last executing test programs: 15.515207624s ago: executing program 3 (id=887): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x8, 0xf9, 0xa, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1, 0x6, 0x16, 0x40, 0x4], 0x5000, 0x1a340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.245082839s ago: executing program 3 (id=889): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 15.072884982s ago: executing program 3 (id=892): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v2={0x2000000, [{0xf4c, 0x2083}, {0x3, 0xd}]}, 0x14, 0x2) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="06000408225071b5227ca0a80850384a0c01"], 0x7) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) 14.816006066s ago: executing program 3 (id=893): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x10000, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x10000, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) (async) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1d984a1d, 0x202812, r1, 0x7dfff000) 14.593039955s ago: executing program 3 (id=894): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x1a1800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'comedi_bond\x00', [0x0, 0x80008000, 0x9, 0x2, 0x0, 0x0, 0x1, 0xf, 0xffe, 0x1, 0x7, 0x1, 0x1006, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x5, 0x3ff, 0x10000, 0x800, 0xe2df, 0x2, 0xfffffffd, 0x1, 0x3, 0x7, 0x5, 0x5]}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x2}], 0x1, 0x7f) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000240), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = add_key$user(&(0x7f0000000640), &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000040)="2d1174f804c90c4b4c45f1bde0c694c5b913c2479bc97005cc449d178f65afa3b57f3979e103673f4a14ad35fc3cc4562b34573d05bbf8408c8768c73de4652c51", 0x41, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, r5, r6}, 0x0, 0x1c, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYRES16=r5], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4) 14.020165199s ago: executing program 3 (id=898): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x7c, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0xb, 0x0, 0x10003, 0x7, 0xff, 0x6, 0x5, 0x12, '\x00', 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.533234838s ago: executing program 32 (id=898): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x7c, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0xb, 0x0, 0x10003, 0x7, 0xff, 0x6, 0x5, 0x12, '\x00', 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.661720521s ago: executing program 1 (id=934): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x800) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ptrace$setregs(0xd, 0x0, 0x100, 0x0) syz_clone3(0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) futex(&(0x7f000000cffc), 0x3, 0x0, 0x0, &(0x7f0000048000), 0x2) 6.49189948s ago: executing program 1 (id=935): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x80085502, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r5, 0xfa642000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x900) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000380), 0xfffffffffffffeba) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x15, 0x80001088, 0x73}, 0x2c) write$tun(r3, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x16, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) ioprio_set$uid(0x3, 0x0, 0x6000) sendfile(r0, r0, 0x0, 0x7ffff000) 4.431904102s ago: executing program 1 (id=941): ioctl$TCSETS(0xffffffffffffffff, 0x40384708, &(0x7f0000000200)={0x8, 0xffffff80, 0xd8, 0x8363, 0x1, "3eccd25569e20900"}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000000efff00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 4.091639282s ago: executing program 1 (id=942): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0x80}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) fcntl$lock(r4, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x1fd}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) 2.894164748s ago: executing program 0 (id=943): mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000006eb08f6dab99468a2266f81b0546926cc95c6f183085cb6956efc05f76d3feb8223f0ae46e512683c3c6bfa24b5998d67260d849a59205bbf58987e50aa2a777368af8cfa7854698a1f733bb9e6035f553690f56850c2f", @ANYRES16=r1, @ANYBLOB="591a27bd7000fcdbdf2509000000"], 0x14}}, 0x400c814) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000040)={0x10, 0x1, {0x52, 0x8001, 0x7f2, {}, {0x2, 0x5}, @ramp={0x9, 0x6, {0x2, 0x7, 0x3ff}}}, {0x56, 0xbd94, 0x45, {0x4, 0x6}, {0x4, 0x610}, @rumble={0x134, 0xea}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r5 = socket(0x80000000000000a, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0xd}}}}, 0x108) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r7, 0x541b, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r4, 0x303, 0x4, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000080) clock_gettime(0x4, &(0x7f0000000380)) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x0, &(0x7f0000000000)={0x4b5a9da54893e123, 0x11, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x5) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f00000008c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r10, 0x40182103, &(0x7f0000000240)={r11, 0x1, r10, 0x6}) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000bda1", @ANYRES16=r9, @ANYBLOB="010025bd7100030000008900000008000300", @ANYRES32=r13, @ANYBLOB="04001d80"], 0x20}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000340)={0x0, 'syzkaller1\x00', {}, 0x7}) 2.485818137s ago: executing program 2 (id=944): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c", 0x2) write$dsp(0xffffffffffffffff, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc", 0x14) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2.048344666s ago: executing program 2 (id=945): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "d830c0c64f689f832d4b576947dd47df"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 1.801449048s ago: executing program 0 (id=946): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02"], 0x4, 0x2) mount(&(0x7f0000000080)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='befs\x00', 0x200004, 0x0) 1.68757997s ago: executing program 2 (id=947): r0 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0) 1.620394833s ago: executing program 0 (id=948): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000280)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4814) (async) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4814) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) connect$inet(r4, &(0x7f00000000c0), 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x20de6846f75620cc, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x8001, 0xfffe, 0x1}, 0x14) shutdown(r4, 0x2) (async) shutdown(r4, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000140)={0x8, 'xfrm0\x00', {'ipvlan0\x00'}, 0xd}) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x31a5098, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x31a5098, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000100)='./file0/file0/file0\x00', 0x0, 0x10f4f1, 0x0) (async) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000100)='./file0/file0/file0\x00', 0x0, 0x10f4f1, 0x0) setsockopt$llc_int(r6, 0x10c, 0x7, &(0x7f0000000080)=0x3, 0x4) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x8000, 0x0, 0x2}, 0x18, 0x5) (async) landlock_create_ruleset(&(0x7f0000000040)={0x8000, 0x0, 0x2}, 0x18, 0x5) 1.45821599s ago: executing program 2 (id=949): ioctl$TCSETS(0xffffffffffffffff, 0x40384708, &(0x7f0000000200)={0x8, 0xffffff80, 0xd8, 0x8363, 0x1, "3eccd25569e20900"}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000001000", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.179858596s ago: executing program 1 (id=950): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f00000001c0), &(0x7f00000002c0)=0x8) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[], 0x15) r7 = dup(r5) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendfile(r0, r3, 0x0, 0x800a121) 1.083512736s ago: executing program 0 (id=951): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) writev(r0, &(0x7f00000016c0)=[{&(0x7f0000000380)="c0e406cef10ff95615686029e4523d55069c9a0214a54b06c59bc64d065222190563612059f29e05ea36c74a53a5ad2139a2adbad33d7261728f93c57ff80d62bcd2829681f9d7496057e407ce76c294b81a675dc2f4247e3d84c2fb8e928aa0cda6f85f1d577ba6abddd5c6dcf4d22b6de584028c9905b98997472945af5d8d58c59128075c4203d9c82063da927d12f1dce3ba9053f9d08e505d0ee657ce0ee1d1275674db3ffaffbbfd75ee", 0xad}, {&(0x7f0000000440)="def4928f5f2b10a2b89f0c3527c89b38c010a91d7f7b0ba3794ffa0a76253d71ad5dea030871f500065a71d2336b109f0e4cd60330d2fb8fc4ef493a66a68e5d40a2473836f2d3b73f5d378b63682b57d4a320294f3d304f6d7ace03dfec9962bce61319753c35a57b43f05632f1cb2a94636a2a2323b4e7d041f4fd35917952714b6b490552d01ede536be12d28c3490b78abfe3fddf33a18bafd56297a7097e324816f5965c1771b", 0xa9}, {&(0x7f0000000500)="c6cc0ced232286076367109602249639ebc9d0dcdf1aa158b40027a73bc581475cd800152cf420e14f58fc9592c9ab79c4b265cd52805e67160deb387badc5e717a12ddf43e48bb6c2d7e80f657e11f9ba9305f1af5a2d06d58ad3374a7365535fb66c73cbe2d275dace5413e8f3fed45981661a6ae0fc62d9b5362afd237c8ce9905e", 0x83}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="6d3c0f1563d5d3bceb8879de01eacf74e97266f15d1138aff86bec99e460964821936bcfec537da22529adc1a39d4b32cdc3da0c2c2c873db29342c79d7358618af5e34f605485342c461df5294f878893af7dcb7254f1d1a46d09ac6f0d68676aa91b20b1b2e40a6ec925dd2b8f735b0773e8f1747e0f6a92c2f7a5c665073bc07ca15b0505b15158ab9b7d3029a968d51387b4c71d0fba78c487dbe7762b64d54b43e74c926c542e958f3e7758b8a73129ab1e90e4901f21b114b9450dda6ac7391f749740a0710331379989afa6ba1c609c6a6b3cbcb9cf342e244b16addc3b590193e95eac305081b9d028e60a42c09ab5824e67f897", 0xf8}], 0x5) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000012000032"], 0xfdef) 1.060233314s ago: executing program 2 (id=952): unshare(0x2a020480) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x29, 0x4, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r1, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r3, 0x0, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r4, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") unshare(0x20000) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) unshare(0x48040000) utimes(0x0, &(0x7f00000002c0)) mount(&(0x7f0000001000)=@loop={'/dev/loop', 0x0}, &(0x7f0000001040)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='ufs\x00', 0xb87c20, 0x0) 599.950577ms ago: executing program 0 (id=953): rt_sigprocmask(0x0, 0x0, 0x0, 0x8) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext3\x00', 0x400, 0x0) 472.916481ms ago: executing program 4 (id=899): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x4a}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) close(r0) (async) close(r0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x3200051, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x3200051, 0x0) 422.124182ms ago: executing program 0 (id=954): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000080)={0xc99, 0xd70}) (async) r4 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x1, r4, 0x7) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1000, 0xfffffffe}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x700}) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ac059c02000000000001090224000100000003"], 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r7, 0x8b2a, &(0x7f0000000040)) (async) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000080)={0x101, 0x2, 0x21}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) (async) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r9, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[], 0x0}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f00000006c0)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="4033de000000de22c54ec98b4addb41d7c28455385cbc665baa502c833c68c95d234ec1c0f189127b17f18976fd569fdd77a4a2619224bf53b58a04bae83894dfc6cf7dd8060d6ac3b5ae11429546853d351fb172eec6a368dda7261c1a574360b4390a65fec8bbb07000000f88e05ec671784d65bdf0cc9d82b7c99fe4324e666755d73dd67dd607afee9bd671a389b16b595c503bd66876f68e73978365d490ba13abbc1559623e6f1a0b78ada4d994b8e4eb97f19d53ddb7afa99e8f5ae3c994cb3ae39619e9375fb0cbb522514112e677f25390a2ee2126803cc2c370dd1def9d1e3"], &(0x7f0000000240)=ANY=[@ANYBLOB="00039a0000009a034fda9943b46fbb41faf3c0f7bcea8471042adbf668f1cd2640e6a24fc57dfffffffffffffffff6123e1cc6a6a0c4a708834df563f0ce8e4c969d3335dcdc8a5850b1e75ea889dc5e1a471deedd5808fa0431f35046c50b88b13017af7d82d34ad6316a8674c7c6dfed464e94cf679e0b8c2795cba381369ad2c61584c54b597a4f7edf5c006394bf3597fb772b00"/160], &(0x7f00000000c0)={0x0, 0x22, 0x4, {[@local=@item_012={0x1, 0x2, 0x8, "a1"}, @global=@item_012={0x0, 0x1, 0x6}, @main=@item_012={0x0, 0x0, 0xa}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0xaa, 0x1, {0x22, 0xdcc}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="00149e000000ed5696cff0be76f59ec9940bdb273bac66ac2b08a40f2770e1c10fbc128b36b9b0b6708c5814f9e101db6bbeb9ba432234725315594cbc1cd54cab38f256968640a2c01d88b0aae6276794fe1ddc0a81938045631879785ef5c61c370489a35ea614990d652a792f1af19fc1521f75dbb4483e77b4c367963c74dc1176318582135b33e0b820a7f3388d9e56df1718b63142ee181ed7449931d8b60a6717"], &(0x7f0000000380)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000600)={0x20, 0x1, 0x47, "7914216439d3f7a936ae5dcbdeb62e1c3520c27726f92a831985e0b470ef9cc2d917837edb3c713d4b18c1cddc0b8b51a9282f4291218dad25f7208b34b55afd3925b51b1b262a"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x6}}) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r10, 0xc00c55ca, &(0x7f0000000040)={0x10}) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x28, r5, 0x1, 0x70bd2c, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}]}, 0xffffff63}}, 0x40041) (async) r11 = socket(0x40000000015, 0x5, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r11, 0x6, 0x16, 0x0, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='befs\x00', 0x0, 0x0) 275.960859ms ago: executing program 4 (id=955): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x30, r1, 0x1, 0x70bd2c, 0x25dedbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "d830c0c64f689f832d4b5769479d47de"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20002000}, 0x40000) 144.126723ms ago: executing program 4 (id=956): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) creat(0x0, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0xffe7) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000080)="9290060aac25db811650141f3647c51754b4ee8e2efbe3cad5da116be75633e1bf4c727c54c0b091ac68bb28d37c505fcd4bcbe7caf868004f387d24e54e7bc243b0883368ad747e0312d1e605a688c0c9ca5708c378e9793cc0d98fb19be88f756ce805cde20ff8c5be62935b5ea2d2e1c7489a245a8cef700f9e476dc4ed61c625e9e7d15a194816a3c49ce2009e23f6338adfe57e0d1c0a5cb723736c05abcea46d9694be9752198589de608a24a2f1a98bb7717c194a71a2227ace") r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000080)={0x9, @vbi}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "00000004000100", "6abc0000b31600010000000100100400", "f0630400", "c14ec98dcd2ad89f"}, 0x28) sendto$inet6(r1, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r1, 0x0, 0xfdef) sendto$inet6(r1, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="9b", 0x1, 0xfffffffffffffffc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) keyctl$describe(0x6, r3, &(0x7f00000010c0)=""/69, 0x45) pipe2(0x0, 0x880c0) fadvise64(r0, 0x1000, 0x1, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0xffffffff, 0xe661, 0x8004, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x3, 0x17, 0x1, 0x407, 0x5, 0x9, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x3ff, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x4005a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x80000004, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x2, 0x408, 0x8004, 0x5, 0x9, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1ff, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0xa, 0xac8, 0xbf, 0x2, 0x4, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb30, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0xb, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x9, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r5 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r5) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x4580b000) futex(&(0x7f000000cffc), 0x3, 0x0, 0x0, &(0x7f0000048000), 0x2) 77.924368ms ago: executing program 1 (id=957): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x1a1800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'comedi_bond\x00', [0x0, 0x80008000, 0x9, 0x2, 0x0, 0x0, 0x1, 0xf, 0xffe, 0x1, 0x7, 0x1, 0x1006, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x5, 0x3ff, 0x10000, 0x800, 0xe2df, 0x2, 0xfffffffd, 0x1, 0x3, 0x7, 0x5, 0x5]}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x2}], 0x1, 0x7f) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000240), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = add_key$user(&(0x7f0000000640), &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000040)="2d1174f804c90c4b4c45f1bde0c694c5b913c2479bc97005cc449d178f65afa3b57f3979e103673f4a14ad35fc3cc4562b34573d05bbf8408c8768c73de4652c51", 0x41, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, r5, r6}, 0x0, 0x1c, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYRES16=r5], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4) 0s ago: executing program 2 (id=958): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1f1982, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x6000) sendfile(r0, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): 