @generic="e39f123b676ee48afcb2baddb9d09ae5a5292d083a1156b12b44e34b7db0d24b0cd07ac399417753dda979a22e4ff78629ece5d304aed96e052cd22a169f58423d2e07435a2ab9cd18890d4eb5539c16277e82d9a286f790bb07ee735de732fcb575de913e80dbf33f2dae6701c95e1f600aef9d44c6079d654414af7c211fa1e6a7c945c8cb280559facb09768aa8d9d81b6da12242c200d65f314e575aec4ec56c6e39fa0dac127eea4b86e71530591c47593552774116bd1a1bb41a94ee", @nested={0x4, 0x6f}, @typed={0x8, 0xa9, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0xc, 0x84, 0x0, 0x0, @u64=0x2}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4800}, 0x4008044) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003380)={{0x7f, 0x45, 0x4c, 0x46, 0x4e, 0x9, 0x2, 0x1, 0xee, 0x2, 0x3e, 0x9, 0x279, 0x40, 0x158, 0x4, 0x1, 0x38, 0x1, 0x2, 0x6, 0x1000}, [{0x2, 0x8, 0x1, 0xffffffffffffffff, 0x400, 0x9, 0x9, 0x80000000}], "456f864be4fb4be105419c267dab3e732e84cfa3cb8b0fa2364405819c2940745dc77eee5736bd2eb2fa3ac05c13395df0d04c389129db1444de60217b81de534c808f98f4fea98b15565924", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9c4) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000003d80), 0x4d0840, 0x0) r7 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000003dc0)={{0x12, 0x1, 0x400, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x0, 0xf, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x1, 0xf, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x410, 0x3, 0x9, 0x46}}]}}}]}}]}}, &(0x7f0000004300)={0xa, &(0x7f0000003e00)={0xa, 0x6, 0x300, 0x0, 0x4, 0x7f, 0xff, 0x4}, 0x27, &(0x7f0000003e40)={0x5, 0xf, 0x27, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x9, 0x9, 0x5}, @ssp_cap={0x18, 0x10, 0xa, 0xe4, 0x3, 0x5, 0xf00, 0x101, [0xff0000, 0xc000, 0xffc007]}]}, 0x9, [{0x1c, &(0x7f0000003e80)=@string={0x1c, 0x3, "f6ee2cd6a9c6afd073a7005fae1b577bef59cbdf73256ae656d2"}}, {0x17, &(0x7f0000003ec0)=@string={0x17, 0x3, "3f12ba075b3bdc273d8b9031fb6d186ce223448a2b"}}, {0x4, &(0x7f0000003f00)=@lang_id={0x4, 0x3, 0x380a}}, {0xa1, &(0x7f0000003f40)=@string={0xa1, 0x3, "fdc9d873c99561c0e3c45bd3a67653a37aed479ff0ef62b495587f169a92824b7265927c13bf4ba74c612a8500b74c9dade019759ca6ec3aff56bfa224a966573f8b35731d953928b241613236a887f133228928a13b487a2e8d0deb37127ed51df013bfb65797b40f73ab9d0faefbdd92f7803f346352132257a6a12aa8f2bb28d19c2e1e3560b5388d2cbb4a43afad89baadc79fe06d71ef63b97421c118"}}, {0x4, &(0x7f0000004000)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000004040)=@lang_id={0x4, 0x3, 0x424}}, {0xb9, &(0x7f0000004080)=@string={0xb9, 0x3, "0a04969a9d69efeaebbadd06acad8b5ae41e83a5e311311478f19ea87faf6c8cdbf68a449e11e2ee3bcd8cf725488d23bf278ff7a319000705af2403d7a2b95ff6491c9661a747b04409347444c24a0961a8a588e1eb7e51d93687f96b19f614b9dea420439215304e712b4bf4a02ca389a9ef4bbd47b1a179cc218bb774c09646ca59e44a9c5471e49a86217cebfbdb6dc666d83e162fa4293dc9547aeecc63e2a93893c96045d4ea3e981877d69eae04c452562328ba"}}, {0x101, &(0x7f0000004140)=@string={0x101, 0x3, "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"}}, {0x7f, &(0x7f0000004280)=@string={0x7f, 0x3, "7c1401a73f409dc318a9682c0362ed93bf8f64c596d83da0d7ed9710bbd330ad4bc0b4ccd459be592c7646e45d4d29c4ecbeae7369d2c6ec5ade6f81e003db1c95ec72ee78d030116259048679ee4f8a6c864d91dacb182fb204211dd69408b360298b712867187a53ce303282d7651cb2ad6cf16c81fde2bb873e95a8"}}]}) syz_usb_control_io$printer(r7, &(0x7f0000004500)={0x14, &(0x7f00000043c0)={0x40, 0x8, 0xf9, {0xf9, 0x22, "931b8650639023f9251f526ffe9c60078abe883fbc87b7626693497865d0c4664c842dc092bd18912edc29665369d8d49928df12dd098a9c0b0bc4d1e91d403b89e8d4fb33e0fb24a3413bb9925c16e9b0fdc1dbdee30c606b0c9c640195bb70a911ddd67c63c0bd39b234f05700a22c381a6f11b361e994806d784d61f616fda0ee06bef0f2fc874e65927689b8bad7ad2a065abeaae0759111bc881d3138bf2c89b8861ba51270eefd55b31039d73cf528ce67e70732320cc0451d079a57d979ca99b1c4459cf8ea16dac70ff4f7134c6de6aac13cfe90467a1b739323fede111b905005170bf7e9d4fd2c279ca59e7a65ced7b483e5"}}, &(0x7f00000044c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}}, &(0x7f0000004800)={0x34, &(0x7f0000004540)={0x60, 0x14, 0xd8, "d6432b68001fa6af871a905bb2b1821b521eaf54c1d6cd44b1aaf7234b4c6bc5bb7170f371b4e40cbc9919346f19dc54c228fad3279f7f91540e48ff3c3affc068572efa486c58bb767903d2842766ea23adf6d85ab5be2894667dba55e5b94b20f50bfd60896eae67f5497c2c3d31546d34fd3e89071e85ca9d6854f2db127492ef16fb9536bd58d2ebb5d0af58a240ec520476ce3dcceddfdcffca90403b59609465ed5f74cba9cd5cea237addf228370f0de9726f5be8f6f03f640ea2568ecc41f005e26011947f07cb72e18bd2dcd1ac409a799f6734"}, &(0x7f0000004640)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000004680)={0x0, 0x8, 0x1, 0xa}, &(0x7f00000046c0)={0x20, 0x0, 0x99, {0x97, "1be28a75c5698a38134240864ad1192587969503eaae333d1f780ae91eccc61ba64788444a627bc9af681df7802fd1abd1a5f024646512aca6c447166d3b2a9b75e42dcf8968ff1832adddf1f1536f6c4b5242594131a528be0afb9c770c5542860d4623cecf558510cce751f46e8baa2b751563da0ee6ef29e035ae3bc14807a0f9364220a26ae70cb3b3248e8e659815bb5e2150c565"}}, &(0x7f0000004780)={0x20, 0x1, 0x1, 0x88}, &(0x7f00000047c0)={0x20, 0x0, 0x1, 0x1}}) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000004840)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x7, 0x1, 0x2, 0x80, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x6, 0x7, 0x9}}}}}]}}]}}, &(0x7f0000004900)={0xa, &(0x7f0000004880)={0xa, 0x6, 0x110, 0x4, 0x1, 0x3, 0xff, 0x7}, 0x2e, &(0x7f00000048c0)={0x5, 0xf, 0x2e, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0xc, 0xb}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "51db081e3211312bc83c34e7709a1d13"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x5, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x9, 0x8}]}}) write$binfmt_elf64(r6, &(0x7f0000004940)={{0x7f, 0x45, 0x4c, 0x46, 0x8b, 0x3, 0x7, 0x10, 0x3, 0x2, 0x6, 0x3, 0x13c, 0x40, 0xb, 0x7, 0x3, 0x38, 0x3, 0x2, 0xfff4, 0x2}, [{0x2, 0xc612, 0xfffffffffffffffd, 0x100, 0x5, 0x4, 0x7, 0x401}, {0x3, 0x4, 0x0, 0xfff, 0xb, 0x80000001, 0x80000001, 0x2}, {0x2, 0x3, 0x1b15, 0x8, 0x5, 0x3, 0x5}], "b5e0352d2709d0fe55efa231afa47bdedf67a7eb8ea49ad2366d987849e0e674748730ffe055d83135fd95717c9dac7437c281c638154cf925efb48609231f63877811dadb0f725a46c1de520e9c03d80511bb6a0bdc9126c26069e615b35c495405f24e30926cb0d4bf058f117fcf5a2b473b54f55a92eb1b76d9039b439bfcd68d93ce354eec6c624ddd5fa8454a7173783428f97a09736ee584fad29b0855328a9f4838061eb4d9a562b0bee975df36d756ee228f3f03", ['\x00', '\x00', '\x00']}, 0x4a0) syz_usb_control_io(r2, &(0x7f00000050c0)={0x2c, &(0x7f0000004e00)={0x40, 0x23, 0x1b, {0x1b, 0xe, "dc5ba327d127279f824aa42cb0faf8bfe1656ba32066673909"}}, &(0x7f0000004e40)={0x0, 0x3, 0x60, @string={0x60, 0x3, "104e533801bb7cc12f645481a4e4abafc9057cd9a8fdf841d76d175fb1d5aab85d948103f91dd1e3cd0232d6487fc3dd100fb02aecfdd02092ee887d56f492f863de882d0d604fa41ce8db344f8e6e04141d4b8e3c46e658084e9cf687a1"}}, &(0x7f0000004ec0)={0x0, 0xf, 0x152, {0x5, 0xf, 0x152, 0x6, [@ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x6, 0x0, 0x2, [0xff0000, 0xc0c0, 0xf, 0x3f, 0xff00c0]}, @generic={0x85, 0x10, 0x6, "5b7c622fe7378c33f821fc1574e4655b557667875e16630576e54a81c6a5bdf468e798bb8ac018853c11af76207589355fa340079eca057398bdc810e831b665a15ef11f025e57bcab787c48b1209e4012f201c927888c6130ae6ce2c029a6edcee69a6ec5ef7d8ee62ed7e7b98122caab93dab8d471416fc42674f0c7a7d1d7a26d"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x7, 0x4, 0x5}, @generic={0x5e, 0x10, 0x4, "036a7b665f82bd69ab591269212176418a01ca63aa63fc63eda7308fe962dfdc1bbd2060bafe7517ed3e29467c5dc48a09a5c1ed45220fc560192bc7a624053e934ca5b7aeaa529dabe5f2ea0985b3bc4e7116e363b67df8bf865b"}, @ptm_cap={0x3}, @generic={0x3d, 0x10, 0x3, "0f8b03f561fef5d8a648aa68cf913514ebdc3d6c6d88ec198d55d080dbf6439b5ed812eea0b35145052c6f064c943022c84325878facf8cb7857"}]}}, &(0x7f0000005040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x1, 0x40, 0x89, "bf3067bf", "1122923e"}}, &(0x7f0000005080)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x10, 0x6, 0x0, 0x24, 0x0, 0x9}}}, &(0x7f0000005580)={0x84, &(0x7f0000005100)={0x40, 0x9, 0xad, "bc2d30c67760e5d2f9e75743a0152c7f7e51ed1b3829aecdf8eb47dfda482b8d7fee066499374350c09c82a2922cfe3285f1b4edc833cbf6ebeb6bfe2522e1c6bd6549ca81b05e1b5df2218db7b58172e1d598e207d49e2a5e6157a1cc0d78553a4c6133df9430e13828e408320a71de7f891caafd431a2eed67cda98690f41fbdd5de2b0ee70715baa695a1778cbdf70968df844887ae64528579c405433bc359c52abdd83a9f39a4db976ea6"}, &(0x7f00000051c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000005200)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000005240)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000005280)={0x20, 0x0, 0x8, {0xa0, 0x10, [0x0]}}, &(0x7f00000052c0)={0x40, 0x7, 0x2, 0x7f}, &(0x7f0000005300)={0x40, 0x9, 0x1}, &(0x7f0000005340)={0x40, 0xb, 0x2, "ee52"}, &(0x7f0000005380)={0x40, 0xf, 0x2, 0x4}, &(0x7f00000053c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f0000005400)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000005440)={0x40, 0x19, 0x2, "1919"}, &(0x7f0000005480)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000054c0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000005500)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000005540)={0x40, 0x21, 0x1}}) lstat(&(0x7f0000005640)='./file0\x00', &(0x7f0000005680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000005700)='./file0\x00', &(0x7f0000005740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r8, r9) accept4$netrom(r6, &(0x7f00000057c0)={{0x3, @rose}, [@remote, @bcast, @bcast, @default, @rose, @null, @netrom, @default]}, &(0x7f0000005840)=0x48, 0x80800) sendto$inet6(r6, &(0x7f0000005880)="6fd13b7bf53ee50d5c1e02f8d0db1dd4514801af29cdca6a9773c56bb1416b2a487a56a56be16b828d3de589cd81772c1911187e730fcc8b9dea6906f8e121fdbb2dd0c1a09564e703260557c151f778a7475965266efde7b00e925d9164b117393255a134f08c5eecd866108fadcc96c497a1707e5aaa3178e8f531e69a34ebfb5949f45cc7faf2df83d2b56450a4ad65233c58960508abe208c8da111c3195d59a6c13263c7df8444fddb92e019789c9f23dc6adf3d4a98d33736ad8cb7832e11395089a795733b9b9be71d4b1f7fd7a4ce8ee47998cd4f63fd9483e4fa136ecaba7727049f2fe", 0xe8, 0x20004004, &(0x7f0000005980)={0xa, 0x4e20, 0x5dab, @loopback, 0x1}, 0x1c) syz_usb_control_io(r3, &(0x7f0000005b40)={0x2c, &(0x7f00000059c0)={0x40, 0x4, 0x66, {0x66, 0x31, "7e4fe37f83c6b8d94a769c64c565ca92008ce80a989a35287153e6b98a5236b07e72151d7903aeedae7d6bfcbdcd9bf938deb570b1af38ea6ff6ac4c02940c2197a8edda93f77f5f0c2b2c9890b3fe7e35132161d0f4ccd9537b9cdaf88510ede731be89"}}, &(0x7f0000005a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x380a}}, &(0x7f0000005a80)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xd, "6aa278abd0b6ad14fed385e30f7f8bc2"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0x0, 0x1}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x5, 0x5, 0x1}]}}, &(0x7f0000005ac0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x60, 0x0, 0x6d, 0x3, "fce166f0", "b4a00a3b"}}, &(0x7f0000005b00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x9, 0x1, 0xa, 0x8, 0x0, 0x2}}}, &(0x7f0000005f80)={0x84, &(0x7f0000005b80)={0x40, 0x16, 0x2e, "a017bb540d9b7219edb57ed29464d51fea934266e2e658f5f9edd2bcda8affb69d77160d2ffd7261d905b5d98d1f"}, &(0x7f0000005bc0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000005c00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000005c40)={0x20, 0x0, 0x4, {0x1, 0x6}}, &(0x7f0000005c80)={0x20, 0x0, 0x8, {0x80, 0x80, [0xfff]}}, &(0x7f0000005cc0)={0x40, 0x7, 0x2, 0x40}, &(0x7f0000005d00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000005d40)={0x40, 0xb, 0x2, "2f1b"}, &(0x7f0000005d80)={0x40, 0xf, 0x2, 0x6a4}, &(0x7f0000005dc0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000005e00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000005e40)={0x40, 0x19, 0x2, "8060"}, &(0x7f0000005e80)={0x40, 0x1a, 0x2, 0x4000}, &(0x7f0000005ec0)={0x40, 0x1c, 0x1, 0x34}, &(0x7f0000005f00)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000005f40)={0x40, 0x21, 0x1, 0xfa}}) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000006040), 0x24880, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r10, 0x80083314, &(0x7f0000006080)) 93.806938ms ago: executing program 6 (id=3296): r0 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x4}, 0x8) setuid(r2) tkill(r0, 0x2e) syz_clone(0x42441100, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x340000, 0x0) 0s ago: executing program 0 (id=3297): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './file1/../file0', [{0x20, '@&,,\\{$'}, {0x20, '\f\xc2x?\x00\x00W\xca\xb7\xb1\x8e\xeb\xdc\xbbQ-\xee\x80\xf3\xc2\xe5\xedj|\x9b\xd9) \vL\x1b_m9\xa4\xd5\x15\x01\xa7\x19\x92q\x85D\x8b~\xffH9\x88\x8a\xddf0\xea1\xf1*]\xc3\x9agH\x01\x9b\xe8*%\x8d\xe0}\xed\xc8%\xban2\xfd\x1e^\x02*q0\xc5\xcbc\xc1\a\xee\xf1~\xdb\xae\'\x05r\xb1\xb4R e^\xa0\xdf\xf9'}, {0x20, '\x00\x00\x00\x00Z\x00-\x9e\v\xed?\xa3\xe4S\tSD\xb0\x9fU\xa9L\xc3\x9f\x18\x89\xc7\x1fc\xc8UEN\xfaZH\xd3\xact\x8e\xefN?kr\xe8?1y\t\r\xe1\xd7\x81\xf0\x9e\x9e\xa5\x92m\xa6\x87Uy\xeav\xb7Y4\xe0\xb9\xf9!\xdbY!\xder\x81\x8d\xfa\v.\xbb\xe0Q\xdb\xa4\xcd5\xcf\x04fm]\xd9\x1b\xe5`\xb2\xd6\x9fV\xb9D\xfa\xe9\xe0\xdcEJ\xef\'\x0fZu\f\v\xc2\xaf\xdd\x80\xac\xe7!g|\a\x00\xbb\x80FK\x94\x7f\x8a \x94\xc5\xfb\xe0\x03W#\x1c\x9au\xf6\xb1N\xdaL\xdb/c\x84\xf8b\r\x90\x94\n\x93\xd5\x00\x00\x00\x00\x00\x00\x00'}]}, 0x133) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000000000000010", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) kernel console output (not intermixed with test programs): 49548][ T5938] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 328.858816][T19068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.871636][T19068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.873643][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.928623][ T5938] usb 5-1: Product: syz [ 328.932808][ T5938] usb 5-1: Manufacturer: syz [ 328.937394][ T5938] usb 5-1: SerialNumber: syz [ 328.963059][ T5938] usb 5-1: config 0 descriptor?? [ 328.990904][ T5938] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 328.997250][ T5938] usb 5-1: No valid video chain found. [ 329.250807][ T5938] usb 5-1: USB disconnect, device number 7 [ 329.257833][T19084] loop8: detected capacity change from 0 to 8 [ 329.278742][T19084] Dev loop8: unable to read RDB block 8 [ 329.285728][T19084] loop8: unable to read partition table [ 329.292054][T19084] loop8: partition table beyond EOD, truncated [ 329.307145][T19084] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 329.666213][ T10] usb 1-1: USB disconnect, device number 73 [ 329.888634][T19123] FAULT_INJECTION: forcing a failure. [ 329.888634][T19123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.922885][T19123] CPU: 0 UID: 0 PID: 19123 Comm: syz.0.2394 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 329.922913][T19123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 329.922936][T19123] Call Trace: [ 329.922944][T19123] [ 329.922951][T19123] dump_stack_lvl+0x189/0x250 [ 329.922978][T19123] ? __pfx____ratelimit+0x10/0x10 [ 329.923007][T19123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.923029][T19123] ? __pfx__printk+0x10/0x10 [ 329.923062][T19123] should_fail_ex+0x414/0x560 [ 329.923090][T19123] _copy_to_user+0x31/0xb0 [ 329.923111][T19123] simple_read_from_buffer+0xe1/0x170 [ 329.923142][T19123] proc_fail_nth_read+0x1df/0x250 [ 329.923164][T19123] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 329.923184][T19123] ? rw_verify_area+0x258/0x650 [ 329.923207][T19123] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 329.923226][T19123] vfs_read+0x1fd/0x980 [ 329.923255][T19123] ? __pfx___mutex_lock+0x10/0x10 [ 329.923274][T19123] ? __pfx_vfs_read+0x10/0x10 [ 329.923299][T19123] ? __fget_files+0x2a/0x420 [ 329.923331][T19123] ? __fget_files+0x3a0/0x420 [ 329.923356][T19123] ? __fget_files+0x2a/0x420 [ 329.923392][T19123] ksys_read+0x145/0x250 [ 329.923418][T19123] ? __pfx_ksys_read+0x10/0x10 [ 329.923439][T19123] ? rcu_is_watching+0x15/0xb0 [ 329.923466][T19123] ? do_syscall_64+0xbe/0x3b0 [ 329.923488][T19123] do_syscall_64+0xfa/0x3b0 [ 329.923504][T19123] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.923532][T19123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.923550][T19123] ? clear_bhb_loop+0x60/0xb0 [ 329.923572][T19123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.923590][T19123] RIP: 0033:0x7f2c92d8d33c [ 329.923606][T19123] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 329.923622][T19123] RSP: 002b:00007f2c93c12030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 329.923641][T19123] RAX: ffffffffffffffda RBX: 00007f2c92fb5fa0 RCX: 00007f2c92d8d33c [ 329.923661][T19123] RDX: 000000000000000f RSI: 00007f2c93c120a0 RDI: 0000000000000006 [ 329.923672][T19123] RBP: 00007f2c93c12090 R08: 0000000000000000 R09: 0000000000000000 [ 329.923702][T19123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.923713][T19123] R13: 0000000000000000 R14: 00007f2c92fb5fa0 R15: 00007ffdf494d348 [ 329.923743][T19123] [ 330.340588][T19138] /dev/rnullb0: Can't open blockdev [ 330.508987][ T5920] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 330.602857][T19150] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2402'. [ 330.612575][T19150] netlink: zone id is out of range [ 330.617758][T19150] netlink: get zone limit has 8 unknown bytes [ 330.672698][T19154] /dev/rnullb0: Can't open blockdev [ 330.704489][ T5920] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.738633][ T5920] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 330.745050][ T5920] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 330.745079][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 