last executing test programs: 5m21.246299787s ago: executing program 3 (id=1494): getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000cc0), 0x80) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000d00)={0x0, 0x2, 0x0, 0x0, 0x9}) r2 = socket(0x840000000002, 0x3, 0xff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@dev, 0x9, r5}) sendmmsg$inet(r2, &(0x7f00000026c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="af9c94aca24d50589466a538", 0xc}, {&(0x7f0000000080)="a2d798d8aed20f7d013fd84730dbb31e42ff77150fde400b57e66d950067154a01a47e0d9f82fe4272649cb7e022305be7a676086a486f5e366ba92617eacba2d561fa82e13caa36d3ab706257485b8c36e14cb383df347cb9ae86834410e2a4a507341e5d87d24849d8a7e6d83b575f25a3575cd6a39a8e5f4d598df15dfc0fee8d02e6d87234f7d664e66fd025570b", 0x90}], 0x2, &(0x7f0000002780)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4a}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x94, 0xc, "0f01ecd306733c5188e7"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f00000004c0)="b9ed22cb70d98a460ac02780dd085426262066e40ea5dabcf877aa5f9a3218fd9fa2bc1fed937a6f3ec1b9e6bd82c0e4961f7096aba3a95595edf2c1b72674cd63f686c1ded10c6a9d839a41ee9181470b4ed90d0dc6986cfbe7ba4845ab7d3c411907fea0ac5c0402c09e25ab55956beb721b347de71ce11a0ee3c673346719f83100554363a94eb2", 0x89}, {&(0x7f0000000580)="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", 0xe88}, {&(0x7f0000001580)="7762e67d61f794e68c6831b4c42fec659b41b5cc8ca483dcffb863b40fd41cc3048dc035007c074663aced7d968d42c90691ecf1fdb5dfbe56c8f3299727cc6e7b0f1b33e6066e1af9237c8ac14404325181ce9141063ce9ce36baf551495b7021df43ad4f8912b01cd98cd34b421ee8acd5a9a4d72af238029d7f57b2795d", 0x7f}, {&(0x7f0000001600)="5926a49449cdb196969547727945f3497a3cc347da9f44623b16275384b7aad32989eae8b465f6e2cc2d92d9670847748096eed0fdcd4096b93a3cb23f19f60c97e1ce18643e96d450df8538639a7d3caba46a79953e2e9c8354961bcaa8d26fbb22da4adfb971af2513cb8190b69cab7dae6726bea5e9325ea3f3bf6c4b5d71429c3d0d15830b43d85e34787bb1e385ed2d7f28c1fc9ad9a7aa127dac8d9da1c651825d3aafd06a5af73cfaa32f2abf81782545199c47997eda26756dc976e01e67010b7f744c21d1fd2d1d1ebc9b6be3e2a025af3a58ddf975f56590b688f76de78c9095e37c38ce57cf08719f4d731854de209ad202914833011e9b2f5cf25189db2eef950eb344b94c55f14c0e95b0cf0d0c76b4f8e782a1ea6495ef9f66bfc4627e64e233cb0a2801390cce08642bacf567a7de36cbe2ded3e06368ca400503504d35f48737ce62f11feb62868819dc374ce9f4eb4f7a2cbac702778938277506885929f40d2af4a17c473c833d15be72b121eb009f82e491444e8e8832234a21dee2b806cd1a97debda7f4f80839cc5b6adcae77936e1da57cf907ce0daa506b2e44abc0b74f4a914be182c923c216ff04df481288c8cbc749116186cffe5902eb1e28e2e5c898dacf648340b49e823c018e631ca466753f4f9d961f81e844d9340b3ca28992bda5e2cb2cf83ec3fa8b0f6c949cdfecde2cebcc752c0ea918d1e567fe7fef0edec143e7a2c149e44e3ebaec455e01dcdbe118c46d5c2ac897d67b276fd8757143e6ee97e6706ef800ca9f673319edc05b715da92dae4b127a350817c3b7c29f2d21f1c80f3e73e5dd2e43853891078f80db4ebd39c5e0aebe7080199b8b82e5c29f340cf5c00375ebbce0289d8c2f2351482633f110adc600a6271617cecdcd15bdf94c960209c9111a1fab224ebf0757491dd69e0090e908e4c0a97382c872f456081776447ab114c9016c7247430ce6655cf3b4f184459d61debd51f7389b934c58ffae0c047e667fc190085b4188bc57471ac1f58251db8f51859aa7f5029bedbb01801c0daf676d9b31a6164934a53b516f68cdbe904657c5bf3dfff6d629d9cf1af734ae86ce5dea82ae97fdca35532f0d5d82dfb0e65abd2f38672fff0af900d45fd8400d69bc86b57f4cd1ea67a976a520ddde5584916083e46be8459064e3fdf7a1c69ff09bd0db1a55fff6a04cbc2025018ffcc00b1dd993ebd6c0dbd6cd9bccce75b0bbcae63412830e24d0273423ab5c7fc8d76921c35b689658258b54f43c563b59bb674d054ce3b0aba0f5206216d6080c195f5013335a1c21f876357f5c261a6c2154cdb495c3fdf52dbb5880a0ae6bf0b89d232b60807137ae62ad9877f10742b74e82cabef17a1c2dd79be688e02f4ea044627996d575d86679ff3b13ca2e4eac466c00fd2d1512a817e6c2cf8ec65d1a95b147f25e6693c6f01cd3398b90d5904b370ed2c5c7c29e72ea30a0c6330889b97c1364946096a504b7b24d122062ece8e8214cdccea43e599696f4e0c185e69ec8c25709de8f904974a39d5ea1d9e094fdf41fc458c6717b315929054adf71d502ce5a0a64ddb7e4335fe26ee6de3b7af8633795c7b1a1f39a3af7f6970c8636f1550d87f4520abfbe1b941a54809377d154dd4829f2c9823582a38769b68ec37f11bc0e83decc92be30a089bbe53b5de588a53ae99dfd46336f453dd5d8dca16e694018a9c09561c74e41a42457ad98c6c0b790a3c380d4969ea824b707e9df649a988bbe8fda272332e991aa4169bff084c856dccc22834f9e3ca3b437326cefe082c5a00969b12f5d074a40db271b02248e356a4cf923e3d1c5bed12d366e0889050a615b0ff672983da54599874a4a846ea61c1ceeec1f79a7d064fbf23d6d82c841df6992fa5a17b3019029f282cf6ed8a13e83cae1b9dd705befe731a6533bf3169a819f4196288ed88c193c5b57b16557d49931e6f291e1c11ecc38f8aa31cb6795d1aba1c8f913370300c90dec71a2de725cfb8164def8736fd811f3fbb5c0c58db957ad7f2c23692759525e9e9966bc05242a89b3e43130867cf1583679737bfbc573cae1ff3ebaed90a3c3d680ec4e3c79e7ca8573aac16cfcc0ce5c21294ee8c94ed4c9d2f5e47d726f36e5b17e49365f85fb893909f19ec3a0b9d223dfe578d4435803acc5560fd58b002185a380bbcdc5c231cf0c723af8794a4762a4006d18aea6bb5ac2cc01897bb939c77a7f278e32abddfb796cf3e5deeac4e05ae47f8395ed273244d61e11425e3d6bafde54888179bc2aa5795faabfa3c9c2cd3e350574e7b5f36901307f3269b42500bbd939f48a7237efc1e015d3b96ebc45c6ee7a9ee99940a401230ab4201af60e990cd42a4238bddad5bdea9e91cf447b816d02a67024013d9a4c4f6d0fe71a79188cff358906a9326e48982f542cf9a3ca99bc085ee89552170ec2f6e9bc6d0e3b2c9db90d05d9f6d5c774c79419e308e1a04738a6e51a8dff41ff739223396a5341b24c84576c595e9a0b36ee47a2c0012803f1442b29c3c5d7d9218642775dc982751b76c748e99a2fec76fa6a619d4c40502f8c10737330c9e7913f0bfff248c4eded4544647f79d3ea68e054d252380f02b656ddc68c23ae5ca4ce6f8d3736b0a206e58c64d6f80e517e323ec0304fe7be39b0d6c374e55586c6c1c858f7378b2e2857b87ab13a2e67ee3bf2ba306216e8306623afdc355b68601d3edd6362e2dc66bd62411008fd154822a2e238ed029ece8559ebbf6affaf6d6e00a8e5b90537e4604e955d2d827ef6c04bdb3114992c40cbb29482be8885f4870692517864cba3fbf0c95670e446bba11a87d5a40cd73f81071911fad69081b305bbc17a3e9bc99c84de8dfcd753f36f48e3fef80c995fccb07bd681b8ec6ad588ae5ec525538ca4285d594a41c83257ffb6f2598ef640fd760503d62ad2b04c7b57afdac5281ab500ba34e02c8ab6ed60354dda1112c2b6183a49fcec43214e92d21b889795fd3f90e6b82be74f1677f14e72af0bf4fa0a9151bae6cd9a519fb7e241eb1dac806b7fe236aedeced10d246c59645039d5e4b27a47b2c3aa2027026d3958f149930e619d1cd01a395224fe98c1e2e578ca8ef0a7182f193f74868d52c18c7584188aafff651e15be533730cde71bbe791f9a53b7978dacb5e7abe64b970a4e8db6b303a25662d35b3f63444c583ff202b43d3c94cb7a7b9867d5972920e1783719783fe2eecee5742251f7803c2f7de40cee9ec278da4c4462da8ac1fb8bf742226576e3e91f19e74197ce2b78f8822eb275397b74680c38b2eec50ef11ff6470345d66ddbca4af167c93083385022feceffcf8eb975e0a01cd926cb888f8c5e9619237298e408223168f052d3448c88da296853ab8f0508d559ee4f17f524276ac2537aebead24494bc01552e813c4d3990def31300966f0ddc0c16b41d523d7f1a4931f31a9d2c8a75f954a5495aa79f71d5eec0ca2dbf07c1b135ce7284ec5d56f2c69f26809872b347bea1a94aaf34ef4e24e5bba4db801b902805724ae7d1d71504f2c5f59bf0da6517aeaef37ff4d962e0d7b1ca34787d40a7ae3b1c59c0177e4c9dc990c4bb09b8d016238046bc7364fe4ced7e52e323fadd3a426762445b84fbeffa594305adb6bbd694b7380dd4faf8a172a50e6e472a1fa3ddc3252aa23f90ec58afc7d9cd769ab2fef735c90b5fe867b15bcca56d85f2fe76ebec9b52de5d8b91c9d30f64bc25c39528ec2a4794f9f350d072f7ba174e18f997192d0386c29eed583860d40fe1a8a5eb6424e1c8565115bd83910f13b12ff4aa56033a4b12d33f8b4c5c6e115af1c63014f49754922edf5ebe7a1d4715dd3ddf58e630578d1aa8194436f80f24e4da667ff6efa8adad6dc0d237299588aabf55cb1bb4d185d3c38976e9a488e98d56ac1fcb83515cb7b67015c2f3479f709ff7878d55767eb0f1ea1d587615018993b4e6e7b1be967bb709044b485c795c8ca798d16c72c91c62acd28a14f1e1f8f9bb86fc98121b899caf40eeecf94dc625226eeb1176515a75cde471b294835e96df786266370a0a67f1169c71f6977b2a3511ae08ed4db74d267d1d9ceec1217b5bf8da39155637d8d62cae9926b7b1bad74b52a02a7e180d38120ac5e58f479a27498e667efb2bab250b2625e201019fedefaafb4fa3219b07244cc1934b0151f27856d2c90588b3dfa72583399aea7e24c62d170aed76360290276a6f1b596ac6b9814f83031d1fb1ee9d244827190901d1424a69939880b1548e397ec30ae60c8f5bf9a8e48569329752f6bb3d06df932c3914b5457754e2fb8abc48ede8ca4697f862443748ddb0f1de0aace4740e7f123dda785ebdfc4f7bb89207fd22a73cdc871f905784c13d2ced1a3cf65442e08c5d119c05e17e38a01b5304a8fbbaa416474df14e0225a94661b15a42be7befa08fe1b3d4d49b2cac2055410dbafb70f18412063a3b359f09a1187a280488dda0535e350551911bdcda6455fd4c68f3e5204c98ccf0bd1ba75a34e5896c0bc052eccef76a53da72fed89dbf94fff8d4b6fa09e3b6547c68ac92d1b391c2ed3d8dcb343054965187ef0ce2a9fd30126a4f0ec210fd3d47a9f94a3eb98715f183f3bc071222f0755811c3ad06f0cd056e26b30aa0baa955034264a1ebaeb8b43d0fcaa60c7c2410b68f066450ad0336f388c38da7e325d5125c18d2d1262ac8222dc750f05fe06221e6eaee2f90bfda8e7601e58725cb7dce87a44d1bb1bc7872579159a5631a0e3727d17603c94c0061ac10af6d54bb5194fa9463f27447f341326cbecca23fed4302bd77b3e3d67361d6524e782e8cdda077f57cce9e9a6294425ef7db229ce7072a1d92f97222bf0eda38667abea201d109c8d4b21b226fd6def7979ef342bda28c5aeeb7441f4c8323b824d902d245f10f70cf343bbe340a83bfe8579a047afa86498093d50c1ee618c7e08b682d6d7d3588339a5ab8075dbcef3940290a7659b3bf2fce00223c3a125a3a023dcd16807f36a6ae078fbaf4192102adc256b07a5004f7eded00aa2c93e293ab953003b8db1340ff3a2c28fd219fce7a1e1927653ac688ee2b90f181a47c4b540d7e9151bf0b3215499ac0acd0c06a7820a57cd25cc023112698c908ce51393e2acc4da6891d8db30aa8e02c9bc1c5f5e4a99d4c1eb7dc50db3e8e8b3994b1f61580efdf220d695c27f256859fb1caac352bdb58580afc7af046d63f1b61ee4f60e3da14f54459894eb5024b6cebd56c5b3cdaa2ed5ccd7caed5c6861e2ce8e5a019eb03033eb43176bf0eed13046bf9ad9dfef21164b1dcef362f268f95c52292d0a4849b9ec4a9975deabe3a77fce6ddf9484a5899dd30e7c2abed7e09880630e7261db4e8a4b83b0ce28e27e051a556184014591cf63aad006471ef2205b9023fbf5d0d21b789b0da3e38f8c812e842e7b7f3c5bebc3d2f4d96770ce3b0cbb865c321af788010031c13e43eac8f6d4582d7a3146c1223e34e08e65fda61252275a8bf36feacd1c9dbd5d8d2755eb5623b82ddacee6e3bb6409c68f02868a91bbabcfa65f189027ba361bc538a8410d677a2d6c9103cfa1b0281cc868439ef77b2f962fda526ae3669b92ed0740751696e1b01e66b4822d64f17af5c1c592927add0d436504e41c4a117f8f3ddf88b248e5ceec17bf19807e920e53f617c9a858b3d76e78e33507752ca71848670e8be7ad8ce", 0xfe0}], 0x4, &(0x7f0000002640)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff1}}], 0x30}}], 0x2, 0x40000) 5m21.213851277s ago: executing program 3 (id=1495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) 5m21.073257589s ago: executing program 3 (id=1496): write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10, 0x0, 0x3, 0xfd, @tick, {}, {0xe, 0xfe}, @connect}], 0x1c) getrandom(0x0, 0x0, 0x2) socketpair(0x6, 0x801, 0xfff, &(0x7f0000000100)) socket$packet(0x11, 0x2, 0x300) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x145800) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000380)={0x0, 0x1, 0x0, @random="83f047e9529c"}, 0x10) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB], 0xf) 5m20.988102525s ago: executing program 3 (id=1497): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 32) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async, rerun: 64) chdir(&(0x7f00000000c0)='./file0\x00') (async, rerun: 64) r1 = inotify_init() mount$overlay(0x0, &(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x1000000, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x10000da0) (async, rerun: 64) lstat(&(0x7f0000004e00)='./file1\x00', &(0x7f0000004e40)) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) setsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000040)=0x1000, 0x4) 5m20.932668294s ago: executing program 3 (id=1500): creat(&(0x7f0000001380)='./file0\x00', 0x12c) mount(&(0x7f0000001400)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='minix\x00', 0x8002, 0x0) (fail_nth: 9) 5m20.555900632s ago: executing program 3 (id=1507): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{&(0x7f0000000680)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, &(0x7f0000000100), 0x2, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) 5m20.353591309s ago: executing program 32 (id=1507): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{&(0x7f0000000680)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, &(0x7f0000000100), 0x2, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) 2m56.117454302s ago: executing program 4 (id=2543): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getitimer(0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x2f, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000b6ff", @ANYRES16=r2, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) 2m55.879999656s ago: executing program 4 (id=2547): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101a02, 0x0) pwritev(r2, &(0x7f0000002240)=[{&(0x7f00000001c0)="fd", 0x4}], 0x1, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000b00)=""/255, 0xff}, {&(0x7f0000000d00)=""/214, 0xd6}, {&(0x7f0000003100)=""/4059, 0xfdb}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000940)=""/188, 0xbc}, {&(0x7f0000000e00)=""/223, 0xdf}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f0000000240)=""/174, 0xae}, {&(0x7f0000000c00)=""/208, 0xd0}, {&(0x7f0000000700)=""/86, 0x56}, {&(0x7f0000000140)=""/98, 0x62}, {&(0x7f0000000a00)=""/182, 0xb6}], 0xc}, 0x40012100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000003300)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0x22, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) shutdown(r3, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0) 2m55.59652108s ago: executing program 4 (id=2549): ioprio_set$pid(0x1, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_open_procfs(0x0, &(0x7f0000000900)='net/udplite\x00') (async) syz_open_procfs(0x0, &(0x7f0000000900)='net/udplite\x00') openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000012000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="037099647c9f4febecfe1cac6d46718566bc976aa8bb5a2fccca962b96b2c38148e6ba43afd8142a42e521c43d1928b2ab669733f31649a511a1faa03a127c708b4242355522470465dd976b42c69ecde6f03daae7b39951585ae4b283ee1eeb5a3246c08eb296d09f43ea13f544705f93dc1142e91005c86a187413f702cfbf884600cd7f0402435a1af1d1a2da1cd445867dbcefa48e49946f322ae1997f7155f8c8d3e277903d7b551db4a959646be1ca7f57076dbc10870d83ed27928bef5117656a948fc3e1d40b33ec3ca32f4dd0cbc417b041edf8b3d1cf6dbdcc880f90474a443c1d6d763408719014e3495921c8d283edeffb87d03a44995ada4b7f675737b157c44108b4f54d0d10bccc2b9795", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424", @ANYRES8=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRESHEX=r0], 0x0) (async) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424", @ANYRES8=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRESHEX=r0], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) 2m55.180041745s ago: executing program 4 (id=2550): syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') (async) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000500)={0x3a, 0x37, 0x12, 0x1, 0xb, 0xb8, 0x2, 0x103, 0xffffffffffffffff}) syz_usb_connect(0x5, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x54, 0x1d, 0xb8, 0x40, 0x2c7c, 0x191, 0x6e27, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0xa0, 0x4, [{{0x9, 0x4, 0xd2, 0x4, 0x0, 0xff, 0xff, 0xff, 0xc5}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="050f"]}) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSUUID(r3, 0x80111500, &(0x7f0000000080)) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x1202008, 0x0) (async) inotify_init() 2m53.89578882s ago: executing program 4 (id=2556): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff00ffa1060040150024001d0010c411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000440)="00000000000000a90000", 0xa}], 0x2}, 0x0) 2m53.675905201s ago: executing program 4 (id=2557): r0 = socket$kcm(0x10, 0x3, 0x10) mkdir(0x0, 0x0) chdir(0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r1, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x101002, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045503, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) 2m53.278112256s ago: executing program 33 (id=2557): r0 = socket$kcm(0x10, 0x3, 0x10) mkdir(0x0, 0x0) chdir(0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r1, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x101002, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045503, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) 6.30140939s ago: executing program 0 (id=3880): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4c4c3294abd26aaf3fb0066bad004b000f303c70fae6e2fc0c00f2d130f01f1260f01ca660f3881b4493c000000c4c2459d78ad", 0x3d}], 0x1, 0x51, 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc040564a, &(0x7f0000000080)={0x0, "e46afe7940f49d4971604abe4a47c0ebc2096c89959887c95088e8a876b89d20"}) syz_usb_connect(0x0, 0x32e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b04af72024d05a5ea9160102030109021c0301000050000904e700050801000009050602ff03b30204491167", @ANYRES8=r3], 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.688223284s ago: executing program 2 (id=3882): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000001f40)={0x9, {{0xa, 0x0, 0x3, @remote}}, {{0xa, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffff8}}}, 0x108) lsm_list_modules(0x0, &(0x7f0000000040), 0x0) 5.568989874s ago: executing program 2 (id=3883): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310d2dbd7000ffdbdf002500000008000300", @ANYRES32=r2, @ANYBLOB="05000800000000000a00340001010101010100000800350007000300080026006c090000090007004121c2c5be0000000800090001ac0f000a0006"], 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) 5.473977554s ago: executing program 2 (id=3884): socket$kcm(0x10, 0x400000002, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001240)={0x14, 0x1, 0x5, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0xc000800) mknod(&(0x7f00000048c0)='./file0\x00', 0x100, 0x9) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r3, 0x0, 0x3) syz_fuse_handle_req(r1, &(0x7f0000004900)="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", 0x2000, &(0x7f0000000cc0)={0x0, &(0x7f0000000140)={0x18, 0x0, 0x7fffffffffffffff, {0x5c55804f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r4, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x20}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) socket$kcm(0x10, 0x400000002, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001240)={0x14, 0x1, 0x5, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0xc000800) (async) mknod(&(0x7f00000048c0)='./file0\x00', 0x100, 0x9) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f000000a380)={0x2020}, 0x2020) (async) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) (async) syz_fuse_handle_req(r1, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) (async) lseek(r3, 