4329][ T6996] VFS: Can't find a romfs filesystem on dev rnullb0. [ 130.644329][ T6996] [ 130.655184][ T6996] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 130.662985][ T6996] VFS: Can't find a romfs filesystem on dev rnullb0. [ 130.662985][ T6996] [ 130.673632][ T6996] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 130.681974][ T6996] VFS: Can't find a romfs filesystem on dev rnullb0. [ 130.681974][ T6996] [ 130.712066][ T6996] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 130.724184][ T6996] VFS: Can't find a romfs filesystem on dev rnullb0. [ 130.724184][ T6996] [ 130.735855][ T6996] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 130.747122][ T6996] VFS: Can't find a romfs filesystem on dev rnullb0. [ 130.747122][ T6996] [ 130.757946][ T6996] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 130.770170][ T6996] VFS: Can't find a romfs filesystem on dev rnullb0. [ 130.770170][ T6996] [ 130.783425][ T6996] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 130.791048][ T6996] VFS: Can't find a romfs filesystem on dev rnullb0. [ 130.791048][ T6996] [ 130.801835][ T6996] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 130.810002][ T6996] VFS: Can't find a romfs filesystem on dev rnullb0. [ 130.810002][ T6996] [ 130.819803][ T6996] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 130.826974][ T6996] VFS: Can't find a romfs filesystem on dev rnullb0. [ 130.826974][ T6996] [ 130.849313][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 130.856928][ T43] usb 3-1: config 0 has an invalid interface number: 236 but max is 0 [ 130.869272][ T43] usb 3-1: config 0 has no interface number 0 [ 130.889940][ T43] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=1e.0e [ 130.902257][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.914043][ T43] usb 3-1: Product: syz [ 130.918267][ T43] usb 3-1: Manufacturer: syz [ 130.922980][ T43] usb 3-1: SerialNumber: syz [ 130.958701][ T43] usb 3-1: config 0 descriptor?? [ 131.127105][ T7012] comedi comedi1: Minor -2147450880 is invalid! [ 131.405567][ T981] usb 4-1: USB disconnect, device number 7 [ 131.541308][ T43] usb 3-1: USB disconnect, device number 6 [ 131.564366][ T43] f81534a_ctrl 3-1:0.236: failed to set register 0x116: -19 [ 131.586163][ T43] f81534a_ctrl 3-1:0.236: failed to enable ports: -19 [ 131.932530][ T7020] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 131.940305][ T7020] UDF-fs: Scanning with blocksize 4096 failed [ 132.057270][ T7027] /dev/sg0: Can't lookup blockdev [ 132.459361][ T5894] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 132.629304][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 132.664125][ T5894] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.684712][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.698336][ T5894] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 132.708623][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.717183][ T7053] fuse: Bad value for 'group_id' [ 132.722727][ T7053] fuse: Bad value for 'group_id' [ 132.728171][ T7053] fuse: Bad value for 'group_id' [ 132.732372][ T7054] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 132.737551][ T5894] usb 3-1: config 0 descriptor?? [ 132.746856][ T7050] comedi comedi1: Minor -2147450880 is invalid! [ 132.751686][ T7053] fuse: Bad value for 'group_id' [ 132.765579][ T5894] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 132.777038][ T7053] fuse: Bad value for 'group_id' [ 132.779986][ T7054] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 132.787216][ T7053] fuse: Bad value for 'group_id' [ 132.794944][ T7053] fuse: Bad value for 'group_id' [ 132.803662][ T7053] fuse: Bad value for 'group_id' [ 132.809084][ T7053] fuse: Bad value for 'group_id' [ 132.814855][ T7053] fuse: Bad value for 'group_id' [ 132.823543][ T7053] fuse: Bad value for 'group_id' [ 132.828662][ T7053] fuse: Bad value for 'group_id' [ 132.834966][ T7053] fuse: Bad value for 'group_id' [ 132.843731][ T7053] fuse: Bad value for 'group_id' [ 132.850669][ T7053] fuse: Bad value for 'group_id' [ 132.858041][ T7053] fuse: Bad value for 'group_id' [ 132.864116][ T7053] fuse: Bad value for 'group_id' [ 132.869565][ T7053] fuse: Bad value for 'group_id' [ 132.875085][ T7053] fuse: Bad value for 'group_id' [ 132.880789][ T7053] fuse: Bad value for 'group_id' [ 132.886231][ T7053] fuse: Bad value for 'group_id' [ 132.893907][ T7053] fuse: Bad value for 'group_id' [ 132.900395][ T7053] fuse: Bad value for 'group_id' [ 132.905477][ T7053] fuse: Bad value for 'group_id' [ 132.911374][ T7053] fuse: Bad value for 'group_id' [ 132.916452][ T7053] fuse: Bad value for 'group_id' [ 132.922282][ T7053] fuse: Bad value for 'group_id' [ 132.927359][ T7053] fuse: Bad value for 'group_id' [ 132.933527][ T7053] fuse: Bad value for 'group_id' [ 132.938615][ T7053] fuse: Bad value for 'group_id' [ 132.944512][ T7053] fuse: Bad value for 'group_id' [ 132.950324][ T7053] fuse: Bad value for 'group_id' [ 132.957819][ T7053] fuse: Bad value for 'group_id' [ 132.972566][ T7053] fuse: Bad value for 'group_id' [ 132.978068][ T7053] fuse: Bad value for 'group_id' [ 132.983519][ T7053] fuse: Bad value for 'group_id' [ 132.989029][ T7053] fuse: Bad value for 'group_id' [ 132.997743][ T7053] fuse: Bad value for 'group_id' [ 133.004049][ T7053] fuse: Bad value for 'group_id' [ 133.009087][ T7053] fuse: Bad value for 'group_id' [ 133.015218][ T7053] fuse: Bad value for 'group_id' [ 133.020519][ T7053] fuse: Bad value for 'group_id' [ 133.025977][ T7053] fuse: Bad value for 'group_id' [ 133.031437][ T7053] fuse: Bad value for 'group_id' [ 133.037067][ T7053] fuse: Bad value for 'group_id' [ 133.042477][ T7053] fuse: Bad value for 'group_id' [ 133.047962][ T7053] fuse: Bad value for 'group_id' [ 133.053478][ T7053] fuse: Bad value for 'group_id' [ 133.064486][ T7053] fuse: Bad value for 'group_id' [ 133.069792][ T7053] fuse: Bad value for 'group_id' [ 133.075539][ T7053] fuse: Bad value for 'group_id' [ 133.084774][ T7053] fuse: Bad value for 'group_id' [ 133.091868][ T7053] fuse: Bad value for 'group_id' [ 133.096911][ T7053] fuse: Bad value for 'group_id' [ 133.107026][ T7053] fuse: Bad value for 'group_id' [ 133.113964][ T7053] fuse: Bad value for 'group_id' [ 133.124471][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.131529][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.145902][ T7053] fuse: Bad value for 'group_id' [ 133.151429][ T7053] fuse: Bad value for 'group_id' [ 133.157107][ T7053] fuse: Bad value for 'group_id' [ 133.164305][ T7053] fuse: Bad value for 'group_id' [ 133.170190][ T7053] fuse: Bad value for 'group_id' [ 133.175362][ T7053] fuse: Bad value for 'group_id' [ 133.188678][ T7053] fuse: Bad value for 'group_id' [ 133.194190][ T7053] fuse: Bad value for 'group_id' [ 133.201199][ T7053] fuse: Bad value for 'group_id' [ 133.206324][ T7053] fuse: Bad value for 'group_id' [ 133.212482][ T7053] fuse: Bad value for 'group_id' [ 133.217518][ T7053] fuse: Bad value for 'group_id' [ 133.223607][ T7053] fuse: Bad value for 'group_id' [ 133.228629][ T7053] fuse: Bad value for 'group_id' [ 133.234894][ T7053] fuse: Bad value for 'group_id' [ 133.240320][ T7053] fuse: Bad value for 'group_id' [ 133.245963][ T7053] fuse: Bad value for 'group_id' [ 133.251427][ T7053] fuse: Bad value for 'group_id' [ 133.257072][ T7053] fuse: Bad value for 'group_id' [ 133.264020][ T7053] fuse: Bad value for 'group_id' [ 133.270043][ T7053] fuse: Bad value for 'group_id' [ 133.275102][ T7053] fuse: Bad value for 'group_id' [ 133.281452][ T7053] fuse: Bad value for 'group_id' [ 133.286505][ T7053] fuse: Bad value for 'group_id' [ 133.292714][ T7053] fuse: Bad value for 'group_id' [ 133.297853][ T7053] fuse: Bad value for 'group_id' [ 133.305608][ T7053] fuse: Bad value for 'group_id' [ 133.312195][ T7053] fuse: Bad value for 'group_id' [ 133.317892][ T7053] fuse: Bad value for 'group_id' [ 133.328554][ T7053] fuse: Bad value for 'group_id' [ 133.334459][ T7053] fuse: Bad value for 'group_id' [ 133.343591][ T7053] fuse: Bad value for 'group_id' [ 133.349105][ T7053] fuse: Bad value for 'group_id' [ 133.356667][ T7053] fuse: Bad value for 'group_id' [ 133.362730][ T7053] fuse: Bad value for 'group_id' [ 133.370266][ T7053] fuse: Bad value for 'group_id' [ 133.375774][ T7053] fuse: Bad value for 'group_id' [ 133.381535][ T7053] fuse: Bad value for 'group_id' [ 133.387032][ T7053] fuse: Bad value for 'group_id' [ 133.392632][ T7053] fuse: Bad value for 'group_id' [ 133.398113][ T7053] fuse: Bad value for 'group_id' [ 133.403810][ T7053] fuse: Bad value for 'group_id' [ 133.409737][ T7053] fuse: Bad value for 'group_id' [ 133.414960][ T7053] fuse: Bad value for 'group_id' [ 133.421686][ T7053] fuse: Bad value for 'group_id' [ 133.427097][ T7053] fuse: Bad value for 'group_id' [ 133.433162][ T7053] fuse: Bad value for 'group_id' [ 133.438384][ T7053] fuse: Bad value for 'group_id' [ 133.444564][ T7053] fuse: Bad value for 'group_id' [ 133.470081][ T7053] fuse: Bad value for 'group_id' [ 133.475785][ T7053] fuse: Bad value for 'group_id' [ 133.499297][ T7053] fuse: Bad value for 'group_id' [ 133.505800][ T7053] fuse: Bad value for 'group_id' [ 133.519228][ T7053] fuse: Bad value for 'group_id' [ 133.689693][ T7063] qnx4: no qnx4 filesystem (no root dir). [ 133.823252][ T7067] loop3: detected capacity change from 0 to 1 [ 133.838820][ T6832] Dev loop3: unable to read RDB block 1 [ 133.844662][ T6832] loop3: unable to read partition table [ 133.851116][ T6832] loop3: partition table beyond EOD, truncated [ 133.866573][ T7067] Dev loop3: unable to read RDB block 1 [ 133.883547][ T7067] loop3: unable to read partition table [ 133.890135][ T7067] loop3: partition table beyond EOD, truncated [ 133.898835][ T7067] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 133.916780][ T7071] binder: 7070:7071 ioctl c0306201 2000000001c0 returned -14 [ 134.123895][ T7075] exFAT-fs (rnullb0): invalid boot record signature [ 134.154397][ T7075] exFAT-fs (rnullb0): failed to read boot sector [ 134.171245][ T7075] exFAT-fs (rnullb0): failed to recognize exfat type [ 134.568554][ T7086] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 134.594928][ T7089] netlink: 'syz.1.314': attribute type 21 has an invalid length. [ 134.603877][ T7089] netlink: 100 bytes leftover after parsing attributes in process `syz.1.314'. [ 134.631187][ T7089] gfs2: not a GFS2 filesystem [ 134.649498][ T7090] comedi comedi1: Minor -2147450880 is invalid! [ 134.876860][ T7100] loop3: detected capacity change from 0 to 1 [ 134.887645][ T7100] Dev loop3: unable to read RDB block 1 [ 134.893914][ T7100] loop3: unable to read partition table [ 134.903715][ T7100] loop3: partition table beyond EOD, truncated [ 134.911107][ T7100] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 135.061643][ T7105] XFS (rnullb0): Invalid superblock magic number [ 135.226464][ T3096] usb 3-1: USB disconnect, device number 7 [ 135.467246][ T7118] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.750713][ T7128] MTD: Couldn't look up '/dev/sg0': -15 [ 135.758047][ T7118] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.795421][ T7126] sit0: entered allmulticast mode [ 135.866413][ T7131] loop3: detected capacity change from 0 to 1 [ 135.880024][ T7118] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.897202][ T7131] Dev loop3: unable to read RDB block 1 [ 135.906243][ T7131] loop3: unable to read partition table [ 135.915606][ T7131] loop3: partition table beyond EOD, truncated [ 135.928987][ T7131] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 136.058354][ T7118] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.081876][ T7133] netlink: 'syz.0.328': attribute type 11 has an invalid length. [ 136.089945][ T7133] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.328'. [ 136.132146][ T7133] openvswitch: netlink: IP tunnel dst address not specified [ 136.136684][ T7135] /dev/sg0: Can't lookup blockdev [ 136.338450][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.365811][ T49] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.441173][ T78] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.467218][ T729] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.585170][ T7117] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.714819][ T7117] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.725684][ T30] audit: type=1326 audit(1752179217.996:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7149 comm="syz.0.336" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2019d8e929 code=0x0 [ 136.798812][ T7155] /dev/rnullb0: Can't open blockdev [ 136.826054][ T7117] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.903525][ T7117] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.239534][ T981] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 137.424383][ T981] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 137.435253][ T981] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 137.448202][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 137.458111][ T981] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 137.474544][ T981] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 137.483802][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.491960][ T981] usb 2-1: Product: syz [ 137.496132][ T981] usb 2-1: Manufacturer: syz [ 137.500872][ T981] usb 2-1: SerialNumber: syz [ 137.508913][ T981] usb 2-1: config 0 descriptor?? [ 137.722085][ T981] usb 2-1: USB disconnect, device number 5 [ 137.733383][ T7175] /dev/sg0: Can't lookup blockdev [ 137.814204][ T7180] capability: warning: `syz.3.343' uses 32-bit capabilities (legacy support in use) [ 138.073475][ T7186] loop3: detected capacity change from 0 to 1 [ 138.085591][ T7186] Dev loop3: unable to read RDB block 1 [ 138.092202][ T7186] loop3: unable to read partition table [ 138.098206][ T7186] loop3: partition table beyond EOD, truncated [ 138.104561][ T7186] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 138.754323][ T7215] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 138.764546][ T7215] VFS: Can't find a romfs filesystem on dev rnullb0. [ 138.764546][ T7215] [ 139.120310][ T7222] loop3: detected capacity change from 0 to 1 [ 139.130288][ T7222] Dev loop3: unable to read RDB block 1 [ 139.135898][ T7222] loop3: unable to read partition table [ 139.153971][ T7222] loop3: partition table beyond EOD, truncated [ 139.169385][ T7222] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 139.645545][ T7240] Bluetooth: MGMT ver 1.23 [ 139.741717][ T7245] /dev/rnullb0: Can't open blockdev [ 139.972255][ T7251] /dev/sg0: Can't lookup blockdev [ 140.646358][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.685527][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.704194][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.775869][ T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.276510][ T7290] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 141.492539][ T5929] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 141.649283][ T5929] usb 3-1: device descriptor read/64, error -71 [ 141.692297][ T7299] netlink: zone id is out of range [ 141.835860][ T7303] hpfs: Bad magic ... probably not HPFS [ 141.837277][ T7306] /dev/rnullb0: Can't open blockdev [ 141.909456][ T5929] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 142.049563][ T5929] usb 3-1: device descriptor read/64, error -71 [ 142.185665][ T5929] usb usb3-port1: attempt power cycle [ 142.389205][ T7324] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 142.549642][ T5929] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 142.601979][ T5929] usb 3-1: device descriptor read/8, error -71 [ 142.869936][ T5929] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 142.899120][ T5929] usb 3-1: device descriptor read/8, error -71 [ 143.022877][ T5929] usb usb3-port1: unable to enumerate USB device [ 143.412667][ T7350] loop3: detected capacity change from 0 to 1 [ 143.434185][ T7350] Dev loop3: unable to read RDB block 1 [ 143.443963][ T7350] loop3: unable to read partition table [ 143.451334][ T7350] loop3: partition table beyond EOD, truncated [ 143.474783][ T7350] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 143.783982][ T7358] macsec0: entered promiscuous mode [ 143.790775][ T7358] macsec0: entered allmulticast mode [ 143.796363][ T7358] veth1_macvtap: entered allmulticast mode [ 143.813919][ T7358] vxfs: WRONG superblock magic 00000000 at 1 [ 143.823446][ T7358] vxfs: WRONG superblock magic 00000000 at 8 [ 143.831124][ T7358] vxfs: can't find superblock. [ 144.304445][ T7373] loop3: detected capacity change from 0 to 1 [ 144.312072][ T7373] Dev loop3: unable to read RDB block 1 [ 144.317675][ T7373] loop3: unable to read partition table [ 144.326674][ T7373] loop3: partition table beyond EOD, truncated [ 144.334283][ T7373] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 144.348239][ T7374] overlayfs: missing 'lowerdir' [ 144.356531][ T7374] tmpfs: Invalid gid '0x00000000ffffffff' [ 144.542538][ T7378] loop3: detected capacity change from 0 to 1 [ 144.551469][ T7378] Dev loop3: unable to read RDB block 1 [ 144.557112][ T7378] loop3: unable to read partition table [ 144.565553][ T7378] loop3: partition table beyond EOD, truncated [ 144.583042][ T7378] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 144.764586][ T7385] hpfs: Bad magic ... probably not HPFS [ 145.097183][ T7399] /dev/rnullb0: Can't open blockdev [ 145.264651][ T7402] loop3: detected capacity change from 0 to 1 [ 145.284306][ T7402] Dev loop3: unable to read RDB block 1 [ 145.298091][ T7402] loop3: unable to read partition table [ 145.304494][ T7402] loop3: partition table beyond EOD, truncated [ 