330.745126][ T5920] usb 3-1: SerialNumber: syz [ 330.913193][T19152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.925707][T19152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.976247][T19131] netlink: 'syz.2.2397': attribute type 44 has an invalid length. [ 331.032397][ T5920] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 331.055596][T19186] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 331.063448][T19186] VFS: Can't find a romfs filesystem on dev rnullb0. [ 331.063448][T19186] [ 331.065090][ T5920] usb 3-1: MIDIStreaming interface descriptor not found [ 331.144553][ T5920] usb 3-1: USB disconnect, device number 57 [ 331.294482][T12158] udevd[12158]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 331.354483][T19221] FAT-fs (rnullb0): bogus number of reserved sectors [ 331.384179][T19221] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 331.472836][T19229] loop8: detected capacity change from 0 to 8 [ 331.481446][T19229] Dev loop8: unable to read RDB block 8 [ 331.487060][T19229] loop8: unable to read partition table [ 331.493785][T19229] loop8: partition table beyond EOD, truncated [ 331.500298][T19229] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 332.027364][T19264] loop8: detected capacity change from 0 to 8 [ 332.064981][T19264] Dev loop8: unable to read RDB block 8 [ 332.091231][T19264] loop8: unable to read partition table [ 332.091769][T19267] Invalid source name [ 332.118438][T19264] loop8: partition table beyond EOD, truncated [ 332.128050][T19267] UBIFS error (pid: 19267): cannot open "/dev/md0", error -22 [ 332.135693][T19264] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 332.592903][T19277] /dev/rnullb0: Can't open blockdev [ 332.618557][T19278] /dev/rnullb0: Can't open blockdev [ 332.625242][T19275] netlink: 'syz.1.2427': attribute type 10 has an invalid length. [ 332.633767][T19275] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2427'. [ 332.680140][T19275] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 332.778502][ T43] usb 1-1: new low-speed USB device number 74 using dummy_hcd [ 332.939738][ T43] usb 1-1: device descriptor read/64, error -71 [ 333.046801][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 333.085553][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 333.093426][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 333.110139][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 333.126209][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 333.193127][ T1161] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.204291][ T43] usb 1-1: new low-speed USB device number 75 using dummy_hcd [ 333.358450][ T43] usb 1-1: device descriptor read/64, error -71 [ 333.378609][ T1161] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.428668][T19324] loop8: detected capacity change from 0 to 8 [ 333.463019][T19324] Dev loop8: unable to read RDB block 8 [ 333.471507][ T1161] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.483841][T19324] loop8: unable to read partition table [ 333.485659][ T43] usb usb1-port1: attempt power cycle [ 333.499085][T19324] loop8: partition table beyond EOD, truncated [ 333.515522][T19324] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 333.595906][ T1161] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.858375][ T43] usb 1-1: new low-speed USB device number 76 using dummy_hcd [ 333.889330][ T43] usb 1-1: device descriptor read/8, error -71 [ 334.148805][ T43] usb 1-1: new low-speed USB device number 77 using dummy_hcd [ 334.208733][ T43] usb 1-1: device descriptor read/8, error -71 [ 334.288330][ T1161] bridge_slave_1: left allmulticast mode [ 334.305030][ T1161] bridge_slave_1: left promiscuous mode [ 334.322371][ T43] usb usb1-port1: unable to enumerate USB device [ 334.343737][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.152869][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.171249][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.201564][ T1161] bond0 (unregistering): Released all slaves [ 335.218822][ T5835] Bluetooth: hci2: command tx timeout [ 335.282345][T19302] chnl_net:caif_netlink_parms(): no params data found [ 335.604999][T19537] loop8: detected capacity change from 0 to 8 [ 335.613543][T19537] Dev loop8: unable to read RDB block 8 [ 335.620558][T19537] loop8: unable to read partition table [ 335.626652][T19537] loop8: partition table beyond EOD, truncated [ 335.633473][T19537] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 335.741642][T19302] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.758172][T19302] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.795358][T19302] bridge_slave_0: entered allmulticast mode [ 335.815892][T19302] bridge_slave_0: entered promiscuous mode [ 335.870231][T19302] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.877373][T19302] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.885002][T19302] bridge_slave_1: entered allmulticast mode [ 335.892664][T19302] bridge_slave_1: entered promiscuous mode [ 336.153309][T19302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.317528][ T1161] hsr_slave_0: left promiscuous mode [ 336.339418][ T1161] hsr_slave_1: left promiscuous mode [ 336.345229][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.378122][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.396026][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.411049][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.478600][T19611] syz.0.2447: attempt to access beyond end of device [ 336.478600][T19611] md0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 336.701583][ T1161] veth1_macvtap: left promiscuous mode [ 336.723810][ T1161] veth0_macvtap: left promiscuous mode [ 336.746456][ T1161] veth1_vlan: left promiscuous mode [ 336.766775][ T1161] veth0_vlan: left promiscuous mode [ 336.794604][T19629] loop8: detected capacity change from 0 to 8 [ 336.813143][ T5993] Dev loop8: unable to read RDB block 8 [ 336.830561][ T5993] loop8: unable to read partition table [ 336.846663][ T5993] loop8: partition table beyond EOD, truncated [ 336.861857][T19629] Dev loop8: unable to read RDB block 8 [ 336.875855][T19629] loop8: unable to read partition table [ 336.888432][T19629] loop8: partition table beyond EOD, truncated [ 336.906125][T19629] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 337.111537][T19640] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2453'. [ 337.223280][T19648] /dev/rnullb0: Can't open blockdev [ 337.301684][ T5835] Bluetooth: hci2: command tx timeout [ 337.545236][T19666] loop8: detected capacity change from 0 to 8 [ 337.559019][T19666] Dev loop8: unable to read RDB block 8 [ 337.564642][T19666] loop8: unable to read partition table [ 337.573469][T19666] loop8: partition table beyond EOD, truncated [ 337.581179][T19666] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 337.797726][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 337.836033][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 338.191514][T19302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.347639][T19302] team0: Port device team_slave_0 added [ 338.362136][T19302] team0: Port device team_slave_1 added [ 338.442829][T19302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.456154][T19302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.510121][T19302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.583746][T19302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.594895][T19302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.622694][T19302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.702954][ T1161] IPVS: stop unused estimator thread 0... [ 338.792770][T19302] hsr_slave_0: entered promiscuous mode [ 338.820403][T19302] hsr_slave_1: entered promiscuous mode [ 338.847299][T19302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.875269][T19302] Cannot create hsr debugfs directory [ 339.037579][T19780] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2466'. [ 339.381197][ T5835] Bluetooth: hci2: command tx timeout [ 339.708192][ T10] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 339.874450][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 339.897779][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24879, setting to 1024 [ 339.933190][ T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 339.943615][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 339.959116][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.970653][ T1161] Bluetooth: hci5: Frame reassembly failed (-84) [ 339.977290][ T1161] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 340.015583][T19842] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 340.045394][T19880] syz.1.2471: attempt to access beyond end of device [ 340.045394][T19880] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 340.063098][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 340.253440][ T10] usb 1-1: USB disconnect, device number 78 [ 340.457228][T19842] ubi0: attaching mtd0 [ 340.468295][T19842] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 340.480821][T19302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 340.494851][T19302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 340.517468][T19302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 340.532162][T19302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 340.637819][T19302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.664046][T19302] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.683187][ T3031] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.690357][ T3031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.706834][ T3031] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.714015][ T3031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.145318][T19302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.254341][T19302] veth0_vlan: entered promiscuous mode [ 341.279997][T19302] veth1_vlan: entered promiscuous mode [ 341.316286][T19302] veth0_macvtap: entered promiscuous mode [ 341.322192][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 341.334732][T19302] veth1_macvtap: entered promiscuous mode [ 341.378698][T19302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.411154][T19302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.440099][T19302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.460069][T19302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.468856][ T5840] Bluetooth: hci2: command tx timeout [ 341.490392][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 341.495650][T19302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.518428][T19302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.527582][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.556907][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.588275][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 341.597356][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.674570][ T10] usb 5-1: config 0 descriptor?? [ 341.710706][ T10] hub 5-1:0.0: USB hub found [ 341.751598][ T3031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.777033][ T3031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.857576][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.880322][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.906901][T19968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.925173][T19968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.946709][ T10] hub 5-1:0.0: 1 port detected [ 342.018406][ T5840] Bluetooth: hci5: command 0x1003 tx timeout [ 342.021168][ T5835] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 342.147605][T19968] binder: 19966:19968 ioctl c0306201 2000000003c0 returned -14 [ 342.203881][ T10] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 342.227149][ T10] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 342.255175][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 342.278696][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 342.331090][ T10] usb 5-1: USB disconnect, device number 8 [ 343.125879][T20084] loop8: detected capacity change from 0 to 8 [ 343.166601][T20084] Dev loop8: unable to read RDB block 8 [ 343.175591][T20084] loop8: unable to read partition table [ 343.189480][T20084] loop8: partition table beyond EOD, truncated [ 343.207711][T20084] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 343.244630][T20092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.253996][T20088] sg_write: process 19 (syz.2.2493) changed security contexts after opening file descriptor, this is not allowed. [ 343.277005][T20092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.465373][T20105] overlayfs: missing 'lowerdir' [ 343.523303][T20110] netlink: 'syz.0.2495': attribute type 4 has an invalid length. [ 344.119346][T20146] qnx4: no qnx4 filesystem (no root dir). [ 344.312781][T20156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.329311][T20156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.462446][ T1161] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.595420][ T1161] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.692491][ T1161] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.801157][ T1161] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.108872][ T1161] bridge_slave_1: left allmulticast mode [ 345.134354][T20185] netlink: 372 bytes leftover after parsing attributes in process `syz.0.2512'. [ 345.145251][ T1161] bridge_slave_1: left promiscuous mode [ 345.167772][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.225595][ T1161] bridge_slave_0: left allmulticast mode [ 345.254487][ T1161] bridge_slave_0: left promiscuous mode [ 345.278911][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.672826][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 345.686588][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 345.694526][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 345.704137][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 345.712246][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 345.744681][ T24] kernel write not supported for file /input/event2 (pid: 24 comm: kworker/1:0) [ 345.966412][T20228] /dev/rnullb0: Can't open blockdev [ 346.168405][ T5886] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 346.321270][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.331845][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.343676][ T5886] usb 5-1: unable to get BOS descriptor or descriptor too short [ 346.345045][ T1161] bond0 (unregistering): Released all slaves [ 346.356551][ T5886] usb 5-1: config 0 has an invalid interface number: 110 but max is 0 [ 346.366863][ T5886] usb 5-1: config 0 has an invalid interface number: 13 but max is 0 [ 346.375763][ T5886] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 346.392320][ T5886] usb 5-1: config 0 has no interface number 0 [ 346.398678][ T5886] usb 5-1: config 0 has no interface number 1 [ 346.404800][ T5886] usb 5-1: config 0 interface 110 altsetting 6 endpoint 0xA has invalid wMaxPacketSize 0 [ 346.430039][ T5886] usb 5-1: too many endpoints for config 0 interface 13 altsetting 240: 229, using maximum allowed: 30 [ 346.458171][ T5886] usb 5-1: config 0 interface 13 altsetting 240 has 0 endpoint descriptors, different from the interface descriptor's value: 229 [ 346.495158][ T5886] usb 5-1: config 0 interface 110 has no altsetting 0 [ 346.518029][ T5886] usb 5-1: config 0 interface 13 has no altsetting 0 [ 346.535850][ T5886] usb 5-1: New USB device found, idVendor=03f0, idProduct=070c, bcdDevice= 0.00 [ 346.560154][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.577586][ T5886] usb 5-1: Product: syz [ 346.586553][ T5886] usb 5-1: Manufacturer: syz [ 346.597144][ T5886] usb 5-1: SerialNumber: syz [ 346.614645][ T5886] usb 5-1: config 0 descriptor?? [ 346.774228][T20287] /dev/rnullb0: Can't open blockdev [ 346.822381][ T1161] hsr_slave_0: left promiscuous mode [ 346.833790][ T1161] hsr_slave_1: left promiscuous mode [ 346.841461][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.858599][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.878901][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.886441][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.951364][ T1161] veth1_macvtap: left promiscuous mode [ 346.968578][ T1161] veth0_macvtap: left promiscuous mode [ 346.977620][ T1161] veth1_vlan: left promiscuous mode [ 346.989743][ T1161] veth0_vlan: left promiscuous mode [ 347.237297][T20304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2530'. [ 347.493129][T20311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.507632][T20311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.781932][ T5835] Bluetooth: hci2: command tx timeout [ 347.844528][ T5886] usb-storage 5-1:0.110: USB Mass Storage device detected [ 347.893486][ T5886] usb-storage 5-1:0.110: Quirks match for vid 03f0 pid 070c: 8000 [ 347.984812][ T5886] usb-storage 5-1:0.13: USB Mass Storage device detected [ 348.005550][ T5886] usb-storage 5-1:0.13: Quirks match for vid 03f0 pid 070c: 8000 [ 348.007421][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 348.066950][ T5886] usb 5-1: USB disconnect, device number 9 [ 348.105069][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 348.108931][T20338] vxfs: WRONG superblock magic 00000000 at 1 [ 348.127676][T20338] vxfs: WRONG superblock magic 00000000 at 8 [ 348.138092][T20338] vxfs: can't find superblock. [ 349.005882][T20209] chnl_net:caif_netlink_parms(): no params