0x0, 0x3) (async) syz_fuse_handle_req(r1, &(0x7f0000004900)="aa167c912e9c21eb24fd46f535b143eaa8ff48a9c9413179a03790063291e0a8ab85ae2758079ce269c39dabdcfdc3e95fd1604bf12de6d1e545d98f97dbfe78fed7abd527ed652d11be18b03dd7ccecb0f20f09e8e90767c408ea9c9e989221ad03840184ecf142ac24c65f84143d7368d2f3605deb176501fec7743d57838d621eb693fc766f1368ddc6fb380e0d713922a7bbf058ab48d591b727972e28f77135fe04eba16e0397765808de299eb95962a2ac58361853dba67b775612d889ac4fca28d927e5ffbf72bb01eadd53fef7f8b1e32005686c838243ef2a736f5ff29a4211737fc87f009a2386ee3eda549a11fd4e45ff7c1df78939c01b1c2c159453c2289765548effa4c4fc7c4cde5ccd91f2590d25ec2ab07b109c3e6fc96d3c3435c46cdfb682aced4c5242f46c8b12593faa415df8b3d7e0b060385950f83db1dfe57df006324e4de96141bb4b5850c0c833aed68862a81dd34031afcce880c26704443eec1a23ed0f8469206cf167fe4da8802c2177696775429148c8518eac058231248dbbf02ad5aadaa48a9aa517579a34d6c5ad66757e2201ac1ffae83b156560505a49e0256f236f45b1231ef2aaf8877f0db2a1212190490905f2003700b02e0ea6f0142de8632acfdecd4eea25135541e9984808958772be763f1cfce586bc0d457bf92c215358738741ca0686416f6bea5506634b7d9bc5d5730893f876cf50abc7bd17e2e432e3c1d09ec92c3794ad859932febd927461727a7890e7a3efa335496bf4d719b628ff451fe8ef1303e32af5ec419b8ae4e34dfe9499415d23d1907ee0a60a80a3c95df956b0f52a1880d591e861cc663c4b4ef56fcc51f6cfd0c2ac5fee1309f1749a75e7c96c304576b78d51b4f442154ac818771625a6af1d0e8a3b0712524055312722eff8f7b017f57300cab96c85d91d897151ec7e889903d76c7f26bbfacd98cfecf745fd4f67b81f52cac20ebc01665f26a2f42fe479c1bad66780a5a4867c6dc4f4975d9b4573a8efdba225bbae5c41eb047e228ac45552760f04cd967f30af61c3b7d6df67561b0db153b881806af976c90b72e2dd6f82cc5f6b29a7397f2ed6ab3f50ace8a4876e398f39f60a6c6d1f68f2055f79ad450bed00a770c85f6973297307a85810b8ccaee3018c2587f2df62fa6293cc632a900fc78ac8bf38e71092e7875c9fef88081a67259cd0dff24c19d98d906c0fd536ad5d49b21aa71b8761265f1bbcfa7227708a5178bbe2d6a91c8dd810fcf8637a9e06363782d6da71b6c16703a7d0e56beb674aab904e6fd902d476e8b64943c0ea2cfa27d1326d4a39859b5510fbabf43fc0576bc6b6199253fb8a3b3c81dc0c614f2c2e28f3ce5d744b745b05f02b214caa12ee6cd80b1aca76c881290064d2c4857cca46480258429fb2f85072bcc8f431057ab57a18eb7729172739b136417cd4c2fd33a489eb21c193f1f08f10a3edefb432ac2c7f66d65b6d5f53d8b8b4569cb908d5d8bb58457c47474912f54ea1757266e6077c6559b03015eed409e4ed023c74136652f966a369ce7e216a8ddc8d63509d33407a0808b6d70867ad9febff9a095ea07dbc79516d3b160641d3f43fd2ab249520ab6f05160351056666ff89417a780001bf983091bb3af1e5a51629eb1a84806a74b214e4389426b18c756c0b14088aa420cf2decf7bd4832a58d50684576c7a13a9b30556c17bd5b9a0749b1cc053b9de2fe844100f3c9d39000a46476f7406ae4831afa916a902b32349eea672094fafa13c226e0779c012e8b310a55e7cfba5445c1284cfc27de3beeb02cd3128566103175787fdf580401038a91c46392cb2cdf50a60cb3ab66772493933baf1af173fe33f6b3d3fbc793567c58686516c3c0d667070c9c9b8905526f0bf1969669401c2f8f986b0ae1bb38a683bcdf0cdd1b04d886463d00edc9f905359dcfcc09ecb959b49f7c8fd6e62e24f6a575cbc0e6ae7eb0e7e95c112fd39baf9a0b8e084a1f76ae6e1309d2154a011566026adf64b9fbc45d1f6582f56ca1f1aa526b91fd5c3a7184271d2eccf39b08dbf4fbd7bef95dbd5906937fdf03d70283ed914e0260fb4c11668ae5cb2559c26caedbe5b970d7943df95744729637dbe64cd2b221a6ea1ea26250fb17997f497bb68f6efccf8aaadd2abb5dec5b8559dc875519f4d9e1173848a71b1efb451bf2892c17ba0bbbb1b501bb65665030b8b9b731f03f7754acacfcdecdb32136810014ba35bbeac7b520b437cd8b19d3479eb0686e055f895f577f58637d3758e9c16baf82e0693456c84aa24b5d90fba3b76169f8fedd97ca77d64da4dab8ae38e1c94f32df4727b8087734442d83e82ccb7d30240562f5c6f9fadeaab3a4460196a287f462fa508c9c431deec017877629cd5463450823c9427f89f35e82d0f18fde93e69905121279ecd4bc19cb8ea4677b72b7500f6798d45f4866731fd58327190e3dbd0776fe9d16cdf0e45566d33a6db09b7eea0193cf2edefc5b9b81515f67b74665368a22b2c814dc7183a59352055ab03d29bb8168265d60ea3cc4cbcfa3288fb5242e4d2ff5a3422367ad12212e260e163e4dbba47ed54b650ab4a6b0fa2216735a72e6173d281001510c9ea1940eb5487d11a72cbcb56658bc24282e6d6bbcb3c788d55b7e5d94522e632bfc46d2bfb355e2b436214ea34fe821bf074a2c95d84f84a37d223dc5c86d4ceae7fcbac330123eda8b033fc89baadb5092e140f0fa6c6902639583e3fd22b038982c0bc710918ae8f7a724d826669b435536aa70681e8e6a06426c52ec63b86dc15ce77f9ff2bab28e09c2bbeb3dc13319333b5865cfc04f813071773a0fce708eb522585c34b5e511a6e9e23be56acdd5a54c145479ae5eb234b1d369fc8d2ba4cbf8b4a29fa70f4acff6e0d00c8c80874ddc19aa9ae71588fba53c63c23e47b961f12befb0703fb3b9da6f687d291ac0fc13e07eedd38ab4fbc347e29de59bf282ac44bc5d78144968393faa809b875431020b84d328efd2e819a1c1de1600b084875f9594dec01d039a7c90984955b5285d8dcb6e0697b6f286b4f380a1da77393a6b0c2dfb30a05beff0e7ffef4cfea23176adf7c75e8ec3d0cae16ef17901fa50465084ccc081bbf9001b550c71a448aeeb3145e853339af38268220a52a5bf2fa84effe8064154e7470b9a9c9937108ec7c7c6abc229c34df03fd46a8db04a5740ba5b95ba4960db251c8111641215a98453acc052282e95a9f9c25c949b2a09921c7842f0dd3b270f5639ed1d0a38b192b9b5b120fb1f8c0fac5fb0f3fcf9042c281133bc75d061195c39456560c79eaf3366af0d5681a9bfc4ce516487719791cb7f80a3b993f81ee363ee4502aac8127a47802bdd5d44aac34f14ee8cafe14035405490152f4904de85aae5a3d8133d84c4e20db6c146bde33eaa6a84db3674cb182aab158b3eecbfa72651d59a50adc67e13136ec86cf142f39e90e10d577af4bf9ff41b44292987069620e76cb6040dd859273fdf504b2f7e8009b77607624113fa1f74813d436a89e1129cd15407f8d2a365287e1aafb557858496f1d3bfda06a136c5688ce89a1b24fc6ff03b52ad245df84fcc44d848ccb9a9911eddba16dd95b8fa4d06bb109406b2ca469b71b0abe249334a8e14730ea6ae79f1b8518473673f2abedb784d6e92ca2638526afbe961b5ece7489c282aa9d31a8220fbe4e94cc0b44063e5a52f9c2709d485ec0a79de33d76a67611a708f9310fb5e6ab12156cbfbd43e15b64fd09b3b69c88bdb1c55dd8bbb6cacc61ccd6346950403eef50495c69130ae3b0d596b6797bcb5619fa3dea7d8d22089a44319d382de0d0b3f935c7ba7081671dd7bf2c1e418dc4d1cae71dc34e5eb079d0646a46ecb4c99ec99772bd95be0e378d435311503d3d048aab011fb3630c30b64594cd73c6034f40343c1186f01afa5a48326c86880b7a2642ff995336e568b9426f7bf378cd679e5dfb448cd5f2d543d5df1400a0e00fe30c852edcf6fdd1be7ab71f9efe97199b1239d1a9299ae0fa8ddbe07b87f182f35910377ae1a4cb8fb42147d790dc591a3aa16c70c641d398fbce9c40673a8a43c74ef49e95ca701c338511266a2644d6abc6fff7abd9a088d99cbc18d1720624252ea88e4eb746743cd954095f19d0ed9caadedd4c8e60c812e2be44537699d025b167050f47d8c72e1dcff288734e2435c729ff6b68378ea46c39b9458558c6b71bac051cc6685cb07a2a3244d1ca2acc3a02538c371b183a91fb7ac50117bf9503971973f1e8ee35811688acfecfaf3c03b4fe8f5d8e95c3af39c8503df4807710c2d09b1f54d3585907e425c4056967f7323beba74edac7c92adc3446530a124bf0494fcdeae5df5d3f9a24b21fa1ea54a8f313af8bf2d847cc501e7bc14fedaa2b8ca48f034933fcf92c79285b966fbf98f60493571b46b3350cf27312389f2765a9f5430d6e320dac77e1d503d5d36c2f505faf1aeb38d7eec84174e47969e06fd13edcc40b7068b8412128b87a26c10c600325907316906e7aa91dafec4c5b1f589fdf290df9cb04be02920b65eb79b7a56f6231ab37bb562ec330113161ac7d9001126130cfa412106467aab586645f9d6071b372107716a2eff6a717f377e0cd2ffe03f15c93f24bb9a451510c0e16920d24d78f94befce1deb6f8fd99a990e70729a1b0330bdd1aa904273a5821915447b8f7040f769a95a9078eec873b4590fc6587a3450eb5efa5c30ffa7ccfd1ae57875b2e38f0bd7cd7393ccaa2fa081bff4465d18795bb92635dbc058c0f211b979ed94b7ba0738137e34eae860902cfdb6d5ca97ac2a6adca6a017033e3b43bacda86e34d561e4d57e1c8106af249265e315d95924876dd6f5b0ff6a34b99996c2fd751e760e43032b41c118a5e3bfe04dea554946e77ff470237da8da8dbd59a737824cc960b7bf88cd5d2b4d0184d6fdf7e752058e1c0551806ccf851a41979a19b3acd8bccf3926a9bcfe42ef2ae44b6e5e04b748065ccb0e433c2d2452d4b90b626d41ae845b253748702731325e9d5ebf59d64b185652ceb2ec4b3990c4f4ea8461c6cb522aff1dade560436ae1ab015b78e29a8ef6763325b16999ed1d8078db24530897ae0bd72a4fe13e955a0406580af5f796a6b96e868ce67f897697dea3980c16e0bc067ee23264edfcc3afc7221a48394a9453d5cb6a5b834fe771a481462a5aeeaf42d6413bc242cf40987b066407cf0330f7793a26513f55cc5ea3435dd6e988549209afda0cec83e187f691b4ee08d5d689e4a8bc1235430816bf9fc07c96b7a72693ad701f352d128a7e1aa22790dfd50fc62a93ed42067fc8acaa74d0f113345398170ad6822d2e64dbd0ba375ccfe1c5ae4b280e09f05c3e52a0c80b9ff39836cad209ee22ae50c749ebff1e8d8ead7cdb95ff0ba1872882b7123a0e38374b5865e4cdb42539a1ea07f77fa2e8d298a4ab75142b591972fde22263e94cc98d61e8b35d30766bedfdc08da56377c431f421e8eb304a5f67a77c00a4fac415811649482125f4effb11b3e1d355dec071ff7923654b7a3277531f071a84f194db0d419e3e1fb4931640ecd8d23289544be0417e0e39dd2747b54b5f9670df9c77c3c42369c7d2ff4a12bbbbbdb89010be3053626fcd1ea6fdce1cae4bbc261b540b74cc084d3f32fadde1564bebe7735d473d96ebab63effabbf8b2f0040c665df191cddab87fa8ea94a105cffc3ec808e453034cc46f19ef2bd9fa46c87b60fa2386c6f10bcde93d46949ce6af8b9463bbb473ac97ac7c56874996b55fd64c167bd906e2019078851f690a17c92b3d89cbc43469e7f5bcd4ba9eb3cf3c7121f84160a9b803553e64e15ce7daabf0a9949ba524e081834a24f85f2dcf53e8d3e9693c92101d62a9fcc666d5d7ef121a6850c836945ab5b9e3e69614a89ea708bf8fac5e83a8b55cdd78ae97e9b412e80a0e33f307d70cd1148e1c102bdbc93860230a905f4dcf372c4e0d55548d068556e54a500ae851499729b553c8d3994c163c1285c65dc9e255c4f137f78506bb6e2ad7df288c9c27a49e5e2781a5d996b5338979592d7ba38876c15dbabf073c5dd62bb81e190e4c068dd8fedcb984925a12942d10384750a0e5bc8ee84e9e52e9dfcb42d9274fd500fce655187d6632bbf7682592e1c5be07d4a1ecbd453fab5cdda66df325070f4131cadeda09dc5f9121e3cf0bec142420b08b58eb2b0b53e6a78d88b7c1f4b27db78124f27a9f89df5f6dae120330d3126ee45e4c5ce29650c4fe3c9db2a48a2cb4d9a1e40f275d72cd3496eab99457a4eadd15b790713fac6a04c089ddc22759c09b1281367ea04af2c290247d43f9cfd41cc174a39ffa2c810cf6c1aaac36dea84eb25018a3889c9f2e6b76ffd84c5b4a0a88a8a6930b4c906078d04190403575cb0bbbe819e2c9b0c816fedd1fb367907631590afa2576f7b197b33655c258d3d557cd995c7fff21fa9480f118585ec14995b76cc942c2ae7404fa2edf451fbd94084b0f6af35e5eacd38f185a4ab3e153314000f0c379f88e54d1f5d1c079ff8792f0c9ab9c9cedaa802573cdf2a4e23799da18d1e544e4242f937a050350f9aad121678b06766d6e7f9485ab32f8115367d47e0e024494d21a46be80865a5c0499be22a8f91129cbe13d2e2b2aaa96bef06b104db02937029e7de0756912439eac5129b26a810d13bdc4df1c2608b6a876be71df123cef17a311a7c868f22f01eb155d77896369141c132353a9fd457e25a162330bd864d5c2c52cb8bb32f15eb22750ae529af8eee421869d6eb9e40db5c0ced124f1fca4cfee0aae334184a1a20c23425a48818710e5826d811066292ae5d41fb2654a72047dd13baf811415116851b9df7fd5333b62c310340910f48b8e51cad91d353dd4602c3ffee91109d5d71a96a6f70372e7814c995a363b5d4151f8060973c7a6c99a33bfd37f7ce114525fab2cf7d9123468dbcba6e90d889320c0b975e542af47a6e45bab2fde666be43ab0c9faadb964fb0b7d875bfc48c1dffdce05d6b796bf07453e6c5b747599f9476fdfd20d060d8a910496199d9c8ad85d7c99110e96cb7fb89199dd8ada9bf05dfabf72aa9e2aa6427bdad7d78d4e47f8f3c74d62a5b1cfb8ae7f5ed6e66235c9c0a5d90cfabf7c5a835da60f071642998f5bbd9fb978c1e3aef72e55f68eeb3e6e1c17b38cc84d31047e075d451546ac1e6fdc547848bb92b84c2a5f187a43895cbb5193b5e903561d97f98c9dbeb7fc5c056fdf4e047cf20446aad51caf74a7349389e64b3cb17fdfa78f5f4363dfd13f0c9da89a251dd70ef12d0c932adaad77062b6e5c26bbb28c1e95c81299801ba16eda6bdd0c634720ea637e16d3a38ab317d491163f60002e0e8d8210a76bd5fe2ac288018a5acdcbf687e28e398b8a9a6af38138bc32d537e34f930e4fb2cb2cb4c3f73c9a888f955590c46fbdf16463f3067f8e2b502aeb8aaa30f1af19fe603f5344c4e4e927c9d537db704c70f0f104f01944e3e0fae259161dc651728379eadcdbaa78a0f1c396a045bc593ff5031069d05c7e57dd0ab7add7cbb400cb51aa0b2e569e70159af6ad09485b73bd3581d8f0718b6c0e3cb691a884b9dc7694342027567b16bc124f88583ec50e664ef6fe5ec46f8b1a60be2ab78adc7d45cb258f2eb6394660b2212b30024f86222b888e25b980a78b591f58573679fefa5fdd509e73daf7f7620d32abd97aea3afb21440da63fd0747c2afb5809a4256e64d14d1266766c9ffe17209658e7c2027bf52d346f83d6f4270232e423e03192940e32994ad2f0f2a8b66030a761af5df7248dd52ca57553367f631858907eabda4935b6c7340facd61a69119cd6e9c9c85aed0ca9c0f066ae24d27f9d504a3ff6c8bc87d84b291e673ece8bb7c099e2624cf7e3e9350aa487dc333cd095b6bb8e151fff9cdc37e977e8418872bb11fb8ac354aa58fde0ebf071ce3b579053668483e47ea240441b8e9a8c780bba839d1c6d411be7d2d59919b95f906e815e9ec20c95b7d6865239118f132145761bec61e2d81cf7036b4bdeba7e714648fca49208dc066d741260d7847e70d179025ab6b17005877630158e5c9ad069917646406a0092122331d5bb26ff17077d4b5902eeb8994e18f54c478e7763f937b8010f199ec8598d5be5e5550ec50ffe8ea998bf7c8fbf05857c103e7f72c9287c50ccd1906ae290ed953e9afd79ecfb1b32c3aedb4bf627353eba639d79b908ace8f48ae2ef97048dbc5d360761b929dbe5a9e949f4440a206001b6d2dcdb698bc6972644347d71c59ffa18a1a3fac1f91aaf9494ad2aed062273221933378bba723ade08198e4125a9c1274d3f87c881456b759c2962833b2674a4b853ca7e3efc87f949eb9387c49930b9fe1ce9ad7662ae2bddf2362e645cf0bf66dfd546426c966d112fba671906418cc4c7cdb90631266bf94e92da834e17682c032aaeef968fd6d9c6819d33436517b4d99578f7c53c3ec8c5019d3d9293e5de8af485c3177e921c6ed39578a86d73be7ab37f5ae48a9d3e58480118b4043ead443f0ef9ee86e85df06ab7fce78a43e958edb362777110df36aab20469c039f2071e116a7f0410c041c162c73456dbf9f5617b0b28de21be52726df8b5be8f1a2a42ebbb6ff3dc8293c734fdc91761e7793d8ac783eb24fc70d9f2c5fb1f5d30f933786dd364e44a5ce23a99dd3cdc33b509215582cc28eab1d97fa8d3ce94a7ea8fd207770d27fd74748ba1a36542306f146360a0497fdc32219e2c4c7663f5ceb2a0690577ce2b79cf6d18db443248d89be741cc30eb17692c9a53097710c71c57201f8bb40be99b8fd6f512e9a3e138bdad4c0c04d0f2c09956374cfcc5a7235af416b9d2d2f69f4b53d74f21a70723010f7125f957ae14723ee05763ece404c2af24edec67a3accd5b62ef3883ae7fbe4169af9ff7eee5679bcc8b43241353e963faa2e272a2f25adc88bf90bf51f9846a6b6c6dbca90e59b7af0ec2ce3ef32d197d1a417ce918dfce53de0acd552929d094532f706c42994cb00d0896d4b1a2badb93547b8fde00c68803951dd71cf54eaa30823f2f408317795440da55edbeb50a490daf1781b6673c0509d5f560136ab7b161561c417f95eca359371f0bd9a02af7c78db459a3e63d26641706ef90abbb18990c7c5667d6908bfd5d65806455597caa3804a6ab51441431c44f4fe4d9658a0050344b1ecafc6ab6a1f7abb6fbaad4054dbc86475def6706fbe191d1d156c5e4afc52cceafb0c80f8887dd6a437c08920a86687b8b4522e427b3b2bec9e04a58e6b5368750aa79586586d82daed8f88678be6f829ade31a2f8fda9cbe02937e1aa38a38f986e1ba56e4a457f4781eaff8a2b7ca4d25f1c828048f27387fe07b780d5321af783571cb712943822be1b3c8c60d6fa96333a50f1efc16504324da334b139910530483d8724f52e60cdae404281f0a34b4bcf2f3acfb668c9dde86bcc028aefae1cfb942400384bced9aa8ee4eae3757c5f030541b05d95a023151cc3fe8d4c68e15d8494113968fd7f1ffce4685e9000b3cc6831136fa1b9d826a495eade26532513a8d8afde21ec5073b2fdc5a8d7c06d62ade7110c0f179cf353e17fdd2474a965cbfbc993313bd7ce930f29959ae68bf5fa576022c5ab10adf3aa74b303ce95bc32ab430ad2dd5495554281440c7c62941c399d448679badcc9783957c6bae6daf6491c589ee19afb0ad74a83f766e890c3ad924b55f06d7b41ad9e9dbb842ac30867850ba29774eb6e5b2ca28e7ce7bcdaca36d0d6a1d25e122a71c771c621775f6445d8255fa714c046260c1519c4c1088e81a8609acc3a6bea51dba8525a0d9d6e2dfcd0e5e41f6555e4e159428c27c8ea4e2a08e022081bfa27832f2589679adaf2521771347890aca1fe54d56c777a5cb10788122d025f2c25eb760a55f4a6be1ed225ac03e5d5bc17a04662582fe89e38c248d89db2c9ce3e443ec364c799ccf2eaac3a0e6381073b23c3629a0d7dd1eb5a3fed5470da1066906b2a72885360d7c5781e27bae6f851200548e3c68181fb28e4386854e58a8da00f09e7193614e55340304ebf2985fe80b4b621edd5d8dbed2af5a67eabcf041933a72ef7184a8afd8fd1f90086c716192800a60eebbb1943d483e2cdd12492b3f338f5402161a3647eae9958d7d09af46250f8c3705c0d10b94e9688bff8e9b6a484356a3052d401f0e184ccc49667f5ad086fdc8ee661a184cfed9c9f3a87ffd9dc9aa9dfda7e864dc7fb5e957cd121196260da58899b58574abed7ad42e53204851daaff9e51e06755c16e44e01dc836c1d9842f7674869c03946fb1d747074f635ded54e8d6849122832c96b3b1b4c19dc76a094a29888bd04f2b267f95888ca5bf1fa28e0b5357bf0d5155426ef6911ef7daba67d0797f5045cc50d0d777732b5b8b9e315f1c1435ab1a52aa3365607d6b94004721f46adc24a1a1a86323f55e1bece99f6c0d2801c33a8ed4649effbe9d294f796d4fa89f7eecaafa7b19e8bdbdd8ba2ec6eb212818380f52699e3056cc1279bfa529de388a62d0102860ae492bef0d8cb5abf2544aa0600a7be11d8c14f817c39e29f15d5cc5796234237ad8cb774314f10338f9ba5cf8ccdc157bc198757416ab55271f250e89074343e83bdabf3e9e62c0b7ff5e7e1ed44ffb4bc84726388147b27a34902c5996bbc51b90cf77f35d72456c8022f9c496b9a049dc8b25d7a212df64b32b9f27bd37e0da4b046144fc9c41f9bf48e0d7c87eea5df81d3a7b5496936685c16c7d7a2ee500e6139e98d839f52583361b8867711dd9cc5a432ad7f3a8f5b2e775e891ef7128c5440460f332cd2e7940a5a9dccb26858f6b99bed4faacfa7d729d4bf465d0c97247f089273ee56ed05a64e5fc1b8062cc843f5ab557aa24897dfec29df378a7177002265f13e65a2cf8b3e8cf91dd16d03600c8e97ae0a099d3f6706423af884c842d43a1c02dfaea5de38d8f7c5c2320e7b6335c57c5861bc68b808a80d04e7001bad6187b2903c177fddf23fba693e1fe4a1c4cae1c0f4e881e76078af380803377790c823893fe0055c3c08c69cd8a6d5e5d54fef614591cc2334c95937ce4856a0056295fa76012c01bf8de50433a255debdf54f48bb797f522bdfa826f7ba21cd9cd35fde928f4064d9a4265a7da6a42140d5fd5f8baf2e8f2cf6fc08137baae2c015b85cb78df7d299a45b00eef2f4e4e8a7bbd9d7ea567253f6457cc45af0e28ca28526c07cec7e0baebf6eec04c01575aa1be35b39caa35bd738fabbd572270bad26cdfd0a4d0a9f50254f512ac714a47547ec37ece995c4bf2863b32bc1fa034f6a3e164d461cbd503236d2675d3a7b0f169cd79d708dd08a9651ae1f9a2e5fa4879ee9e53d5deea28b1261b827a797c425a628d24480d0783aaefbed00cd6d2f7a1705aeee828f2e9a88094794b3b17367496f0c47ab7f7e307429802b0724e5737f0cfb5148f106211541459fa81abab507fcd6e9bc75f3cc7", 0x2000, &(0x7f0000000cc0)={0x0, &(0x7f0000000140)={0x18, 0x0, 0x7fffffffffffffff, {0x5c55804f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) creat(&(0x7f0000001380)='./file0\x00', 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r4, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x20}) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) (async) 4.740874503s ago: executing program 0 (id=3888): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x6) accept4$inet6(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'geneve0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0xfffffe00, './file1\x00'}}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000280)) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0204001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000400001968121c823200007c524151287fecc356000bffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000020000000000000000000000000000ac1414aa000000000000000000000000000000003c0000000a000000fe8000000000000000000000000000000200000000000000000800000008000000000000fc020000000000000000000000000001000000003200000000000000e00000010000000000000000000000000335000003000000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a00000000000100000000000000000000000000000001000004d43300000000000000e00000010000000000000000000000000300000000010800000000000000000000040000fc000000000000000000000000000001000000002b00000000000000ff02000000000000000000000000000100000000010200000100"/500], 0x23c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x0) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="02000000cdf02e923a292802619a04a1fd46f67dbfb81de07350647d3db06b790d8fa1f92d6badf99016c119f6cb1f1007b891af5452b6a39c"], 0x9) r6 = syz_open_dev$video(&(0x7f0000000180), 0x800, 0x0) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000040)={0x0, 