145.314389][ T7402] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 145.322387][ T7406] exFAT-fs (rnullb0): invalid boot record signature [ 145.340396][ T7406] exFAT-fs (rnullb0): failed to read boot sector [ 145.348739][ T7406] exFAT-fs (rnullb0): failed to recognize exfat type [ 145.513867][ T7412] tmpfs: Unknown parameter 'q[j嬁øD [ 145.513867][ T7412] ' [ 145.634367][ T7419] /dev/rnullb0: Can't open blockdev [ 145.879233][ T5908] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 145.964453][ T7423] netlink: 'syz.3.421': attribute type 10 has an invalid length. [ 146.012729][ T7423] team0: Port device team_slave_0 removed [ 146.031720][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.060752][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.074172][ T5908] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.109240][ T5908] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.120656][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.145928][ T7432] loop3: detected capacity change from 0 to 1 [ 146.152862][ T5908] usb 3-1: config 0 descriptor?? [ 146.157902][ T7432] Dev loop3: unable to read RDB block 1 [ 146.167391][ T7432] loop3: unable to read partition table [ 146.174465][ T7432] loop3: partition table beyond EOD, truncated [ 146.181614][ T7432] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 146.299967][ T3096] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 146.380293][ T43] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 146.460628][ T3096] usb 2-1: Using ep0 maxpacket: 32 [ 146.481790][ T3096] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 146.507345][ T3096] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 146.529446][ T3096] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 146.542757][ T3096] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 146.551925][ T3096] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.560317][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 146.574786][ T5908] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 146.586767][ T43] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 146.600079][ T3096] usb 2-1: config 0 descriptor?? [ 146.605199][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.626551][ T43] usb 1-1: Product: syz [ 146.631567][ T3096] hub 2-1:0.0: USB hub found [ 146.637500][ T5908] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 146.650262][ T43] usb 1-1: Manufacturer: syz [ 146.654902][ T43] usb 1-1: SerialNumber: syz [ 146.670937][ T43] usb 1-1: config 0 descriptor?? [ 146.759307][ T5929] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 146.820344][ T3096] hub 2-1:0.0: 2 ports detected [ 146.847347][ T3096] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 146.875540][ T3096] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 146.876501][ T10] usb 3-1: USB disconnect, device number 12 [ 146.924894][ T3096] usbhid 2-1:0.0: can't add hid device: -71 [ 146.929502][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 146.933168][ T3096] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 146.969410][ T5929] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 146.970364][ T3096] usb 2-1: USB disconnect, device number 6 [ 146.981671][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.022751][ T5929] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 147.054897][ T5929] usb 4-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 147.067023][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.089072][ T5929] usb 4-1: config 0 descriptor?? [ 147.089906][ T43] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 147.116088][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 147.127904][ T43] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 147.136747][ T43] usb 1-1: media controller created [ 147.194201][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.397256][ T5929] usb 4-1: string descriptor 0 read error: -71 [ 147.442753][ T5929] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 147.517074][ T5204] bcm5974 4-1:0.0: could not read from device [ 147.581676][ T5204] bcm5974 4-1:0.0: could not read from device [ 147.631951][ T5204] bcm5974 4-1:0.0: could not read from device [ 147.672644][ T5204] bcm5974 4-1:0.0: could not read from device [ 147.689408][ T5929] usb 4-1: USB disconnect, device number 8 [ 147.706069][ T5857] bcm5974 4-1:0.0: could not read from device [ 147.762122][ T5857] udevd[5857]: Error opening device "/dev/input/event4": No such file or directory [ 147.762414][ T43] zl10353_read_register: readreg error (reg=127, ret==0) [ 147.774445][ T5857] udevd[5857]: Unable to EVIOCGABS device "/dev/input/event4" [ 147.792103][ T5857] udevd[5857]: Unable to EVIOCGABS device "/dev/input/event4" [ 147.812189][ T5857] udevd[5857]: Unable to EVIOCGABS device "/dev/input/event4" [ 147.816247][ T43] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 147.830977][ T5857] udevd[5857]: Unable to EVIOCGABS device "/dev/input/event4" [ 147.868551][ T43] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 147.972031][ T7463] FAULT_INJECTION: forcing a failure. [ 147.972031][ T7463] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 147.996855][ T7464] /dev/rnullb0: Can't open blockdev [ 148.018280][ T7463] CPU: 0 UID: 0 PID: 7463 Comm: syz.2.432 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 148.018308][ T7463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.018318][ T7463] Call Trace: [ 148.018326][ T7463] [ 148.018334][ T7463] dump_stack_lvl+0x189/0x250 [ 148.018367][ T7463] ? __pfx____ratelimit+0x10/0x10 [ 148.018392][ T7463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.018418][ T7463] ? __pfx__printk+0x10/0x10 [ 148.018445][ T7463] ? __might_fault+0xb0/0x130 [ 148.018484][ T7463] should_fail_ex+0x414/0x560 [ 148.018520][ T7463] _copy_from_iter+0x1db/0x16f0 [ 148.018546][ T7463] ? __lock_acquire+0xab9/0xd20 [ 148.018578][ T7463] ? __pfx__copy_from_iter+0x10/0x10 [ 148.018607][ T7463] ? __lock_acquire+0xab9/0xd20 [ 148.018645][ T7463] tun_get_user+0x20f/0x3ce0 [ 148.018678][ T7463] ? aa_file_perm+0x13e/0x11b0 [ 148.018698][ T7463] ? aa_file_perm+0x13e/0x11b0 [ 148.018717][ T7463] ? aa_file_perm+0x3ed/0x11b0 [ 148.018738][ T7463] ? __pfx_tun_get_user+0x10/0x10 [ 148.018768][ T7463] ? __lock_acquire+0xab9/0xd20 [ 148.018796][ T7463] ? ref_tracker_alloc+0x318/0x460 [ 148.018812][ T7463] ? __lock_acquire+0xab9/0xd20 [ 148.018835][ T7463] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 148.018861][ T7463] ? tun_get+0x1c/0x2f0 [ 148.018887][ T7463] ? tun_get+0x1c/0x2f0 [ 148.018906][ T7463] ? tun_get+0x1c/0x2f0 [ 148.018937][ T7463] tun_chr_write_iter+0x113/0x200 [ 148.018961][ T7463] vfs_write+0x54b/0xa90 [ 148.018985][ T7463] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 148.019007][ T7463] ? __pfx_vfs_write+0x10/0x10 [ 148.019037][ T7463] ? __fget_files+0x2a/0x420 [ 148.019068][ T7463] ksys_write+0x145/0x250 [ 148.019090][ T7463] ? __pfx_ksys_write+0x10/0x10 [ 148.019106][ T7463] ? rcu_is_watching+0x15/0xb0 [ 148.019133][ T7463] ? do_syscall_64+0xbe/0x3b0 [ 148.019161][ T7463] do_syscall_64+0xfa/0x3b0 [ 148.019182][ T7463] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.019205][ T7463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.019223][ T7463] ? clear_bhb_loop+0x60/0xb0 [ 148.019246][ T7463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.019262][ T7463] RIP: 0033:0x7f547bb8e929 [ 148.019280][ T7463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.019295][ T7463] RSP: 002b:00007f54799f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 148.019315][ T7463] RAX: ffffffffffffffda RBX: 00007f547bdb5fa0 RCX: 00007f547bb8e929 [ 148.019328][ T7463] RDX: 000000000000004a RSI: 0000200000000640 RDI: 0000000000000003 [ 148.019339][ T7463] RBP: 00007f54799f6090 R08: 0000000000000000 R09: 0000000000000000 [ 148.019350][ T7463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.019361][ T7463] R13: 0000000000000000 R14: 00007f547bdb5fa0 R15: 00007ffde37588d8 [ 148.019391][ T7463] [ 148.297736][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.396100][ T7466] /dev/rnullb0: Can't open blockdev [ 148.979558][ T7476] team0: entered allmulticast mode [ 148.992697][ T7476] team_slave_0: entered allmulticast mode [ 149.008638][ T7476] team_slave_1: entered allmulticast mode [ 149.085928][ T43] usb 1-1: USB disconnect, device number 13 [ 149.108276][ T7476] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 149.261633][ T43] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 149.399278][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 149.529363][ T10] usb 3-1: device descriptor read/64, error -71 [ 149.745316][ T7492] tipc: Enabling of bearer rejected, failed to enable media [ 149.755464][ T7491] tipc: Enabling of bearer rejected, failed to enable media [ 149.789267][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 149.929342][ T10] usb 3-1: device descriptor read/64, error -71 [ 150.043130][ T10] usb usb3-port1: attempt power cycle [ 150.409751][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 150.450429][ T10] usb 3-1: device descriptor read/8, error -71 [ 150.583346][ T7512] /dev/rnullb0: Can't open blockdev [ 150.603569][ T7514] loop3: detected capacity change from 0 to 1 [ 150.627156][ T6832] Dev loop3: unable to read RDB block 1 [ 150.638033][ T6832] loop3: unable to read partition table [ 150.658114][ T6832] loop3: partition table beyond EOD, truncated [ 150.680495][ T7514] Dev loop3: unable to read RDB block 1 [ 150.686168][ T7514] loop3: unable to read partition table [ 150.699447][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 150.699754][ T7514] loop3: partition table beyond EOD, truncated [ 150.740039][ T10] usb 3-1: device descriptor read/8, error -71 [ 150.760372][ T7514] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 150.866267][ T10] usb usb3-port1: unable to enumerate USB device [ 150.978109][ T7521] loop3: detected capacity change from 0 to 1 [ 150.998396][ T7521] Dev loop3: unable to read RDB block 1 [ 151.011991][ T7521] loop3: unable to read partition table [ 151.024819][ T7521] loop3: partition table beyond EOD, truncated [ 151.043281][ T7521] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 151.286703][ T7524] /dev/rnullb0: Can't open blockdev [ 151.333171][ T7528] /dev/rnullb0: Can't open blockdev [ 151.413215][ T7532] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 151.420685][ T7532] /dev/rnullb0: Can't open blockdev [ 151.560153][ T7537] /dev/rnullb0: Can't open blockdev [ 151.748269][ T7542] loop3: detected capacity change from 0 to 1 [ 151.755885][ T7542] Dev loop3: unable to read RDB block 1 [ 151.773075][ T7542] loop3: unable to read partition table [ 151.779228][ T7542] loop3: partition table beyond EOD, truncated [ 151.793404][ T7542] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 152.179610][ T43] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 152.231938][ T7531] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 152.303778][ T7551] Can't find a SQUASHFS superblock on rnullb0 [ 152.352836][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.395959][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.423995][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 152.451076][ T43] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 152.466914][ T43] usb 4-1: New USB device strings: Mfr=16, Product=0, SerialNumber=0 [ 152.489297][ T43] usb 4-1: Manufacturer: syz [ 152.510478][ T43] usb 4-1: config 0 descriptor?? [ 152.643026][ T7560] vxfs: WRONG superblock magic 00000000 at 1 [ 152.660227][ T7560] vxfs: WRONG superblock magic 00000000 at 8 [ 152.666260][ T7560] vxfs: can't find superblock. [ 152.948631][ T43] kovaplus 0003:1E7D:2D50.0005: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 153.146237][ T7544] /dev/rnullb0: Can't open blockdev [ 153.158673][ T7572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.169585][ T7572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.217728][ T3096] usb 4-1: USB disconnect, device number 9 [ 153.350303][ T7576] loop3: detected capacity change from 0 to 1 [ 153.378506][ T7576] Dev loop3: unable to read RDB block 1 [ 153.389033][ T7576] loop3: unable to read partition table [ 153.398831][ T7576] loop3: partition table beyond EOD, truncated [ 153.414332][ T7576] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 153.429357][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 153.556815][ T7580] NILFS (rnullb0): couldn't find nilfs on the device [ 153.778380][ T7588] hfs: can't find a HFS filesystem on dev rnullb0 [ 153.790263][ T3096] hid-generic 0000:0000:0000.0006: item fetching failed at offset 0/1 [ 153.811720][ T3096] hid-generic 0000:0000:0000.0006: probe with driver hid-generic failed with error -22 [ 153.911763][ T7591] overlay: ./file0 is not a directory [ 154.112073][ T7593] gfs2: not a GFS2 filesystem [ 154.537423][ T7614] /dev/rnullb0: Can't open blockdev [ 154.790885][ T7616] /dev/rnullb0: Can't open blockdev [ 155.047686][ T7620] syz.3.484: attempt to access beyond end of device [ 155.047686][ T7620] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 155.129417][ T7620] vxfs: unable to read disk superblock at 1 [ 155.145833][ T7620] syz.3.484: attempt to access beyond end of device [ 155.145833][ T7620] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 155.220437][ T7620] vxfs: unable to read disk superblock at 8 [ 155.233568][ T7620] vxfs: can't find superblock. [ 155.287228][ T7623] Can't find a SQUASHFS superblock on rnullb0 [ 155.293967][ T7621] syz.3.484: attempt to access beyond end of device [ 155.293967][ T7621] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 155.325658][ T7621] vxfs: unable to read disk superblock at 1 [ 155.389598][ T7621] syz.3.484: attempt to access beyond end of device [ 155.389598][ T7621] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 155.429484][ T7621] vxfs: unable to read disk superblock at 8 [ 155.449840][ T7621] vxfs: can't find superblock. [ 155.725606][ T7637] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 155.740687][ T7637] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 155.896748][ T7642] loop3: detected capacity change from 0 to 1 [ 155.910293][ T7642] Dev loop3: unable to read RDB block 1 [ 155.926165][ T7642] loop3: unable to read partition table [ 155.938063][ T7642] loop3: partition table beyond EOD, truncated [ 155.968506][ T7642] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 156.299359][ T3096] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 156.481481][ T3096] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 156.490059][ T3096] usb 4-1: config 0 has no interface number 0 [ 156.496286][ T3096] usb 4-1: config 0 interface 29 has no altsetting 0 [ 156.522626][ T3096] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 156.535189][ T3096] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.549850][ T7658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.498'. [ 156.553948][ T3096] usb 4-1: Product: syz [ 156.579286][ T3096] usb 4-1: Manufacturer: syz [ 156.584109][ T3096] usb 4-1: SerialNumber: syz [ 156.596829][ T3096] usb 4-1: config 0 descriptor?? [ 156.834032][ T3096] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 156.891238][ T7662] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 156.919450][ T7662] UDF-fs: Scanning with blocksize 4096 failed [ 157.034659][ T3096] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 157.049539][ T3096] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 157.060666][ T3096] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 157.119990][ T3096] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -22 [ 157.190648][ T7667] hfs: can't find a HFS filesystem on dev rnullb0 [ 157.293029][ T5894] usb 4-1: USB disconnect, device number 10 [ 157.459453][ T7679] FAULT_INJECTION: forcing a failure. [ 157.459453][ T7679] name failslab, interval 1, probability 0, space 0, times 0 [ 157.499723][ T7679] CPU: 0 UID: 0 PID: 7679 Comm: syz.1.503 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 157.499752][ T7679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.499763][ T7679] Call Trace: [ 157.499770][ T7679] [ 157.499778][ T7679] dump_stack_lvl+0x189/0x250 [ 157.499819][ T7679] ? __pfx____ratelimit+0x10/0x10 [ 157.499845][ T7679] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.499870][ T7679] ? __pfx__printk+0x10/0x10 [ 157.499895][ T7679] ? __pfx___might_resched+0x10/0x10 [ 157.499915][ T7679] ? fs_reclaim_acquire+0x7d/0x100 [ 157.499937][ T7679] should_fail_ex+0x414/0x560 [ 157.499968][ T7679] should_failslab+0xa8/0x100 [ 157.499986][ T7679] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 157.500012][ T7679] ? dup_task_struct+0x52/0x860 [ 157.500038][ T7679] dup_task_struct+0x52/0x860 [ 157.500059][ T7679] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.500084][ T7679] copy_process+0x544/0x3b80 [ 157.500139][ T7679] ? __pfx_copy_process+0x10/0x10 [ 157.500173][ T7679] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 157.500198][ T7679] vhost_task_create+0x1c4/0x290 [ 157.500223][ T7679] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 157.500248][ T7679] ? __pfx_vhost_task_create+0x10/0x10 [ 157.500280][ T7679] ? __pfx_vhost_task_fn+0x10/0x10 [ 157.500315][ T7679] ? kasan_save_track+0x4f/0x80 [ 157.500336][ T7679] ? kasan_save_track+0x3e/0x80 [ 157.500365][ T7679] kvm_mmu_post_init_vm+0x147/0x2b0 [ 157.500390][ T7679] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 157.500427][ T7679] ? __mutex_trylock_common+0x153/0x260 [ 157.500455][ T7679] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 157.500487][ T7679] ? rcu_is_watching+0x15/0xb0 [ 157.500509][ T7679] ? look_up_lock_class+0x74/0x170 [ 157.500533][ T7679] ? register_lock_class+0x51/0x320 [ 157.500559][ T7679] ? __lock_acquire+0xab9/0xd20 [ 157.500612][ T7679] kvm_vcpu_ioctl+0x95c/0xe90 [ 157.500649][ T7679] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 157.500672][ T7679] ? __lock_acquire+0xab9/0xd20 [ 157.500716][ T7679] ? __fget_files+0x2a/0x420 [ 157.500748][ T7679] ? __fget_files+0x2a/0x420 [ 157.500765][ T7679] ? __fget_files+0x3a0/0x420 [ 157.500784][ T7679] ? __fget_files+0x2a/0x420 [ 157.500817][ T7679] ? bpf_lsm_file_ioctl+0x9/0x20 [ 157.500842][ T7679] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 157.500865][ T7679] __se_sys_ioctl+0xfc/0x170 [ 157.500894][ T7679] do_syscall_64+0xfa/0x3b0 [ 157.500917][ T7679] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.500939][ T7679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.500956][ T7679] ? clear_bhb_loop+0x60/0xb0 [ 157.500979][ T7679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.500995][ T7679] RIP: 0033:0x7fd20658e929 [ 157.501013][ T7679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.501026][ T7679] RSP: 002b:00007fd2074d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.501046][ T7679] RAX: ffffffffffffffda RBX: 00007fd2067b5fa0 RCX: 00007fd20658e929 [ 157.501059][ T7679] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 157.501070][ T7679] RBP: 00007fd2074d4090 R08: 0000000000000000 R09: 0000000000000000 [ 157.501080][ T7679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.501091][ T7679] R13: 0000000000000000 R14: 00007fd2067b5fa0 R15: 00007ffdf162e298 [ 157.501120][ T7679] [ 157.527024][ T7683] loop3: detected capacity change from 0 to 1 [ 157.863303][ T6832] Dev loop3: unable to read RDB block 1 [ 157.868983][ T6832] loop3: unable to read partition table [ 157.876643][ T6832] loop3: partition table beyond EOD, truncated [ 157.898572][ T7683] Dev loop3: unable to read RDB block 1 [ 157.904448][ T7683] loop3: unable to read partition table [ 157.916016][ T7683] loop3: partition table beyond EOD, truncated [ 157.927056][ T7683] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 158.155682][ T7696] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 158.172448][ T7696] Error validating options; rc = [-22] [ 158.288071][ T5848] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 158.341751][ T7702] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 158.359413][ T3096] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 158.359769][ T7702] VFS: Can't find a romfs filesystem on dev rnullb0. [ 158.359769][ T7702] [ 158.521222][ T3096] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 158.534715][ T3096] usb 3-1: config 0 has no interface number 1 [ 158.552036][ T3096] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 158.564417][ T3096] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 158.577684][ T3096] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 158.590784][ T3096] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 158.595968][ T7708] FAULT_INJECTION: forcing a failure. [ 158.595968][ T7708] name failslab, interval 1, probability 0, space 0, times 0 [ 158.598809][ T3096] usb 3-1: SerialNumber: syz [ 158.616410][ T7708] CPU: 1 UID: 0 PID: 7708 Comm: syz.1.515 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 158.616435][ T7708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.616445][ T7708] Call Trace: [ 158.616454][ T7708] [ 158.616461][ T7708] dump_stack_lvl+0x189/0x250 [ 158.616494][ T7708] ? __pfx____ratelimit+0x10/0x10 [ 158.616518][ T7708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.616542][ T7708] ? __pfx__printk+0x10/0x10 [ 158.616582][ T7708] ? __pfx___might_resched+0x10/0x10 [ 158.616610][ T7708] should_fail_ex+0x414/0x560 [ 158.616642][ T7708] should_failslab+0xa8/0x100 [ 158.616663][ T7708] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 158.616689][ T7708] ? __get_vm_area_node+0x13f/0x300 [ 158.616718][ T7708] __get_vm_area_node+0x13f/0x300 [ 158.616748][ T7708] __vmalloc_node_range_noprof+0x301/0x12f0 [ 158.616766][ T7708] ? copy_process+0x544/0x3b80 [ 158.616800][ T7708] ? percpu_ref_get_many+0x19/0x140 [ 158.616818][ T7708] ? percpu_ref_get_many+0x19/0x140 [ 158.616850][ T7708] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 158.616870][ T7708] ? memcpy_and_pad+0x48/0x80 [ 158.616891][ T7708] __vmalloc_node_noprof+0xc2/0x110 [ 158.616906][ T7708] ? copy_process+0x544/0x3b80 [ 158.616924][ T7708] ? copy_process+0x544/0x3b80 [ 158.616950][ T7708] dup_task_struct+0x3e7/0x860 [ 158.616979][ T7708] copy_process+0x544/0x3b80 [ 158.617033][ T7708] ? __pfx_copy_process+0x10/0x10 [ 158.617071][ T7708] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 158.617098][ T7708] vhost_task_create+0x1c4/0x290 [ 158.617125][ T7708] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 158.617151][ T7708] ? __pfx_vhost_task_create+0x10/0x10 [ 158.617184][ T7708] ? __pfx_vhost_task_fn+0x10/0x10 [ 158.617220][ T7708] ? kasan_save_track+0x4f/0x80 [ 158.617241][ T7708] ? kasan_save_track+0x3e/0x80 [ 158.617269][ T7708] kvm_mmu_post_init_vm+0x147/0x2b0 [ 158.617303][ T7708] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 158.617339][ T7708] ? __mutex_trylock_common+0x153/0x260 [ 158.617366][ T7708] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 158.617394][ T7708] ? rcu_is_watching+0x15/0xb0 [ 158.617417][ T7708] ? look_up_lock_class+0x74/0x170 [ 158.617444][ T7708] ? register_lock_class+0x51/0x320 [ 158.617470][ T7708] ? __lock_acquire+0xab9/0xd20 [ 158.617528][ T7708] kvm_vcpu_ioctl+0x95c/0xe90 [ 158.617652][ T7708] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 158.617677][ T7708] ? __lock_acquire+0xab9/0xd20 [ 158.617721][ T7708] ? __fget_files+0x2a/0x420 [ 158.617748][ T7708] ? __fget_files+0x2a/0x420 [ 158.617768][ T7708] ? __fget_files+0x3a0/0x420 [ 158.617788][ T7708] ? __fget_files+0x2a/0x420 [ 158.617810][ T7708] ? bpf_lsm_file_ioctl+0x9/0x20 [ 158.617834][ T7708] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 158.617861][ T7708] __se_sys_ioctl+0xfc/0x170 [ 158.617891][ T7708] do_syscall_64+0xfa/0x3b0 [ 158.617913][ T7708] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.617935][ T7708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.617951][ T7708] ? clear_bhb_loop+0x60/0xb0 [ 158.617973][ T7708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.617989][ T7708] RIP: 0033:0x7fd20658e929 [ 158.618007][ T7708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.618021][ T7708] RSP: 002b:00007fd2074d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.618041][ T7708] RAX: ffffffffffffffda RBX: 00007fd2067b5fa0 RCX: 00007fd20658e929 [ 158.618053][ T7708] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 158.618063][ T7708] RBP: 00007fd2074d4090 R08: 0000000000000000 R09: 0000000000000000 [ 158.618074][ T7708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.618083][ T7708] R13: 0000000000000000 R14: 00007fd2067b5fa0 R15: 00007ffdf162e298 [ 158.618114][ T7708] [ 158.618294][ T7708] syz.1.515: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 158.620178][ T7704] autofs: Bad value for 'fd' [ 158.632967][ T3096] usb 3-1: config 0 descriptor?? [ 158.679463][ T7708] ,cpuset=/,mems_allowed=0-1 [ 159.032484][ T7708] CPU: 0 UID: 0 PID: 7708 Comm: syz.1.515 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 159.032509][ T7708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.032519][ T7708] Call Trace: [ 159.032527][ T7708] [ 159.032534][ T7708] dump_stack_lvl+0x189/0x250 [ 159.032561][ T7708] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 159.032579][ T7708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.032599][ T7708] ? __pfx__printk+0x10/0x10 [ 159.032620][ T7708] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 159.032641][ T7708] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 159.032668][ T7708] warn_alloc+0x214/0x310 [ 159.032695][ T7708] ? __pfx_warn_alloc+0x10/0x10 [ 159.032715][ T7708] ? __get_vm_area_node+0x13f/0x300 [ 159.032745][ T7708] ? __get_vm_area_node+0x2b5/0x300 [ 159.032781][ T7708] __vmalloc_node_range_noprof+0x326/0x12f0 [ 159.032834][ T7708] ? percpu_ref_get_many+0x19/0x140 [ 159.032853][ T7708] ? percpu_ref_get_many+0x19/0x140 [ 159.032889][ T7708] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 159.032912][ T7708] ? memcpy_and_pad+0x48/0x80 [ 159.032933][ T7708] __vmalloc_node_noprof+0xc2/0x110 [ 159.032949][ T7708] ? copy_process+0x544/0x3b80 [ 159.032969][ T7708] ? copy_process+0x544/0x3b80 [ 159.032995][ T7708] dup_task_struct+0x3e7/0x860 [ 159.033023][ T7708] copy_process+0x544/0x3b80 [ 159.033076][ T7708] ? __pfx_copy_process+0x10/0x10 [ 159.033113][ T7708] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 159.033140][ T7708] vhost_task_create+0x1c4/0x290 [ 159.033167][ T7708] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 159.033196][ T7708] ? __pfx_vhost_task_create+0x10/0x10 [ 159.033232][ T7708] ? __pfx_vhost_task_fn+0x10/0x10 [ 159.033267][ T7708] ? kasan_save_track+0x4f/0x80 [ 159.033289][ T7708] ? kasan_save_track+0x3e/0x80 [ 159.033318][ T7708] kvm_mmu_post_init_vm+0x147/0x2b0 [ 159.033342][ T7708] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 159.033378][ T7708] ? __mutex_trylock_common+0x153/0x260 [ 159.033405][ T7708] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 159.033456][ T7708] ? rcu_is_watching+0x15/0xb0 [ 159.033477][ T7708] ? look_up_lock_class+0x74/0x170 [ 159.033505][ T7708] ? register_lock_class+0x51/0x320 [ 159.033532][ T7708] ? __lock_acquire+0xab9/0xd20 [ 159.033583][ T7708] kvm_vcpu_ioctl+0x95c/0xe90 [ 159.033616][ T7708] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 159.033639][ T7708] ? __lock_acquire+0xab9/0xd20 [ 159.033683][ T7708] ? __fget_files+0x2a/0x420 [ 159.033706][ T7708] ? __fget_files+0x2a/0x420 [ 159.033724][ T7708] ? __fget_files+0x3a0/0x420 [ 159.033741][ T7708] ? __fget_files+0x2a/0x420 [ 159.033765][ T7708] ? bpf_lsm_file_ioctl+0x9/0x20 [ 159.033797][ T7708] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 159.033819][ T7708] __se_sys_ioctl+0xfc/0x170 [ 159.033847][ T7708] do_syscall_64+0xfa/0x3b0 [ 159.033869][ T7708] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.033892][ T7708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.033910][ T7708] ? clear_bhb_loop+0x60/0xb0 [ 159.033932][ T7708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.033949][ T7708] RIP: 0033:0x7fd20658e929 [ 159.033967][ T7708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.033981][ T7708] RSP: 002b:00007fd2074d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.034000][ T7708] RAX: ffffffffffffffda RBX: 00007fd2067b5fa0 RCX: 00007fd20658e929 [ 159.034014][ T7708] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 159.034025][ T7708] RBP: 00007fd2074d4090 R08: 0000000000000000 R09: 0000000000000000 [ 159.034035][ T7708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.034045][ T7708] R13: 0000000000000000 R14: 00007fd2067b5fa0 R15: 00007ffdf162e298 [ 159.034077][ T7708] [ 159.034084][ T7708] Mem-Info: [ 159.369963][ T3096] usb 3-1: Found UVC 0.00 device (0002:0000) [ 159.379281][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 159.381416][ T7708] active_anon:5809 inactive_anon:0 isolated_anon:0 [ 159.381416][ T7708] active_file:10244 inactive_file:40899 isolated_file:0 [ 159.381416][ T7708] unevictable:780 dirty:251 writeback:0 [ 159.381416][ T7708] slab_reclaimable:10870 slab_unreclaimable:92151 [ 159.381416][ T7708] mapped:26244 shmem:1368 pagetables:1237 [ 159.381416][ T7708] sec_pagetables:0 bounce:0 [ 159.381416][ T7708] kernel_misc_reclaimable:0 [ 159.381416][ T7708] free:1321113 free_pcp:29166 free_cma:0 [ 159.481127][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.514266][ T7708] Node 0 active_anon:23336kB inactive_anon:0kB active_file:40924kB inactive_file:163396kB unevictable:1584kB isolated(anon):0kB isolated(file):0kB mapped:104924kB dirty:1004kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11448kB pagetables:4820kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 159.546373][ T3096] usb 3-1: No valid video chain found. [ 159.552151][ T10] usb 4-1: device descriptor read/64, error -71 [ 159.556516][ T3096] usb 3-1: USB disconnect, device number 17 [ 159.591499][ T7708] Node 1 active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 159.664540][ T7708] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 159.693423][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.710583][ T7708] lowmem_reserve[]: 0 2496 2497 2497 2497 [ 159.716574][ T7708] Node 0 DMA32 free:1387220kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23288kB inactive_anon:0kB active_file:40924kB inactive_file:158224kB unevictable:1584kB writepending:1004kB present:3129332kB managed:2556252kB mlocked:0kB bounce:0kB free_pcp:100784kB local_pcp:21804kB free_cma:0kB [ 159.749124][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.762650][ T7708] lowmem_reserve[]: 0 0 1 1 1 [ 159.767431][ T7708] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1076kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 159.768068][ T7725] loop3: detected capacity change from 0 to 1 [ 159.796321][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.803984][ T7708] lowmem_reserve[]: 0 0 0 0 0 [ 159.804042][ T7708] Node 1 Normal free:3885932kB boost:0kB min:55672kB low:69588kB high:83504kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16352kB local_pcp:9664kB free_cma:0kB [ 159.804940][ T7708] lowmem_reserve[]: 0 0 0 0 0 [ 159.804990][ T7708] Node 0 DMA: 0*4kB 0*8kB [ 159.817701][ T6832] Dev loop3: unable to read RDB block 1 [ 159.847535][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.869448][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 159.873930][ T6832] loop3: unable to read partition table [ 159.877171][ T7708] 0*16kB 0*32kB 0*64kB 0*128kB [ 159.883980][ T6832] loop3: partition table beyond EOD, [ 159.884030][ T7708] 0*256kB [ 159.891159][ T6832] truncated [ 159.905332][ T7708] 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 159.914127][ T7708] Node 0 DMA32: 1180*4kB (UME) 1079*8kB (UME) 672*16kB (UME) 584*32kB (UME) 312*64kB (UME) 49*128kB (UM) 29*256kB (UME) 10*512kB (UM) 7*1024kB (UME) 2*2048kB (UE) 316*4096kB (M) = 1387176kB [ 159.916557][ T7725] Dev loop3: unable to read RDB block 1 [ 159.936557][ T7708] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 159.939535][ T7725] loop3: unable to read partition table [ 159.951003][ T7708] Node 1 Normal: 219*4kB (UME) 52*8kB (UME) 44*16kB (UME) 121*32kB (UME) 32*64kB (UME) 3*128kB (UME) 3*256kB (ME) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3885932kB [ 159.960353][ T7725] loop3: partition table beyond EOD, truncated [ 159.976537][ T7708] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 159.994647][ T7725] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 159.996007][ T7708] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 160.017660][ T7708] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 160.027521][ T7708] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 160.047501][ T10] usb 4-1: device descriptor read/64, error -71 [ 160.069282][ T7708] 51482 total pagecache pages [ 160.074011][ T7708] 0 pages in swap cache [ 160.093912][ T7708] Free swap = 124996kB [ 160.098210][ T7708] Total swap = 124996kB [ 160.107892][ T7708] 2097051 pages RAM [ 160.112232][ T7708] 0 pages HighMem/MovableOnly [ 160.116954][ T7708] 426074 pages reserved [ 160.123323][ T7708] 0 pages cma reserved [ 160.159916][ T10] usb usb4-port1: attempt power cycle [ 160.386693][ T7736] syz.2.522: attempt to access beyond end of device [ 160.386693][ T7736] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 160.414868][ T7736] SQUASHFS error: Failed to read block 0x0: -5 [ 160.422539][ T7736] unable to read squashfs_super_block [ 160.442742][ T7738] Mount JFS Failure: -22 [ 160.503248][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 160.553195][ T10] usb 4-1: device descriptor read/8, error -71 [ 160.653301][ T7747] loop3: detected capacity change from 0 to 1 [ 160.662830][ T7747] Dev loop3: unable to read RDB block 1 [ 160.668848][ T7747] loop3: unable to read partition table [ 160.674430][ T7749] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 160.681079][ T7747] loop3: partition table beyond EOD, truncated [ 160.683522][ T7749] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 160.687698][ T7747] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 160.811824][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 160.823687][ T7752] sctp: [Deprecated]: syz.0.530 (pid 7752) Use of int in max_burst socket option. [ 160.823687][ T7752] Use struct sctp_assoc_value instead [ 160.840616][ T10] usb 4-1: device descriptor read/8, error -71 [ 160.849579][ T5908] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 160.970256][ T10] usb usb4-port1: unable to enumerate USB device [ 161.023050][ T5908] usb 3-1: config 0 has no interfaces? [ 161.023095][ T5908] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 161.023118][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.026585][ T5908] usb 3-1: config 0 descriptor?? [ 161.090181][ T7770] fuse: Bad value for 'fd' [ 161.235720][ T7745] netlink: 'syz.2.524': attribute type 27 has an invalid length. [ 161.345146][ T7779] /dev/rnullb0: Can't open blockdev [ 161.391828][ T7745] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.400930][ T7745] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.425408][ T7783] Mount JFS Failure: -22 [ 161.430763][ T7745] team0: left allmulticast mode [ 161.435802][ T7745] team_slave_0: left allmulticast mode [ 161.441919][ T7745] team_slave_1: left allmulticast mode [ 161.546392][ T7786] Mount