data found [ 349.230512][T20495] omfs: Invalid superblock (0) [ 349.248324][ T5922] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 349.284833][T20209] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.304727][T20209] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.314301][T20209] bridge_slave_0: entered allmulticast mode [ 349.331136][T20209] bridge_slave_0: entered promiscuous mode [ 349.352535][T20209] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.363786][T20209] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.372127][T20209] bridge_slave_1: entered allmulticast mode [ 349.386477][T20209] bridge_slave_1: entered promiscuous mode [ 349.440427][ T5922] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.465832][ T5922] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 349.490676][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 349.496854][T20209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.515300][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 349.546994][T20209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.552143][ T5922] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 349.588230][ T5922] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 349.617662][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 349.632294][ T5922] usb 5-1: Product: syz [ 349.636486][ T5922] usb 5-1: Manufacturer: syz [ 349.643778][ T5922] usb 5-1: SerialNumber: syz [ 349.681475][ T5922] usb 5-1: config 0 descriptor?? [ 349.754982][T20209] team0: Port device team_slave_0 added [ 349.800308][T20209] team0: Port device team_slave_1 added [ 349.822914][T20584] FAT-fs (nullb0): bogus number of reserved sectors [ 349.845435][T20584] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 349.858095][ T5835] Bluetooth: hci2: command tx timeout [ 349.898262][T20209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.905287][T20209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.907624][ T5922] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 349.931210][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.935490][T20209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.023441][ T5922] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 350.051055][T20209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.073526][T20209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.140944][T20209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.169901][T20622] usb usb8: usbfs: process 20622 (syz.0.2547) did not claim interface 0 before use [ 350.173436][T20620] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 350.207031][ T5922] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 350.225692][ T5922] radio-si470x 5-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 350.250240][ T5922] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 350.317867][ T5922] usb 5-1: USB disconnect, device number 10 [ 350.376182][T20654] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 350.383538][T20663] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 350.395049][T20654] cramfs: wrong magic [ 350.395498][T20209] hsr_slave_0: entered promiscuous mode [ 350.405425][T20663] cramfs: wrong magic [ 350.427307][T20209] hsr_slave_1: entered promiscuous mode [ 350.437261][T20209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.446641][T20209] Cannot create hsr debugfs directory [ 350.897304][T20725] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xee [ 351.267492][T20760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2553'. [ 351.269866][T20209] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 351.304546][T20767] netlink: 'syz.1.2554': attribute type 11 has an invalid length. [ 351.318477][T20209] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 351.333154][T20209] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 351.343798][T20760] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 351.352988][T20209] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 351.373949][T20760] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 351.660765][T20209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.700832][T20786] loop8: detected capacity change from 0 to 8 [ 351.708659][T20786] Dev loop8: unable to read RDB block 8 [ 351.728163][T20786] loop8: unable to read partition table [ 351.728808][T20209] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.734095][T20786] loop8: partition table beyond EOD, truncated [ 351.827379][T20786] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 351.833571][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.843893][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.930814][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.937965][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.947944][ T5835] Bluetooth: hci2: command tx timeout [ 352.067498][T20798] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 352.074880][T20800] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 352.088697][T20798] /dev/rnullb0: Can't open blockdev [ 352.113186][T20800] /dev/rnullb0: Can't open blockdev [ 352.203261][ T25] block nbd3: Possible stuck request ffff888025975080: control (read@0,1024B). Runtime 60 seconds [ 352.214005][ T25] block nbd3: Possible stuck request ffff888025975240: control (read@1024,1024B). Runtime 60 seconds [ 352.225088][ T25] block nbd3: Possible stuck request ffff888025975400: control (read@2048,1024B). Runtime 60 seconds [ 352.236138][ T25] block nbd3: Possible stuck request ffff8880259755c0: control (read@3072,1024B). Runtime 60 seconds [ 352.356104][T20813] /dev/rnullb0: Can't open blockdev [ 352.606131][T20823] netlink: 'syz.1.2561': attribute type 10 has an invalid length. [ 352.606131][T20821] netlink: 'syz.1.2561': attribute type 10 has an invalid length. [ 352.645400][T20823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.675778][T20823] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 352.707975][T20209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.797344][T20858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.822725][T20858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.936505][T20866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.973725][T20866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.018403][ T5835] Bluetooth: hci2: command tx timeout [ 354.993270][T20884] exFAT-fs (rnullb0): invalid boot record signature [ 354.999997][T20884] exFAT-fs (rnullb0): failed to read boot sector [ 355.007001][T20884] exFAT-fs (rnullb0): failed to recognize exfat type [ 355.111033][T20886] exFAT-fs (nullb0): invalid boot record signature [ 355.119174][T20886] exFAT-fs (nullb0): failed to read boot sector [ 355.125507][T20886] exFAT-fs (nullb0): failed to recognize exfat type [ 355.271856][T20892] loop8: detected capacity change from 0 to 8 [ 355.281210][T20892] Dev loop8: unable to read RDB block 8 [ 355.286882][T20892] loop8: unable to read partition table [ 355.292956][T20892] loop8: partition table beyond EOD, truncated [ 355.308076][T20892] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 356.042208][T20927] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 356.117849][T20209] veth0_vlan: entered promiscuous mode [ 356.200538][T20209] veth1_vlan: entered promiscuous mode [ 356.263110][T20937] qnx4: no qnx4 filesystem (no root dir). [ 356.273955][T20939] /dev/rnullb0: Can't open blockdev [ 356.307710][T20209] veth0_macvtap: entered promiscuous mode [ 356.336173][T20209] veth1_macvtap: entered promiscuous mode [ 356.380955][T20209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.422657][T20209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.453077][T20209] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.461959][T20209] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.481211][T20209] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.510857][T20209] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.622526][T20950] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2583'. [ 356.724106][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.735225][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.839895][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.888240][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.972809][T20976] loop8: detected capacity change from 0 to 8 [ 356.999392][ T5993] Dev loop8: unable to read RDB block 8 [ 357.012780][ T5993] loop8: unable to read partition table [ 357.019030][T20977] XFS (rnullb0): Invalid superblock magic number [ 357.026859][ T5993] loop8: partition table beyond EOD, truncated [ 357.047940][T20976] Dev loop8: unable to read RDB block 8 [ 357.060199][T20976] loop8: unable to read partition table [ 357.066221][T20976] loop8: partition table beyond EOD, truncated [ 357.081667][T20976] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 357.214072][T20992] exFAT-fs (rnullb0): invalid boot record signature [ 357.251474][T20992] exFAT-fs (rnullb0): failed to read boot sector [ 357.271507][T20992] exFAT-fs (rnullb0): failed to recognize exfat type [ 357.470683][T21004] afs: Unknown parameter 'dont_measure' [ 357.523313][T21008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2592'. [ 357.766189][ T24] usb 2-1: USB disconnect, device number 52 [ 358.309562][T21042] loop8: detected capacity change from 0 to 8 [ 358.339675][T21042] Dev loop8: unable to read RDB block 8 [ 358.348083][T21042] loop8: unable to read partition table [ 358.353948][T21042] loop8: partition table beyond EOD, truncated [ 358.361443][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 358.373031][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 358.381531][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 358.391741][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 358.400913][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 358.413756][T21042] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 358.714075][ T30] audit: type=1107 audit(1750654903.053:82): pid=21081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='9=Ǚϕ%AU%ǷP1WfSa ]MCJpG8̔*[EATmXpʉ*:܎~|-DL{"kbLAyw wɰ\b5Jf`i9cPGlMB u, yN' [ 358.743452][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.162563][T17944] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.386682][T17944] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.428304][T21142] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 359.441430][T21142] cramfs: wrong magic [ 359.447461][T21146] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 359.483366][T21146] cramfs: wrong magic [ 359.643359][T17944] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.691007][T21218] loop8: detected capacity change from 0 to 8 [ 359.705657][ T5993] Dev loop8: unable to read RDB block 8 [ 359.713145][ T5993] loop8: unable to read partition table [ 359.727736][ T5993] loop8: partition table beyond EOD, truncated [ 359.736885][T21218] Dev loop8: unable to read RDB block 8 [ 359.752930][T21218] loop8: unable to read partition table [ 359.760295][T21218] loop8: partition table beyond EOD, truncated [ 359.770535][T21218] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 359.888852][T17944] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.963475][T21046] chnl_net:caif_netlink_parms(): no params data found [ 359.996170][T21233] netlink: 'syz.5.2617': attribute type 2 has an invalid length. [ 360.477594][T21276] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2619'. [ 360.498221][ T5835] Bluetooth: hci5: command tx timeout [ 360.506515][T21046] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.538130][T21046] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.565665][T21046] bridge_slave_0: entered allmulticast mode [ 360.590113][T21046] bridge_slave_0: entered promiscuous mode [ 360.607709][T21046] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.628210][T21046] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.681604][T21046] bridge_slave_1: entered allmulticast mode [ 360.692074][T21046] bridge_slave_1: entered promiscuous mode [ 360.935527][T21341] loop8: detected capacity change from 0 to 8 [ 360.961307][T21341] Dev loop8: unable to read RDB block 8 [ 360.966928][T21341] loop8: unable to read partition table [ 360.990274][T21341] loop8: partition table beyond EOD, truncated [ 361.014264][T21341] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 361.037669][T21046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.090230][T21046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.306672][T17944] bridge_slave_1: left allmulticast mode [ 361.317397][T17944] bridge_slave_1: left promiscuous mode [ 361.325013][T17944] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.334471][T17944] bridge_slave_0: left allmulticast mode [ 361.345140][T17944] bridge_slave_0: left promiscuous mode [ 361.373196][T17944] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.702892][T21413] ieee802154 phy0 wpan0: encryption failed: -22 [ 361.937885][T21429] qnx4: no qnx4 filesystem (no root dir). [ 362.201188][T17944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.212381][T17944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.223463][T17944] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 362.234342][T17944] bond0 (unregistering): Released all slaves [ 362.250832][T21046] team0: Port device team_slave_0 added [ 362.257483][T21431] netlink: 'syz.0.2636': attribute type 2 has an invalid length. [ 362.279823][T21046] team0: Port device team_slave_1 added [ 362.344360][ T5920] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 362.358133][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 362.449700][T21046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.456697][T21046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.483258][T21046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.498554][ T5920] usb 5-1: device descriptor read/64, error -71 [ 362.508729][T21046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.515691][T21046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.542066][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.553151][T21046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.578211][ T5835] Bluetooth: hci5: command tx timeout [ 362.632296][T21046] hsr_slave_0: entered promiscuous mode [ 362.641068][T21046] hsr_slave_1: entered promiscuous mode [ 362.649910][T21046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.657551][T21046] Cannot create hsr debugfs directory [ 362.716107][T17944] hsr_slave_0: left promiscuous mode [ 362.722935][T17944] hsr_slave_1: left promiscuous mode [ 362.732390][T17944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.742855][T17944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.753612][T17944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.761497][T17944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.788276][ T5920] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 362.802232][T17944] veth1_macvtap: left promiscuous mode [ 362.816243][T17944] veth0_macvtap: left promiscuous mode [ 362.825302][T17944] veth1_vlan: left promiscuous mode [ 362.834922][T17944] veth0_vlan: left promiscuous mode [ 362.941338][ T5920] usb 5-1: device descriptor read/64, error -71 [ 363.079414][ T5920] usb usb5-port1: attempt power cycle [ 363.438127][ T5920] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 363.470289][ T5920] usb 5-1: device descriptor read/8, error -71 [ 363.558178][ T5922] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 363.718319][ T5920] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 363.718428][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 363.736533][T17944] team0 (unregistering): Port device team_slave_1 removed [ 363.737433][ T5922] usb 1-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 363.744644][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 363.764472][ T5922] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=db.74 [ 363.773693][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.775338][ T5920] usb 5-1: device descriptor read/8, error -71 [ 363.787761][ T5922] usb 1-1: Product: syz [ 363.792627][ T5922] usb 1-1: Manufacturer: syz [ 363.797255][ T5922] usb 1-1: SerialNumber: syz [ 363.808449][ T5922] usb 1-1: config 0 descriptor?? [ 363.819756][ T5922] rndis_host 1-1:0.0: skipping garbage [ 363.825724][ T5922] usb 1-1: bad CDC descriptors [ 363.832108][ T5922] cdc_acm 1-1:0.0: skipping garbage [ 363.839413][T17944] team0 (unregistering): Port device team_slave_0 removed [ 363.900112][ T5920] usb usb5-port1: unable to enumerate USB device [ 363.921957][ T10] usb 6-1: device descriptor read/64, error -71 [ 364.169605][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 364.258231][ T24] usb 1-1: USB disconnect, device number 79 [ 364.308429][ T10] usb 6-1: device descriptor read/64, error -71 [ 364.429215][ T10] usb usb6-port1: attempt power cycle [ 364.645724][T17944] IPVS: stop unused estimator thread 0... [ 364.658147][ T5835] Bluetooth: hci5: command tx timeout [ 364.779415][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 364.822238][ T10] usb 6-1: device descriptor read/8, error -71 [ 364.932829][T21046] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 364.953135][T21046] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 364.968696][T21046] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 364.983886][T21046] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 365.068302][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 