0x5, 0x0, {0xa, @pix_mp={0xd, 0x2, 0x47524247, 0xc, 0x4, [{0x4, 0x7fff}, {0x1}, {0x8, 0x53}, {0x81, 0x1fc}, {0x8afd, 0x9}, {0x80, 0x10001}, {0x9, 0x10001}, {0x4, 0x9b8b}], 0x7, 0xc, 0xa, 0x0, 0x2}}}) ioctl$VIDIOC_ENUMINPUT(r6, 0xc050561a, &(0x7f0000000040)={0x5, "08ead17f68e8fc0f86d0046f15d82b03931d21810a80105331413adc7c7665dd", 0x3, 0x9, 0x1, 0x10003, 0x40003, 0x2}) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet(r2, &(0x7f0000000080)="0084b72db8c48945c246a03c64e4215b593f477f086d0d37e47780a1b703e53688bbc2e11b47a07f085dbb83446564bcc58a035e02e44cce6f5a261bcbb66893a3e89d7578683ca01fe9c715", 0x4c, 0x20000080, 0x0, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000140)='./file2\x00', &(0x7f0000000100)='btrfs\x00', 0x208083, 0x0) 4.272175377s ago: executing program 5 (id=3892): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0xa42d0300, 0x0, 0xfffffffffffffd0c, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 3.906154554s ago: executing program 5 (id=3898): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x101, 0x2}, 0x18, 0x0) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$rds(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f00000001c0), 0x10) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x80000001) r5 = dup3(r1, r2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x1, @pix={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfeedcafe, 0x3, 0x0, 0x8002, 0x4}}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000300)={r7}, &(0x7f0000000240)=0x8) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xd4}], 0x1, 0xffeffffb, 0x1007) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) read$nci(r8, &(0x7f0000000680)=""/114, 0x72) write$nci(r5, 0x0, 0xfffffffffffffd06) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(r11, &(0x7f00000005c0)='./file0\x00', 0x88901) move_mount(r11, 0x0, r5, 0x0, 0x275) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000125bd7000fbdbdf251900000008000300", @ANYRES32=r10, @ANYBLOB="0c009900060000006300000013001c00b2000000"], 0x30}, 0x1, 0x0, 0x0, 0x4815}, 0x90) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e20, @rand_addr=0x64010102}}, 0x0, 0x0, 0x1a, 0x0, "9f7a6fae89437c7f0c23e904416a757dae93f690fdb5d85e702b6d9c99068f7d21a8e5d647e3be74445656921b056470e26946f42f586bfe507d31fe4a8205b1709092af5355dd14c8ba0f2ec2dc15ee"}, 0xd8) 3.814558093s ago: executing program 5 (id=3900): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f001, 0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)={0x40, 0xb, 0x1, "16"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x0, 0x16, 0x5, "8f2395ed0d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.252027429s ago: executing program 2 (id=3909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100ffffffffffffff81000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 2.059882642s ago: executing program 2 (id=3913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) 2.002176345s ago: executing program 2 (id=3915): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='mode\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000015000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x17, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) ioctl$BLKFINISHZONE(r5, 0x40101288, &(0x7f0000000180)={0x8000000000000000, 0x9}) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB='\x00'/10], 0x0}, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='vxfs\x00', 0x1000080, 0x0) write$bt_hci(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xbb) r7 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) ioctl$HIDIOCGNAME(r7, 0x80404806, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x8004, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB="2c726f6d746d6f64653d2e0b806a303030303030303030303032303030302c7579a5169769643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) semtimedop(0x0, 0x0, 0x0, 0x0) sendfile(r8, r0, 0x0, 0xfffc) 1.727808946s ago: executing program 5 (id=3917): r0 = creat(&(0x7f0000000040)='./file0/file0\x00', 0xc5) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(0xffffffffffffffff, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r3, 0x7}, 0x14}}, 0x8000) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000080)=0x2, 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 1.684234724s ago: executing program 0 (id=3919): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x6}}, 0x18) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r1, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r1, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) socket$igmp(0x2, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) 1.565988134s ago: executing program 0 (id=3921): creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='bfs\x00', 0x208003, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x71) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='bfs\x00', 0x208003, 0x0) (async) 1.548775701s ago: executing program 0 (id=3922): r0 = msgget$private(0x0, 0x1ba) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @void, @void, @void, @void, @void}, 0x35) rt_tgsigqueueinfo(0x0, 0x0, 0x2d, &(0x7f0000000100)={0x1a, 0x1, 0xe}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000700000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900021073797a31000000000900"], 0xc4}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x2) set_mempolicy_home_node(&(0x7f0000052000/0x3000)=nil, 0x3000, 0x1, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000049a80220cba84112afc450db7cd15b8d4059a6a78f476e1ead359fde65839080fddf1379d7d9510f9e362055cb04e0fa6bc1876d8633c9c368ce9aab0067"], 0x8, 0x800) msgsnd(r0, 0x0, 0x401, 0x0) msgrcv(r0, &(0x7f0000000080)={0x0, ""/146}, 0x9a, 0x0, 0x1000) 879.274987ms ago: executing program 5 (id=3926): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000004d80), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) 846.363944ms ago: executing program 0 (id=3927): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000100"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x0, 0x16, 0x5, "8f2395ed0d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$cdc_ecm(0x6, 0x63, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0x8, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x7, {{0xa, 0x24, 0x6, 0x0, 0x0, "1e96791811"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x0, 0x1, 0x6a}, [@country_functional={0x8, 0x24, 0x7, 0xc1, 0x4afd, [0x9]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0x81, 0x7c}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x4, 0x7}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0xac, 0x2, 0xfd, 0x40, 0x95}, 0xfd, &(0x7f0000000740)={0x5, 0xf, 0xfd, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x40, 0x880f, 0x9, [0xff600f, 0x3fc0, 0x11f7295367740c44, 0xffc00f, 0x0]}, @generic={0xd1, 0x10, 0x3, "670671e4216022e020923eadc7dacf9b6436b3281478b187e0b10c113c1fe30522c6fce33031fa1bfd8c2d6783c373147ee68e13e1f90623d4566a674fd8713e6b78f9f1b468ccdfe902ed336ec76d7f08c8017c6e7a66dcd7e5dcfc75285a4cb1ce76088c5ffd70d3ca6457a595323e9199d3f1421491f752cc7f48e347f32f6a0b233175aeeae51d0f34863cb866a272bf67a32ddfa3c578c91ca88b147749087e9639c7f8d11bb8d71c3f12ec314006137e806c77a9d125c1617e6047e3502a8e8c2af9e396c1b1c2c1bd931a"}, @ext_cap={0x7, 0x10, 0x2, 0xef4c4f75f8fa8a33, 0x0, 0xc}]}, 0x7, [{0xdd, &(0x7f0000000140)=@string={0xdd, 0x3, "74e3cd0fd06c168006673b2a0efd9ca6c32649411516132e956b05038221ad6e057851f1ca39719a2787545e15d03bd8e5ada460dd014a0e2c1e154b37b078c81146108987b62d82632118ff7c2272b129b931d2b326e0ab5b73393080d96d9dc4580b610ce08ff2a87503b5883bbb2424bfeea4d71421c759c5caf907b95f61c297c56ff41a1ca0f776a913d7e24339f3e73642b724ea7573b45b90ff443e2dfb9a4ce4cd63048240031eb1ce1266aef986274f28089ed0690261a04fe1c4862599bfdbbd79021481908fa5fa16fb16f96d3b1de1278bda9fac37"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x43e}}, {0x76, &(0x7f00000003c0)=@string={0x76, 0x3, "e9c8d97b12f624240ed345735a62a93d551c3146e4a575e3edbe8aef3648afc8e32902a9b76fce340a3a93e35cf02ba2ff61cffcebe6a8d1be5baaa4f10f0263b27bc76d6143e0c25708144098d1822aadb5f703f4a99e4a47068607d57bbdbc6a0534dd6201b0ed78a08cd66d70dec018b09c9a"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc0a}}, {0x11, &(0x7f0000000440)=@string={0x11, 0x3, "6bb28e6a5a78738c6b2398170a4575"}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000600)={0x14, &(0x7f0000000500)={0x0, 0x24, 0x5a, {0x5a, 0x21, "3522d3d6ffaaff858ae43e51a768260a6cf19cbf984af46533cbed944565b9ee8b345660cbbb33315d3f979010c9f831bc85ac66d3bca64b261bf665c493223f8334ff1afc52c879fe49938dc6b861b8563976ff9dab58c6"}}, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x1c, &(0x7f0000000640)={0x40, 0x16, 0xe, "8e00bb286cf3eb1936dc5e3c4f92"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x10}}) 627.072132ms ago: executing program 1 (id=3929): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x30, @loopback, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r2, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000380)="57ac7c", 0x3}], 0x1}}], 0x1, 0x4000) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000800)="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", 0x160}, {&(0x7f0000000a40)="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", 0x2d5}], 0x2}, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='jfs\x00', 0x0, 0x0) 572.763709ms ago: executing program 1 (id=3930): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x6}}, 0x18) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r1, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r1, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) socket$igmp(0x2, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) 540.584699ms ago: executing program 1 (id=3931): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404529, 0x0) mount(&(0x7f0000000040)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='nilfs2\x00', 0x280808, 0x0) 460.350495ms ago: executing program 1 (id=3932): socket$kcm(0x10, 0x400000006, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) rt_sigtimedwait(&(0x7f0000000000)={[0x287b]}, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000007c0), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000900)={0x1, @pix={0x6, 0x8, 0x3631564e, 0x4, 0x5, 0x7, 0x6, 0x9, 0x1, 0x0, 0x2, 0x6}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) 457.565359ms ago: executing program 1 (id=3933): mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000000)={0x6, [0xfff7, 0xe7, 0x7af8, 0x1, 0x1c96, 0x3]}, 0x10) 425.201185ms ago: executing program 1 (id=3934): shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x2}, &(0x7f00000002c0)=0x8) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, &(0x7f00000006c0)) mmap(&(0x7f00003b7000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x3000) close(0xffffffffffffffff) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa001) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f00000002c0)={0x1, 0x1}) (fail_nth: 1) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0x1, 0x8, {0x8, 0x4, "9d08e364baba"}}, 0x0}, &(0x7f00000004c0)={0x44, &(0x7f0000000140)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000480)={0x20, 0x89, 0x2, 0x1}}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) 0s ago: executing program 5 (id=3935): r0 = msgget$private(0x0, 0x1ba) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @void, @void, @void, @void, @void}, 0x35) rt_tgsigqueueinfo(0x0, 0x0, 0x2d, &(0x7f0000000100)={0x1a, 0x1, 0xe}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000700000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900021073797a31000000000900"], 0xc4}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x2) set_mempolicy_home_node(&(0x7f0000052000/0x3000)=nil, 0x3000, 0x1, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000049a80220cba84112afc450db7cd15b8d4059a6a78f476e1ead359fde65839080fddf1379d7d9510f9e362055cb04e0fa6bc1876d8633c9c368ce9aab0067"], 0x8, 0x800) msgsnd(r0, 0x0, 0x401, 0x0) msgrcv(r0, &(0x7f0000000080)={0x0, ""/146}, 0x9a, 0x0, 0x1000) kernel console output (not intermixed with test programs): 80390][ T5920] usb 1-1: USB disconnect, device number 101 [ 495.800505][ T30] audit: type=1326 audit(1750753405.717:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15996 comm="syz.1.3334" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f804198e929 code=0x0 [ 495.826253][ T5902] usb 6-1: config 0 has an invalid interface number: 106 but max is 0 [ 495.843093][ T5902] usb 6-1: config 0 has no interface number 0 [ 495.854931][ T5902] usb 6-1: config 0 interface 106 has no altsetting 0 [ 495.875043][ T5902] usb 6-1: New USB device found, idVendor=413c, idProduct=8217, bcdDevice=b2.59 [ 495.903764][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.913378][ T5902] usb 6-1: Product: syz [ 495.917695][ T5902] usb 6-1: Manufacturer: syz [ 495.922461][ T5902] usb 6-1: SerialNumber: syz [ 495.935878][ T5902] usb 6-1: config 0 descriptor?? [ 495.991148][T16004] validate_nla: 6 callbacks suppressed [ 495.991167][T16004] netlink: 'syz.2.3336': attribute type 29 has an invalid length. [ 496.006736][T16004] netlink: 'syz.2.3336': attribute type 29 has an invalid length. [ 496.127384][T16008] loop2: detected capacity change from 0 to 7 [ 496.135049][T16008] Dev loop2: unable to read RDB block 7 [ 496.140714][T16008] loop2: unable to read partition table [ 496.146866][T16008] loop2: partition table beyond EOD, truncated [ 496.155333][ T5902] usb 6-1: USB disconnect, device number 17 [ 496.159230][T16008] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 496.412118][T16018] netlink: 'syz.2.3342': attribute type 10 has an invalid length. [ 496.519742][ T30] audit: type=1326 audit(1750753406.444:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16023 comm="syz.0.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69dfd8e929 code=0x7ffc0000 [ 496.545432][ T30] audit: type=1326 audit(1750753406.444:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16023 comm="syz.0.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f69dfd8e929 code=0x7ffc0000 [ 496.579984][T16028] netlink: 'syz.0.3345': attribute type 29 has an invalid length. [ 496.581415][ T30] audit: type=1326 audit(1750753406.444:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16023 comm="syz.0.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69dfd8e929 code=0x7ffc0000 [ 496.593398][T16028] netlink: 'syz.0.3345': attribute type 29 has an invalid length. [ 496.633325][ T30] audit: type=1326 audit(1750753406.444:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16023 comm="syz.0.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69dfd8e929 code=0x7ffc0000 [ 496.651125][T16030] loop2: detected capacity change from 0 to 7 [ 496.656060][ C0] vkms_vblank_simulate: vblank timer overrun [ 496.664389][ T5982] Dev loop2: unable to read RDB block 7 [ 496.670268][ T30] audit: type=1326 audit(1750753406.444:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16023 comm="syz.0.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f69dfd8e929 code=0x7ffc0000 [ 496.684512][ T5982] loop2: unable to read partition table [ 496.707671][ T5982] loop2: partition table beyond EOD, truncated [ 496.715310][T16030] Dev loop2: unable to read RDB block 7 [ 496.727523][ T5902] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 496.735500][T16030] loop2: unable to read partition table [ 496.753151][T16030] loop2: partition table beyond EOD, truncated [ 496.765948][T16030] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 496.881488][T16036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.898428][ T5902] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 496.907538][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.916090][ T5902] usb 3-1: Product: syz [ 496.928461][T16036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.936739][ T5902] usb 3-1: Manufacturer: syz [ 496.951762][ T5902] usb 3-1: SerialNumber: syz [ 496.973722][ T5902] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 497.000382][ T978] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 497.073885][T16040] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 497.137661][T16042] netlink: 'syz.5.3353': attribute type 10 has an invalid length. [ 497.614453][T16061] loop2: detected capacity change from 0 to 7 [ 497.624682][T16061] Dev loop2: unable to read RDB block 7 [ 497.630363][T16061] loop2: unable to read partition table [ 497.638274][T16061] loop2: partition table beyond EOD, truncated [ 497.651553][T16061] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 497.788477][T16059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.798890][ T5920] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 497.824358][T16059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.833980][T16067] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 497.851315][T16066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.861870][T16059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.877312][T16066] __nla_validate_parse: 1 callbacks suppressed [ 497.877367][T16066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3360'. [ 497.903270][T16059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.918366][T16059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.927689][T16059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.965610][ T5920] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 497.991199][T16066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.999799][T16071] netlink: 'syz.5.3363': attribute type 29 has an invalid length. [ 498.015440][ T5920] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 498.015583][T16071] netlink: 'syz.5.3363': attribute type 29 has an invalid length. [ 498.031560][ T5920] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 498.048937][ T5920] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 498.053516][ T978] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 498.058322][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.085511][T16066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.088269][ T978] ath9k_htc: Failed to initialize the device [ 498.097311][T16058] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 498.156470][ T978] usb 3-1: ath9k_htc: USB layer deinitialized [ 498.170950][ T6641] usb 3-1: USB disconnect, device number 113 [ 