JFS Failure: -22 [ 161.616723][ T7745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.657184][ T7745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.815079][ T78] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.839452][ T78] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.847858][ T78] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.852688][ T10] usb 3-1: USB disconnect, device number 18 [ 161.897132][ T78] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.929387][ T3096] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 162.078486][ T7797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.542'. [ 162.104155][ T7797] openvswitch: netlink: Flow actions attr not present in new flow. [ 162.116123][ T7799] netlink: 60 bytes leftover after parsing attributes in process `syz.0.542'. [ 162.124261][ T3096] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 162.125796][ T7800] netlink: 60 bytes leftover after parsing attributes in process `syz.0.542'. [ 162.145207][ T3096] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.149954][ T7797] netlink: 60 bytes leftover after parsing attributes in process `syz.0.542'. [ 162.163225][ T3096] usb 2-1: Product: syz [ 162.171843][ T3096] usb 2-1: Manufacturer: syz [ 162.176510][ T3096] usb 2-1: SerialNumber: syz [ 162.192619][ T7801] netlink: 20 bytes leftover after parsing attributes in process `syz.3.541'. [ 162.243342][ T3096] usb 2-1: config 0 descriptor?? [ 162.263780][ T3096] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 007 [ 162.751619][ T3096] (null): failure reading functionality [ 162.788474][ T3096] i2c i2c-1: connected i2c-tiny-usb device [ 162.988288][ T7817] Mount JFS Failure: -22 [ 163.371571][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 163.529386][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 163.538276][ T10] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 163.547177][ T10] usb 1-1: config 0 has no interface number 0 [ 163.553636][ T10] usb 1-1: config 0 interface 34 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.564766][ T10] usb 1-1: config 0 interface 34 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.575707][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 163.589543][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.589541][ T3096] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 163.611793][ T10] usb 1-1: config 0 descriptor?? [ 163.752013][ T3096] usb 4-1: unable to get BOS descriptor or descriptor too short [ 163.761974][ T3096] usb 4-1: not running at top speed; connect to a high speed hub [ 163.771745][ T3096] usb 4-1: config 2 has an invalid interface number: 59 but max is 0 [ 163.781773][ T3096] usb 4-1: config 2 has no interface number 0 [ 163.788493][ T3096] usb 4-1: config 2 interface 59 has no altsetting 0 [ 163.798267][ T3096] usb 4-1: New USB device found, idVendor=06cd, idProduct=0102, bcdDevice=50.1e [ 163.807638][ T3096] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.815754][ T3096] usb 4-1: Product: syz [ 163.822556][ T3096] usb 4-1: Manufacturer: syz [ 163.827672][ T3096] usb 4-1: SerialNumber: syz [ 163.858546][ T10] usbhid 1-1:0.34: can't add hid device: -71 [ 163.879651][ T10] usbhid 1-1:0.34: probe with driver usbhid failed with error -71 [ 163.902597][ T10] usb 1-1: USB disconnect, device number 14 [ 164.228376][ T5848] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 164.461673][ T7856] netlink: 36 bytes leftover after parsing attributes in process `syz.2.559'. [ 164.471615][ T7856] netlink: 16 bytes leftover after parsing attributes in process `syz.2.559'. [ 164.481923][ T7856] netlink: 36 bytes leftover after parsing attributes in process `syz.2.559'. [ 164.495671][ T7856] netlink: 36 bytes leftover after parsing attributes in process `syz.2.559'. [ 164.509842][ T7856] /dev/rnullb0: Can't open blockdev [ 164.689943][ T5907] usb 2-1: USB disconnect, device number 7 [ 164.995434][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.562'. [ 165.030987][ T7864] /dev/rnullb0: Can't open blockdev [ 165.728727][ T7881] Sensor A: ================= START STATUS ================= [ 165.738292][ T7881] Sensor A: Test Pattern: 75% Colorbar [ 165.751344][ T7881] Sensor A: Show Information: All [ 165.756583][ T7881] Sensor A: Vertical Flip: false [ 165.763625][ T7881] Sensor A: Horizontal Flip: false [ 165.768999][ T7881] Sensor A: Brightness: 255 [ 165.777088][ T7881] Sensor A: Contrast: 128 [ 165.784829][ T7881] Sensor A: Hue: 0 [ 165.794588][ T7881] Sensor A: Saturation: 128 [ 165.807801][ T7881] Sensor A: ================== END STATUS ================== [ 166.118360][ T7892] netlink: 'syz.2.572': attribute type 1 has an invalid length. [ 166.148856][ T7888] comedi comedi1: Minor -2147450880 is invalid! [ 166.172091][ T30] audit: type=1326 audit(1752179247.446:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.0.573" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2019d8e929 code=0x0 [ 166.335943][ T3096] keyspan 4-1:2.59: Keyspan - (without firmware) converter detected [ 166.351471][ T3096] usb 4-1: USB disconnect, device number 15 [ 166.370451][ T3096] keyspan 4-1:2.59: device disconnected [ 166.459343][ T5908] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 166.569941][ T7906] FAT-fs (rnullb0): bogus number of reserved sectors [ 166.576807][ T7906] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 166.624883][ T5908] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 166.649297][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.676791][ T5908] usb 3-1: config 0 descriptor?? [ 166.957726][ T7919] netlink: 'syz.1.581': attribute type 39 has an invalid length. [ 166.969194][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 166.970097][ T7919] lo: entered promiscuous mode [ 167.060662][ T7921] loop3: detected capacity change from 0 to 1 [ 167.068085][ T7921] Dev loop3: unable to read RDB block 1 [ 167.076274][ T7921] loop3: unable to read partition table [ 167.082614][ T7921] loop3: partition table beyond EOD, truncated [ 167.089003][ T7921] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 167.130406][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 167.158446][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 167.180343][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.196159][ T10] usb 4-1: Product: syz [ 167.209210][ T10] usb 4-1: Manufacturer: syz [ 167.220619][ T10] usb 4-1: SerialNumber: syz [ 167.231195][ T10] usb 4-1: config 0 descriptor?? [ 167.239566][ T5894] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 167.300373][ T5908] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 167.313969][ T5908] asix 3-1:0.0: probe with driver asix failed with error -71 [ 167.330915][ T5908] usb 3-1: USB disconnect, device number 19 [ 167.431945][ T5894] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.439393][ T5907] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 167.444664][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 167.458723][ T5894] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.472111][ T5894] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 167.481761][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 167.489922][ T5894] usb 2-1: SerialNumber: syz [ 167.611975][ T5907] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 167.622498][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.633818][ T5907] usb 1-1: config 0 descriptor?? [ 167.644531][ T5907] cp210x 1-1:0.0: cp210x converter detected [ 167.711334][ T5894] usb 2-1: 0:2 : does not exist [ 167.716364][ T5894] usb 2-1: unit 5 not found! [ 167.741431][ T5894] usb 2-1: USB disconnect, device number 8 [ 167.788116][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.873465][ T5907] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 167.889620][ T5907] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 167.919258][ T5907] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 167.962620][ T5907] usb 1-1: cp210x converter now attached to ttyUSB0 [ 168.005254][ T5907] usb 1-1: USB disconnect, device number 15 [ 168.030593][ T5907] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 168.055807][ T5907] cp210x 1-1:0.0: device disconnected [ 168.164366][ T5848] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 168.167785][ T5848] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 168.468549][ T7948] Mount JFS Failure: -22 [ 168.564353][ T7950] loop3: detected capacity change from 0 to 1 [ 168.572055][ T7950] Dev loop3: unable to read RDB block 1 [ 168.577773][ T7950] loop3: unable to read partition table [ 168.587405][ T7950] loop3: partition table beyond EOD, truncated [ 168.597925][ T7950] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 168.798170][ T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 168.825450][ T10] usb 4-1: USB disconnect, device number 16 [ 168.861994][ T7962] /dev/rnullb0: Can't open blockdev [ 169.006861][ T7967] 9pnet_fd: Insufficient options for proto=fd [ 169.016817][ T7967] /dev/rnullb0: Can't open blockdev [ 169.217050][ T7976] netlink: 'syz.0.600': attribute type 27 has an invalid length. [ 169.329297][ T5929] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 169.453168][ T7983] loop3: detected capacity change from 0 to 1 [ 169.469456][ T5929] usb 2-1: device descriptor read/64, error -71 [ 169.487180][ T7983] Dev loop3: unable to read RDB block 1 [ 169.515592][ T7983] loop3: unable to read partition table [ 169.538799][ T7983] loop3: partition table beyond EOD, truncated [ 169.579406][ T7983] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 169.759281][ T5929] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 169.899247][ T5929] usb 2-1: device descriptor read/64, error -71 [ 170.019720][ T5929] usb usb2-port1: attempt power cycle [ 170.369276][ T5929] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 170.410753][ T5929] usb 2-1: device descriptor read/8, error -71 [ 170.449503][ T5907] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 170.620291][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 170.633869][ T5907] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 170.653342][ T5929] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 170.656259][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.694022][ T5907] usb 3-1: config 0 descriptor?? [ 170.703602][ T5907] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 170.713372][ T5929] usb 2-1: device descriptor read/8, error -71 [ 170.854924][ T5929] usb usb2-port1: unable to enumerate USB device [ 171.068980][ T8007] loop3: detected capacity change from 0 to 1 [ 171.080879][ T6832] Dev loop3: unable to read RDB block 1 [ 171.095058][ T6832] loop3: unable to read partition table [ 171.101819][ T6832] loop3: partition table beyond EOD, truncated [ 171.109089][ T8007] Dev loop3: unable to read RDB block 1 [ 171.115375][ T8007] loop3: unable to read partition table [ 171.125912][ T8007] loop3: partition table beyond EOD, truncated [ 171.135337][ T8007] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 172.553090][ T8034] /dev/rnullb0: Can't open blockdev [ 172.635718][ T8035] netlink: 'syz.3.620': attribute type 10 has an invalid length. [ 172.648884][ T8035] __nla_validate_parse: 1 callbacks suppressed [ 172.648903][ T8035] netlink: 40 bytes leftover after parsing attributes in process `syz.3.620'. [ 172.696489][ T8035] team0: Port device geneve0 added [ 173.826731][ T8050] Mount JFS Failure: -22 [ 174.010385][ T8061] netlink: 'syz.0.630': attribute type 38 has an invalid length. [ 174.019442][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'. [ 174.420619][ T7995] /dev/rnullb0: Can't open blockdev [ 174.451847][ T5907] gspca_vc032x: reg_r err -71 [ 174.456789][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.468352][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.487528][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.493639][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.507629][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.518645][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.542718][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.553079][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.558564][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.566920][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.574068][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.584914][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.592117][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.600925][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.609539][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.615697][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.624295][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.630076][ T5907] gspca_vc032x: Unknown sensor... [ 174.636807][ T5907] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 174.664497][ T5907] usb 3-1: USB disconnect, device number 20 [ 174.919701][ T8082] loop3: detected capacity change from 0 to 1 [ 174.928148][ T6832] Dev loop3: unable to read RDB block 1 [ 174.939879][ T6832] loop3: unable to read partition table [ 174.945937][ T6832] loop3: partition table beyond EOD, truncated [ 174.957969][ T8082] Dev loop3: unable to read RDB block 1 [ 174.968489][ T8082] loop3: unable to read partition table [ 174.973898][ T8084] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 174.993705][ T8082] loop3: partition table beyond EOD, truncated [ 175.022844][ T8086] /dev/rnullb0: Can't open blockdev [ 175.028198][ T8082] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 175.049791][ T5929] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 175.236512][ T8090] delete_channel: no stack [ 175.248258][ T8090] delete_channel: no stack [ 175.262949][ T8090] /dev/rnullb0: Can't open blockdev [ 175.409288][ T5907] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 175.559235][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 175.572403][ T5907] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 175.592426][ T5907] usb 3-1: config 0 has no interface number 0 [ 175.613079][ T5907] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 175.622312][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.639964][ T43] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 175.649093][ T5907] usb 3-1: Product: syz [ 175.653506][ T5907] usb 3-1: Manufacturer: syz [ 175.671913][ T5907] usb 3-1: SerialNumber: syz [ 175.682657][ T5907] usb 3-1: config 0 descriptor?? [ 175.698406][ T5907] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 175.719347][ T5907] usb 3-1: selecting invalid altsetting 1 [ 175.725149][ T5907] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 175.753144][ T5907] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 175.779752][ T5907] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 175.788094][ T5907] usb 3-1: media controller created [ 175.841582][ T43] usb 1-1: config index 0 descriptor too short (expected 65069, got 45) [ 175.850478][ T43] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 175.867010][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.889203][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.904841][ T8088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.924684][ T43] usb 1-1: config 0 has no interfaces? [ 175.927633][ T8088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.942700][ T43] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 175.955463][ T8096] /dev/rnullb0: Can't open blockdev [ 175.972196][ T5907] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 175.979658][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.000572][ T5907] zl10353_read_register: readreg error (reg=127, ret==-71) [ 176.010568][ T43] usb 1-1: config 0 descriptor?? [ 176.015875][ T5907] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 176.112927][ T5907] usb 3-1: USB disconnect, device number 21 [ 176.223315][ T8098] /dev/rnullb0: Can't open blockdev [ 176.257667][ T10] usb 1-1: USB disconnect, device number 16 [ 176.934195][ T8107] loop3: detected capacity change from 0 to 1 [ 176.946964][ T8107] Dev loop3: unable to read RDB block 1 [ 176.965576][ T8107] loop3: unable to read partition table [ 176.984317][ T8107] loop3: partition table beyond EOD, truncated [ 177.010955][ T8107] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 177.051620][ T8112] /dev/rnullb0: Can't open blockdev [ 177.430367][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.654'. [ 177.450382][ T8124] /dev/rnullb0: Can't open blockdev [ 177.618993][ T8128] /dev/rnullb0: Can't open blockdev [ 177.757881][ T8132] Bluetooth: MGMT ver 1.23 [ 177.784495][ T8133] /dev/rnullb0: Can't open blockdev [ 177.789511][ T5894] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 177.999374][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 178.007300][ T5894] usb 1-1: unable to get BOS descriptor or descriptor too short [ 178.065407][ T5894] usb 1-1: config 6 has an invalid interface number: 253 but max is 0 [ 178.074284][ T5894] usb 1-1: config 6 has no interface number 0 [ 178.086950][ T5894] usb 1-1: config 6 interface 253 has no altsetting 0 [ 178.104815][ T5894] usb 1-1: New USB device found, idVendor=0830, idProduct=0061, bcdDevice=23.a6 [ 178.128066][ T5894] usb 1-1: New USB device strings: Mfr=3, Product=2, SerialNumber=3 [ 178.163699][ T5894] usb 1-1: Product: syz [ 178.168173][ T5894] usb 1-1: Manufacturer: syz [ 178.178298][ T5894] usb 1-1: SerialNumber: syz [ 178.236386][ T8139] qnx4: no qnx4 filesystem (no root dir). [ 178.240763][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 178.407405][ T8126] netlink: 15 bytes leftover after parsing attributes in process `syz.0.655'. [ 