365.121962][ T10] usb 6-1: device descriptor read/8, error -71 [ 365.237274][T21694] netlink: 'syz.4.2648': attribute type 2 has an invalid length. [ 365.248311][ T10] usb usb6-port1: unable to enumerate USB device [ 365.272889][T21046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.302310][T21046] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.354127][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.361316][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.374750][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.381928][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.858682][ T5938] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 365.916919][T21046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.974552][T21046] veth0_vlan: entered promiscuous mode [ 365.988764][T21046] veth1_vlan: entered promiscuous mode [ 365.999024][ T5938] usb 1-1: device descriptor read/64, error -71 [ 366.030443][T21046] veth0_macvtap: entered promiscuous mode [ 366.053167][T21046] veth1_macvtap: entered promiscuous mode [ 366.093219][T21046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.104892][T21046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.125572][T21046] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.135911][T21046] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.144904][T21046] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.154857][T21046] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.248252][ T5938] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 366.300532][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.322906][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.364793][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.377308][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.388880][ T5938] usb 1-1: device descriptor read/64, error -71 [ 366.502648][ T5938] usb usb1-port1: attempt power cycle [ 366.558232][T21756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.588896][T21756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.738310][ T5835] Bluetooth: hci5: command tx timeout [ 366.884298][ T5938] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 366.938649][ T5938] usb 1-1: device descriptor read/8, error -71 [ 366.966548][T21794] loop8: detected capacity change from 0 to 8 [ 366.974478][T21794] Dev loop8: unable to read RDB block 8 [ 366.991258][T21794] loop8: unable to read partition table [ 367.002712][T21794] loop8: partition table beyond EOD, truncated [ 367.010749][T21794] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 367.198091][ T5938] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 367.206531][T21807] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2663'. [ 367.231953][ T5938] usb 1-1: device descriptor read/8, error -71 [ 367.293953][T21819] /dev/rnullb0: Can't open blockdev [ 367.351911][ T5938] usb usb1-port1: unable to enumerate USB device [ 367.609664][ T5920] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 367.770083][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.798130][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.807883][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 367.848063][ T5920] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 367.868048][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.889140][ T5920] usb 2-1: config 0 descriptor?? [ 368.226038][T21844] netlink: 'syz.5.2667': attribute type 2 has an invalid length. [ 368.313623][ T5920] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 368.354418][ T5920] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 368.522804][ T5920] usb 2-1: USB disconnect, device number 53 [ 368.598268][ T5922] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 368.759576][ T5922] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 368.776671][ T5922] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.803812][ T5922] usb 6-1: config 0 has no interface number 0 [ 368.813672][ T5922] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 368.825454][ T5922] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 368.841703][ T5922] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 368.851120][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.863143][ T5922] usb 6-1: Product: syz [ 368.867332][ T5922] usb 6-1: Manufacturer: syz [ 368.872475][ T5922] usb 6-1: SerialNumber: syz [ 368.889691][ T5922] usb 6-1: config 0 descriptor?? [ 368.942460][T21879] loop8: detected capacity change from 0 to 8 [ 368.960292][T12128] Dev loop8: unable to read RDB block 8 [ 368.965894][T12128] loop8: unable to read partition table [ 368.971980][T12128] loop8: partition table beyond EOD, truncated [ 368.996338][T21879] Dev loop8: unable to read RDB block 8 [ 369.007225][T21879] loop8: unable to read partition table [ 369.035903][T21879] loop8: partition table beyond EOD, truncated [ 369.042428][T21879] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 369.223053][ T5922] usb 6-1: USB disconnect, device number 7 [ 369.285800][T21907] netlink: 'syz.5.2674': attribute type 2 has an invalid length. [ 369.534138][T21916] netlink: 'syz.5.2677': attribute type 29 has an invalid length. [ 369.554131][T21916] netlink: 'syz.5.2677': attribute type 29 has an invalid length. [ 369.898149][ T10] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 370.099073][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 370.117298][ T10] usb 2-1: config 0 has an invalid interface number: 13 but max is 0 [ 370.134188][ T10] usb 2-1: config 0 has no interface number 0 [ 370.158846][ T10] usb 2-1: config 0 interface 13 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 370.192654][T21946] netlink: 'syz.4.2685': attribute type 2 has an invalid length. [ 370.202514][ T10] usb 2-1: config 0 interface 13 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 370.218651][T21946] FAULT_INJECTION: forcing a failure. [ 370.218651][T21946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.232386][T21946] CPU: 0 UID: 0 PID: 21946 Comm: syz.4.2685 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 370.232410][T21946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 370.232424][T21946] Call Trace: [ 370.232431][T21946] [ 370.232438][T21946] dump_stack_lvl+0x189/0x250 [ 370.232468][T21946] ? __pfx____ratelimit+0x10/0x10 [ 370.232495][T21946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.232515][T21946] ? __pfx__printk+0x10/0x10 [ 370.232546][T21946] should_fail_ex+0x414/0x560 [ 370.232572][T21946] _copy_to_user+0x31/0xb0 [ 370.232591][T21946] simple_read_from_buffer+0xe1/0x170 [ 370.232620][T21946] proc_fail_nth_read+0x1df/0x250 [ 370.232640][T21946] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 370.232660][T21946] ? rw_verify_area+0x258/0x650 [ 370.232681][T21946] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 370.232699][T21946] vfs_read+0x1fd/0x980 [ 370.232726][T21946] ? __pfx___mutex_lock+0x10/0x10 [ 370.232743][T21946] ? __pfx_vfs_read+0x10/0x10 [ 370.232766][T21946] ? __fget_files+0x2a/0x420 [ 370.232796][T21946] ? __fget_files+0x3a0/0x420 [ 370.232820][T21946] ? __fget_files+0x2a/0x420 [ 370.232854][T21946] ksys_read+0x145/0x250 [ 370.232879][T21946] ? __pfx_ksys_read+0x10/0x10 [ 370.232898][T21946] ? rcu_is_watching+0x15/0xb0 [ 370.232924][T21946] ? do_syscall_64+0xbe/0x3b0 [ 370.232944][T21946] do_syscall_64+0xfa/0x3b0 [ 370.232959][T21946] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.232984][T21946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.233002][T21946] ? clear_bhb_loop+0x60/0xb0 [ 370.233023][T21946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.233043][T21946] RIP: 0033:0x7f86f138d33c [ 370.233059][T21946] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 370.233074][T21946] RSP: 002b:00007f86f21c2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 370.233092][T21946] RAX: ffffffffffffffda RBX: 00007f86f15b5fa0 RCX: 00007f86f138d33c [ 370.233103][T21946] RDX: 000000000000000f RSI: 00007f86f21c20a0 RDI: 0000000000000003 [ 370.233114][T21946] RBP: 00007f86f21c2090 R08: 0000000000000000 R09: 0000000000000000 [ 370.233124][T21946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.233133][T21946] R13: 0000000000000000 R14: 00007f86f15b5fa0 R15: 00007ffde870c728 [ 370.233161][T21946] [ 370.234723][ T10] usb 2-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 370.702326][T21955] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 370.710551][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.718892][T21955] cramfs: wrong magic [ 370.727057][ T10] usb 2-1: Product: syz [ 370.767379][ T10] usb 2-1: Manufacturer: syz [ 370.838131][ T10] usb 2-1: SerialNumber: syz [ 370.859002][ T10] usb 2-1: config 0 descriptor?? [ 370.866834][T21927] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 370.903437][T21927] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 370.943739][ T10] option 2-1:0.13: GSM modem (1-port) converter detected [ 371.154755][T21927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.166373][T21927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.179063][ T5847] usb 2-1: USB disconnect, device number 54 [ 371.209356][ T5847] option 2-1:0.13: device disconnected [ 371.688470][ T5847] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 371.783062][T22006] qnx4: no qnx4 filesystem (no root dir). [ 371.871022][ T5847] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 371.883985][ T5847] usb 2-1: config 0 has no interface number 0 [ 371.912439][ T5847] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 371.932003][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.959445][ T5847] usb 2-1: Product: syz [ 371.963644][ T5847] usb 2-1: Manufacturer: syz [ 371.978417][ T5847] usb 2-1: SerialNumber: syz [ 371.989718][ T5847] usb 2-1: config 0 descriptor?? [ 372.076381][T22018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.219295][ T5847] qcserial 2-1:0.229: Qualcomm USB modem converter detected [ 372.263756][ T5847] usb 2-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 372.285315][ T5847] usb 2-1: USB disconnect, device number 55 [ 372.309593][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a66dc00: rx timeout, send abort [ 372.318139][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a66e400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 372.332720][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a66e000: rx timeout, send abort [ 372.342865][ T5847] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 372.352173][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a66e000: 0x00100: (3) A timeout occurred and this is the connection abort to close the session. [ 372.383420][ T5847] qcserial 2-1:0.229: device disconnected [ 372.817852][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a66dc00: abort rx timeout. Force session deactivation [ 373.151620][ T5847] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 373.169174][ T5922] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 373.318701][ T5847] usb 6-1: Using ep0 maxpacket: 16 [ 373.343220][ T5922] usb 2-1: unable to get BOS descriptor or descriptor too short [ 373.344378][ T5847] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 10 [ 373.362649][ T5847] usb 6-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 373.373081][ T5922] usb 2-1: config 2 has an invalid interface number: 254 but max is 0 [ 373.383114][ T5922] usb 2-1: config 2 has no interface number 0 [ 373.388259][ T5847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.400073][ T5922] usb 2-1: New USB device found, idVendor=04cb, idProduct=0109, bcdDevice=c1.88 [ 373.411002][ T5847] usb 6-1: config 0 descriptor?? [ 373.414236][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.444356][ T5922] usb 2-1: Product: syz [ 373.459818][ T5922] usb 2-1: Manufacturer: syz [ 373.475083][ T5922] usb 2-1: SerialNumber: syz [ 373.633123][T22056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.661336][T22056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.722387][T22058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.731353][T22094] syz.0.2707: attempt to access beyond end of device [ 373.731353][T22094] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 373.761190][T22058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.850570][T22090] NILFS (rnullb0): couldn't find nilfs on the device [ 373.859284][T22058] NILFS (rnullb0): couldn't find nilfs on the device [ 373.886178][ T5847] usb 6-1: string descriptor 0 read error: -71 [ 373.896786][ T5847] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input30 [ 373.921419][ T5190] bcm5974 6-1:0.0: could not read from device [ 373.932915][ T5190] bcm5974 6-1:0.0: could not read from device [ 373.975073][T22114] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2709'. [ 373.985623][ T5847] usb 6-1: USB disconnect, device number 8 [ 374.029331][ T5922] gspca_main: finepix-2.14.0 probing 04cb:0109 [ 374.083174][ T5922] usb 2-1: USB disconnect, device number 56 [ 374.482983][T22153] random: crng reseeded on system resumption [ 374.591147][T22162] hfs: can't find a HFS filesystem on dev rnullb0 [ 374.748144][ T5922] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 374.828869][T22179] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2723'. [ 374.898117][ T5922] usb 6-1: Using ep0 maxpacket: 16 [ 374.905662][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 374.927295][ T5922] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 374.937411][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.945763][ T5922] usb 6-1: Product: syz [ 374.950183][ T5922] usb 6-1: Manufacturer: syz [ 374.954846][ T5922] usb 6-1: SerialNumber: syz [ 374.958115][ T978] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 374.962657][ T5922] usb 6-1: config 0 descriptor?? [ 375.099586][T22191] vxfs: WRONG superblock magic 00000000 at 1 [ 375.099728][ T978] usb 1-1: device descriptor read/64, error -71 [ 375.105730][T22191] vxfs: WRONG superblock magic 00000000 at 8 [ 375.119354][T22191] vxfs: can't find superblock. [ 375.314140][ T5920] usb 6-1: USB disconnect, device number 9 [ 375.388927][T22197] syz.1.2726 (22197) used greatest stack depth: 18296 bytes left [ 375.408090][ T978] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 375.578403][ T978] usb 1-1: device descriptor read/64, error -71 [ 375.700120][ T978] usb usb1-port1: attempt power cycle [ 375.908126][ T5920] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 376.058722][ T978] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 376.088608][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 376.095478][ T978] usb 1-1: device descriptor read/8, error -71 [ 376.106290][ T5920] usb 5-1: config 4 has an invalid interface number: 15 but max is 0 [ 376.125200][ T5920] usb 5-1: config 4 has no interface number 0 [ 376.138885][ T5920] usb 5-1: config 4 interface 15 has no altsetting 0 [ 376.157420][ T5920] usb 5-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 376.175596][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.202520][ T5920] usb 5-1: Product: syz [ 376.217844][ T5920] usb 5-1: Manufacturer: syz [ 376.233830][ T5920] usb 5-1: SerialNumber: syz [ 376.267365][ T5920] ax88179_178a 5-1:4.15: probe with driver ax88179_178a failed with error -22 [ 376.349271][ T978] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 376.388789][ T978] usb 1-1: device descriptor read/8, error -71 [ 376.506461][T22230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2732'. [ 376.522091][ T978] usb usb1-port1: unable to enumerate USB device [ 377.832897][T22275] qnx4: no qnx4 filesystem (no root dir). [ 378.232506][T22304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.256195][T22304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.426235][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.432901][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.466542][T22321] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 378.497691][T22321] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 378.602976][ T978] usb 5-1: USB disconnect, device number 16 [ 378.749321][ T5835] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 378.820585][ T5835] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 378.829254][ T5835] Bluetooth: hci5: Injecting HCI hardware error event [ 378.837380][ T5840] Bluetooth: hci5: hardware error 0x00 [ 379.496291][T22383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2759'. [ 379.878300][ T5938] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 380.028497][ T5938] usb 1-1: device descriptor read/64, error -71 [ 380.268673][ T5938] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 380.416887][T22436] ufs: You didn't specify the type of your ufs filesystem [ 380.416887][T22436] [ 380.416887][T22436] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 380.416887][T22436] [ 380.416887][T22436] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 380.436767][ T5938] usb 1-1: device descriptor read/64, error -71 [ 380.489636][T22447] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2769'. [ 380.512340][T22436] ufs: ufstype=old is supported read-only [ 380.528064][T22447] netlink: 90 bytes leftover after parsing attributes in process `syz.1.2769'. [ 380.537193][T22436] syz.1.2769: attempt to access beyond end of device [ 380.537193][T22436] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 380.643330][ T5938] usb usb1-port1: attempt power cycle [ 380.998461][ T5938] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 381.068725][ T5938] usb 1-1: device descriptor read/8, error -71 [ 381.218199][ T5840] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 381.341452][ T5938] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 381.389440][ T5938] usb 1-1: device descriptor read/8, error -71 [ 381.438645][ T5922] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 381.495037][T22507] ntfs3(nbd5): try to read out of volume at offset 0x0 [ 381.516801][ T5938] usb usb1-port1: unable to enumerate USB device [ 381.609105][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 381.629208][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.661691][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.682145][ T5922] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 381.722994][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.752378][ T5922] usb 5-1: config 0 descriptor?? [ 381.803693][T22523] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2784'. [ 381.961760][T22529] Mount JFS Failure: -22 [ 381.966170][T22529] jfs_mount failed w/return code = -22 [ 382.188523][ T5922] hid-multitouch 0003:1FD2:6007.000E: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 382.268332][ T25] block nbd3: Possible stuck request ffff888025975080: control (read@0,1024B). Runtime 90 seconds [ 382.280263][ T25] block nbd3: Possible stuck request ffff888025975240: control (read@1024,1024B). Runtime 90 seconds [ 382.291354][ T25] block nbd3: Possible stuck request ffff888025975400: control (read@2048,1024B). Runtime 90 seconds [ 382.303501][ T25] block nbd3: Possible stuck request ffff8880259755c0: control (read@3072,1024B). Runtime 90 seconds [ 382.380653][ T5938] usb 5-1: USB disconnect, device number 17 [ 382.388180][T22554] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 382.394753][T22549] fido_id[22549]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 382.395930][T22554] cramfs: wrong magic [ 382.817311][T22594] udf: Unknown parameter '#+' [ 383.087643][T22608] Can't find a SQUASHFS superblock on rnullb0 [ 383.258565][ T5847] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 383.326550][T22634] vlan1: entered allmulticast mode [ 383.332492][T22634] veth0_vlan: entered allmulticast mode [ 383.448072][ T5938] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 383.452784][ T5847] usb 1-1: Using ep0 maxpacket: 32 [ 383.465102][ T5847] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 383.478836][ T5847] usb 1-1: config 0 has no interface number 0 [ 383.487657][ T5847] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 383.504628][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.513673][ T5847] usb 1-1: Product: syz [ 383.517924][ T5847] usb 1-1: Manufacturer: syz [ 383.532793][ T5847] usb 1-1: SerialNumber: syz [ 383.547191][ T5847] usb 1-1: config 0 descriptor?? [ 383.566568][ T5847] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 383.577201][T22649] FAT-fs (rnullb0): bogus number of reserved sectors [ 383.593735][T22649] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 383.632367][ T5938] usb 6-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 383.648168][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.657050][ T5938] usb 6-1: Product: syz [ 383.663275][ T5938] usb 6-1: Manufacturer: syz [ 383.680281][ T5938] usb 6-1: SerialNumber: syz [ 383.778905][ T5847] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 383.842610][ T5847] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 383.875678][T22681] qnx4: no qnx4 filesystem (no root dir). [ 383.974325][T22606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.039062][T22606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.047018][T22605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.098675][T22605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.492299][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 384.515792][ T5847] usb 1-1: USB disconnect, device number 92 [ 384.545056][ T5847] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 384.615215][ T5847] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 384.664571][ T5847] quatech2 1-1:0.51: device disconnected [ 384.687708][T22720] tipc: Failed to obtain node identity [ 384.712368][T22720] tipc: Enabling of bearer rejected, failed to enable media [ 384.892072][T22729] loop8: detected capacity change from 0 to 8 [ 384.919657][T22729] Dev loop8: unable to read RDB block 8 [ 384.925472][T22729] loop8: unable to read partition table [ 384.931619][T22729] loop8: partition table beyond EOD, truncated [ 384.942617][T22729] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 385.714096][T22766] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 385.732916][T22766] VFS: Can't find a romfs filesystem on dev rnullb0. [ 385.732916][T22766] [ 385.756614][T22771] netlink: 'syz.0.2815': attribute type 2 has an invalid length. [ 385.967824][T22780] ntfs3(loop0): try to read out of volume at offset 0x0 [ 386.252415][ T5938] gspca_main: pac207-2.14.0 probing 093a:2476 [ 386.267418][ T5938] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 386.313133][ T5938] usb 6-1: Found UVC 0.00 device syz (093a:2476) [ 386.328205][T22790] overlayfs: statfs failed on './file0' [ 386.346511][ T5938] usb 6-1: No valid video chain found. [ 386.366094][ T5938] usb 6-1: USB disconnect, device number 11 [ 386.709994][T22824] netlink: 'syz.5.2826': attribute type 2 has an invalid length. [ 387.053832][T22846] binder: 22844:22846 ioctl c018620b 9999999999999999 returned -14 [ 387.075839][ T5840] Bluetooth: hci0: unexpected event for opcode 0x0411 [ 387.317907][T22855] /dev/rnullb0: Can't open blockdev [ 387.772506][ T5840] Bluetooth: hci4: unexpected event for opcode 0x0407 [ 388.287567][ T30] audit: type=1326 audit(1750654932.623:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22920 comm="syz.0.2846" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c92d8e929 code=0x0 [ 388.398829][T22923] Sensor A: ================= START STATUS ================= [ 388.420906][T22923] Sensor A: Test Pattern: 75% Colorbar [ 388.426733][T22923] Sensor A: Show Information: All [ 388.453340][T22923] Sensor A: Vertical Flip: false [ 388.468817][T22923] Sensor A: Horizontal Flip: false [ 388.523284][T22923] Sensor A: Brightness: 128 [ 388.539835][T22923] Sensor A: Contrast: 128 [ 388.557214][T22923] Sensor A: Hue: 0 [ 388.568756][T22923] Sensor A: Saturation: 128 [ 388.577808][T22923] Sensor A: ================== END STATUS ================== [ 389.439740][T22939] loop8: detected capacity change from 0 to 8 [ 389.444603][T22939] Dev loop8: unable to read RDB block 8 [ 389.444649][T22939] loop8: unable to read partition table [ 389.444860][T22939] loop8: partition table beyond EOD, truncated [ 389.444882][T22939] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 389.559511][T22948] can: request_module (can-proto-0) failed. [ 389.606280][T22940] tty tty31: ldisc open failed (-12), clearing slot 30 [ 390.518690][ T5928] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 390.546254][T22978] loop8: detected capacity change from 0 to 8 [ 390.564440][T22978] Dev loop8: unable to read RDB block 8 [ 390.589033][T22978] loop8: unable to read partition table [ 390.611788][T22978] loop8: partition table beyond EOD, truncated [ 390.631186][T22978] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 390.702704][ T5928] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.762153][ T5928] usb 1-1: config 0 interface 0 has no altsetting 0 [ 390.771778][ T5928] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 390.797185][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.827580][ T5928] usb 1-1: Product: syz [ 390.844010][ T5928] usb 1-1: Manufacturer: syz [ 390.858991][ T5928] usb 1-1: SerialNumber: syz [ 390.874607][ T5928] usb 1-1: config 0 descriptor?? [ 390.904565][ T5928] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 390.946215][ T5928] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 390.974543][ T5928] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 390.989098][ T5928] usb 1-1: media controller created [ 391.028723][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 391.232725][ T5928] DVB: Unable to find symbol tda10046_attach() [ 391.248596][T23005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.257604][ T5928] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 391.276325][T23005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.304371][ T5928] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 391.468204][ T5922] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 391.528054][ T5847] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 391.631645][ T5922] usb 6-1: unable to get BOS descriptor or descriptor too short [ 391.640530][ T5922] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 391.648978][ T5922] usb 6-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 391.659593][ T5922] usb 6-1: config 63 has no interface number 0 [ 391.665823][ T5922] usb 6-1: config 63 interface 66 has no altsetting 0 [ 391.677853][ T5928] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 391.694265][ T5928] usb 1-1: USB disconnect, device number 93 [ 391.698631][ T5847] usb 5-1: not running at top speed; connect to a high speed hub [ 391.701987][ T5922] usb 6-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 391.731876][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.747702][ T5922] usb 6-1: Product: syz [ 391.755623][ T5847] usb 5-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 391.759071][ T5922] usb 6-1: Manufacturer: syz [ 391.777359][ T5922] usb 6-1: SerialNumber: syz [ 391.782397][ T5847] usb 5-1: config 1 interface 0 has no altsetting 0 [ 391.785894][ T5847] usb 5-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.40 [ 391.789688][ T5840] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 391.804548][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.807826][ T5840] Bluetooth: hci4: Injecting HCI hardware error event [ 391.824317][ T5847] usb 5-1: Product: ︲삊⤼笖⿘붹⁽猧핫㑋究硹㎰츮澵猈꾊椖価劆ꟕʬ䯫蓯ᢋᄦ벉붞Ꮷ橧噄ꈋ甠ዥ㳶瀭ⵈ粘컇辀㾵曓⠼䙔䳊య캝⵩纉㌳欹⃈ﱅ꾅ャ⻷춛嚕溃륗柒락ᠬꩻ卒䞗㓲铏¼૦ㄡﰠ詀ꖵ难 [ 391.826729][ T5840] Bluetooth: hci4: hardware error 0x00 [ 391.849953][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.865991][ T5847] usb 5-1: Manufacturer: ဉ [ 391.874312][ T5847] usb 5-1: SerialNumber: Ц [ 392.222354][ T5922] usb 6-1: USB disconnect, device number 12 [ 392.233017][T23049] loop8: detected capacity change from 0 to 8 [ 392.241638][T23049] Dev loop8: unable to read RDB block 8 [ 392.247612][T23049] loop8: unable to read partition table [ 392.255126][T23049] loop8: partition table beyond EOD, truncated [ 392.274202][T23049] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 392.329595][ T5847] usbhid 5-1:1.0: can't add hid device: -71 [ 392.358231][ T5847] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 392.389897][ T5847] usb 5-1: USB disconnect, device number 18 [ 392.615147][T23072] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 392.621688][T23072] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 392.629623][T23072] vhci_hcd vhci_hcd.0: Device attached [ 392.642253][T23073] vhci_hcd: cannot find the pending unlink 4294967230 [ 392.662849][T23073] vhci_hcd: connection closed [ 392.663113][ T49] vhci_hcd: stop threads [ 392.673840][ T49] vhci_hcd: release socket [ 392.679034][ T49] vhci_hcd: disconnect device [ 393.588825][T23117] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 393.601534][T23117] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2882'. [ 393.610786][T23116] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2882'. [ 393.623334][T23117] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2882'. [ 393.827694][T23133] omfs: Invalid superblock (0) [ 393.938607][ T5840] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 394.168088][ T5928] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 394.245077][T23155] NILFS (rnullb0): couldn't find nilfs on the device [ 394.338058][ T5928] usb 5-1: Using ep0 maxpacket: 8 [ 394.343996][ T5928] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 394.353757][ T5928] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 394.361654][ T5928] usb 5-1: can't read configurations, error -61 [ 394.452788][T23167] XFS (rnullb0): Invalid superblock magic number [ 394.499813][ T5928] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 394.659259][ T5928] usb 5-1: Using ep0 maxpacket: 8 [ 394.664932][ T5928] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 394.674139][ T5928] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 394.681836][ T5928] usb 5-1: can't read configurations, error -61 [ 394.690456][ T5928] usb usb5-port1: attempt power cycle [ 395.028233][ T5928] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 395.080990][ T5928] usb 5-1: Using ep0 maxpacket: 8 [ 395.086720][ T5928] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 395.122540][ T5928] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 395.137135][ T5928] usb 5-1: can't read configurations, error -61 [ 395.178072][ T5847] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 395.271397][ T5928] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 395.313102][ T5928] usb 5-1: Using ep0 maxpacket: 8 [ 395.319750][ T5928] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 395.328043][ T5847] usb 6-1: device descriptor read/64, error -71 [ 395.335727][ T5928] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 395.345124][ T5928] usb 5-1: can't read configurations, error -61 [ 395.354423][ T5928] usb usb5-port1: unable to enumerate USB device [ 395.588142][ T5847] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 395.718058][ T5847] usb 6-1: device descriptor read/64, error -71 [ 395.840118][ T5847] usb usb6-port1: attempt power cycle [ 395.926173][T23189] netlink: 'syz.0.2895': attribute type 2 has an invalid length. [ 396.178264][ T5847] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 396.199251][ T5847] usb 6-1: device descriptor read/8, error -71 [ 396.208088][ T978] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 396.358056][ T978] usb 1-1: Using ep0 maxpacket: 8 [ 396.365610][ T978] usb 1-1: unable to get BOS descriptor or descriptor too short [ 396.377037][ T978] usb 1-1: config 1 interface 0 has no altsetting 0 [ 396.386213][ T978] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 396.395452][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.403490][ T978] usb 1-1: Product: syz [ 396.407739][ T978] usb 1-1: Manufacturer: syz [ 396.412445][ T978] usb 1-1: SerialNumber: syz [ 396.438184][ T5847] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 396.458797][ T5847] usb 6-1: device descriptor read/8, error -71 [ 396.579452][ T5847] usb usb6-port1: unable to enumerate USB device [ 396.830678][ T978] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input31 [ 396.847282][ T5190] bcm5974 1-1:1.0: could not read from device [ 396.859413][ T978] usb 1-1: USB disconnect, device number 94 [ 396.865756][ T5190] bcm5974 1-1:1.0: could not read from device [ 398.143642][T23250] fuse: Bad value for 'fd' [ 398.312925][T23264] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2909'. [ 398.322506][T23264] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2909'. [ 398.334254][T23264] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2909'. [ 398.438106][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 398.588047][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 398.594937][ T24] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 398.604281][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.614975][ T24] usb 5-1: config 0 descriptor?? [ 398.627361][ T24] gspca_main: sunplus-2.14.0 probing 041e:400b [ 399.431525][ T24] gspca_sunplus: reg_w_riv err -71 [ 399.452560][ T24] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 399.481638][ T24] usb 5-1: USB disconnect, device number 23 [ 399.798170][ T5928] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 399.968157][ T5928] usb 6-1: Using ep0 maxpacket: 8 [ 399.974822][ T5928] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 399.986710][ T5928] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 399.996402][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.006135][ T5928] usb 6-1: Product: syz [ 400.010360][ T5928] usb 6-1: Manufacturer: syz [ 400.018025][ T5928] usb 6-1: SerialNumber: syz [ 400.029199][ T5928] usb 6-1: config 0 descriptor?? [ 400.045677][ T5928] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 400.188697][T23321] netlink: 'syz.4.2919': attribute type 10 has an invalid length. [ 400.201404][T23321] team0: Device tunl0 is of different type [ 400.208263][ T24] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 400.238949][ T30] audit: type=1326 audit(1750654944.583:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23320 comm="syz.4.2919" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86f138e929 code=0x0 [ 400.388027][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 400.394945][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.405168][ T24] usb 1-1: config 0 has no interfaces? [ 400.410723][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 400.421528][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.435918][ T24] usb 1-1: config 0 descriptor?? [ 400.663231][T23306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.673158][T23306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.103640][T23333] /dev/rnullb0: Can't open blockdev [ 402.090269][ T5928] gspca_zc3xx: reg_r err -71 [ 402.604421][T23372] netlink: 'syz.4.2928': attribute type 2 has an invalid length. [ 402.621001][T23372] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2928'. [ 402.688084][ T5928] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 402.706685][ T5928] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 402.729272][ T5928] usb 6-1: USB disconnect, device number 17 [ 403.073777][ T5928] usb 1-1: USB disconnect, device number 95 [ 403.213091][T23400] /dev/rnullb0: Can't open blockdev [ 403.222298][T23401] /dev/rnullb0: Can't open blockdev [ 403.262562][T23403] /dev/rnullb0: Can't open blockdev [ 403.288756][ T5847] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 403.308860][T23405] /dev/rnullb0: Can't open blockdev [ 403.458188][ T5847] usb 6-1: Using ep0 maxpacket: 32 [ 403.464230][ T5847] usb 6-1: no configurations [ 403.473798][ T5847] usb 6-1: can't read configurations, error -22 [ 403.571180][T23419] /dev/rnullb0: Can't open blockdev [ 403.618302][ T5847] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 403.768228][ T5847] usb 6-1: Using ep0 maxpacket: 32 [ 403.779995][ T5847] usb 6-1: no configurations [ 403.784874][ T5847] usb 6-1: can't read configurations, error -22 [ 403.793748][ T5847] usb usb6-port1: attempt power cycle [ 404.147576][ T5847] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 404.179106][ T5847] usb 6-1: Using ep0 maxpacket: 32 [ 404.192373][ T5847] usb 6-1: no configurations [ 404.197434][ T5847] usb 6-1: can't read configurations, error -22 [ 404.205474][T23434] /dev/nullb0: Can't open blockdev [ 404.352547][ T5847] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 404.391155][ T5847] usb 6-1: Using ep0 maxpacket: 32 [ 404.401712][ T5847] usb 6-1: no configurations [ 404.428149][ T5847] usb 6-1: can't read configurations, error -22 [ 404.435732][ T5847] usb usb6-port1: unable to enumerate USB device [ 404.465076][T23450] /dev/rnullb0: Can't open blockdev [ 404.995093][ T30] audit: type=1400 audit(1750654949.333:85): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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nvalid logical block size (2) [ 405.341939][T23517] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 406.100559][T23028] Bluetooth: hci3: command 0x0406 tx timeout [ 406.151516][T23556] loop8: detected capacity change from 0 to 8 [ 406.167148][ T5993] Dev loop8: unable to read RDB block 8 [ 406.172955][ T5993] loop8: unable to read partition table [ 406.179320][ T5993] loop8: partition table beyond EOD, truncated [ 406.189841][T23556] Dev loop8: unable to read RDB block 8 [ 406.195440][T23556] loop8: unable to read partition table [ 406.204282][T23556] loop8: partition table beyond EOD, truncated [ 406.211532][T23556] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 406.335758][T23567] /dev/rnullb0: Can't open blockdev [ 406.534084][T23571] usb usb8: usbfs: process 23571 (syz.5.2974) did not claim interface 0 before use [ 407.042377][ T10] hid-generic 0000:000D:0008.000F: unknown main item tag 0x0 [ 407.066107][ T10] hid-generic 0000:000D:0008.000F: unknown main item tag 0x0 [ 407.074267][ T10] hid-generic 0000:000D:0008.000F: unknown main item tag 0x0 [ 407.111421][ T10] hid-generic 0000:000D:0008.000F: unknown main item tag 0x0 [ 407.133895][ T10] hid-generic 0000:000D:0008.000F: unknown main item tag 0x0 [ 407.166821][ T10] hid-generic 0000:000D:0008.000F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 407.191119][T23602] /dev/rnullb0: Can't open blockdev [ 407.375094][T23604] fido_id[23604]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 407.661394][T23028] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 407.670789][T23028] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 407.678974][T23028] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 407.688106][T23028] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 407.696976][T23028] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 407.705053][ T10] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 407.869235][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 407.878913][ T10] usb 1-1: config 0 has no interfaces? [ 407.886867][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 407.904730][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.913724][ T10] usb 1-1: Product: syz [ 407.928099][ T10] usb 1-1: Manufacturer: syz [ 407.932790][ T10] usb 1-1: SerialNumber: syz [ 407.984032][ T10] usb 1-1: config 0 descriptor?? [ 408.064559][T23633] chnl_net:caif_netlink_parms(): no params data found [ 408.185466][T23633] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.221090][T23633] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.231122][T23633] bridge_slave_0: entered allmulticast mode [ 408.250451][T23633] bridge_slave_0: entered promiscuous mode [ 408.267027][T23633] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.292934][T23633] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.315370][T23633] bridge_slave_1: entered allmulticast mode [ 408.352767][T23633] bridge_slave_1: entered promiscuous mode [ 408.374739][ T5886] usb 1-1: USB disconnect, device number 96 [ 408.393406][T23808] IPVS: sync thread started: state = MASTER, mcast_ifn = wlan0, syncid = 1, id = 0 [ 408.526040][T23633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.542076][T23633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.609915][T23856] syz.0.2995: attempt to access beyond end of device [ 408.609915][T23856] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 408.675135][T23633] team0: Port device team_slave_0 added [ 408.693722][T23633] team0: Port device team_slave_1 added [ 408.738794][ T5928] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 408.781984][T23633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.791434][T23633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.831214][T23633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.850420][T23633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.857390][T23633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.883315][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.898081][ T5928] usb 5-1: device descriptor read/64, error -71 [ 408.916071][T23633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.005723][T23633] hsr_slave_0: entered promiscuous mode [ 409.012916][T23633] hsr_slave_1: entered promiscuous mode [ 409.021160][T23633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.033055][T23633] Cannot create hsr debugfs directory [ 409.148178][ T5928] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 409.184217][T23947] /dev/rnullb0: Can't open blockdev [ 409.282115][T23633] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 409.288983][ T5928] usb 5-1: device descriptor read/64, error -71 [ 409.301313][T23633] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 409.312527][T23633] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 409.324424][T23633] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 409.408643][ T5928] usb usb5-port1: attempt power cycle [ 409.443050][T23633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.495031][T23633] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.514253][ T3031] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.521439][ T3031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.541739][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.548913][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.600514][T23633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.748130][ T5928] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 409.778831][ T5840] Bluetooth: hci1: command tx timeout [ 409.784754][ T5928] usb 5-1: device descriptor read/8, error -71 [ 409.869094][T23633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.921104][T24051] binder: 24050:24051 ioctl c00c620f 200000000180 returned -22 [ 409.921116][T24052] binder: 24050:24052 ioctl c00c620f 200000000180 returned -22 [ 410.030512][ T5928] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 410.072754][ T5928] usb 5-1: device descriptor read/8, error -71 [ 410.088160][ T5886] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 410.158299][ T30] audit: type=1326 audit(1750654954.493:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24064 comm="syz.5.3011" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f570ed8e929 code=0x0 [ 410.194088][ T5928] usb usb5-port1: unable to enumerate USB device [ 410.235726][T23633] veth0_vlan: entered promiscuous mode [ 410.252193][T23633] veth1_vlan: entered promiscuous mode [ 410.260019][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 410.272787][ T5886] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.283036][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 410.310919][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 410.325533][ T5886] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 410.337028][T23633] veth0_macvtap: entered promiscuous mode [ 410.347824][ T5886] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.365028][T23633] veth1_macvtap: entered promiscuous mode [ 410.378518][ T5886] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 410.387606][ T5886] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 410.403438][T23633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.411405][ T5886] usb 1-1: Manufacturer: syz [ 410.422084][ T5886] usb 1-1: config 0 descriptor?? [ 410.441461][T23633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.457116][T23633] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.467317][T23633] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.476340][T23633] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.486297][T23633] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.606152][ T3538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.632250][ T3538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.690031][ T3538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.703612][ T3538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.835776][T24086] loop8: detected capacity change from 0 to 8 [ 410.854011][T24086] Dev loop8: unable to read RDB block 8 [ 410.867531][T24086] loop8: unable to read partition table [ 410.876028][T24086] loop8: partition table beyond EOD, truncated [ 410.882435][T24086] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 411.208406][T24103] netlink: 'syz.6.3017': attribute type 11 has an invalid length. [ 411.679776][T24124] loop8: detected capacity change from 0 to 8 [ 411.690656][T24124] Dev loop8: unable to read RDB block 8 [ 411.696449][T24124] loop8: unable to read partition table [ 411.705133][T24124] loop8: partition table beyond EOD, truncated [ 411.717459][T24124] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 411.822855][T24132] /dev/rnullb0: Can't open blockdev [ 411.854636][T24136] fuse: Bad value for 'group_id' [ 411.860765][T24136] fuse: Bad value for 'group_id' [ 411.868511][ T5840] Bluetooth: hci1: command tx timeout [ 412.281337][T24166] loop8: detected capacity change from 0 to 8 [ 412.289483][T12128] Dev loop8: unable to read RDB block 8 [ 412.295458][T12128] loop8: unable to read partition table [ 412.302085][T12128] loop8: partition table beyond EOD, truncated [ 412.318754][T24166] Dev loop8: unable to read RDB block 8 [ 412.324336][T24166] loop8: unable to read partition table [ 412.335020][T24166] loop8: partition table beyond EOD, truncated [ 412.343753][T24166] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 412.353215][ T25] block nbd3: Possible stuck request ffff888025975080: control (read@0,1024B). Runtime 120 seconds [ 412.364201][ T25] block nbd3: Possible stuck request ffff888025975240: control (read@1024,1024B). Runtime 120 seconds [ 412.375438][ T25] block nbd3: Possible stuck request ffff888025975400: control (read@2048,1024B). Runtime 120 seconds [ 412.386596][ T25] block nbd3: Possible stuck request ffff8880259755c0: control (read@3072,1024B). Runtime 120 seconds [ 412.697439][T24176] fuse: Unknown parameter '000000000000000000100x000000000000000a' [ 412.711921][T24176] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3036'. [ 412.721256][T24176] team0: default FDB implementation only supports local addresses [ 412.955494][ T5886] rc_core: IR keymap rc-hauppauge not found [ 412.967265][ T5886] Registered IR keymap rc-empty [ 413.008194][ T5886] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 413.028137][ T5886] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 413.049333][ T5886] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 413.075305][ T5886] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input32 [ 413.090134][ T5886] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 413.108119][ T5886] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 413.130854][ T5886] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 413.151919][T24197] /dev/rnullb0: Can't open blockdev [ 413.159164][ T5886] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 413.178126][ T5886] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 413.198129][ T5886] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 413.222575][ T5886] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 413.258106][ T5886] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 413.288936][ T5886] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 413.309117][ T5886] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 413.336847][ T5886] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 413.358027][ T5886] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 413.378398][ T5886] usb 1-1: USB disconnect, device number 97 [ 413.812353][T24227] /dev/rnullb0: Can't open blockdev [ 413.934743][T24230] /dev/rnullb0: Can't open blockdev [ 413.948564][ T5840] Bluetooth: hci1: command tx timeout [ 414.705732][T24254] fuse: root generation should be zero [ 414.714218][T24249] /dev/rnullb0: Can't open blockdev [ 415.317182][T24281] /dev/rnullb0: Can't open blockdev [ 415.535474][T24293] No control pipe specified [ 415.578760][T24290] netlink: 'syz.4.3066': attribute type 4 has an invalid length. [ 415.979280][ T5847] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 416.018259][ T5840] Bluetooth: hci1: command tx timeout [ 416.149720][ T5847] usb 1-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 416.162860][ T5847] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 416.174732][ T5886] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 416.185694][ T5847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 30768, setting to 64 [ 416.205591][ T5847] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 416.221696][ T5847] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 416.231137][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 416.240308][ T5847] usb 1-1: Product: syz [ 416.244555][ T5847] usb 1-1: Manufacturer: syz [ 416.249561][ T5847] usb 1-1: SerialNumber: syz [ 416.264047][ T5847] usb 1-1: config 0 descriptor?? [ 416.381193][ T5886] usb 5-1: No LPM exit latency info found, disabling LPM. [ 416.390087][ T5886] usb 5-1: config 9 has an invalid interface number: 166 but max is 0 [ 416.400002][ T5886] usb 5-1: config 9 has no interface number 0 [ 416.406194][ T5886] usb 5-1: config 9 interface 166 altsetting 5 endpoint 0x5 has invalid maxpacket 512, setting to 8 [ 416.417090][ T5886] usb 5-1: config 9 interface 166 altsetting 5 endpoint 0xB has invalid maxpacket 1024, setting to 8 [ 416.428120][ T5886] usb 5-1: config 9 interface 166 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 416.441290][ T5886] usb 5-1: config 9 interface 166 altsetting 5 endpoint 0x1 has invalid maxpacket 1023, setting to 8 [ 416.452276][ T5886] usb 5-1: config 9 interface 166 altsetting 5 has an endpoint descriptor with address 0x31, changing to 0x1 [ 416.465019][ T5886] usb 5-1: config 9 interface 166 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 416.478754][ T5886] usb 5-1: config 9 interface 166 altsetting 5 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 416.482185][ T5938] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 416.492187][ T5847] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 416.508466][ T5847] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 416.521127][ T5886] usb 5-1: config 9 interface 166 has no altsetting 0 [ 416.536043][ T5886] usb 5-1: New USB device found, idVendor=0bc2, idProduct=2300, bcdDevice=5a.b1 [ 416.545984][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.556459][ T5886] usb 5-1: Product: Й [ 416.560853][ T5886] usb 5-1: Manufacturer: ᐌ [ 416.565542][ T5886] usb 5-1: SerialNumber: 踚අ玓ន铃䘬幝束칓컕砜奴ᶆ뿤嗠燐柢ﲇ萲翟鸜륉⮎枬⸥闼ᇗ껇➐隸窸ઔ민偓㛟奰鮮㒖ᶹϠ휸篤槏葺ﮰ吞멽䠯粅噏쨥凇✭盫㲢帅䒬宆卺䊈ἅ궔먟䙿垔ᕬ鲬餚啎Ⰴ襆螐ꕮ犺걀햯띑昁룊頸풡ꤻ排쀣뵿炽嗈䆦밬㵔竗ʶ⑔杸舾ᚗょ켬 [ 416.626032][ T5886] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 416.638304][ T5886] usb 5-1: no configuration chosen from 1 choice [ 416.690455][ T5938] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 416.693370][ T5847] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 416.700166][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.715629][ T5847] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 416.729342][ T5847] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 416.734245][ T5938] usb 6-1: config 0 descriptor?? [ 416.755727][ T5938] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 416.870830][T24348] /dev/rnullb0: Can't open blockdev [ 416.918492][T24305] /dev/rnullb0: Can't open blockdev [ 416.924917][ T5847] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 416.936189][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 416.942853][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 416.949499][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 416.956131][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 416.962790][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 416.969457][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 416.976071][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 416.977906][ T5938] gp8psk: usb in 128 operation failed. [ 416.983458][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 416.996713][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.004111][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.011348][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.018466][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.025103][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.031764][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.038509][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.045290][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.052433][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.059241][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.065991][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.072619][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.079350][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.086002][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.092680][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.099349][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.106004][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.116674][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.123854][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.130510][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.137176][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.143924][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.150569][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.157244][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.163898][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.170594][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.177272][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.183856][ T5847] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 417.192326][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.199370][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.206316][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 417.208404][ T5938] gp8psk: usb in 146 operation failed. [ 417.213352][ T5847] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 417.243923][ T5847] usb 1-1: USB disconnect, device number 98 [ 417.249356][ T5938] gp8psk: failed to get FW version [ 417.272913][ T5938] gp8psk: usb in 149 operation failed. [ 417.282482][ T5938] gp8psk: failed to get FPGA version [ 417.585096][ T5938] gp8psk: usb out operation failed. [ 417.618060][ T5938] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 417.660460][ T5938] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 417.695346][ T5938] usb 6-1: USB disconnect, device number 22 [ 417.767355][T24395] syzkaller0: entered allmulticast mode [ 417.797877][T24395] syzkaller0 (unregistering): left allmulticast mode [ 418.003959][T24407] /dev/rnullb0: Can't open blockdev [ 418.211566][T24388] loop6: detected capacity change from 0 to 63 [ 418.230275][ T5993] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.257284][ T5993] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.282290][ T5993] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.308549][ T5993] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.318750][ T5993] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.963774][ T10] usb 5-1: USB disconnect, device number 28 [ 419.074872][T24492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 419.107400][T24492] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 419.215615][T24508] /dev/rnullb0: Can't open blockdev [ 419.253646][T24510] loop8: detected capacity change from 0 to 8 [ 419.271001][T24510] Dev loop8: unable to read RDB block 8 [ 419.276609][T24510] loop8: unable to read partition table [ 419.289116][T24510] loop8: partition table beyond EOD, truncated [ 419.303926][T24510] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 419.561742][T24524] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3117'. [ 419.835597][T24553] syzkaller0: entered allmulticast mode [ 421.931602][T24590] netlink: 'syz.5.3129': attribute type 10 has an invalid length. [ 422.076546][T24590] hsr_slave_0: entered allmulticast mode [ 422.096338][T24590] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 422.441719][T24625] /dev/rnullb0: Can't open blockdev [ 422.451920][T24626] /dev/rnullb0: Can't open blockdev [ 422.568597][ T5928] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 422.738360][ T5928] usb 5-1: Using ep0 maxpacket: 8 [ 422.751593][ T5928] usb 5-1: unable to get BOS descriptor or descriptor too short [ 422.760997][ T5928] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 422.769550][ T5928] usb 5-1: config 0 has no interface number 0 [ 422.775689][ T5928] usb 5-1: config 0 interface 65 has no altsetting 0 [ 422.787135][ T5928] usb 5-1: New USB device found, idVendor=052b, idProduct=1911, bcdDevice= 1.00 [ 422.796425][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.805116][ T5928] usb 5-1: Product: ᔄ蹓갆餝쎯씎媾ꆇ傅组᥯蚣嶻᪩✂᪦橵︆穬쿞鐤챐嚞஡鸄⽠頶蕤䭻ｼ큘뻫⸎’ᝊ㖬㦟⤘ﻡ脣鷼靗〨唐枅낊ᒓ䑎郴镍ඪ此᱘஬⨑碥氓흲✧텹궒䃠鱁夐갦୦욧∰㬞蜤ꋮ [ 422.830567][ T5928] usb 5-1: SerialNumber: syz [ 422.837197][ T5928] usb 5-1: config 0 descriptor?? [ 422.937417][T24635] /dev/nullb0: Can't open blockdev [ 424.058112][ T5938] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 424.218387][ T5938] usb 7-1: device descriptor read/64, error -71 [ 424.488040][ T5938] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 424.648201][ T5938] usb 7-1: device descriptor read/64, error -71 [ 424.770175][ T5938] usb usb7-port1: attempt power cycle [ 424.925705][ T5928] usb-storage 5-1:0.65: USB Mass Storage device detected [ 424.946184][ T5928] usb-storage 5-1:0.65: Quirks match for vid 052b pid 1911: 20 [ 425.018971][ T5928] usb 5-1: USB disconnect, device number 29 [ 425.139360][ T5938] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 425.171910][ T5938] usb 7-1: device descriptor read/8, error -71 [ 425.305518][T24735] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 425.418184][ T5938] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 425.438764][ T5938] usb 7-1: device descriptor read/8, error -71 [ 425.492635][T24747] /dev/rnullb0: Can't open blockdev [ 425.553213][ T5938] usb usb7-port1: unable to enumerate USB device [ 425.632175][T24757] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3168'. [ 425.745548][T24767] /dev/rnullb0: Can't open blockdev [ 425.794166][T24769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3173'. [ 425.850806][T24772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3174'. [ 425.898165][ T5938] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 426.060998][ T5938] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 426.075163][ T5938] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 426.086365][ T5938] usb 5-1: config 8 has no interface number 0 [ 426.093643][ T5938] usb 5-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 426.098408][T24785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3178'. [ 426.114567][ T5938] usb 5-1: config 8 interface 177 has no altsetting 0 [ 426.116130][T24785] openvswitch: netlink: nsh attribute has 5260 unknown bytes. [ 426.131844][T24785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.137699][ T5938] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 426.150257][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.172671][ T5938] ir_toy 5-1:8.177: required endpoints not found [ 426.372737][T24757] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 426.380009][T24757] /dev/rnullb0: Can't open blockdev [ 426.386213][ T5938] usb 5-1: USB disconnect, device number 30 [ 426.567529][T24799] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3180'. [ 426.921163][T24823] binder: 24822:24823 ioctl c018620c 200000000140 returned -22 [ 427.032160][T24827] Bluetooth: hci6: Frame reassembly failed (-84) [ 427.060168][ T3031] Bluetooth: hci6: Frame reassembly failed (-84) [ 427.091558][T24831] misc userio: The device must be registered before sending interrupts [ 427.267943][T24840] kAFS: No cell specified [ 427.274677][T24840] fuse: Bad value for 'fd' [ 427.284431][T24840] fuse: blksize only supported for fuseblk [ 427.453337][T24853] sctp: [Deprecated]: syz.5.3194 (pid 24853) Use of int in max_burst socket option deprecated. [ 427.453337][T24853] Use struct sctp_assoc_value instead [ 427.728058][ T5938] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 427.898773][ T5938] usb 5-1: too many configurations: 13, using maximum allowed: 8 [ 427.923998][ T5938] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 427.937666][ T5938] usb 5-1: can't read configurations, error -61 [ 428.012246][T24896] 9pnet_fd: Insufficient options for proto=fd [ 428.081226][ T5938] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 428.251524][ T5938] usb 5-1: too many configurations: 13, using maximum allowed: 8 [ 428.261643][ T5938] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 428.269607][ T5938] usb 5-1: can't read configurations, error -61 [ 428.278485][ T5938] usb usb5-port1: attempt power cycle [ 428.618269][ T5938] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 428.639686][ T5938] usb 5-1: too many configurations: 13, using maximum allowed: 8 [ 428.649203][ T5938] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 428.656884][ T5938] usb 5-1: can't read configurations, error -61 [ 428.788981][ T5938] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 428.812443][ T5938] usb 5-1: too many configurations: 13, using maximum allowed: 8 [ 428.822539][ T5938] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 428.831347][ T5938] usb 5-1: can't read configurations, error -61 [ 428.838757][ T5938] usb usb5-port1: unable to enumerate USB device [ 429.058209][ T5840] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 429.058457][T23028] Bluetooth: hci6: command 0x1003 tx timeout [ 429.156611][T24927] delete_channel: no stack [ 429.161673][T24927] delete_channel: no stack [ 429.166762][T24927] /dev/rnullb0: Can't open blockdev [ 429.175305][T24927] delete_channel: no stack [ 429.180023][T24928] /dev/rnullb0: Can't open blockdev [ 429.181161][T24927] delete_channel: no stack [ 429.218225][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 429.288644][T24931] /dev/rnullb0: Can't open blockdev [ 429.372766][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 429.381128][ T10] usb 7-1: config 0 has no interface number 0 [ 429.390389][ T10] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 429.400860][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.409127][ T10] usb 7-1: Product: syz [ 429.413333][ T10] usb 7-1: Manufacturer: syz [ 429.417942][ T10] usb 7-1: SerialNumber: syz [ 429.425078][ T10] usb 7-1: config 0 descriptor?? [ 429.634806][ T10] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 429.645453][ T10] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 429.656105][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 429.664544][ T10] usb 7-1: media controller created [ 429.684560][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 430.110236][T24939] loop8: detected capacity change from 0 to 8 [ 430.121218][T24939] Dev loop8: unable to read RDB block 8 [ 430.126888][T24939] loop8: unable to read partition table [ 430.135361][T24939] loop8: partition table beyond EOD, truncated [ 430.141717][T24939] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 430.752339][ T10] i2c i2c-4: ec100: i2c rd failed=-110 reg=33 [ 431.535108][T24967] overlay: filesystem on ./bus not supported as upperdir [ 431.553640][T24966] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3218'. [ 431.665978][T24971] sctp: [Deprecated]: syz.4.3220 (pid 24971) Use of struct sctp_assoc_value in delayed_ack socket option. [ 431.665978][T24971] Use struct sctp_sack_info instead [ 431.817531][T24975] loop8: detected capacity change from 0 to 8 [ 431.837333][ T5847] usb 7-1: USB disconnect, device number 6 [ 431.845549][T24975] Dev loop8: unable to read RDB block 8 [ 431.864116][T24975] loop8: unable to read partition table [ 431.872155][T24975] loop8: partition table beyond EOD, truncated [ 431.890646][T24975] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 432.563872][T25019] loop8: detected capacity change from 0 to 8 [ 432.571356][T25019] Dev loop8: unable to read RDB block 8 [ 432.583259][T25019] loop8: unable to read partition table [ 432.590272][T25019] loop8: partition table beyond EOD, truncated [ 432.596477][T25019] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 432.744695][T25024] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 432.751883][T25024] /dev/rnullb0: Can't open blockdev [ 432.872878][T25032] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 432.880666][T25032] /dev/rnullb0: Can't open blockdev [ 433.178265][ T24] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 433.264543][T25044] overlay: ./file0 is not a directory [ 433.349580][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.359767][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 433.374486][ T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 433.384974][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.405357][ T24] usb 7-1: Product: syz [ 433.411049][ T24] usb 7-1: Manufacturer: syz [ 433.415981][ T24] usb 7-1: SerialNumber: syz [ 433.937182][ T24] usb 7-1: 0:2 : does not exist [ 433.955274][ T24] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 433.995258][ T24] usb 7-1: USB disconnect, device number 7 [ 433.996496][T25064] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3242'. [ 434.014206][T25064] /dev/rnullb0: Can't open blockdev [ 434.077607][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 434.281527][T25090] sctp: [Deprecated]: syz.6.3244 (pid 25090) Use of struct sctp_assoc_value in delayed_ack socket option. [ 434.281527][T25090] Use struct sctp_sack_info instead [ 434.448314][T25099] input: syz1 as /devices/virtual/input/input33 [ 434.497041][T25099] /dev/rnullb0: Can't open blockdev [ 434.638315][T25115] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 434.766030][T25123] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3251'. [ 434.792473][T25123] Invalid source name [ 434.796562][T25123] UBIFS error (pid: 25123): cannot open "/dev/loop6", error -22 [ 435.368415][T25150] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 435.391655][T25149] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 435.674731][T25168] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 435.682433][T25168] /dev/rnullb0: Can't open blockdev [ 435.730518][T25171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3259'. [ 435.860685][T25179] syz.6.3262: attempt to access beyond end of device [ 435.860685][T25179] md0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 435.947684][T25184] loop8: detected capacity change from 0 to 8 [ 435.964106][ T5993] Dev loop8: unable to read RDB block 8 [ 435.972824][ T5993] loop8: unable to read partition table [ 435.983717][ T5993] loop8: partition table beyond EOD, truncated [ 435.994312][T25184] Dev loop8: unable to read RDB block 8 [ 436.003832][T25184] loop8: unable to read partition table [ 436.011626][T25184] loop8: partition table beyond EOD, truncated [ 436.017883][T25184] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 436.273816][T25207] netlink: 'syz.6.3269': attribute type 75 has an invalid length. [ 436.282978][T25207] /dev/rnullb0: Can't open blockdev [ 436.603988][T25228] /dev/rnullb0: Can't open blockdev [ 436.714219][T25238] qY3aK: Can't lookup blockdev [ 436.898180][ T24] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 437.065213][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 437.078668][ T24] usb 7-1: not running at top speed; connect to a high speed hub [ 437.099507][ T24] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 437.108802][ T24] usb 7-1: config 0 has no interface number 0 [ 437.114954][ T24] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 437.129788][ T24] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 437.140902][ T24] usb 7-1: config 0 interface 88 has no altsetting 0 [ 437.152646][ T24] usb 7-1: string descriptor 0 read error: -22 [ 437.159503][ T24] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 437.168949][ T24] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 437.179903][ T24] usb 7-1: config 0 descriptor?? [ 437.197388][ T24] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.88/input/input34 [ 437.254436][T12128] udevd[12128]: Unable to EVIOCGABS device "/dev/input/event4" [ 437.262651][T12128] udevd[12128]: Unable to EVIOCGABS device "/dev/input/event4" [ 437.538153][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 437.616480][ T5886] usb 7-1: USB disconnect, device number 8 [ 437.721726][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 437.729893][ T24] usb 5-1: config 0 has no interface number 0 [ 437.739504][ T24] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 437.748894][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.749902][T25271] /dev/rnullb0: Can't open blockdev [ 437.756883][ T24] usb 5-1: Product: syz [ 437.756902][ T24] usb 5-1: Manufacturer: syz [ 437.756916][ T24] usb 5-1: SerialNumber: syz [ 437.778185][ T24] usb 5-1: config 0 descriptor?? [ 437.986577][ T24] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 438.004090][ T24] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 438.014530][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 438.023092][ T24] usb 5-1: media controller created [ 438.044709][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 438.172837][T25281] /dev/rnullb0: Can't open blockdev [ 438.245086][T25284] nfs: Unknown parameter 'Y;' [ 438.381528][T25292] netlink: 'syz.0.3282': attribute type 1 has an invalid length. [ 438.398432][T25293] netlink: 'syz.0.3282': attribute type 1 has an invalid length. [ 438.412935][T25292] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 438.429851][T25292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.447031][T25292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.152630][ T24] i2c i2c-4: ec100: i2c rd failed=-110 reg=33 [ 439.863144][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.869649][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.112061][ T24] usb 5-1: USB disconnect, device number 35 [ 440.638128][ T5928] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 440.798040][ T5928] usb 5-1: Using ep0 maxpacket: 8 [ 440.805014][ T5928] usb 5-1: unable to get BOS descriptor or descriptor too short [ 440.814937][ T5928] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 440.827898][ T5928] usb 5-1: config 1 interface 1 has no altsetting 0 [ 440.841355][ T5928] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 440.850457][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.858509][ T5928] usb 5-1: Product: syz [ 440.862789][ T5928] usb 5-1: Manufacturer: syz [ 440.867386][ T5928] usb 5-1: SerialNumber: syz [ 441.088700][ T5928] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 441.096125][ T5928] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 441.123081][ T5928] usb 5-1: USB disconnect, device number 36 [ 441.157763][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 441.504732][ T30] audit: type=1800 audit(1750654985.843:87): pid=25369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3289" name="dmabuf" dev="dmabuf" ino=7 res=0 errno=0 [ 441.828786][T25383] binder: BINDER_SET_CONTEXT_MGR already set [ 441.838405][T25383] binder: 25381:25383 ioctl 4018620d 200000000100 returned -16 [ 442.388065][ T5847] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 442.418844][ T31] INFO: task syz.3.2110:17247 blocked for more than 143 seconds. [ 442.438523][ T31] Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 [ 442.446372][T25407] loop8: detected capacity change from 0 to 8 [ 442.446375][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 442.448155][T25407] Dev loop8: unable to read RDB block 8 [ 442.458035][ T31] task:syz.3.2110 state:D [ 442.466772][ T25] block nbd3: Possible stuck request ffff888025975080: control (read@0,1024B). Runtime 150 seconds [ 442.481869][T25407] loop8: unable to read partition table [ 442.482433][ T25] block nbd3: Possible stuck request ffff888025975240: control (read@1024,1024B). Runtime 150 seconds [ 442.499338][ T25] block nbd3: Possible stuck request ffff888025975400: control (read@2048,1024B). Runtime 150 seconds [ 442.499516][ T31] stack:28904 pid:17247 tgid:17243 ppid:16345 task_flags:0x400140 flags:0x00004004 [ 442.512677][ T25] block nbd3: Possible stuck request ffff8880259755c0: control (read@3072,1024B). Runtime 150 seconds [ 442.538233][T25407] loop8: partition table beyond EOD, truncated [ 442.548234][T25407] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 442.591910][ T31] Call Trace: [ 442.595223][ T31] [ 442.598402][ T5847] usb 5-1: Using ep0 maxpacket: 8 [ 442.612307][ T5847] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 1024 [ 442.642808][ T31] __schedule+0x16f5/0x4d00 [ 442.647397][ T31] ? __lock_acquire+0xab9/0xd20 [ 442.660300][ T5847] usb 5-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 442.682242][ T31] ? schedule+0x165/0x360 [ 442.686713][ T31] ? __pfx___schedule+0x10/0x10 [ 442.695922][ T5847] usb 5-1: config 1 interface 0 has no altsetting 0 [ 442.704809][ T31] ? schedule+0x91/0x360 [ 442.714576][ T31] schedule+0x165/0x360 [ 442.721942][ T31] schedule_preempt_disabled+0x13/0x30 [ 442.727797][ T31] __mutex_lock+0x724/0xe80 [ 442.733419][ T5847] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 442.749929][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.758057][ T31] ? __mutex_lock+0x51b/0xe80 [ 442.764116][ T31] ? bdev_open+0xe0/0xd30 [ 442.771446][ T5847] usb 5-1: Product: 㠊 [ 442.775692][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 442.782265][ T5847] usb 5-1: Manufacturer: ሿ޺㭛⟜謽㆐添氘⏢詄 [ 442.792481][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 442.801527][ T5847] usb 5-1: SerialNumber: 짽珘闉쁡쓣퍛皦ꍓ齇둢墕ᙿ銚䮂敲粒뼓ꝋ慌蔪뜀鵌甙ꚜ㫬囿ꊿꤤ坦謿猵锝⠹䆲㉡꠶∳⢉㮡穈贮ሷ핾뼓垶뒗猏鶫긏㾀挴ፒ圢ꆦ꠪믲턨⺜㔞땠贸묬䍊궯몉잭煭揯璹섡 [ 442.808207][ T31] ? alloc_file_pseudo_noaccount+0x203/0x2c0 [ 442.853260][ T31] ? disk_block_events+0xab/0x120 [ 442.859170][T25397] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 442.866465][T25397] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 442.877626][ T31] ? bdev_open+0xbe/0xd30 [ 442.886438][ T31] bdev_open+0xe0/0xd30 [ 442.891340][ T31] bdev_file_open_by_dev+0x1be/0x240 [ 442.896891][ T31] setup_bdev_super+0x5a/0x5b0 [ 442.902893][ T31] get_tree_bdev_flags+0x366/0x4d0 [ 442.908301][ T31] ? __pfx_hfs_fill_super+0x10/0x10 [ 442.913676][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 442.921434][ T31] vfs_get_tree+0x8f/0x2b0 [ 442.926016][ T31] do_new_mount+0x24a/0xa40 [ 442.930734][ T31] __se_sys_mount+0x317/0x410 [ 442.935613][ T31] ? __pfx___se_sys_mount+0x10/0x10 [ 442.941064][ T31] ? rcu_is_watching+0x15/0xb0 [ 442.946024][ T31] ? do_syscall_64+0xbe/0x3b0 [ 442.950883][ T31] ? __x64_sys_mount+0x20/0xc0 [ 442.955822][ T31] do_syscall_64+0xfa/0x3b0 [ 442.960536][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 442.965905][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.972152][ T31] ? clear_bhb_loop+0x60/0xb0 [ 442.976967][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.984210][ T31] RIP: 0033:0x7f17abf8e929 [ 442.992595][ T31] RSP: 002b:00007f17ace18038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 443.003646][ T31] RAX: ffffffffffffffda RBX: 00007f17ac1b6080 RCX: 00007f17abf8e929 [ 443.014331][ T31] RDX: 0000200000000240 RSI: 0000200000000040 RDI: 00002000000001c0 [ 443.028572][ T31] RBP: 00007f17ac010b39 R08: 0000000000000000 R09: 0000000000000000 [ 443.036717][ T31] R10: 0000000002208080 R11: 0000000000000246 R12: 0000000000000000 [ 443.044865][ T31] R13: 0000000000000000 R14: 00007f17ac1b6080 R15: 00007ffd32e89ad8 [ 443.053027][ T31] [ 443.056211][ T31] [ 443.056211][ T31] Showing all locks held in the system: [ 443.065057][ T31] 1 lock held by khungtaskd/31: [ 443.073794][ T31] #0: ffffffff8e33ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 443.097388][ T31] 4 locks held by kworker/u8:10/3031: [ 443.105181][ T31] 2 locks held by getty/5597: [ 443.110417][ T31] #0: ffff88814cbba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 443.120349][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 443.134136][ T31] 5 locks held by kworker/0:4/5847: [ 443.139818][ T31] #0: ffff88801e6b3148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 443.151488][ T31] #1: ffffc90004187bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 443.163584][ T31] #2: ffff888028c76198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 443.172703][ T31] #3: ffff8880465ee198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 443.185579][ T31] #4: ffff888144e8b278 (&(&priv->bus_notifier)->rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 443.230331][ T31] 1 lock held by udevd/5986: [ 443.245606][ T31] #0: ffff8880258ba358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 443.255356][ T31] 2 locks held by syz.3.2110/17247: [ 443.267597][ T31] #0: ffff88802a1fc0e0 (&type->s_umount_key#70/1){+.+.}-{4:4}, at: alloc_super+0x204/0x970 [ 443.297899][T25397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.307031][T25397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.317295][ T31] #1: ffff8880258ba358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 443.332342][ T31] 2 locks held by syz.6.3296/25405: [ 443.346173][ T31] [ 443.350352][ T31] ============================================= [ 443.350352][ T31] [ 443.358922][ T31] NMI backtrace for cpu 0 [ 443.358938][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 443.358964][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 443.358975][ T31] Call Trace: [ 443.358984][ T31] [ 443.358992][ T31] dump_stack_lvl+0x189/0x250 [ 443.359034][ T31] ? __wake_up_klogd+0xd9/0x110 [ 443.359066][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.359091][ T31] ? __pfx__printk+0x10/0x10 [ 443.359127][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 443.359160][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 443.359185][ T31] ? _printk+0xcf/0x120 [ 443.359212][ T31] ? __pfx__printk+0x10/0x10 [ 443.359238][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 443.359273][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 443.359304][ T31] watchdog+0xfee/0x1030 [ 443.359326][ T31] ? watchdog+0x1de/0x1030 [ 443.359355][ T31] kthread+0x70e/0x8a0 [ 443.359387][ T31] ? __pfx_watchdog+0x10/0x10 [ 443.359406][ T31] ? __pfx_kthread+0x10/0x10 [ 443.359436][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 443.359465][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 443.359495][ T31] ? __pfx_kthread+0x10/0x10 [ 443.359524][ T31] ret_from_fork+0x3fc/0x770 [ 443.359548][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 443.359576][ T31] ? __switch_to_asm+0x39/0x70 [ 443.359601][ T31] ? __switch_to_asm+0x33/0x70 [ 443.359625][ T31] ? __pfx_kthread+0x10/0x10 [ 443.359665][ T31] ret_from_fork_asm+0x1a/0x30 [ 443.359708][ T31] [ 443.359741][ T31] Sending NMI from CPU 0 to CPUs 1: [ 443.524938][ C1] NMI backtrace for cpu 1 [ 443.524955][ C1] CPU: 1 UID: 0 PID: 25405 Comm: syz.6.3296 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 443.524977][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 443.524988][ C1] RIP: 0010:mark_lock+0x3c/0x190 [ 443.525011][ C1] Code: 00 03 00 83 f9 01 bb 09 00 00 00 83 db 00 83 fa 08 0f 45 da bd 01 00 00 00 89 d9 d3 e5 25 ff 1f 00 00 48 0f a3 05 e4 61 29 12 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 30 f3 68 93 eb 48 83 3d 2b f1 [ 443.525030][ C1] RSP: 0018:ffffc90012dbeb48 EFLAGS: 00000003 [ 443.525049][ C1] RAX: 00000000000005c2 RBX: 0000000000000003 RCX: 0000000000000003 [ 443.525060][ C1] RDX: 0000000000000003 RSI: ffff8880737128f0 RDI: ffff888073711e00 [ 443.525072][ C1] RBP: 0000000000000008 R08: ffffffff8fc22df7 R09: 1ffffffff1f845be [ 443.525084][ C1] R10: dffffc0000000000 R11: fffffbfff1f845bf R12: ffff8880737128f0 [ 443.525098][ C1] R13: 1ffff920025b7d7c R14: ffff8880737128f0 R15: 0000000000000000 [ 443.525110][ C1] FS: 00007fa93ac446c0(0000) GS:ffff888125b1c000(0000) knlGS:0000000000000000 [ 443.525125][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 443.525137][ C1] CR2: 00007f86f21a1d58 CR3: 0000000064aa4000 CR4: 00000000003526f0 [ 443.525152][ C1] DR0: 00000000000000d2 DR1: 0000000000000000 DR2: 0000000000000000 [ 443.525163][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 443.525176][ C1] Call Trace: [ 443.525183][ C1] [ 443.525193][ C1] lockdep_hardirqs_on_prepare+0x129/0x2a0 [ 443.525213][ C1] trace_hardirqs_on+0x28/0x40 [ 443.525238][ C1] memcg1_commit_charge+0x1cd/0x2b0 [ 443.525259][ C1] ? __pfx_memcg1_commit_charge+0x10/0x10 [ 443.525279][ C1] ? percpu_ref_get_many+0x19/0x140 [ 443.525308][ C1] ? percpu_ref_get_many+0x19/0x140 [ 443.525336][ C1] charge_memcg+0x10b/0x180 [ 443.525358][ C1] __mem_cgroup_charge+0x25/0x80 [ 443.525378][ C1] shmem_alloc_and_add_folio+0x7c1/0xf60 [ 443.525401][ C1] ? filemap_get_entry+0xad/0x2f0 [ 443.525425][ C1] ? filemap_get_entry+0xad/0x2f0 [ 443.525448][ C1] ? filemap_get_entry+0x28f/0x2f0 [ 443.525474][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 443.525495][ C1] ? shmem_allowable_huge_orders+0x1f8/0x420 [ 443.525515][ C1] shmem_get_folio_gfp+0x59d/0x1660 [ 443.525537][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 443.525562][ C1] shmem_write_begin+0xf7/0x2b0 [ 443.525583][ C1] generic_perform_write+0x2c7/0x910 [ 443.525612][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 443.525628][ C1] ? down_write+0x162/0x1f0 [ 443.525653][ C1] ? file_update_time+0x2da/0x490 [ 443.525673][ C1] shmem_file_write_iter+0xf8/0x120 [ 443.525691][ C1] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 443.525712][ C1] __kernel_write_iter+0x393/0x860 [ 443.525737][ C1] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 443.525757][ C1] ? __pfx___kernel_write_iter+0x10/0x10 [ 443.525777][ C1] ? __up_read+0x280/0x680 [ 443.525801][ C1] ? __asan_memset+0x22/0x50 [ 443.525816][ C1] ? iov_iter_bvec+0xb8/0x180 [ 443.525843][ C1] dump_user_range+0x873/0xc70 [ 443.525872][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 443.525896][ C1] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 443.525916][ C1] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 443.525934][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 443.525955][ C1] ? dump_emit+0xa6/0xe0 [ 443.525974][ C1] ? elf_core_dump+0x2c68/0x3900 [ 443.525998][ C1] elf_core_dump+0x32ed/0x3900 [ 443.526031][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 443.526055][ C1] ? mas_next_slot+0xc27/0xcf0 [ 443.526099][ C1] ? rcu_read_lock_any_held+0xb3/0x120 [ 443.526120][ C1] ? 0xffffffffff600000 [ 443.526140][ C1] do_coredump+0x2806/0x3440 [ 443.526173][ C1] ? __pfx_do_coredump+0x10/0x10 [ 443.526192][ C1] ? unwind_get_return_address+0x4d/0x90 [ 443.526211][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 443.526247][ C1] ? kasan_save_track+0x4f/0x80 [ 443.526264][ C1] ? kasan_save_track+0x3e/0x80 [ 443.526282][ C1] ? kasan_save_free_info+0x46/0x50 [ 443.526308][ C1] ? __kasan_slab_free+0x62/0x70 [ 443.526327][ C1] ? kmem_cache_free+0x18f/0x400 [ 443.526346][ C1] ? get_signal+0xa4c/0x1340 [ 443.526361][ C1] ? arch_do_signal_or_restart+0x9a/0x750 [ 443.526386][ C1] ? irqentry_exit_to_user_mode+0x81/0x120 [ 443.526401][ C1] ? exc_page_fault+0x9f/0xf0 [ 443.526427][ C1] ? asm_exc_page_fault+0x26/0x30 [ 443.526458][ C1] ? proc_coredump_connector+0x172/0x4b0 [ 443.526483][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 443.526513][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 443.526536][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 443.526565][ C1] get_signal+0x1109/0x1340 [ 443.526591][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 443.526618][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 443.526655][ C1] ? __bad_area_nosemaphore+0x3fb/0x780 [ 443.526676][ C1] ? local_irq_enable_exit_to_user+0x5/0x10 [ 443.526698][ C1] irqentry_exit_to_user_mode+0x81/0x120 [ 443.526716][ C1] exc_page_fault+0x9f/0xf0 [ 443.526740][ C1] asm_exc_page_fault+0x26/0x30 [ 443.526755][ C1] RIP: 0033:0x7fa939d8e931 [ 443.526768][ C1] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 443.526783][ C1] RSP: 002b:fffffffffffffc70 EFLAGS: 00010217 [ 443.526797][ C1] RAX: 0000000000000000 RBX: 00007fa939fb5fa0 RCX: 00007fa939d8e929 [ 443.526808][ C1] RDX: 0000000000000000 RSI: fffffffffffffc70 RDI: 0000000001022000 [ 443.526820][ C1] RBP: 00007fa939e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 443.526832][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 443.526844][ C1] R13: 0000000000000001 R14: 00007fa939fb5fa0 R15: 00007ffc6250e2c8 [ 443.526863][ C1] [ 443.534909][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 443.534932][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 443.534962][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 443.534978][ T31] Call Trace: [ 443.534989][ T31] [ 443.535004][ T31] dump_stack_lvl+0x99/0x250 [ 443.535037][ T31] ? __asan_memcpy+0x40/0x70 [ 443.535063][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.535092][ T31] ? __pfx__printk+0x10/0x10 [ 443.535132][ T31] panic+0x2db/0x790 [ 443.535172][ T31] ? __pfx_panic+0x10/0x10 [ 443.535195][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 443.535229][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 443.535268][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 443.535310][ T31] watchdog+0x102d/0x1030 [ 443.535335][ T31] ? watchdog+0x1de/0x1030 [ 443.535367][ T31] kthread+0x70e/0x8a0 [ 443.535401][ T31] ? __pfx_watchdog+0x10/0x10 [ 443.535423][ T31] ? __pfx_kthread+0x10/0x10 [ 443.535456][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 443.535490][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 443.535522][ T31] ? __pfx_kthread+0x10/0x10 [ 443.535556][ T31] ret_from_fork+0x3fc/0x770 [ 443.535583][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 443.535614][ T31] ? __switch_to_asm+0x39/0x70 [ 443.535642][ T31] ? __switch_to_asm+0x33/0x70 [ 443.535671][ T31] ? __pfx_kthread+0x10/0x10 [ 443.535703][ T31] ret_from_fork_asm+0x1a/0x30 [ 443.535750][ T31] [ 444.240073][ T31] Kernel Offset: disabled [ 444.244403][ T31] Rebooting in 86400 seconds..