498.347301][T16058] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 498.357140][T16058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.367756][T16058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.389791][ T5920] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 498.406331][ T5920] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input31 [ 498.428474][ T5902] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 498.470628][ T5920] usb 1-1: USB disconnect, device number 102 [ 498.476738][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 498.585839][ T5902] usb 6-1: Using ep0 maxpacket: 32 [ 498.592842][ T5902] usb 6-1: config 0 interface 0 has no altsetting 0 [ 498.603603][ T5902] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 498.613182][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.621603][ T5902] usb 6-1: Product: syz [ 498.625950][ T5902] usb 6-1: Manufacturer: syz [ 498.630790][ T5902] usb 6-1: SerialNumber: syz [ 498.639005][ T5902] usb 6-1: config 0 descriptor?? [ 498.739028][T16085] tipc: Enabling of bearer rejected, already enabled [ 498.796175][T16087] loop2: detected capacity change from 0 to 7 [ 498.805157][T16087] Dev loop2: unable to read RDB block 7 [ 498.812585][T16087] loop2: unable to read partition table [ 498.823820][T16087] loop2: partition table beyond EOD, truncated [ 498.832861][T16087] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 499.007289][T16095] netlink: 'syz.1.3372': attribute type 29 has an invalid length. [ 499.018212][T16095] netlink: 'syz.1.3372': attribute type 29 has an invalid length. [ 499.065079][ T5902] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 499.268633][ T59] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 499.279753][ T5921] usb 1-1: new low-speed USB device number 103 using dummy_hcd [ 499.442595][ T5921] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 499.451868][ T5921] usb 1-1: config 0 has no interface number 0 [ 499.458206][ T5921] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 499.469164][ T5921] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 499.477412][ T5902] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 499.488485][ T5921] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 499.503833][ T5921] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 499.517555][ T5921] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 499.523407][ T5902] usb 6-1: USB disconnect, device number 18 [ 499.529194][ T5921] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 499.553527][ T5921] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 499.565388][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.582742][ T5921] usb 1-1: config 0 descriptor?? [ 499.588632][T16097] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 499.597458][T16097] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 499.619045][ T5921] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 499.834070][ T978] usb 1-1: USB disconnect, device number 103 [ 499.844312][ T978] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 500.038716][T16115] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3378'. [ 500.168323][T16119] loop2: detected capacity change from 0 to 7 [ 500.181186][T16119] Dev loop2: unable to read RDB block 7 [ 500.181188][T16118] netlink: 420 bytes leftover after parsing attributes in process `syz.5.3379'. [ 500.181229][T16119] loop2: unable to read partition table [ 500.205931][T16119] loop2: partition table beyond EOD, truncated [ 500.215886][T16119] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 500.510612][T16134] /dev/rnullb0: Can't open blockdev [ 500.588301][T16136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3389'. [ 500.629145][T16139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.652511][T16139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3387'. [ 500.698531][T16143] /dev/rnullb0: Can't open blockdev [ 500.769700][T16139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.837702][T16139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.900466][T16151] tipc: Enabling of bearer rejected, already enabled [ 501.223156][T16167] validate_nla: 2 callbacks suppressed [ 501.223175][T16167] netlink: 'syz.2.3398': attribute type 29 has an invalid length. [ 501.242488][T16167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3398'. [ 501.340345][T16176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3401'. [ 501.631257][T16193] /dev/nullb0: Can't open blockdev [ 501.650094][T16188] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 501.695051][T16195] syz.5.3409: attempt to access beyond end of device [ 501.695051][T16195] loop5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 501.721078][T16195] EXT4-fs (loop5): unable to read superblock [ 501.748711][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.755234][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.797000][T16197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.837392][T16197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.862616][T16202] netlink: 'syz.2.3412': attribute type 10 has an invalid length. [ 502.121637][ T5921] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 502.251836][ T5920] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 502.289665][ T5921] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 502.303115][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.316041][ T5921] usb 6-1: config 0 descriptor?? [ 502.425051][ T5920] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 502.445958][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.459932][ T5920] usb 1-1: Product: syz [ 502.465481][ T5920] usb 1-1: Manufacturer: syz [ 502.470414][ T5920] usb 1-1: SerialNumber: syz [ 502.489473][ T5920] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 502.516644][ T43] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 502.551592][ T5921] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 502.555203][T16226] netlink: 'syz.2.3423': attribute type 10 has an invalid length. [ 502.652400][T16229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3424'. [ 502.696583][T16231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.706008][T16231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.748218][T16203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.762277][T16203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.780651][T16234] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3426'. [ 502.802071][T16203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.816531][T16203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.851571][ T5921] [drm:udl_init] *ERROR* Selecting channel failed [ 502.911927][ T5921] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 502.921922][ T5921] [drm] Initialized udl on minor 2 [ 502.932905][ T5921] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 502.972765][ T5921] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 502.990542][ T5870] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 503.009945][ T5921] usb 6-1: USB disconnect, device number 19 [ 503.017563][ T5870] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 503.266008][ T5920] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 503.426415][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 503.434444][T16247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 503.443215][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 503.480488][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 503.512097][ T5920] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 503.522401][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.533239][ T5920] usb 3-1: Product: syz [ 503.538672][ T5920] usb 3-1: Manufacturer: syz [ 503.543564][ T5920] usb 3-1: SerialNumber: syz [ 503.558438][ T5920] usb 3-1: config 0 descriptor?? [ 503.580054][ T5920] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 503.589848][ T43] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 503.596950][ T43] ath9k_htc: Failed to initialize the device [ 503.603090][ T5920] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 503.624235][T16253] netlink: 'syz.1.3434': attribute type 29 has an invalid length. [ 503.633684][T16253] netlink: 'syz.1.3434': attribute type 29 has an invalid length. [ 503.640026][ T43] usb 1-1: ath9k_htc: USB layer deinitialized [ 503.755781][T16256] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 503.755781][T16256] The task syz.1.3435 (16256) triggered the difference, watch for misbehavior. [ 503.757871][ T5921] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 503.855471][ T43] usb 1-1: USB disconnect, device number 104 [ 503.960418][ T5921] usb 6-1: config 3 has an invalid interface number: 249 but max is 0 [ 503.969004][ T5921] usb 6-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config [ 503.979974][ T5921] usb 6-1: config 3 has no interface number 0 [ 503.986554][ T5921] usb 6-1: config 3 interface 249 altsetting 9 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 504.001397][ T5921] usb 6-1: config 3 interface 249 altsetting 9 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 504.012760][ T5921] usb 6-1: config 3 interface 249 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 504.023964][ T5921] usb 6-1: config 3 interface 249 has no altsetting 0 [ 504.032812][ T5921] usb 6-1: New USB device found, idVendor=0bfd, idProduct=010d, bcdDevice=1c.de [ 504.042324][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.050638][ T5921] usb 6-1: Product: syz [ 504.054921][ T5921] usb 6-1: Manufacturer: syz [ 504.059999][ T5921] usb 6-1: SerialNumber: syz [ 504.067942][T16249] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 504.188376][ T5920] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 504.196958][ T5920] em28xx 3-1:0.0: Config register raw data: 0x16 [ 504.298571][ T5921] kvaser_usb 6-1:3.249: error -ENODEV: Cannot get usb endpoint(s) [ 504.314026][ T5921] usb 6-1: USB disconnect, device number 20 [ 504.420455][ T5920] em28xx 3-1:0.0: AC97 command still being executed: not handled properly! [ 504.432435][ T5920] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 504.441409][ T5920] em28xx 3-1:0.0: No AC97 audio processor [ 504.610489][ T978] usb 3-1: USB disconnect, device number 114 [ 504.624039][ T978] em28xx 3-1:0.0: Disconnecting em28xx [ 504.632602][ T978] em28xx 3-1:0.0: Freeing device [ 504.639379][T16263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3438'. [ 504.671695][ T6641] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 504.819697][T16271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3441'. [ 504.822384][ T6641] usb 1-1: Using ep0 maxpacket: 32 [ 504.837577][ T6641] usb 1-1: config 0 interface 0 has no altsetting 0 [ 504.865572][ T6641] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 504.880459][ T6641] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.905166][ T6641] usb 1-1: Product: syz [ 504.915679][ T6641] usb 1-1: Manufacturer: syz [ 504.920472][ T6641] usb 1-1: SerialNumber: syz [ 504.941956][ T6641] usb 1-1: config 0 descriptor?? [ 504.989517][T16278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.002667][T16278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.064282][T16280] loop2: detected capacity change from 0 to 7 [ 505.071496][T16280] Dev loop2: unable to read RDB block 7 [ 505.077392][T16280] loop2: unable to read partition table [ 505.085491][T16280] loop2: partition table beyond EOD, truncated [ 505.091970][T16280] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 505.242165][T16284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 505.367452][ T6641] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 505.385490][T16288] netlink: 'syz.5.3449': attribute type 10 has an invalid length. [ 505.673828][T16296] sit0: entered promiscuous mode [ 505.699654][T16296] netlink: 'syz.1.3453': attribute type 1 has an invalid length. [ 505.729445][T16296] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3453'. [ 505.769960][ T6641] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 505.824682][ T6641] usb 1-1: USB disconnect, device number 105 [ 505.952043][T16302] tipc: Enabling of bearer rejected, already enabled [ 506.056038][T16306] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 506.230385][T16312] netlink: 'syz.2.3460': attribute type 10 has an invalid length. [ 506.307786][T16314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.341138][T16314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.447232][T16316] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3462'. [ 506.971043][ T5921] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 507.156296][T16328] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 507.165886][ T5921] usb 1-1: too many configurations: 13, using maximum allowed: 8 [ 507.193356][ T5921] usb 1-1: config 0 has no interfaces? [ 507.200065][ T5921] usb 1-1: config 0 has no interfaces? [ 507.216414][ T5921] usb 1-1: config 0 has no interfaces? [ 507.223723][ T5921] usb 1-1: config 0 has no interfaces? [ 507.243558][ T5921] usb 1-1: config 0 has no interfaces? [ 507.260862][ T5921] usb 1-1: config 0 has no interfaces? [ 507.271334][ T5921] usb 1-1: config 0 has no interfaces? [ 507.278919][ T5921] usb 1-1: config 0 has no interfaces? [ 507.299219][ T5921] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 507.315255][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.332119][ T5921] usb 1-1: Product: syz [ 507.336333][ T5921] usb 1-1: Manufacturer: syz [ 507.342771][ T5921] usb 1-1: SerialNumber: syz [ 507.353411][ T5921] usb 1-1: config 0 descriptor?? [ 507.407154][T16330] netlink: 'syz.1.3468': attribute type 21 has an invalid length. [ 507.423342][T16330] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3468'. [ 507.442229][T16334] netlink: 'syz.2.3469': attribute type 29 has an invalid length. [ 507.460735][T16334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3469'. [ 507.567009][ T5921] usb 1-1: USB disconnect, device number 106 [ 507.643941][T16341] loop2: detected capacity change from 0 to 7 [ 507.654030][ T5982] Dev loop2: unable to read RDB block 7 [ 507.659652][ T5982] loop2: unable to read partition table [ 507.667156][ T5982] loop2: partition table beyond EOD, truncated [ 507.675576][T16341] Dev loop2: unable to read RDB block 7 [ 507.683897][T16341] loop2: unable to read partition table [ 507.689849][T16341] loop2: partition table beyond EOD, truncated [ 507.698167][T16341] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 508.021679][T16292] netlink: 'syz.5.3451': attribute type 10 has an invalid length. [ 508.074924][ T6641] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 508.219378][T16355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.231095][T16355] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3477'. [ 508.239627][ T6641] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 508.240797][ T5921] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 508.266611][ T43] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 508.270450][ T6641] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.276144][ T43] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 508.293048][ T13] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 508.300856][ T13] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 508.307928][ T13] wlan1: authentication with 08:02:11:00:00:00 timed out [ 508.315589][ T6641] usb 3-1: Product: syz [ 508.321332][ T6641] usb 3-1: Manufacturer: syz [ 508.326926][ T6641] usb 3-1: SerialNumber: syz [ 508.338760][ T6641] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 508.356453][ T978] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 508.381827][T16355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.447424][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 508.460703][T16357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.461350][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 508.485667][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 48, changing to 9 [ 508.501618][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 8240, setting to 1024 [ 508.519843][ T5921] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 508.529751][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.537951][ T5921] usb 1-1: Product: syz [ 508.542415][ T5921] usb 1-1: Manufacturer: syz [ 508.547595][ T5921] usb 1-1: SerialNumber: syz [ 508.555357][ T5921] usb 1-1: config 0 descriptor?? [ 508.767927][ T5921] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 508.833089][T16365] netlink: 'syz.1.3481': attribute type 29 has an invalid length. [ 508.845286][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3481'. [ 508.896948][T16367] loop2: detected capacity change from 0 to 7 [ 508.904908][T16367] Dev loop2: unable to read RDB block 7 [ 508.913872][T16367] loop2: unable to read partition table [ 508.920706][T16367] loop2: partition table beyond EOD, truncated [ 508.927066][T16367] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 509.027427][T16370] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3483'. [ 509.200703][ T5921] usb 1-1: USB disconnect, device number 107 [ 509.286928][T16370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.304732][T16370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.325485][T16370] bond0 (unregistering): Released all slaves [ 509.346941][T16372] netlink: 'syz.1.3483': attribute type 29 has an invalid length. [ 509.355487][T16374] netlink: 'syz.1.3483': attribute type 29 has an invalid length. [ 509.445611][T16380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.454775][ T978] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 509.455131][T16380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.462153][ T978] ath9k_htc: Failed to initialize the device [ 509.499481][ T978] usb 3-1: ath9k_htc: USB layer deinitialized [ 509.509949][ T5921] usb 3-1: USB disconnect, device number 115 [ 510.000773][T16390] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 510.034610][T16392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.072705][T16392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.137280][T16396] loop2: detected capacity change from 0 to 7 [ 510.152711][ T6641] usb 1-1: new full-speed USB device number 108 using dummy_hcd [ 510.161884][ T5982] Dev loop2: unable