178.434090][ T8126] netlink: 15 bytes leftover after parsing attributes in process `syz.0.655'. [ 178.569693][ T8147] syz.1.665: attempt to access beyond end of device [ 178.569693][ T8147] loop1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 178.582723][ T8147] qnx4: unable to read the superblock [ 178.677577][ T8126] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 178.685454][ T8126] UDF-fs: Scanning with blocksize 4096 failed [ 178.709570][ T5894] usb 1-1: active config #6 != 1 ?? [ 178.720285][ T8148] mmap: syz.1.666 (8148): VmData 37597184 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data. [ 178.731695][ T5894] usb 1-1: USB disconnect, device number 17 [ 178.951146][ T8151] exFAT-fs (rnullb0): invalid boot record signature [ 178.959483][ T8151] exFAT-fs (rnullb0): failed to read boot sector [ 178.966521][ T8151] exFAT-fs (rnullb0): failed to recognize exfat type [ 178.991589][ T8154] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 179.142960][ T8162] comedi comedi1: Minor -2147450880 is invalid! [ 179.357917][ T8173] Mount JFS Failure: -22 [ 179.364206][ T8173] jfs_mount failed w/return code = -22 [ 179.839313][ T5929] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 179.850174][ T8199] comedi comedi1: Minor -2147450880 is invalid! [ 179.926317][ T8203] NILFS (rnullb0): couldn't find nilfs on the device [ 180.004878][ T5929] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 180.019565][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.037833][ T5929] usb 2-1: Product: syz [ 180.047724][ T5929] usb 2-1: Manufacturer: syz [ 180.053089][ T5929] usb 2-1: SerialNumber: syz [ 180.063939][ T5929] usb 2-1: config 0 descriptor?? [ 180.082210][ T5929] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 180.230739][ T8210] XFS (rnullb0): Invalid superblock magic number [ 180.299563][ T5169] Bluetooth: hci4: command 0x1003 tx timeout [ 180.306082][ T5848] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 180.472670][ T8221] sctp: [Deprecated]: syz.3.690 (pid 8221) Use of int in maxseg socket option. [ 180.472670][ T8221] Use struct sctp_assoc_value instead [ 180.491912][ T8221] netlink: 48 bytes leftover after parsing attributes in process `syz.3.690'. [ 180.512477][ T8221] netlink: 228 bytes leftover after parsing attributes in process `syz.3.690'. [ 180.559920][ T8222] hfs: can't find a HFS filesystem on dev nullb0 [ 180.597312][ T8224] loop3: detected capacity change from 0 to 1 [ 180.609935][ T5850] Dev loop3: unable to read RDB block 1 [ 180.615582][ T5850] loop3: unable to read partition table [ 180.627248][ T5850] loop3: partition table beyond EOD, truncated [ 180.634699][ T8224] Dev loop3: unable to read RDB block 1 [ 180.646529][ T8224] loop3: unable to read partition table [ 180.653166][ T8224] loop3: partition table beyond EOD, truncated [ 180.669888][ T8224] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 180.716001][ T8226] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.801130][ T5929] gspca_sunplus: reg_w_riv err -110 [ 180.806585][ T5929] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 181.007301][ T8226] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.052224][ T8231] syzkaller1: entered promiscuous mode [ 181.060530][ T8231] syzkaller1: entered allmulticast mode [ 181.108640][ T8226] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.212947][ T8226] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.310561][ T5929] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 181.382403][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.436362][ T729] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.451132][ T5929] usb 3-1: device descriptor read/64, error -71 [ 181.530536][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.538760][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.699565][ T5929] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 181.829246][ T5929] usb 3-1: device descriptor read/64, error -71 [ 181.864438][ T8241] /dev/rnullb0: Can't open blockdev [ 181.940043][ T5929] usb usb3-port1: attempt power cycle [ 182.109379][ T981] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 182.239579][ T981] usb 1-1: device descriptor read/64, error -71 [ 182.279301][ T5929] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 182.303688][ T5929] usb 3-1: device descriptor read/8, error -71 [ 182.479279][ T981] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 182.549462][ T5929] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 182.569971][ T5929] usb 3-1: device descriptor read/8, error -71 [ 182.606764][ T10] usb 2-1: USB disconnect, device number 13 [ 182.612800][ T981] usb 1-1: device descriptor read/64, error -71 [ 182.679890][ T5929] usb usb3-port1: unable to enumerate USB device [ 182.731354][ T981] usb usb1-port1: attempt power cycle [ 183.069247][ T981] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 183.093145][ T981] usb 1-1: device descriptor read/8, error -71 [ 183.339750][ T981] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 183.367915][ T8249] /dev/rnullb0: Can't open blockdev [ 183.369943][ T981] usb 1-1: device descriptor read/8, error -71 [ 183.491264][ T981] usb usb1-port1: unable to enumerate USB device [ 183.629432][ T5907] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 183.783229][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.794358][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.806303][ T5907] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 183.815487][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.827056][ T5907] usb 2-1: config 0 descriptor?? [ 184.250611][ T5907] isku 0003:1E7D:319C.0007: unknown main item tag 0x0 [ 184.263428][ T5907] isku 0003:1E7D:319C.0007: unknown main item tag 0x0 [ 184.274631][ T5907] isku 0003:1E7D:319C.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 184.639253][ T3096] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 184.653932][ T5907] usb 2-1: USB disconnect, device number 14 [ 184.799292][ T3096] usb 3-1: Using ep0 maxpacket: 32 [ 184.806351][ T3096] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 184.820031][ T3096] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 184.831902][ T3096] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 184.843453][ T3096] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 184.852591][ T3096] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.869360][ T3096] usb 3-1: config 0 descriptor?? [ 184.876631][ T8255] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 184.888591][ T3096] hub 3-1:0.0: USB hub found [ 185.114120][ T3096] hub 3-1:0.0: 2 ports detected [ 185.820319][ T43] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 185.857219][ T43] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 186.816629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 186.825713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 187.368527][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.716'. [ 187.390180][ T8307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.838969][ T3096] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 187.943120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 188.242148][ T5907] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 188.308587][ T3096] usb 3-1: reset high-speed USB device number 26 using dummy_hcd [ 188.484943][ T5907] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 188.509522][ T5907] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 188.596077][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.640301][ T8317] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 188.672421][ T5907] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 188.982856][ T5848] Bluetooth: hci1: unexpected event for opcode 0x200d [ 189.103313][ T3096] hub 3-1:0.0: set hub depth failed [ 189.111182][ T43] usb 3-1: USB disconnect, device number 26 [ 189.219884][ T8332] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 189.544512][ T8334] kvm: MONITOR instruction emulated as NOP! [ 189.823766][ T5848] Bluetooth: hci1: unexpected event for opcode 0x200c [ 190.192144][ T8344] comedi comedi1: pcl812: I/O port conflict (0x42f00,16) [ 190.418481][ T3096] usb 4-1: USB disconnect, device number 18 [ 190.659558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 190.679954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 190.707996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 190.739716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 190.750403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 190.760583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 190.783108][ T8361] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 190.790021][ T8361] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 190.798213][ T8361] vhci_hcd vhci_hcd.0: Device attached [ 190.808550][ T8363] 9pnet_fd: Insufficient options for proto=fd [ 190.840802][ T8362] vhci_hcd: connection closed [ 190.843853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 190.867043][ T13] vhci_hcd: stop threads [ 190.930405][ T13] vhci_hcd: release socket [ 190.989008][ T13] vhci_hcd: disconnect device [ 192.121127][ T8367] loop7: detected capacity change from 0 to 16384 [ 192.250221][ T8367] I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 3 [ 192.269859][ T8367] I/O error, dev loop7, sector 3328 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 3 [ 192.321628][ T8367] I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 192.344009][ T8367] Buffer I/O error on dev loop7, logical block 384, async page read [ 192.419544][ T8367] I/O error, dev loop7, sector 3080 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 192.432859][ T8367] Buffer I/O error on dev loop7, logical block 385, async page read [ 192.441960][ T8367] I/O error, dev loop7, sector 3088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 192.460722][ T8367] Buffer I/O error on dev loop7, logical block 386, async page read [ 192.472232][ T8367] I/O error, dev loop7, sector 3096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 192.534694][ T8367] Buffer I/O error on dev loop7, logical block 387, async page read [ 192.605993][ T8367] I/O error, dev loop7, sector 3104 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 192.667925][ T8367] Buffer I/O error on dev loop7, logical block 388, async page read [ 192.710069][ T8367] I/O error, dev loop7, sector 3112 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 192.744399][ T8367] Buffer I/O error on dev loop7, logical block 389, async page read [ 192.761106][ T8367] I/O error, dev loop7, sector 3120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 192.778678][ T8367] Buffer I/O error on dev loop7, logical block 390, async page read [ 192.947211][ T8367] I/O error, dev loop7, sector 3128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 193.081344][ T8367] Buffer I/O error on dev loop7, logical block 391, async page read [ 193.224667][ T8367] Buffer I/O error on dev loop7, logical block 392, async page read [ 193.269026][ T8367] Buffer I/O error on dev loop7, logical block 393, async page read [ 193.909784][ T5848] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 193.918391][ T5848] Bluetooth: hci1: Injecting HCI hardware error event [ 193.930197][ T5169] Bluetooth: hci1: hardware error 0x00 [ 194.143763][ T5848] Bluetooth: hci0: unexpected event for opcode 0x0c03 [ 194.545491][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.557384][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.986133][ T5169] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 197.259879][ T43] IPVS: starting estimator thread 0... [ 197.384673][ T8449] IPVS: using max 28 ests per chain, 67200 per kthread [ 198.884220][ T8477] fuse: Bad value for 'fd' [ 199.077281][ T78] IPVS: stop unused estimator thread 0... [ 199.672808][ T5907] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 199.877898][ T5907] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 199.889678][ T5907] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.900324][ T5907] usb 3-1: config 0 interface 0 has no altsetting 0 [ 199.908403][ T5907] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 199.920965][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.935152][ T5907] usb 3-1: config 0 descriptor?? [ 200.352847][ T5907] hid-steam 0003:28DE:1102.0009: unknown main item tag 0x0 [ 200.360526][ T5907] hid-steam 0003:28DE:1102.0009: unknown main item tag 0x0 [ 200.370315][ T5907] hid-steam 0003:28DE:1102.0009: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 200.449643][ T5907] hid-steam 0003:28DE:1102.0009: Steam Controller 'XXXXXXXXXX' connected [ 200.461858][ T5907] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0009/input/input11 [ 200.521293][ T5907] hid-steam 0003:28DE:1102.000A: unknown main item tag 0x0 [ 200.537085][ T5907] hid-steam 0003:28DE:1102.000A: unknown main item tag 0x0 [ 200.574963][ T5907] hid-steam 0003:28DE:1102.000A: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 200.617908][ T5907] usb 3-1: USB disconnect, device number 27 [ 200.661816][ T5907] hid-steam 0003:28DE:1102.0009: Steam Controller 'XXXXXXXXXX' disconnected [ 200.678554][ T8506] fido_id[8506]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 201.138544][ T5169] Bluetooth: hci0: unexpected event for opcode 0x0405 [ 201.431721][ T8515] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 201.634703][ T8529] fuse: Bad value for 'fd' [ 202.120364][ T8519] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 202.131445][ T8519] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 202.137696][ T8519] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 202.871998][ T8567] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 204.249232][ T5169] Bluetooth: hci3: command 0x0c1a tx timeout [ 204.249301][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 204.910107][ T8599] kvm: pic: non byte read [ 204.914778][ T8599] kvm: pic: non byte read [ 204.946305][ T8599] kvm: pic: non byte read [ 204.956549][ T8599] kvm: pic: level sensitive irq not supported [ 204.956666][ T8599] kvm: pic: non byte read [ 204.981965][ T8599] kvm: pic: non byte read [ 204.986662][ T8599] kvm: pic: non byte read [ 205.006146][ T8599] kvm: pic: non byte read [ 205.035930][ T8605] process 'syz.2.812' launched '/dev/fd/3' with NULL argv: empty string added [ 205.871741][ T8636] loop3: detected capacity change from 0 to 1 [ 205.885299][ T8636] Dev loop3: unable to read RDB block 1 [ 205.899504][ T8636] loop3: unable to read partition table [ 205.911711][ T8636] loop3: partition table beyond EOD, truncated [ 205.928342][ T8636] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 206.045267][ T8640] loop3: detected capacity change from 0 to 1 [ 206.055592][ T8640] Dev loop3: unable to read RDB block 1 [ 206.072334][ T8640] loop3: unable to read partition table [ 206.078765][ T8640] loop3: partition table beyond EOD, truncated [ 206.091699][ T8640] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 206.537974][ T8659] /dev/nullb0: Can't open blockdev [ 206.687484][ T8667] loop3: detected capacity change from 0 to 1 [ 206.704712][ T8667] Dev loop3: unable to read RDB block 1 [ 206.714478][ T8667] loop3: unable to read partition table [ 206.723143][ T8667] loop3: partition table beyond EOD, truncated [ 206.735145][ T8667] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 206.945508][ T8674] loop3: detected capacity change from 0 to 1 [ 206.953887][ T8674] Dev loop3: unable to read RDB block 1 [ 206.973809][ T8674] loop3: unable to read partition table [ 206.985464][ T8674] loop3: partition table beyond EOD, truncated [ 206.996279][ T8674] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 207.160926][ T5907] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 207.331484][ T5907] usb 4-1: Using ep0 maxpacket: 8 [ 207.346141][ T5907] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 207.355706][ T5907] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.366166][ T5907] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 207.377114][ T5907] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 207.387572][ T5907] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.406643][ T5907] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 207.416325][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.545228][ T8695] gfs2: gfs2 mount does not exist [ 207.638247][ T5907] usb 4-1: usb_control_msg returned -32 [ 207.647651][ T5907] usbtmc 4-1:16.0: can't read capabilities [ 207.665644][ T30] audit: type=1400 audit(1752179288.936:6): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=8696 comm="syz.2.845" [ 207.899259][ T5929] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 208.073496][ T8700] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 208.081342][ T5929] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 208.099249][ T5929] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.121892][ T5929] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 208.137983][ T5929] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.162924][ T5929] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 208.179286][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 208.188029][ T5929] usb 3-1: Product: syz [ 208.192711][ T5929] usb 3-1: Manufacturer: syz [ 208.227425][ T5929] cdc_wdm 3-1:1.0: skipping garbage [ 208.239206][ T5929] cdc_wdm 3-1:1.0: skipping garbage [ 208.253250][ T5929] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 208.268055][ T5929] cdc_wdm 3-1:1.0: Unknown control protocol [ 208.281918][ T8670] /dev/rnullb0: Can't open blockdev [ 208.306438][ T3096] usb 4-1: USB disconnect, device number 19 [ 208.408522][ T8697] netlink: 184 bytes leftover after parsing attributes in process `syz.2.845'. [ 208.434573][ T8697] xt_socket: unknown flags 0xd0 [ 208.443832][ T8697] syz.2.845: attempt to access beyond end of device [ 208.443832][ T8697] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 208.460659][ T8697] gfs2: error -5 reading superblock [ 208.503033][ T5907] usb 3-1: USB disconnect, device number 28 [ 208.668529][ T8713] netlink: 176 bytes leftover after parsing attributes in process `syz.1.850'. [ 209.231517][ T8727] /dev/rnullb0: Can't open blockdev [ 209.627625][ T8738] loop3: detected capacity change from 0 to 1 [ 209.657121][ T6832] Dev loop3: unable to read RDB block 1 [ 209.666693][ T6832] loop3: unable to read partition table [ 209.679751][ T6832] loop3: partition table beyond EOD, truncated [ 209.688878][ T8738] Dev loop3: unable to read RDB block 1 [ 209.698297][ T8738] loop3: unable to read partition table [ 209.714944][ T8738] loop3: partition table beyond EOD, truncated [ 209.733831][ T8738] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 210.480052][ T3096] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 210.524371][ T8772] kvm: kvm [8770]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xff [ 210.656547][ T3096] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 210.673098][ T3096] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 210.685898][ T3096] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 210.714064][ T3096] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.744909][ T3096] usb 2-1: config 0 descriptor?? [ 210.789982][ T8766] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 210.810730][ T3096] hub 2-1:0.0: USB hub found [ 211.025384][ T3096] hub 2-1:0.0: 2 ports detected [ 211.042006][ T8791] netlink: 'syz.0.873': attribute type 27 has an invalid length. [ 211.042063][ T8793] netlink: 'syz.0.873': attribute type 27 has an invalid length. [ 211.542510][ T5929] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 211.644659][ T8766] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 211.652262][ T8766] /dev/rnullb0: Can't open blockdev [ 211.675013][ T3096] usb 2-1: USB disconnect, device number 15 [ 211.714127][ T5929] usb 4-1: config 0 has an invalid interface number: 157 but max is 0 [ 211.733525][ T5929] usb 4-1: config 0 has no interface number 0 [ 211.747683][ T5929] usb 4-1: config 0 interface 157 has no altsetting 0 [ 211.765594][ T5929] usb 4-1: New USB device found, idVendor=2639, idProduct=0002, bcdDevice=3b.1d [ 211.778492][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.790769][ T5929] usb 4-1: config 0 descriptor?? [ 211.881812][ T8790] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/rnullb0": -EINTR [ 212.126974][ T3096] usb 4-1: USB disconnect, device number 20 [ 212.722955][ T8890] /dev/rnullb0: Can't open blockdev [ 212.915156][ T5907] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 212.980582][ T8904] /dev/rnullb0: Can't open blockdev [ 213.102559][ T5907] usb 2-1: config 0 has an invalid interface number: 175 but max is 0 [ 213.128081][ T5907] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.159550][ T5907] usb 2-1: config 0 has no interface number 0 [ 213.165993][ T5907] usb 2-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 213.185223][ T5907] usb 2-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 213.204652][ T5907] usb 2-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 213.215328][ T5907] usb 2-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 213.248992][ T5907] usb 2-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 213.259957][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.267997][ T5907] usb 2-1: Product: syz [ 213.273297][ T5907] usb 2-1: Manufacturer: syz [ 213.277984][ T5907] usb 2-1: SerialNumber: syz [ 213.287564][ T5907] usb 2-1: config 0 descriptor?? [ 213.298207][ T5907] symbolserial 2-1:0.175: symbol converter detected [ 213.310454][ T5907] usb 2-1: symbol converter now attached to ttyUSB0 [ 213.438234][ T8916] loop3: detected capacity change from 0 to 1 [ 213.458050][ T8916] Dev loop3: unable to read RDB block 1 [ 213.464308][ T8916] loop3: unable to read partition table [ 213.482307][ T8916] loop3: partition table beyond EOD, truncated [ 213.499586][ T8916] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 213.501844][ T8893] /dev/rnullb0: Can't open blockdev [ 213.538124][ T8893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.623108][ T8893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.644554][ T8918] XFS (rnullb0): Invalid superblock magic number [ 213.684429][ T5929] usb 2-1: USB disconnect, device number 16 [ 213.717827][ T5929] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 213.762234][ T5929] symbolserial 2-1:0.175: device disconnected [ 214.543429][ T8949] Invalid source name [ 214.547643][ T8949] UBIFS error (pid: 8949): cannot open "/dev/sg0", error -22 [ 214.645285][ T8949] fuse: Bad value for 'fd' [ 214.912374][ T729] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.047081][ T729] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.142724][ T729] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.253148][ T729] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.679992][ T729] bridge_slave_1: left allmulticast mode [ 215.699821][ T729] bridge_slave_1: left promiscuous mode [ 215.720968][ T729] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.746594][ T8977] loop3: detected capacity change from 0 to 1 [ 215.771636][ T8977] Dev loop3: unable to read RDB block 1 [ 215.779670][ T8977] loop3: unable to read partition table [ 215.787710][ T8977] loop3: partition table beyond EOD, truncated [ 215.807899][ T8977] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 215.873960][ T729] bridge_slave_0: left allmulticast mode [ 215.905160][ T729] bridge_slave_0: left promiscuous mode [ 215.957733][ T729] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.354024][ T8996] loop3: detected capacity change from 0 to 1 [ 216.396139][ T8996] Dev loop3: unable to read RDB block 1 [ 216.412263][ T8996] loop3: unable to read partition table [ 216.415027][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.418182][ T8996] loop3: partition table beyond EOD, [ 216.429635][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.443620][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.453082][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.461119][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.486906][ T8996] truncated [ 216.491516][ T8996] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 216.644602][ T9010] tmpfs: Bad value for 'mpol' [ 216.997673][ T729] team0: Port device geneve0 removed [ 217.337398][ T729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.350240][ T729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.360424][ T729] bond0 (unregistering): Released all slaves [ 217.390240][ T9013] syzkaller1: entered promiscuous mode [ 217.395832][ T9013] syzkaller1: entered allmulticast mode [ 217.745892][ T9035] loop3: detected capacity change from 0 to 1 [ 217.813492][ T9035] Dev loop3: unable to read RDB block 1 [ 217.836713][ T9035] loop3: unable to read partition table [ 217.856386][ T9035] loop3: partition table beyond EOD, truncated [ 217.889427][ T9035] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 218.228682][ T8998] chnl_net:caif_netlink_parms(): no params data found [ 218.543871][ T5848] Bluetooth: hci2: command tx timeout [ 218.601533][ T9072] FAULT_INJECTION: forcing a failure. [ 218.601533][ T9072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.623501][ T9072] CPU: 0 UID: 0 PID: 9072 Comm: syz.0.920 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 218.623528][ T9072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 218.623539][ T9072] Call Trace: [ 218.623547][ T9072] [ 218.623555][ T9072] dump_stack_lvl+0x189/0x250 [ 218.623587][ T9072] ? __pfx____ratelimit+0x10/0x10 [ 218.623612][ T9072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.623638][ T9072] ? __pfx__printk+0x10/0x10 [ 218.623664][ T9072] ? __might_fault+0xb0/0x130 [ 218.623704][ T9072] should_fail_ex+0x414/0x560 [ 218.623738][ T9072] _copy_from_user+0x2d/0xb0 [ 218.623767][ T9072] ___sys_sendmsg+0x158/0x2a0 [ 218.623789][ T9072] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.623848][ T9072] ? __fget_files+0x2a/0x420 [ 218.623868][ T9072] ? __fget_files+0x3a0/0x420 [ 218.623902][ T9072] __x64_sys_sendmsg+0x19b/0x260 [ 218.623923][ T9072] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 218.623952][ T9072] ? __pfx_ksys_write+0x10/0x10 [ 218.623969][ T9072] ? rcu_is_watching+0x15/0xb0 [ 218.623998][ T9072] ? do_syscall_64+0xbe/0x3b0 [ 218.624028][ T9072] do_syscall_64+0xfa/0x3b0 [ 218.624051][ T9072] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.624074][ T9072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.624092][ T9072] ? clear_bhb_loop+0x60/0xb0 [ 218.624115][ T9072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.624132][ T9072] RIP: 0033:0x7f2019d8e929 [ 218.624149][ T9072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.624165][ T9072] RSP: 002b:00007f201ab34038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.624186][ T9072] RAX: ffffffffffffffda RBX: 00007f2019fb5fa0 RCX: 00007f2019d8e929 [ 218.624200][ T9072] RDX: 0000000000040000 RSI: 0000200000000140 RDI: 0000000000000003 [ 218.624212][ T9072] RBP: 00007f201ab34090 R08: 0000000000000000 R09: 0000000000000000 [ 218.624224][ T9072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.624235][ T9072] R13: 0000000000000000 R14: 00007f2019fb5fa0 R15: 00007ffd5ce07f88 [ 218.624266][ T9072] [ 218.967924][ T8998] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.977496][ T8998] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.984830][ T8998] bridge_slave_0: entered allmulticast mode [ 218.993321][ T8998] bridge_slave_0: entered promiscuous mode [ 219.002760][ T8998] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.010060][ T8998] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.017541][ T8998] bridge_slave_1: entered allmulticast mode [ 219.025875][ T8998] bridge_slave_1: entered promiscuous mode [ 219.047268][ T9062] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 219.094648][ T5848] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 219.181039][ T8998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.264567][ T8998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.443186][ T9090] loop3: detected capacity change from 0 to 1 [ 219.455873][ T9090] Dev loop3: unable to read RDB block 1 [ 219.474465][ T9090] loop3: unable to read partition table [ 219.497366][ T9090] loop3: partition table beyond EOD, truncated [ 219.532494][ T9090] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 219.634447][ T8998] team0: Port device team_slave_0 added [ 219.662747][ T8998] team0: Port device team_slave_1 added [ 219.955435][ T8998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.964724][ T8998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.990992][ T8998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.004815][ T8998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.011952][ T8998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.039282][ T5894] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 220.089237][ T8998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.174425][ T9103] FAULT_INJECTION: forcing a failure. [ 220.174425][ T9103] name failslab, interval 1, probability 0, space 0, times 0 [ 220.189286][ T5894] usb 3-1: device descriptor read/64, error -71 [ 220.194431][ T9103] CPU: 1 UID: 0 PID: 9103 Comm: syz.1.929 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 220.194456][ T9103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 220.194465][ T9103] Call Trace: [ 220.194473][ T9103] [ 220.194481][ T9103] dump_stack_lvl+0x189/0x250 [ 220.194509][ T9103] ? __pfx____ratelimit+0x10/0x10 [ 220.194532][ T9103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.194555][ T9103] ? __pfx__printk+0x10/0x10 [ 220.194582][ T9103] ? __pfx___might_resched+0x10/0x10 [ 220.194607][ T9103] should_fail_ex+0x414/0x560 [ 220.194636][ T9103] should_failslab+0xa8/0x100 [ 220.194656][ T9103] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 220.194679][ T9103] ? __alloc_skb+0x112/0x2d0 [ 220.194706][ T9103] __alloc_skb+0x112/0x2d0 [ 220.194732][ T9103] netlink_sendmsg+0x5c6/0xb30 [ 220.194763][ T9103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.194788][ T9103] ? aa_sock_msg_perm+0xf1/0x1d0 [ 220.194814][ T9103] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 220.194833][ T9103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.194855][ T9103] __sock_sendmsg+0x219/0x270 [ 220.194877][ T9103] ____sys_sendmsg+0x505/0x830 [ 220.194907][ T9103] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.194941][ T9103] ? import_iovec+0x74/0xa0 [ 220.194968][ T9103] ___sys_sendmsg+0x21f/0x2a0 [ 220.194986][ T9103] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.195036][ T9103] ? __fget_files+0x2a/0x420 [ 220.195054][ T9103] ? __fget_files+0x3a0/0x420 [ 220.195091][ T9103] __x64_sys_sendmsg+0x19b/0x260 [ 220.195110][ T9103] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 220.195135][ T9103] ? __pfx_ksys_write+0x10/0x10 [ 220.195151][ T9103] ? rcu_is_watching+0x15/0xb0 [ 220.195177][ T9103] ? do_syscall_64+0xbe/0x3b0 [ 220.195202][ T9103] do_syscall_64+0xfa/0x3b0 [ 220.195222][ T9103] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.195242][ T9103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.195258][ T9103] ? clear_bhb_loop+0x60/0xb0 [ 220.195279][ T9103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.195294][ T9103] RIP: 0033:0x7fd20658e929 [ 220.195310][ T9103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.195324][ T9103] RSP: 002b:00007fd2074d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.195343][ T9103] RAX: ffffffffffffffda RBX: 00007fd2067b5fa0 RCX: 00007fd20658e929 [ 220.195355][ T9103] RDX: 0000000000040000 RSI: 0000200000000140 RDI: 0000000000000003 [ 220.195366][ T9103] RBP: 00007fd2074d4090 R08: 0000000000000000 R09: 0000000000000000 [ 220.195376][ T9103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.195386][ T9103] R13: 0000000000000000 R14: 00007fd2067b5fa0 R15: 00007ffdf162e298 [ 220.195413][ T9103] [ 220.629236][ T5848] Bluetooth: hci2: command tx timeout [ 220.729259][ T5894] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 220.869318][ T5894] usb 3-1: device descriptor read/64, error -71 [ 220.887286][ T9110] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.930'. [ 220.989816][ T5894] usb usb3-port1: attempt power cycle [ 221.032680][ T8998] hsr_slave_0: entered promiscuous mode [ 221.050741][ T8998] hsr_slave_1: entered promiscuous mode [ 221.067551][ T8998] debugfs: 'hsr0' already exists in 'hsr' [ 221.076671][ T8998] Cannot create hsr debugfs directory [ 221.257992][ T9109] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.930'. [ 221.349636][ T5894] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 221.414153][ T729] hsr_slave_0: left promiscuous mode [ 221.430280][ T5894] usb 3-1: device descriptor read/8, error -71 [ 221.442402][ T729] hsr_slave_1: left promiscuous mode [ 221.450722][ T729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.467595][ T729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.491517][ T729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.522691][ T729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.628744][ T729] veth1_macvtap: left promiscuous mode [ 221.638842][ T729] veth0_macvtap: left promiscuous mode [ 221.659568][ T729] veth1_vlan: left promiscuous mode [ 221.665137][ T729] veth0_vlan: left promiscuous mode [ 221.679601][ T5894] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 221.729641][ T5894] usb 3-1: device descriptor read/8, error -71 [ 221.925396][ T5894] usb usb3-port1: unable to enumerate USB device [ 221.943299][ T9129] loop3: detected capacity change from 0 to 1 [ 221.957601][ T9129] Dev loop3: unable to read RDB block 1 [ 221.977365][ T9129] loop3: unable to read partition table [ 222.002752][ T9129] loop3: partition table beyond EOD, truncated [ 222.030783][ T9129] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 222.340959][ T9135] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.935' sets config #0 [ 222.615331][ T729] team0 (unregistering): Port device team_slave_1 removed [ 222.659270][ T5907] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 222.702738][ T5848] Bluetooth: hci2: command tx timeout [ 222.777528][ T9138] loop3: detected capacity change from 0 to 1 [ 222.789424][ T6832] Dev loop3: unable to read RDB block 1 [ 222.797398][ T6832] loop3: unable to read partition table [ 222.807889][ T6832] loop3: partition table beyond EOD, truncated [ 222.839531][ T9138] Dev loop3: unable to read RDB block 1 [ 222.845411][ T5907] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 222.852824][ T9138] loop3: unable to read partition table [ 222.857266][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.861813][ T9138] loop3: partition table beyond EOD, truncated [ 222.875662][ T5907] usb 2-1: config 0 descriptor?? [ 222.889720][ T9138] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 223.104138][ T9142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.113737][ T9142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.349611][ T5894] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 223.509448][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 223.521415][ T5894] usb 3-1: unable to get BOS descriptor or descriptor too short [ 223.544831][ T5894] usb 3-1: config 1 has an invalid interface number: 171 but max is 0 [ 223.558956][ T5894] usb 3-1: config 1 has no interface number 0 [ 223.569418][ T5894] usb 3-1: config 1 interface 171 altsetting 70 endpoint 0xE has invalid maxpacket 511, setting to 64 [ 223.616851][ T5894] usb 3-1: config 1 interface 171 altsetting 70 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 223.639251][ T5894] usb 3-1: config 1 interface 171 has no altsetting 0 [ 223.670323][ T5894] usb 3-1: New USB device found, idVendor=15b8, idProduct=6001, bcdDevice=4f.ff [ 223.683872][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.709644][ T5894] usb 3-1: Product: syz [ 223.714054][ T5894] usb 3-1: Manufacturer: 缄鼿⣹쯅╓두ƒ嬀퀕蘝⩵괏Ὦ麚⃔텰릡⚜℮梉窺묱赡띗የ쩺煑ߘÞ [ 223.715133][ T5907] ath6kl: Failed to submit usb control message: -71 [ 223.745438][ T5907] ath6kl: unable to send the bmi data to the device: -71 [ 223.749420][ T5894] usb 3-1: SerialNumber: syz [ 223.765934][ T5907] ath6kl: Unable to send get target info: -71 [ 223.798287][ T5907] ath6kl: Failed to init ath6kl core: -71 [ 223.820812][ T5907] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 223.871407][ T5907] usb 2-1: USB disconnect, device number 17 [ 224.311474][ T8998] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 224.352235][ T8998] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 224.396081][ T8998] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 224.465038][ T8998] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 224.485998][ T9164] loop3: detected capacity change from 0 to 1 [ 224.515620][ T5850] Dev loop3: unable to read RDB block 1 [ 224.535665][ T5850] loop3: unable to read partition table [ 224.552698][ T5850] loop3: partition table beyond EOD, truncated [ 224.572954][ T9164] Dev loop3: unable to read RDB block 1 [ 224.578796][ T9164] loop3: unable to read partition table [ 224.586014][ T9164] loop3: partition table beyond EOD, truncated [ 224.606303][ T9164] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 224.689427][ T5908] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 224.782569][ T5848] Bluetooth: hci2: command tx timeout [ 224.786818][ T8998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.864954][ T8998] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.872373][ T5908] usb 1-1: Using ep0 maxpacket: 16 [ 224.884224][ T5908] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 224.896711][ T5908] usb 1-1: config 0 has no interface number 0 [ 224.914923][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.922176][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.935151][ T5908] usb 1-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.955535][ T5908] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 224.983278][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.990554][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.003861][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.015615][ T5908] usb 1-1: Product: syz [ 225.028538][ T5908] usb 1-1: Manufacturer: syz [ 225.045669][ T5908] usb 1-1: SerialNumber: syz [ 225.069456][ T5929] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 225.075698][ T5908] usb 1-1: config 0 descriptor?? [ 225.109440][ T5908] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 225.249874][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 225.267144][ T5929] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 225.286566][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.311267][ T13] usb 1-1: Failed to submit usb control message: -71 [ 225.312201][ T981] usb 1-1: USB disconnect, device number 23 [ 225.324135][ T13] usb 1-1: unable to send the bmi data to the device: -71 [ 225.345990][ T5929] usb 2-1: config 0 descriptor?? [ 225.348805][ T13] usb 1-1: unable to get target info from device [ 225.368367][ T5929] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 225.394058][ T13] usb 1-1: could not get target info (-71) [ 225.407195][ T13] usb 1-1: could not probe fw (-71) [ 225.705754][ T8998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.090498][ T9202] netlink: 'syz.0.943': attribute type 27 has an invalid length. [ 226.160977][ T5929] gspca_vc032x: reg_w err -71 [ 226.165795][ T5929] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.176073][ T5929] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.202721][ T5929] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.231462][ T5929] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.252706][ T5894] gspca_main: vc032x-2.14.0 probing 15b8:6001 [ 226.270257][ T5929] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.275748][ T5929] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.290212][ T5894] gspca_vc032x: reg_r err -71 [ 226.294961][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.309732][ T5929] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.315106][ T5929] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.320971][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.326298][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.345498][ T5929] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.363301][ T5929] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.368679][ T5929] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.374135][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.376078][ T9202] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.387282][ T9202] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.399241][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.404590][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.410410][ T5929] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.415759][ T5929] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.424570][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.427456][ T9211] loop3: detected capacity change from 0 to 1 [ 226.436455][ T5929] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.436472][ T5929] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.436482][ T5929] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.459752][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.465134][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.469433][ T5850] Dev loop3: unable to read RDB block 1 [ 226.477064][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.489197][ T5929] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.494600][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.495861][ T5850] loop3: unable to read partition table [ 226.509471][ T5929] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.522088][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.529270][ T5929] gspca_vc032x: Unknown sensor... [ 226.535844][ T5850] loop3: partition table beyond EOD, truncated [ 226.539338][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.548478][ T5929] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 226.569253][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.582402][ T5929] usb 2-1: USB disconnect, device number 18 [ 226.588647][ T9211] Dev loop3: unable to read RDB block 1 [ 226.594555][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.612501][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.624042][ T9211] loop3: unable to read partition table [ 226.625155][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.630760][ T9211] loop3: partition table beyond EOD, truncated [ 226.644878][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.665934][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.668471][ T9211] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 226.688916][ T5894] gspca_vc032x: Unknown sensor... [ 226.707517][ T5894] vc032x 3-1:1.171: probe with driver vc032x failed with error -22 [ 226.767612][ T5894] usb 3-1: USB disconnect, device number 33 [ 226.802857][ T9202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.834983][ T9202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.888629][ T30] audit: type=1326 audit(1752179308.156:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9201 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2019d8e929 code=0x7fc00000 [ 227.043971][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.069249][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.078194][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.125601][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.129882][ T9216] /dev/sg0: Can't lookup blockdev [ 227.237596][ T8998] veth0_vlan: entered promiscuous mode [ 227.258476][ T8998] veth1_vlan: entered promiscuous mode [ 227.341287][ T8998] veth0_macvtap: entered promiscuous mode [ 227.397084][ T8998] veth1_macvtap: entered promiscuous mode [ 227.462371][ T9223] use of bytesused == 0 is deprecated and will be removed in the future, [ 227.470988][ T8998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.485730][ T9227] loop3: detected capacity change from 0 to 1 [ 227.491386][ T8998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.500462][ T9223] use the actual size instead. [ 227.509864][ T9227] Dev loop3: unable to read RDB block 1 [ 227.538622][ T9227] loop3: unable to read partition table [ 227.546041][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.559730][ T9227] loop3: partition table beyond EOD, truncated [ 227.572248][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.576554][ T9227] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 227.614308][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.650075][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.808173][ T9236] 9pnet_fd: Insufficient options for proto=fd [ 227.927641][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.964611][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.110353][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.118273][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.405558][ T9259] hfsplus: unable to find HFS+ superblock [ 228.415190][ T9258] hfsplus: unable to find HFS+ superblock [ 228.855163][ T3096] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 228.865434][ T729] [ 228.867789][ T729] ============================================ [ 228.873924][ T729] WARNING: possible recursive locking detected [ 228.880063][ T729] 6.16.0-rc5-next-20250710-syzkaller #0 Not tainted [ 228.886642][ T729] -------------------------------------------- [ 228.893072][ T729] kworker/u8:5/729 is trying to acquire lock: [ 228.899213][ T729] ffffe8ffffd51188 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x73e/0xb80 [ 228.908620][ T729] [ 228.908620][ T729] but task is already holding lock: [ 228.916066][ T729] ffffe8ffffc5b6e8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 228.925289][ T729] [ 228.925289][ T729] other info that might help us debug this: [ 228.933422][ T729] Possible unsafe locking scenario: [ 228.933422][ T729] [ 228.940944][ T729] CPU0 [ 228.944303][ T729] ---- [ 228.947583][ T729] lock(&pd_list->lock); [ 228.951912][ T729] lock(&pd_list->lock); [ 228.956225][ T729] [ 228.956225][ T729] *** DEADLOCK *** [ 228.956225][ T729] [ 228.964355][ T729] May be due to missing lock nesting notation [ 228.964355][ T729] [ 228.972763][ T729] 3 locks held by kworker/u8:5/729: [ 228.977955][ T729] #0: ffff88801e7b5948 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 228.989865][ T729] #1: ffffc90003397bc0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 229.001690][ T729] #2: ffffe8ffffc5b6e8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 229.011349][ T729] [ 229.011349][ T729] stack backtrace: [ 229.017239][ T729] CPU: 1 UID: 0 PID: 729 Comm: kworker/u8:5 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 229.017256][ T729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 229.017265][ T729] Workqueue: pencrypt_parallel padata_parallel_worker [ 229.017282][ T729] Call Trace: [ 229.017289][ T729] [ 229.017294][ T729] dump_stack_lvl+0x189/0x250 [ 229.017311][ T729] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.017325][ T729] ? __pfx__printk+0x10/0x10 [ 229.017340][ T729] ? print_lock_name+0xde/0x100 [ 229.017354][ T729] print_deadlock_bug+0x28b/0x2a0 [ 229.017369][ T729] validate_chain+0x1a3f/0x2140 [ 229.017384][ T729] ? __queue_work+0x102/0xfb0 [ 229.017398][ T729] ? __queue_work+0xc56/0xfb0 [ 229.017411][ T729] __lock_acquire+0xab9/0xd20 [ 229.017426][ T729] ? padata_do_serial+0x73e/0xb80 [ 229.017441][ T729] lock_acquire+0x120/0x360 [ 229.017452][ T729] ? padata_do_serial+0x73e/0xb80 [ 229.017466][ T729] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 229.017483][ T729] _raw_spin_lock+0x2e/0x40 [ 229.017496][ T729] ? padata_do_serial+0x73e/0xb80 [ 229.017510][ T729] padata_do_serial+0x73e/0xb80 [ 229.017527][ T729] ? padata_parallel_worker+0x44/0x1d0 [ 229.017541][ T729] padata_parallel_worker+0x75/0x1d0 [ 229.017555][ T729] ? process_scheduled_works+0x9ef/0x17b0 [ 229.017568][ T729] process_scheduled_works+0xade/0x17b0 [ 229.017587][ T729] ? __pfx_process_scheduled_works+0x10/0x10 [ 229.017603][ T729] worker_thread+0x8a0/0xda0 [ 229.017621][ T729] kthread+0x711/0x8a0 [ 229.017636][ T729] ? __pfx_worker_thread+0x10/0x10 [ 229.017649][ T729] ? __pfx_kthread+0x10/0x10 [ 229.017664][ T729] ? _raw_spin_unlock_irq+0x23/0x50 [ 229.017676][ T729] ? lockdep_hardirqs_on+0x9c/0x150 [ 229.017689][ T729] ? __pfx_kthread+0x10/0x10 [ 229.017703][ T729] ret_from_fork+0x3f9/0x770 [ 229.017717][ T729] ? __pfx_ret_from_fork+0x10/0x10 [ 229.017730][ T729] ? __switch_to_asm+0x39/0x70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 229.017739][ T729] ? __switch_to_asm+0x33/0x70 [ 229.017748][ T729] ? __pfx_kthread+0x10/0x10 [ 229.017762][ T729] ret_from_fork_asm+0x1a/0x30 [ 229.017775][ T729] [ 230.295906][ T13] bridge_slave_1: left allmulticast mode [ 230.314102][ T13] bridge_slave_1: left promiscuous mode [ 230.330694][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.343321][ T13] bridge_slave_0: left allmulticast mode [ 230.349047][ T13] bridge_slave_0: left promiscuous mode [ 230.369407][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.772179][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.783096][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.792262][ T13] bond0 (unregistering): Released all slaves [ 231.034175][ T13] hsr_slave_0: left promiscuous mode [ 231.050251][ T13] hsr_slave_1: left promiscuous mode [ 231.056585][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.069589][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.373275][ T13] team0 (unregistering): Port device team_slave_1 removed [ 231.408636][ T13] team0 (unregistering): Port device team_slave_0 removed [ 231.994538][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.047763][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.105473][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.146944][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.268289][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.326288][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.397162][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.462627][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.587862][ T13] bridge_slave_1: left allmulticast mode [ 232.597670][ T13] bridge_slave_1: left promiscuous mode [ 232.604179][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.615058][ T13] bridge_slave_0: left allmulticast mode [ 232.621900][ T13] bridge_slave_0: left promiscuous mode [ 232.627652][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.640666][ T13] bridge_slave_1: left allmulticast mode [ 232.646518][ T13] bridge_slave_1: left promiscuous mode [ 232.654054][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.666425][ T13] bridge_slave_0: left allmulticast mode [ 232.672859][ T13] bridge_slave_0: left promiscuous mode [ 232.678607][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.824476][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.834951][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.844996][ T13] bond0 (unregistering): Released all slaves [ 232.917753][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.927649][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.940252][ T13] bond0 (unregistering): Released all slaves [ 233.006071][ T13] tipc: Disabling bearer [ 233.012447][ T13] tipc: Left network mode [ 233.260757][ T13] hsr_slave_0: left promiscuous mode [ 233.267006][ T13] hsr_slave_1: left promiscuous mode [ 233.273852][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.283245][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.291043][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.298798][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.308845][ T13] hsr_slave_0: left promiscuous mode [ 233.316508][ T13] hsr_slave_1: left promiscuous mode [ 233.322400][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.329974][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.337544][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.345507][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.356830][ T13] veth1_macvtap: left promiscuous mode [ 233.363666][ T13] veth0_macvtap: left promiscuous mode [ 233.369413][ T13] veth1_vlan: left promiscuous mode [ 233.374839][ T13] veth0_vlan: left promiscuous mode [ 233.381021][ T13] veth1_macvtap: left allmulticast mode [ 233.386785][ T13] veth1_macvtap: left promiscuous mode [ 233.392430][ T13] veth0_macvtap: left promiscuous mode [ 233.397980][ T13] veth1_vlan: left promiscuous mode [ 233.403897][ T13] veth0_vlan: left promiscuous mode [ 233.577372][ T13] team0 (unregistering): Port device team_slave_1 removed [ 233.604143][ T13] team0 (unregistering): Port device team_slave_0 removed [ 233.783082][ T13] team0 (unregistering): Port device team_slave_1 removed [ 233.805000][ T13] team0 (unregistering): Port device team_slave_0 removed