to read RDB block 7 [ 510.180931][ T5982] loop2: unable to read partition table [ 510.191788][T16398] netlink: 'syz.5.3494': attribute type 29 has an invalid length. [ 510.195222][ T5982] loop2: partition table beyond EOD, truncated [ 510.200075][T16398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3494'. [ 510.222130][T16396] Dev loop2: unable to read RDB block 7 [ 510.228674][T16396] loop2: unable to read partition table [ 510.235168][T16396] loop2: partition table beyond EOD, truncated [ 510.244677][T16396] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 510.327406][ T6641] usb 1-1: config 3 has an invalid interface number: 249 but max is 0 [ 510.345558][ T6641] usb 1-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config [ 510.359255][ T6641] usb 1-1: config 3 has no interface number 0 [ 510.366772][ T6641] usb 1-1: config 3 interface 249 altsetting 9 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 510.396545][ T6641] usb 1-1: config 3 interface 249 altsetting 9 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 510.410280][ T6641] usb 1-1: config 3 interface 249 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 510.477389][ T6641] usb 1-1: config 3 interface 249 has no altsetting 0 [ 510.493543][ T6641] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010d, bcdDevice=1c.de [ 510.507678][ T6641] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.516828][ T6641] usb 1-1: Product: syz [ 510.521154][ T6641] usb 1-1: Manufacturer: syz [ 510.528412][ T6641] usb 1-1: SerialNumber: syz [ 510.540624][T16388] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 510.765363][T16409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.785485][T16409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.789001][ T6641] kvaser_usb 1-1:3.249: error -ENODEV: Cannot get usb endpoint(s) [ 510.835525][ T6641] usb 1-1: USB disconnect, device number 108 [ 510.850302][T16409] /dev/rnullb0: Can't open blockdev [ 511.080669][T16416] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 511.428566][T16430] netlink: 'syz.0.3508': attribute type 29 has an invalid length. [ 511.440495][T16430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3508'. [ 511.538339][ T6641] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 511.565949][T16439] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 511.637664][T16443] FAULT_INJECTION: forcing a failure. [ 511.637664][T16443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.656190][T16443] CPU: 0 UID: 0 PID: 16443 Comm: syz.2.3514 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 511.656216][T16443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 511.656227][T16443] Call Trace: [ 511.656234][T16443] [ 511.656242][T16443] dump_stack_lvl+0x189/0x250 [ 511.656266][T16443] ? __pfx____ratelimit+0x10/0x10 [ 511.656292][T16443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.656318][T16443] ? __pfx__printk+0x10/0x10 [ 511.656337][T16443] ? __might_fault+0xb0/0x130 [ 511.656367][T16443] should_fail_ex+0x414/0x560 [ 511.656393][T16443] _copy_from_iter+0x1db/0x16f0 [ 511.656421][T16443] ? rcu_is_watching+0x15/0xb0 [ 511.656441][T16443] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 511.656463][T16443] ? __pfx__copy_from_iter+0x10/0x10 [ 511.656488][T16443] ? __build_skb_around+0x257/0x3e0 [ 511.656511][T16443] ? netlink_sendmsg+0x642/0xb30 [ 511.656530][T16443] ? skb_put+0x11b/0x210 [ 511.656553][T16443] netlink_sendmsg+0x6b2/0xb30 [ 511.656582][T16443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.656606][T16443] ? aa_sock_msg_perm+0x94/0x160 [ 511.656624][T16443] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 511.656645][T16443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.656666][T16443] __sock_sendmsg+0x219/0x270 [ 511.656694][T16443] ____sys_sendmsg+0x505/0x830 [ 511.656724][T16443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 511.656754][T16443] ? import_iovec+0x74/0xa0 [ 511.656775][T16443] ___sys_sendmsg+0x21f/0x2a0 [ 511.656798][T16443] ? __pfx____sys_sendmsg+0x10/0x10 [ 511.656853][T16443] ? __fget_files+0x2a/0x420 [ 511.656875][T16443] ? __fget_files+0x3a0/0x420 [ 511.656908][T16443] __x64_sys_sendmsg+0x19b/0x260 [ 511.656932][T16443] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 511.656962][T16443] ? __pfx_ksys_write+0x10/0x10 [ 511.656989][T16443] ? do_syscall_64+0xbe/0x3b0 [ 511.657008][T16443] do_syscall_64+0xfa/0x3b0 [ 511.657024][T16443] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.657046][T16443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.657063][T16443] ? clear_bhb_loop+0x60/0xb0 [ 511.657083][T16443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.657100][T16443] RIP: 0033:0x7fe7d3f8e929 [ 511.657116][T16443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.657131][T16443] RSP: 002b:00007fe7d4d91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.657149][T16443] RAX: ffffffffffffffda RBX: 00007fe7d41b5fa0 RCX: 00007fe7d3f8e929 [ 511.657161][T16443] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 511.657172][T16443] RBP: 00007fe7d4d91090 R08: 0000000000000000 R09: 0000000000000000 [ 511.657183][T16443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.657194][T16443] R13: 0000000000000000 R14: 00007fe7d41b5fa0 R15: 00007fff5b7289f8 [ 511.657220][T16443] [ 511.938877][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.959269][ T6641] usb 6-1: Using ep0 maxpacket: 32 [ 511.966171][ T6641] usb 6-1: config 0 interface 0 has no altsetting 0 [ 511.999487][ T5889] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 512.263299][ T6641] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 512.280393][ T6641] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.288422][ T6641] usb 6-1: Product: syz [ 512.310434][ T6641] usb 6-1: Manufacturer: syz [ 512.315069][ T6641] usb 6-1: SerialNumber: syz [ 512.325972][ T6641] usb 6-1: config 0 descriptor?? [ 512.340840][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 512.347852][ T5889] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 512.359635][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 512.372781][ T5889] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 512.381077][ T5921] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 512.382137][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.397708][ T5889] usb 1-1: Product: syz [ 512.402068][ T5889] usb 1-1: Manufacturer: syz [ 512.406697][ T5889] usb 1-1: SerialNumber: syz [ 512.414511][ T5889] usb 1-1: config 0 descriptor?? [ 512.425467][ T5889] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 512.435120][ T5889] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 512.545483][ T5921] usb 3-1: config 3 has an invalid interface number: 249 but max is 0 [ 512.554153][ T5921] usb 3-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config [ 512.566796][ T5921] usb 3-1: config 3 has no interface number 0 [ 512.572987][ T5921] usb 3-1: config 3 interface 249 altsetting 9 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 512.584530][ T5921] usb 3-1: config 3 interface 249 altsetting 9 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 512.595723][ T5921] usb 3-1: config 3 interface 249 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 512.606790][ T5921] usb 3-1: config 3 interface 249 has no altsetting 0 [ 512.617381][ T5921] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010d, bcdDevice=1c.de [ 512.627723][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.635821][ T5921] usb 3-1: Product: syz [ 512.640040][ T5921] usb 3-1: Manufacturer: syz [ 512.644875][ T5921] usb 3-1: SerialNumber: syz [ 512.657728][T16449] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 512.740521][ T6641] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 512.878890][ T5921] kvaser_usb 3-1:3.249: error -ENODEV: Cannot get usb endpoint(s) [ 512.898746][ T5921] usb 3-1: USB disconnect, device number 116 [ 512.969992][T16452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.982659][T16452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.994416][T16452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.003743][T16452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.035719][ T5889] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 513.042438][ T5889] em28xx 1-1:0.0: Config register raw data: 0x16 [ 513.144374][ T6641] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 513.165747][ T6641] usb 6-1: USB disconnect, device number 21 [ 513.264957][ T5889] em28xx 1-1:0.0: AC97 command still being executed: not handled properly! [ 513.273690][ T5889] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 513.282692][ T5889] em28xx 1-1:0.0: No AC97 audio processor [ 513.451928][ T5921] usb 1-1: USB disconnect, device number 109 [ 513.467001][ T5921] em28xx 1-1:0.0: Disconnecting em28xx [ 513.485447][ T5921] em28xx 1-1:0.0: Freeing device [ 513.496911][T16456] netlink: 'syz.2.3520': attribute type 29 has an invalid length. [ 513.509080][T16456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3520'. [ 513.703004][T16465] binder: 16463:16465 ioctl 4008af03 2000000007c0 returned -22 [ 513.770401][T16468] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3524'. [ 513.961466][T16472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.974905][T16472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.065721][T16479] netlink: 'syz.0.3529': attribute type 29 has an invalid length. [ 514.075157][T16479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3529'. [ 514.251207][T16489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3533'. [ 514.287619][ T5921] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 514.341954][T16493] netlink: 'syz.0.3535': attribute type 10 has an invalid length. [ 514.442604][ T5921] usb 6-1: config 3 has an invalid interface number: 249 but max is 0 [ 514.454520][ T5921] usb 6-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config [ 514.465669][ T5921] usb 6-1: config 3 has no interface number 0 [ 514.472022][ T5921] usb 6-1: config 3 interface 249 altsetting 9 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 514.485097][ T5921] usb 6-1: config 3 interface 249 altsetting 9 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 514.496037][ T5921] usb 6-1: config 3 interface 249 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 514.506965][ T5921] usb 6-1: config 3 interface 249 has no altsetting 0 [ 514.516269][ T5921] usb 6-1: New USB device found, idVendor=0bfd, idProduct=010d, bcdDevice=1c.de [ 514.526413][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.534563][ T5921] usb 6-1: Product: syz [ 514.538875][ T5921] usb 6-1: Manufacturer: syz [ 514.543562][ T5921] usb 6-1: SerialNumber: syz [ 514.551900][T16477] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 514.773611][ T5921] kvaser_usb 6-1:3.249: error -ENODEV: Cannot get usb endpoint(s) [ 514.787710][ T5921] usb 6-1: USB disconnect, device number 22 [ 515.217277][T16496] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 515.223878][T16496] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 515.230005][T16496] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 515.239264][T16496] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 515.248235][T16504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.280984][T16504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.330543][T16507] netlink: 'syz.0.3539': attribute type 29 has an invalid length. [ 515.343536][T16507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3539'. [ 515.647033][ T5921] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 515.678810][T16522] FAULT_INJECTION: forcing a failure. [ 515.678810][T16522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.706835][T16522] CPU: 0 UID: 0 PID: 16522 Comm: syz.0.3546 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 515.706861][T16522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 515.706872][T16522] Call Trace: [ 515.706879][T16522] [ 515.706887][T16522] dump_stack_lvl+0x189/0x250 [ 515.706910][T16522] ? __pfx____ratelimit+0x10/0x10 [ 515.706936][T16522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 515.706953][T16522] ? __pfx__printk+0x10/0x10 [ 515.706972][T16522] ? __might_fault+0xb0/0x130 [ 515.707002][T16522] should_fail_ex+0x414/0x560 [ 515.707026][T16522] _copy_from_user+0x2d/0xb0 [ 515.707044][T16522] ___sys_sendmsg+0x158/0x2a0 [ 515.707066][T16522] ? __pfx____sys_sendmsg+0x10/0x10 [ 515.707116][T16522] ? __fget_files+0x2a/0x420 [ 515.707136][T16522] ? __fget_files+0x3a0/0x420 [ 515.707166][T16522] __x64_sys_sendmsg+0x19b/0x260 [ 515.707187][T16522] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 515.707214][T16522] ? __pfx_ksys_write+0x10/0x10 [ 515.707232][T16522] ? rcu_is_watching+0x15/0xb0 [ 515.707256][T16522] ? do_syscall_64+0xbe/0x3b0 [ 515.707275][T16522] do_syscall_64+0xfa/0x3b0 [ 515.707289][T16522] ? lockdep_hardirqs_on+0x9c/0x150 [ 515.707310][T16522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.707326][T16522] ? clear_bhb_loop+0x60/0xb0 [ 515.707345][T16522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.707362][T16522] RIP: 0033:0x7f69dfd8e929 [ 515.707375][T16522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.707389][T16522] RSP: 002b:00007f69e0c40038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.707405][T16522] RAX: ffffffffffffffda RBX: 00007f69dffb5fa0 RCX: 00007f69dfd8e929 [ 515.707417][T16522] RDX: 0000000022044800 RSI: 0000200000000400 RDI: 0000000000000003 [ 515.707429][T16522] RBP: 00007f69e0c40090 R08: 0000000000000000 R09: 0000000000000000 [ 515.707440][T16522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.707449][T16522] R13: 0000000000000000 R14: 00007f69dffb5fa0 R15: 00007ffd99d5ca98 [ 515.707475][T16522] [ 515.726884][T16524] netlink: 'syz.5.3547': attribute type 10 has an invalid length. [ 515.774907][T16526] tipc: Enabling of bearer rejected, already enabled [ 515.871251][ C0] vkms_vblank_simulate: vblank timer overrun [ 515.893216][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 516.000389][ T5921] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 516.028539][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.062309][ T5921] usb 3-1: config 0 descriptor?? [ 516.091337][ T5921] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 516.106986][T16535] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3551'. [ 516.244797][T16537] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 516.250521][T16539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.267953][T16539] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3553'. [ 516.284731][ T5921] gspca_nw80x: reg_w err -71 [ 516.289462][ T5921] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 516.291160][ T6641] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 516.305192][ T5921] usb 3-1: USB disconnect, device number 117 [ 516.316482][ T6641] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 516.323940][ T59] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 516.332951][ T5902] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 516.341926][ T59] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 516.357616][ T59] wlan1: authentication with 08:02:11:00:00:00 timed out [ 516.359669][T16539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.429303][T16539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.439696][ T5153] Bluetooth: hci3: command 0x0c1a tx timeout [ 516.461066][T16543] XFS (rnullb0): Invalid superblock magic number [ 516.526775][ T5902] usb 1-1: config 3 has an invalid interface number: 249 but max is 0 [ 516.544009][ T5902] usb 1-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config [ 516.554567][ T5902] usb 1-1: config 3 has no interface number 0 [ 516.561507][ T5902] usb 1-1: config 3 interface 249 altsetting 9 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 516.572733][ T5902] usb 1-1: config 3 interface 249 altsetting 9 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 516.583919][ T5902] usb 1-1: config 3 interface 249 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 516.602261][ T5902] usb 1-1: config 3 interface 249 has no altsetting 0 [ 516.611650][ T5902] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010d, bcdDevice=1c.de [ 516.621681][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.629890][ T5902] usb 1-1: Product: syz [ 516.634166][ T5902] usb 1-1: Manufacturer: syz [ 516.638842][ T5902] usb 1-1: SerialNumber: syz [ 516.647866][T16533] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 516.883624][ T5902] kvaser_usb 1-1:3.249: error -ENODEV: Cannot get usb endpoint(s) [ 516.919706][ T5902] usb 1-1: USB disconnect, device number 110 [ 517.140647][T16565] tipc: Enabling of bearer rejected, already enabled [ 517.167486][ T5921] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 517.221540][T16572] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3561'. [ 517.241946][ T5153] Bluetooth: hci4: command 0x0405 tx timeout [ 517.248557][ T5153] Bluetooth: hci2: command 0x0c1a tx timeout [ 517.293249][T16575] FAULT_INJECTION: forcing a failure. [ 517.293249][T16575] name failslab, interval 1, probability 0, space 0, times 0 [ 517.311561][T16575] CPU: 1 UID: 0 PID: 16575 Comm: syz.1.3562 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 517.311589][T16575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 517.311600][T16575] Call Trace: [ 517.311615][T16575] [ 517.311622][T16575] dump_stack_lvl+0x189/0x250 [ 517.311648][T16575] ? __pfx____ratelimit+0x10/0x10 [ 517.311673][T16575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 517.311692][T16575] ? __pfx__printk+0x10/0x10 [ 517.311717][T16575] ? __pfx___might_resched+0x10/0x10 [ 517.311735][T16575] ? fs_reclaim_acquire+0x7d/0x100 [ 517.311763][T16575] should_fail_ex+0x414/0x560 [ 517.311789][T16575] should_failslab+0xa8/0x100 [ 517.311813][T16575] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 517.311833][T16575] ? __alloc_skb+0x112/0x2d0 [ 517.311856][T16575] __alloc_skb+0x112/0x2d0 [ 517.311880][T16575] netlink_ack+0x146/0xa50 [ 517.311897][T16575] ? __pfx_genl_rcv_msg+0x10/0x10 [ 517.311919][T16575] ? ref_tracker_free+0x63a/0x7d0 [ 517.311944][T16575] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 517.311967][T16575] ? __pfx_nl80211_post_doit+0x10/0x10 [ 517.311990][T16575] ? __pfx_ref_tracker_free+0x10/0x10 [ 517.312022][T16575] netlink_rcv_skb+0x28c/0x470 [ 517.312044][T16575] ? __pfx_genl_rcv_msg+0x10/0x10 [ 517.312069][T16575] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 517.312105][T16575] ? down_read+0x1ad/0x2e0 [ 517.312126][T16575] genl_rcv+0x28/0x40 [ 517.312147][T16575] netlink_unicast+0x75b/0x8d0 [ 517.312177][T16575] netlink_sendmsg+0x805/0xb30 [ 517.312207][T16575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.312231][T16575] ? aa_sock_msg_perm+0x94/0x160 [ 517.312251][T16575] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 517.312274][T16575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.312295][T16575] __sock_sendmsg+0x219/0x270 [ 517.312324][T16575] ____sys_sendmsg+0x505/0x830 [ 517.312352][T16575] ? __pfx_____sys_sendmsg+0x10/0x10 [ 517.312401][T16575] ? import_iovec+0x74/0xa0 [ 517.312420][T16575] ___sys_sendmsg+0x21f/0x2a0 [ 517.312442][T16575] ? __pfx____sys_sendmsg+0x10/0x10 [ 517.312491][T16575] ? __fget_files+0x2a/0x420 [ 517.312512][T16575] ? __fget_files+0x3a0/0x420 [ 517.312546][T16575] __x64_sys_sendmsg+0x19b/0x260 [ 517.312569][T16575] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 517.312600][T16575] ? __pfx_ksys_write+0x10/0x10 [ 517.312626][T16575] ? rcu_is_watching+0x15/0xb0 [ 517.312651][T16575] ? do_syscall_64+0xbe/0x3b0 [ 517.312672][T16575] do_syscall_64+0xfa/0x3b0 [ 517.312687][T16575] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.312710][T16575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.312728][T16575] ? clear_bhb_loop+0x60/0xb0 [ 517.312748][T16575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.312765][T16575] RIP: 0033:0x7f804198e929 [ 517.312782][T16575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.312798][T16575] RSP: 002b:00007f8042878038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 517.312817][T16575] RAX: ffffffffffffffda RBX: 00007f8041bb5fa0 RCX: 00007f804198e929 [ 517.312830][T16575] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 517.312841][T16575] RBP: 00007f8042878090 R08: 0000000000000000 R09: 0000000000000000 [ 517.312851][T16575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.312861][T16575] R13: 0000000000000000 R14: 00007f8041bb5fa0 R15: 00007ffcd1956c28 [ 517.312890][T16575] [ 517.664071][T16573] Bluetooth: hci0: command 0x0c1a tx timeout [ 517.699256][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 517.706463][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 517.718409][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 517.737673][ T5921] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 517.748170][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.756259][ T5921] usb 3-1: Product: syz [ 517.760584][ T5921] usb 3-1: Manufacturer: syz [ 517.765208][ T5921] usb 3-1: SerialNumber: syz [ 517.791301][ T5921] usb 3-1: config 0 descriptor?? [ 517.801121][ T5921] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 517.810871][ T5921] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 517.910979][T16586] tipc: Enabled bearer , priority 0 [ 517.920097][T16586] tipc: Resetting bearer [ 517.934880][T16586] tipc: Enabling of bearer rejected, already enabled [ 517.997661][T16589] tipc: Disabling bearer [ 518.164662][T16603] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3570'. [ 518.207182][T16605] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 518.254980][T16607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.287717][T16609] netlink: 'syz.5.3573': attribute type 10 has an invalid length. [ 518.294355][T16607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.393864][T16613] vivid-000: disconnect [ 518.406272][ T5921] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 518.413340][ T5921] em28xx 3-1:0.0: Config register raw data: 0x16 [ 518.622135][ T5920] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 518.632964][ T5921] em28xx 3-1:0.0: AC97 command still being executed: not handled properly! [ 518.641620][ T5921] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 518.656626][ T5921] em28xx 3-1:0.0: No AC97 audio processor [ 518.656737][T16612] vivid-000: reconnect [ 518.802593][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 518.810999][ T5920] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 518.819821][ T5920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.834850][ T43] usb 3-1: USB disconnect, device number 118 [ 518.842242][ T43] em28xx 3-1:0.0: Disconnecting em28xx [ 518.850329][ T5920] usb 1-1: config 0 has no interface number 0 [ 518.857394][ T5920] usb 1-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 518.868279][ T43] em28xx 3-1:0.0: Freeing device [ 518.876968][ T5920] usb 1-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 518.899669][ T5920] usb 1-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 518.909596][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.920168][ T5920] usb 1-1: Product: syz [ 518.924765][ T5920] usb 1-1: Manufacturer: syz [ 518.929400][ T5920] usb 1-1: SerialNumber: syz [ 518.939346][ T5920] usb 1-1: config 0 descriptor?? [ 518.946782][T16611] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 518.956809][ T5920] usb-storage 1-1:0.231: USB Mass Storage device detected [ 518.982056][T16629] /dev/rnullb0: Can't open blockdev [ 519.170301][ T6641] usb 1-1: USB disconnect, device number 111 [ 519.302964][T16640] FAULT_INJECTION: forcing a failure. [ 519.302964][T16640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.316268][T16640] CPU: 1 UID: 0 PID: 16640 Comm: syz.1.3581 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 519.316292][T16640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 519.316302][T16640] Call Trace: [ 519.316310][T16640] [ 519.316317][T16640] dump_stack_lvl+0x189/0x250 [ 519.316342][T16640] ? __pfx____ratelimit+0x10/0x10 [ 519.316375][T16640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.316394][T16640] ? __pfx__printk+0x10/0x10 [ 519.316414][T16640] ? __might_fault+0xb0/0x130 [ 519.316444][T16640] should_fail_ex+0x414/0x560 [ 519.316471][T16640] _copy_from_iter+0x1db/0x16f0 [ 519.316498][T16640] ? rcu_is_watching+0x15/0xb0 [ 519.316519][T16640] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 519.316542][T16640] ? __pfx__copy_from_iter+0x10/0x10 [ 519.316566][T16640] ? __build_skb_around+0x257/0x3e0 [ 519.316589][T16640] ? netlink_sendmsg+0x642/0xb30 [ 519.316608][T16640] ? skb_put+0x11b/0x210 [ 519.316630][T16640] netlink_sendmsg+0x6b2/0xb30 [ 519.316660][T16640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.316682][T16640] ? aa_sock_msg_perm+0x94/0x160 [ 519.316703][T16640] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 519.316726][T16640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.316747][T16640] __sock_sendmsg+0x219/0x270 [ 519.316775][T16640] ____sys_sendmsg+0x505/0x830 [ 519.316851][T16640] ? __pfx_____sys_sendmsg+0x10/0x10 [ 519.316881][T16640] ? import_iovec+0x74/0xa0 [ 519.316901][T16640] ___sys_sendmsg+0x21f/0x2a0 [ 519.316924][T16640] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.316976][T16640] ? __fget_files+0x2a/0x420 [ 519.316997][T16640] ? __fget_files+0x3a0/0x420 [ 519.317030][T16640] __x64_sys_sendmsg+0x19b/0x260 [ 519.317053][T16640] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 519.317083][T16640] ? __pfx_ksys_write+0x10/0x10 [ 519.317102][T16640] ? rcu_is_watching+0x15/0xb0 [ 519.317126][T16640] ? do_syscall_64+0xbe/0x3b0 [ 519.317146][T16640] do_syscall_64+0xfa/0x3b0 [ 519.317161][T16640] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.317184][T16640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.317201][T16640] ? clear_bhb_loop+0x60/0xb0 [ 519.317222][T16640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.317239][T16640] RIP: 0033:0x7f804198e929 [ 519.317255][T16640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.317270][T16640] RSP: 002b:00007f8042878038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.317288][T16640] RAX: ffffffffffffffda RBX: 00007f8041bb5fa0 RCX: 00007f804198e929 [ 519.317301][T16640] RDX: 0000000022044800 RSI: 0000200000000400 RDI: 0000000000000003 [ 519.317312][T16640] RBP: 00007f8042878090 R08: 0000000000000000 R09: 0000000000000000 [ 519.317324][T16640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.317334][T16640] R13: 0000000000000000 R14: 00007f8041bb5fa0 R15: 00007ffcd1956c28 [ 519.317367][T16640] [ 519.698497][T16646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 519.846231][T16651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3586'. [ 520.107125][ T5902] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 520.269156][ T5902] usb 6-1: Using ep0 maxpacket: 32 [ 520.276071][ T5902] usb 6-1: config 0 interface 0 has no altsetting 0 [ 520.277399][ T43] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 520.288539][ T5902] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 520.307352][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.315446][ T5902] usb 6-1: Product: syz [ 520.320293][ T5902] usb 6-1: Manufacturer: syz [ 520.324930][ T5902] usb 6-1: SerialNumber: syz [ 520.340305][ T5902] usb 6-1: config 0 descriptor?? [ 520.364246][T16666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.376229][T16666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.449753][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.460477][ T43] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 520.469677][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.480511][ T43] usb 3-1: config 0 descriptor?? [ 520.489129][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 520.754313][ T5902] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 520.891898][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 520.976828][T16671] usb usb1: usbfs: process 16671 (syz.0.3593) did not claim interface 0 before use [ 521.106219][T16659] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.3589'. [ 521.120239][ T43] pwc: recv_control_msg error -71 req 02 val 2c00 [ 521.127507][ T43] pwc: recv_control_msg error -71 req 04 val 1000 [ 521.140414][ T43] pwc: recv_control_msg error -71 req 04 val 1300 [ 521.147632][ T43] pwc: recv_control_msg error -71 req 04 val 1400 [ 521.154929][ T43] pwc: recv_control_msg error -71 req 02 val 2000 [ 521.162824][ T43] pwc: recv_control_msg error -71 req 02 val 2100 [ 521.168809][ T5902] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 521.169673][ T43] pwc: recv_control_msg error -71 req 04 val 1500 [ 521.184830][ T43] pwc: recv_control_msg error -71 req 02 val 2500 [ 521.198782][ T43] pwc: recv_control_msg error -71 req 02 val 2400 [ 521.212196][ T43] pwc: recv_control_msg error -71 req 02 val 2600 [ 521.217483][ T5902] usb 6-1: USB disconnect, device number 23 [ 521.219335][ T43] pwc: recv_control_msg error -71 req 02 val 2900 [ 521.234780][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 521.261743][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 521.268693][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 521.285663][ T43] pwc: Registered as video103. [ 521.306118][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32 [ 521.351276][T16680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 521.364543][ T43] usb 3-1: USB disconnect, device number 119 [ 521.465651][T16682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3598'. [ 521.535099][T16684] netlink: 'syz.1.3600': attribute type 3 has an invalid length. [ 521.638817][T16690] FAULT_INJECTION: forcing a failure. [ 521.638817][T16690] name failslab, interval 1, probability 0, space 0, times 0 [ 521.660649][T16690] CPU: 1 UID: 0 PID: 16690 Comm: syz.0.3602 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 521.660677][T16690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 521.660687][T16690] Call Trace: [ 521.660694][T16690] [ 521.660702][T16690] dump_stack_lvl+0x189/0x250 [ 521.660725][T16690] ? __pfx____ratelimit+0x10/0x10 [ 521.660750][T16690] ? __pfx_dump_stack_lvl+0x10/0x10 [ 521.660770][T16690] ? __pfx__printk+0x10/0x10 [ 521.660793][T16690] ? __pfx___might_resched+0x10/0x10 [ 521.660812][T16690] ? fs_reclaim_acquire+0x7d/0x100 [ 521.660841][T16690] should_fail_ex+0x414/0x560 [ 521.660868][T16690] should_failslab+0xa8/0x100 [ 521.660892][T16690] __kmalloc_noprof+0xcb/0x4f0 [ 521.660910][T16690] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 521.660929][T16690] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 521.660960][T16690] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 521.660993][T16690] genl_family_rcv_msg_doit+0xb8/0x300 [ 521.661024][T16690] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 521.661051][T16690] ? rcu_is_watching+0x15/0xb0 [ 521.661074][T16690] ? apparmor_capable+0x137/0x1b0 [ 521.661098][T16690] ? bpf_lsm_capable+0x9/0x20 [ 521.661116][T16690] ? security_capable+0x7e/0x2e0 [ 521.661141][T16690] genl_rcv_msg+0x60e/0x790 [ 521.661171][T16690] ? __pfx_genl_rcv_msg+0x10/0x10 [ 521.661192][T16690] ? ref_tracker_free+0x63a/0x7d0 [ 521.661210][T16690] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 521.661232][T16690] ? __pfx_nl80211_del_pmksa+0x10/0x10 [ 521.661248][T16690] ? __pfx_nl80211_post_doit+0x10/0x10 [ 521.661271][T16690] ? __pfx_ref_tracker_free+0x10/0x10 [ 521.661303][T16690] netlink_rcv_skb+0x208/0x470 [ 521.661325][T16690] ? __pfx_genl_rcv_msg+0x10/0x10 [ 521.661350][T16690] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 521.661388][T16690] ? down_read+0x1ad/0x2e0 [ 521.661409][T16690] genl_rcv+0x28/0x40 [ 521.661434][T16690] netlink_unicast+0x75b/0x8d0 [ 521.661467][T16690] netlink_sendmsg+0x805/0xb30 [ 521.661495][T16690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.661515][T16690] ? aa_sock_msg_perm+0x94/0x160 [ 521.661534][T16690] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 521.661558][T16690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.661577][T16690] __sock_sendmsg+0x219/0x270 [ 521.661604][T16690] ____sys_sendmsg+0x505/0x830 [ 521.661631][T16690] ? __pfx_____sys_sendmsg+0x10/0x10 [ 521.661660][T16690] ? import_iovec+0x74/0xa0 [ 521.661682][T16690] ___sys_sendmsg+0x21f/0x2a0 [ 521.661702][T16690] ? __pfx____sys_sendmsg+0x10/0x10 [ 521.661752][T16690] ? __fget_files+0x2a/0x420 [ 521.661772][T16690] ? __fget_files+0x3a0/0x420 [ 521.661805][T16690] __x64_sys_sendmsg+0x19b/0x260 [ 521.661829][T16690] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 521.661861][T16690] ? __pfx_ksys_write+0x10/0x10 [ 521.661878][T16690] ? rcu_is_watching+0x15/0xb0 [ 521.661903][T16690] ? do_syscall_64+0xbe/0x3b0 [ 521.661923][T16690] do_syscall_64+0xfa/0x3b0 [ 521.661937][T16690] ? lockdep_hardirqs_on+0x9c/0x150 [ 521.661961][T16690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.661978][T16690] ? clear_bhb_loop+0x60/0xb0 [ 521.661999][T16690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.662015][T16690] RIP: 0033:0x7f69dfd8e929 [ 521.662032][T16690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.662048][T16690] RSP: 002b:00007f69e0c40038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 521.662066][T16690] RAX: ffffffffffffffda RBX: 00007f69dffb5fa0 RCX: 00007f69dfd8e929 [ 521.662079][T16690] RDX: 0000000022044800 RSI: 0000200000000400 RDI: 0000000000000003 [ 521.662090][T16690] RBP: 00007f69e0c40090 R08: 0000000000000000 R09: 0000000000000000 [ 521.662101][T16690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.662112][T16690] R13: 0000000000000000 R14: 00007f69dffb5fa0 R15: 00007ffd99d5ca98 [ 521.662139][T16690] [ 522.220354][T16694] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 522.327101][T16700] usb usb1: usbfs: process 16700 (syz.1.3607) did not claim interface 0 before use [ 522.384136][ T5902] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 522.538137][ T5902] usb 3-1: config 3 has an invalid interface number: 249 but max is 0 [ 522.546571][ T5902] usb 3-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config [ 522.557048][ T5902] usb 3-1: config 3 has no interface number 0 [ 522.563193][ T5902] usb 3-1: config 3 interface 249 altsetting 9 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 522.574859][ T5902] usb 3-1: config 3 interface 249 altsetting 9 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 522.586007][ T5902] usb 3-1: config 3 interface 249 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 522.597066][ T5902] usb 3-1: config 3 interface 249 has no altsetting 0 [ 522.609863][ T5902] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010d, bcdDevice=1c.de [ 522.618989][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.627193][ T5902] usb 3-1: Product: syz [ 522.631368][ T5902] usb 3-1: Manufacturer: syz [ 522.636155][ T978] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 522.645749][ T5902] usb 3-1: SerialNumber: syz [ 522.653125][T16692] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 522.795008][ T978] usb 1-1: Using ep0 maxpacket: 32 [ 522.804178][ T978] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 522.813502][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.821671][ T978] usb 1-1: Product: syz [ 522.826137][ T978] usb 1-1: Manufacturer: syz [ 522.830773][ T978] usb 1-1: SerialNumber: syz [ 522.840620][ T978] usb 1-1: config 0 descriptor?? [ 522.889160][ T5902] kvaser_usb 3-1:3.249: error -ENODEV: Cannot get usb endpoint(s) [ 522.921687][ T5902] usb 3-1: USB disconnect, device number 120 [ 523.070788][T16710] loop2: detected capacity change from 0 to 7 [ 523.080088][T16710] Dev loop2: unable to read RDB block 7 [ 523.085780][T16710] loop2: unable to read partition table [ 523.091899][T16710] loop2: partition table beyond EOD, truncated [ 523.103402][T16710] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 523.181650][T16712] netlink: 'syz.1.3612': attribute type 10 has an invalid length. [ 523.265373][ T978] airspy 1-1:0.0: Board ID: 00 [ 523.285449][ T978] airspy 1-1:0.0: Firmware version: [ 523.587889][T16723] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 523.637544][ T43] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 523.804758][ T43] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 523.815183][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.823478][ T43] usb 6-1: Product: syz [ 523.827660][ T43] usb 6-1: Manufacturer: syz [ 523.832375][ T43] usb 6-1: SerialNumber: syz [ 523.850210][ T43] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 523.874368][ T5920] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 523.928541][ T5902] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 524.081619][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 524.095358][ T978] airspy 1-1:0.0: usb_control_msg() failed -71 request 0f [ 524.107075][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.120167][ T978] airspy 1-1:0.0: Registered as swradio24 [ 524.126061][ T978] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 524.136479][ T5902] usb 3-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 524.146766][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.159169][ T978] usb 1-1: USB disconnect, device number 112 [ 524.178753][ T5902] usb 3-1: config 0 descriptor?? [ 524.438284][T16728] tipc: Enabling of bearer rejected, already enabled [ 524.597806][T16734] loop2: detected capacity change from 0 to 7 [ 524.598507][ T5902] chicony 0003:04F2:1236.0013: item fetching failed at offset 0/1 [ 524.626036][T16734] Dev loop2: unable to read RDB block 7 [ 524.631260][ T5902] chicony 0003:04F2:1236.0013: Chicony hid parse failed: -22 [ 524.633694][T16734] loop2: unable to read partition table [ 524.643365][ T5902] chicony 0003:04F2:1236.0013: probe with driver chicony failed with error -22 [ 524.658265][T16729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.671646][T16734] loop2: partition table beyond EOD, truncated [ 524.679459][T16729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.695744][T16734] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 524.708634][T16729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.719227][T16729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.732782][T16729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.746031][T16729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.829842][T16725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.843479][T16725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.859163][T16725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.872045][T16725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.892672][T16725] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 524.904276][T16741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.915279][T16725] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.3617'. [ 524.915706][T16741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.935356][T16743] netlink: 'syz.0.3623': attribute type 10 has an invalid length. [ 524.944403][ T43] usb 3-1: USB disconnect, device number 121 [ 524.953412][ T5920] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 524.977933][ T5920] ath9k_htc: Failed to initialize the device [ 525.022450][ T5920] usb 6-1: ath9k_htc: USB layer deinitialized [ 525.036796][ T5921] usb 6-1: USB disconnect, device number 24 [ 525.128563][T16749] tipc: Enabling of bearer rejected, already enabled [ 525.295378][T16758] netlink: 'syz.0.3631': attribute type 10 has an invalid length. [ 525.320632][T16758] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 525.332938][T16757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.650437][T16764] FAULT_INJECTION: forcing a failure. [ 525.650437][T16764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.676410][T16764] CPU: 0 UID: 0 PID: 16764 Comm: syz.1.3633 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 525.676436][T16764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 525.676453][T16764] Call Trace: [ 525.676460][T16764] [ 525.676469][T16764] dump_stack_lvl+0x189/0x250 [ 525.676495][T16764] ? __pfx____ratelimit+0x10/0x10 [ 525.676521][T16764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 525.676541][T16764] ? __pfx__printk+0x10/0x10 [ 525.676572][T16764] should_fail_ex+0x414/0x560 [ 525.676598][T16764] _copy_to_user+0x31/0xb0 [ 525.676619][T16764] simple_read_from_buffer+0xe1/0x170 [ 525.676648][T16764] proc_fail_nth_read+0x1df/0x250 [ 525.676669][T16764] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 525.676688][T16764] ? rw_verify_area+0x258/0x650 [ 525.676708][T16764] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 525.676726][T16764] vfs_read+0x200/0x980 [ 525.676753][T16764] ? __pfx___mutex_lock+0x10/0x10 [ 525.676771][T16764] ? __pfx_vfs_read+0x10/0x10 [ 525.676793][T16764] ? __fget_files+0x2a/0x420 [ 525.676818][T16764] ? __fget_files+0x3a0/0x420 [ 525.676837][T16764] ? __fget_files+0x2a/0x420 [ 525.676870][T16764] ksys_read+0x145/0x250 [ 525.676886][T16764] ? __fget_files+0x2a/0x420 [ 525.676910][T16764] ? __pfx_ksys_read+0x10/0x10 [ 525.676934][T16764] ? do_syscall_64+0xbe/0x3b0 [ 525.676955][T16764] do_syscall_64+0xfa/0x3b0 [ 525.676970][T16764] ? lockdep_hardirqs_on+0x9c/0x150 [ 525.676994][T16764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.677011][T16764] ? clear_bhb_loop+0x60/0xb0 [ 525.677031][T16764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.677047][T16764] RIP: 0033:0x7f804198d33c [ 525.677064][T16764] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 525.677079][T16764] RSP: 002b:00007f8042878030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 525.677098][T16764] RAX: ffffffffffffffda RBX: 00007f8041bb5fa0 RCX: 00007f804198d33c [ 525.677110][T16764] RDX: 000000000000000f RSI: 00007f80428780a0 RDI: 0000000000000004 [ 525.677121][T16764] RBP: 00007f8042878090 R08: 0000000000000000 R09: 0000000000000000 [ 525.677139][T16764] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 525.677150][T16764] R13: 0000000000000000 R14: 00007f8041bb5fa0 R15: 00007ffcd1956c28 [ 525.677178][T16764] [ 525.747147][T16768] tipc: Enabling of bearer rejected, already enabled [ 525.962975][T16774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.985168][T16774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.043915][T16776] fuseblk: Unknown parameter 'gro‰#up_i00000000000000000000' [ 526.134573][T16780] syz.0.3641: attempt to access beyond end of device [ 526.134573][T16780] loop0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 526.151402][T16780] vxfs: unable to read disk superblock at 1 [ 526.159025][T16780] syz.0.3641: attempt to access beyond end of device [ 526.159025][T16780] loop0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 526.175480][T16780] vxfs: unable to read disk superblock at 8 [ 526.182363][T16780] vxfs: can't find superblock. [ 526.309168][T16790] XFS (rnullb0): Invalid superblock magic number [ 526.445887][ T5921] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 526.504943][T16799] tipc: Enabling of bearer rejected, already enabled [ 526.614830][ T5921] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 526.624273][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.640454][ T5921] usb 3-1: Product: syz [ 526.644698][ T5921] usb 3-1: Manufacturer: syz [ 526.666444][ T5921] usb 3-1: SerialNumber: syz [ 526.709461][ T5921] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 526.731177][T16810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.743091][ T43] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 526.783374][T16810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.017506][ T978] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 527.147879][ T978] usb 1-1: device descriptor read/64, error -71 [ 527.157873][ T6641] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 527.288279][ T6641] usb 6-1: device descriptor read/64, error -71 [ 527.389494][ T978] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 527.510514][T16817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.528960][ T6641] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 527.543273][ T978] usb 1-1: device descriptor read/64, error -71 [ 527.566143][T16817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.583801][T16817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.593861][T16817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.611948][T16817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.622977][T16817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.669883][ T978] usb usb1-port1: attempt power cycle [ 527.689322][ T6641] usb 6-1: device descriptor read/64, error -71 [ 527.800422][ T6641] usb usb6-port1: attempt power cycle [ 527.833455][ T43] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 527.841073][ T43] ath9k_htc: Failed to initialize the device [ 527.874716][ T43] usb 3-1: ath9k_htc: USB layer deinitialized [ 527.893206][ T5921] usb 3-1: USB disconnect, device number 122 [ 528.020237][ T978] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 528.042944][ T978] usb 1-1: device descriptor read/8, error -71 [ 528.136546][T16826] netlink: 'syz.1.3656': attribute type 29 has an invalid length. [ 528.145048][T16826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3656'. [ 528.155010][ T6641] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 528.189852][ T6641] usb 6-1: device descriptor read/8, error -71 [ 528.194752][T16828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.205528][T16828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.220228][T16828] XFS (rnullb0): Invalid superblock magic number [ 528.291028][ T978] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 528.311927][ T978] usb 1-1: device descriptor read/8, error -71 [ 528.425115][ T978] usb usb1-port1: unable to enumerate USB device [ 528.432163][ T6641] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 528.452138][ T6641] usb 6-1: device descriptor read/8, error -71 [ 528.563215][ T6641] usb usb6-port1: unable to enumerate USB device [ 528.722324][ T5920] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 528.874693][ T5920] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 528.884587][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.896998][ T5920] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 528.907337][T16845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.916177][T16845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.924149][ T5920] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 528.932144][ T5920] usb 3-1: Manufacturer: syz [ 528.939744][ T5920] usb 3-1: config 0 descriptor?? [ 529.005399][ T5920] rc_core: IR keymap rc-hauppauge not found [ 529.011323][ T5920] Registered IR keymap rc-empty [ 529.018005][ T5920] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 529.029708][ T5920] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input33 [ 529.162044][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 529.170159][ T5920] usb 3-1: USB disconnect, device number 123 [ 529.529630][T16852] loop2: detected capacity change from 0 to 7 [ 529.538628][T16852] Dev loop2: unable to read RDB block 7 [ 529.544227][T16852] loop2: unable to read partition table [ 529.551831][T16852] loop2: partition table beyond EOD, truncated [ 529.559084][T16852] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 529.643294][T16854] syzkaller1: entered promiscuous mode [ 529.650111][T16854] syzkaller1: entered allmulticast mode [ 529.716724][T16856] netlink: 'syz.0.3666': attribute type 29 has an invalid length. [ 529.746119][T16856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3666'. [ 529.847209][T16863] tipc: Enabling of bearer rejected, already enabled [ 530.022346][T16876] loop2: detected capacity change from 0 to 7 [ 530.022629][T16874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.030906][T16876] Dev loop2: unable to read RDB block 7 [ 530.043489][T16874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3673'. [ 530.045370][T16876] loop2: unable to read partition table [ 530.054334][ T6641] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 530.073552][T16876] loop2: partition table beyond EOD, truncated [ 530.080095][T16876] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 530.132697][T16874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.196271][ T6641] usb 3-1: Using ep0 maxpacket: 32 [ 530.204447][ T6641] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 530.213579][T16874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.224215][ T6641] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.236169][ T6641] usb 3-1: config 0 has no interface number 0 [ 530.242622][ T978] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 530.256468][ T6641] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 530.268298][ T6641] usb 3-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 530.293651][ T6641] usb 3-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 530.304302][ T6641] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.312506][ T6641] usb 3-1: Product: syz [ 530.317058][ T6641] usb 3-1: Manufacturer: syz [ 530.321677][ T6641] usb 3-1: SerialNumber: syz [ 530.348015][ T6641] usb 3-1: config 0 descriptor?? [ 530.354305][T16858] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 530.368520][ T6641] usb-storage 3-1:0.231: USB Mass Storage device detected [ 530.416957][ T978] usb 1-1: Using ep0 maxpacket: 16 [ 530.424602][ T978] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 530.447323][ T978] usb 1-1: config 0 has no interface number 0 [ 530.454245][ T978] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 530.479562][ T978] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 530.509178][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.527774][ T978] usb 1-1: Product: syz [ 530.547162][ T978] usb 1-1: Manufacturer: syz [ 530.551803][ T978] usb 1-1: SerialNumber: syz [ 530.561612][ T978] usb 1-1: config 0 descriptor?? [ 530.602906][ T6641] usb 3-1: USB disconnect, device number 124 [ 530.642716][T16896] sctp: [Deprecated]: syz.5.3677 (pid 16896) Use of struct sctp_assoc_value in delayed_ack socket option. [ 530.642716][T16896] Use struct sctp_sack_info instead [ 530.728565][T16898] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 530.884761][T16904] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3681'. [ 530.984493][T16908] loop2: detected capacity change from 0 to 7 [ 530.994499][ T5986] Dev loop2: unable to read RDB block 7 [ 530.996588][T16872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.005906][ T5986] loop2: unable to read partition table [ 531.014498][T16872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.016507][ T5986] loop2: partition table beyond EOD, truncated [ 531.035457][ T978] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 531.036042][T16908] Dev loop2: unable to read RDB block 7 [ 531.049463][ T978] usb 1-1: USB disconnect, device number 117 [ 531.063555][T16910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.082784][T16908] loop2: unable to read partition table [ 531.090487][T16910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.100553][T16908] loop2: partition table beyond EOD, truncated [ 531.106749][T16908] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 531.175553][T16911] CIFS: VFS: Malformed UNC in devname [ 531.347583][T16920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.358667][T16921] syzkaller1: entered promiscuous mode [ 531.364237][T16921] syzkaller1: entered allmulticast mode [ 531.423232][T16920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.484950][T16920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.596921][T16923] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 531.710722][T16932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3692'. [ 531.810974][ T5920] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 531.913934][T16940] loop2: detected capacity change from 0 to 7 [ 531.924534][T16940] Dev loop2: unable to read RDB block 7 [ 531.930149][T16940] loop2: unable to read partition table [ 531.940681][T16940] loop2: partition table beyond EOD, truncated [ 531.961910][ T5920] usb 6-1: device descriptor read/64, error -71 [ 531.962358][T16940] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 532.160331][T16948] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 532.237488][ T5920] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 532.385472][ T5920] usb 6-1: device descriptor read/64, error -71 [ 532.401898][T16961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3702'. [ 532.504421][ T5920] usb usb6-port1: attempt power cycle [ 532.610688][T16965] tipc: Enabling of bearer rejected, already enabled [ 532.763761][T16956] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.826870][T16970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.854484][ T5920] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 532.897369][ T5920] usb 6-1: device descriptor read/8, error -71 [ 532.908265][T16970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.925199][T16956] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.961931][T16976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.972364][T16976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.981331][T16970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.028746][T16956] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.109306][T16956] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.154731][ T5920] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 533.174760][ T5920] usb 6-1: device descriptor read/8, error -71 [ 533.193678][T16956] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.211967][T16956] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.228898][T16956] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.243193][T16956] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.287129][ T5920] usb usb6-port1: unable to enumerate USB device [ 533.377932][T16980] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 533.665446][ T5920] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 533.815897][ T43] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 533.837449][ T5920] usb 1-1: config 3 has an invalid interface number: 249 but max is 0 [ 533.849277][ T5920] usb 1-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config [ 533.860236][ T5920] usb 1-1: config 3 has no interface number 0 [ 533.870002][ T5920] usb 1-1: config 3 interface 249 altsetting 9 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 533.882276][ T5920] usb 1-1: config 3 interface 249 altsetting 9 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 533.896666][ T5920] usb 1-1: config 3 interface 249 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 533.929834][ T5920] usb 1-1: config 3 interface 249 has no altsetting 0 [ 533.951259][ T5920] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010d, bcdDevice=1c.de [ 533.977463][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.987919][ T5920] usb 1-1: Product: syz [ 533.992534][ T5920] usb 1-1: Manufacturer: syz [ 533.998911][ T5920] usb 1-1: SerialNumber: syz [ 534.006245][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 534.014519][T16982] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 534.056766][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 534.078375][ T43] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 534.105676][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.120579][ T43] usb 3-1: Product: syz [ 534.125807][ T43] usb 3-1: Manufacturer: syz [ 534.141806][ T43] usb 3-1: SerialNumber: syz [ 534.201564][ T43] usb 3-1: config 0 descriptor?? [ 534.281368][T17000] loop2: detected capacity change from 0 to 7 [ 534.311394][T17000] Dev loop2: unable to read RDB block 7 [ 534.317788][ T5920] kvaser_usb 1-1:3.249: error -ENODEV: Cannot get usb endpoint(s) [ 534.334857][T17000] loop2: unable to read partition table [ 534.359909][T17000] loop2: partition table beyond EOD, truncated [ 534.371446][T17000] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 534.388183][ T5920] usb 1-1: USB disconnect, device number 118 [ 534.529716][T17002] netlink: 'syz.1.3715': attribute type 10 has an invalid length. [ 534.644976][ T43] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 534.670475][ T43] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 534.680625][T17008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.754749][T17008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.830537][T17008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.941296][T17019] tipc: Enabling of bearer rejected, already enabled [ 534.990385][T17021] loop2: detected capacity change from 0 to 7 [ 534.997507][T17021] Dev loop2: unable to read RDB block 7 [ 535.005562][T17021] loop2: unable to read partition table [ 535.012046][T17021] loop2: partition table beyond EOD, truncated [ 535.018249][T17021] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 536.572834][ T43] usb 3-1: USB disconnect, device number 125 [ 562.439608][T17035] program syz.0.3725 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 562.455361][T17035] kAFS: unparsable volume name [ 562.694988][ T6641] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 562.845382][ T6641] usb 1-1: Using ep0 maxpacket: 8 [ 562.858783][ T6641] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 562.878642][ T6641] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.886936][ T5889] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 562.905014][ T6641] usb 1-1: Product: syz [ 562.915003][ T6641] usb 1-1: Manufacturer: syz [ 562.930309][ T6641] usb 1-1: SerialNumber: syz [ 562.941623][ T6641] usb 1-1: config 0 descriptor?? [ 562.994951][T17055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.055509][ T5889] usb 6-1: Using ep0 maxpacket: 8 [ 563.062670][ T5889] usb 6-1: config 0 has no interfaces? [ 563.062814][T17055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.074732][ T5889] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 563.089477][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.097665][ T5889] usb 6-1: Product: syz [ 563.102059][ T5889] usb 6-1: Manufacturer: syz [ 563.106749][ T5889] usb 6-1: SerialNumber: syz [ 563.113875][ T5889] usb 6-1: config 0 descriptor?? [ 563.132596][T17055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.152011][ T6641] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 563.185712][ T24] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 563.337657][ T24] usb 3-1: config 3 has an invalid interface number: 249 but max is 0 [ 563.351895][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.351964][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.365049][ T24] usb 3-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config [ 563.375236][ T24] usb 3-1: config 3 has no interface number 0 [ 563.381395][ T24] usb 3-1: config 3 interface 249 altsetting 9 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 563.392949][ T24] usb 3-1: config 3 interface 249 altsetting 9 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 563.404284][ T24] usb 3-1: config 3 interface 249 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 563.415388][ T24] usb 3-1: config 3 interface 249 has no altsetting 0 [ 563.424926][ T24] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010d, bcdDevice=1c.de [ 563.434311][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.442583][ T24] usb 3-1: Product: syz [ 563.447154][T17058] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.3728'. [ 563.459606][ T24] usb 3-1: Manufacturer: syz [ 563.464339][ T24] usb 3-1: SerialNumber: syz [ 563.472829][T17052] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 563.695136][ T24] kvaser_usb 3-1:3.249: error -ENODEV: Cannot get usb endpoint(s) [ 563.729997][ T24] usb 3-1: USB disconnect, device number 126 [ 564.385342][ T6641] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 564.452067][T17074] netlink: 'syz.2.3738': attribute type 10 has an invalid length. [ 564.474692][ T6641] usb 1-1: USB disconnect, device number 119 [ 564.501590][T17074] team0: Device ipvlan1 failed to register rx_handler [ 564.549815][T17074] syz.2.3738 (17074) used greatest stack depth: 20072 bytes left [ 564.978258][T17085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.049675][T17085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.131389][T17085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.155959][T17094] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 565.195402][T17097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.205178][T17097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.369211][ T24] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 565.440631][ T978] usb 6-1: USB disconnect, device number 33 [ 565.526012][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 565.535283][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.543865][ T24] usb 3-1: Product: syz [ 565.548125][ T24] usb 3-1: Manufacturer: syz [ 565.554362][ T24] usb 3-1: SerialNumber: syz [ 565.576734][ T24] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 565.593544][ T43] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 565.738980][T17103] loop2: detected capacity change from 0 to 7 [ 565.749485][T17103] Dev loop2: unable to read RDB block 7 [ 565.758195][T17103] loop2: unable to read partition table [ 565.770726][T17103] loop2: partition table beyond EOD, truncated [ 565.786001][T17103] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 565.796951][T17105] usb usb1: usbfs: process 17105 (syz.5.3750) did not claim interface 0 before use [ 565.918571][T17111] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 566.066328][T17118] netlink: 'syz.1.3756': attribute type 9 has an invalid length. [ 566.085722][T17118] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3756'. [ 566.163595][T17123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 566.242071][T17129] /dev/sg0: Can't lookup blockdev [ 566.263712][T17130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.339346][T17130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.377009][T17125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.397134][T17125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.413971][T17140] netlink: 'syz.5.3763': attribute type 10 has an invalid length. [ 566.425843][T17140] team0: Device ipvlan1 failed to register rx_handler [ 566.443880][T17130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.459865][T17142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.485032][T17142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.631911][ T43] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 566.639608][T17148] netlink: 'syz.5.3767': attribute type 9 has an invalid length. [ 566.639846][ T43] ath9k_htc: Failed to initialize the device [ 566.649049][T17148] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3767'. [ 566.685342][ T43] usb 3-1: ath9k_htc: USB layer deinitialized [ 566.694816][ T5920] usb 3-1: USB disconnect, device number 127 [ 566.739433][T17150] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 566.907661][T17156] usb usb1: usbfs: process 17156 (syz.5.3771) did not claim interface 0 before use [ 567.071303][T17163] netlink: 'syz.1.3774': attribute type 10 has an invalid length. [ 567.087559][T17163] team0: Device ipvlan1 failed to register rx_handler [ 567.173718][T17167] netlink: 'syz.1.3776': attribute type 9 has an invalid length. [ 567.181617][T17167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3776'. [ 567.266197][T17169] loop6: detected capacity change from 0 to 1 [ 567.275734][T17169] Dev loop6: unable to read RDB block 1 [ 567.281453][T17169] loop6: unable to read partition table [ 567.291758][T17169] loop6: partition table beyond EOD, truncated [ 567.298668][T17169] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 567.334529][ T6641] usb 1-1: new low-speed USB device number 120 using dummy_hcd [ 567.374786][T17173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.388753][T17173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.423750][T17178] tipc: Enabling of bearer rejected, already enabled [ 567.492569][ T6641] usb 1-1: device descriptor read/64, error -71 [ 567.522604][T17182] netlink: 'syz.5.3783': attribute type 10 has an invalid length. [ 567.546596][T17182] team0: Device ipvlan1 failed to register rx_handler [ 567.732756][ T6641] usb 1-1: new low-speed USB device number 121 using dummy_hcd [ 567.837791][T17196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3788'. [ 567.859836][T17196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3788'. [ 567.869610][ T5889] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 567.877131][ T6641] usb 1-1: device descriptor read/64, error -71 [ 567.901392][T17198] loop2: detected capacity change from 0 to 7 [ 567.922339][T17198] Dev loop2: unable to read RDB block 7 [ 567.930504][T17198] loop2: unable to read partition table [ 567.938086][T17198] loop2: partition table beyond EOD, truncated [ 567.945777][T17198] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 567.996248][ T6641] usb usb1-port1: attempt power cycle [ 568.029819][T17200] tipc: Enabling of bearer rejected, already enabled [ 568.043202][ T5889] usb 3-1: Invalid ep0 maxpacket: 16 [ 568.101835][T17204] netlink: 'syz.5.3792': attribute type 10 has an invalid length. [ 568.111888][T17204] team0: Device ipvlan1 failed to register rx_handler [ 568.165337][T17207] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 568.193450][ T5889] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 568.353903][ T6641] usb 1-1: new low-speed USB device number 122 using dummy_hcd [ 568.363726][ T5889] usb 3-1: Invalid ep0 maxpacket: 16 [ 568.370016][ T5889] usb usb3-port1: attempt power cycle [ 568.385018][ T6641] usb 1-1: device descriptor read/8, error -71 [ 568.636918][ T6641] usb 1-1: new low-speed USB device number 123 using dummy_hcd [ 568.654251][ T43] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 568.664593][ T6641] usb 1-1: device descriptor read/8, error -71 [ 568.714308][ T5889] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 568.736842][ T5889] usb 3-1: Invalid ep0 maxpacket: 16 [ 568.776106][ T6641] usb usb1-port1: unable to enumerate USB device [ 568.784398][ T43] usb 6-1: device descriptor read/64, error -71 [ 568.866146][ T5889] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 568.886672][ T5889] usb 3-1: Invalid ep0 maxpacket: 16 [ 568.892409][ T5889] usb usb3-port1: unable to enumerate USB device [ 569.034844][ T43] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 569.164955][ T43] usb 6-1: device descriptor read/64, error -71 [ 569.275491][ T43] usb usb6-port1: attempt power cycle [ 569.318560][T17218] loop2: detected capacity change from 0 to 7 [ 569.328106][T17218] Dev loop2: unable to read RDB block 7 [ 569.333704][T17218] loop2: unable to read partition table [ 569.339831][T17218] loop2: partition table beyond EOD, truncated [ 569.346243][T17218] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 569.482982][T17224] tipc: Enabling of bearer rejected, already enabled [ 569.524271][T17226] netlink: 'syz.1.3802': attribute type 9 has an invalid length. [ 569.532896][T17226] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3802'. [ 569.615528][ T43] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 569.636269][ T43] usb 6-1: device descriptor read/8, error -71 [ 569.875936][ T43] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 569.896590][ T43] usb 6-1: device descriptor read/8, error -71 [ 570.008167][ T43] usb usb6-port1: unable to enumerate USB device [ 570.477681][ T6641] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 570.643534][ T6641] usb 1-1: config 3 has an invalid interface number: 249 but max is 0 [ 570.653519][ T6641] usb 1-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config [ 570.664754][ T6641] usb 1-1: config 3 has no interface number 0 [ 570.671247][ T6641] usb 1-1: config 3 interface 249 altsetting 9 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 570.683150][ T6641] usb 1-1: config 3 interface 249 altsetting 9 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 570.696156][ T6641] usb 1-1: config 3 interface 249 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 570.706823][T17252] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3812'. [ 570.713349][ T6641] usb 1-1: config 3 interface 249 has no altsetting 0 [ 570.726723][ T6641] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010d, bcdDevice=1c.de [ 570.741491][ T6641] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.750718][ T6641] usb 1-1: Product: syz [ 570.754995][ T6641] usb 1-1: Manufacturer: syz [ 570.762591][ T6641] usb 1-1: SerialNumber: syz [ 570.773034][T17240] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 570.991438][ T6641] kvaser_usb 1-1:3.249: error -ENODEV: Cannot get usb endpoint(s) [ 571.004015][ T6641] usb 1-1: USB disconnect, device number 124 [ 571.071472][ T5889] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 571.234692][ T5889] usb 3-1: not running at top speed; connect to a high speed hub [ 571.288070][ T5889] usb 3-1: config 0 has an invalid interface number: 74 but max is 1 [ 571.316944][ T5889] usb 3-1: config 0 has no interface number 1 [ 571.375473][ T5889] usb 3-1: config 0 interface 74 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 571.444872][ T5889] usb 3-1: config 0 interface 74 altsetting 1 endpoint 0x3 has invalid maxpacket 1056, setting to 64 [ 571.476382][ T5889] usb 3-1: config 0 interface 0 has no altsetting 0 [ 571.524441][ T5889] usb 3-1: config 0 interface 74 has no altsetting 0 [ 571.613639][ T5889] usb 3-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice=2b.5c [ 571.643660][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.661607][ T5889] usb 3-1: Product: syz [ 571.665998][ T5889] usb 3-1: Manufacturer: syz [ 571.675832][ T5889] usb 3-1: SerialNumber: syz [ 571.684869][ T5889] usb 3-1: config 0 descriptor?? [ 571.743580][T17302] tipc: Enabling of bearer rejected, already enabled [ 571.816115][T17306] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 571.988591][T17317] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3825'. [ 572.135976][T17323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.145371][T17323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.179324][ T5920] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 572.319524][ T5902] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 572.340422][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 572.348551][ T5920] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 572.357374][ T5920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.368039][ T5920] usb 1-1: config 0 has no interface number 0 [ 572.374390][ T5920] usb 1-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 572.384553][ T5920] usb 1-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 572.400806][ T5920] usb 1-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 572.411580][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.419901][ T5920] usb 1-1: Product: syz [ 572.424088][ T5920] usb 1-1: Manufacturer: syz [ 572.428718][ T5920] usb 1-1: SerialNumber: syz [ 572.436873][ T5920] usb 1-1: config 0 descriptor?? [ 572.444976][T17310] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 572.458025][ T5920] usb-storage 1-1:0.231: USB Mass Storage device detected [ 572.471407][ T5902] usb 6-1: config 3 has an invalid interface number: 249 but max is 0 [ 572.479943][ T5902] usb 6-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config [ 572.490281][ T5902] usb 6-1: config 3 has no interface number 0 [ 572.496414][ T5902] usb 6-1: config 3 interface 249 altsetting 9 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 572.507813][ T5902] usb 6-1: config 3 interface 249 altsetting 9 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 572.519203][ T5902] usb 6-1: config 3 interface 249 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 572.530408][ T5902] usb 6-1: config 3 interface 249 has no altsetting 0 [ 572.540066][ T5902] usb 6-1: New USB device found, idVendor=0bfd, idProduct=010d, bcdDevice=1c.de [ 572.549194][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.565161][ T5902] usb 6-1: Product: syz [ 572.569401][ T5902] usb 6-1: Manufacturer: syz [ 572.574722][ T5902] usb 6-1: SerialNumber: syz [ 572.584493][T17319] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 572.666395][ T6641] usb 1-1: USB disconnect, device number 125 [ 572.804645][ T5902] kvaser_usb 6-1:3.249: error -ENODEV: Cannot get usb endpoint(s) [ 572.818701][ T5902] usb 6-1: USB disconnect, device number 38 [ 573.459032][T17340] netlink: 'syz.0.3833': attribute type 10 has an invalid length. [ 573.473079][T17340] team0: Device ipvlan1 failed to register rx_handler [ 573.836706][ T5889] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input36 [ 573.867014][ T5188] bcm5974 3-1:0.0: could not read from device [ 573.919315][ T5889] usbhid 3-1:0.74: couldn't find an input interrupt endpoint [ 573.934956][ T5188] bcm5974 3-1:0.0: could not read from device [ 573.965291][ T5188] bcm5974 3-1:0.0: could not read from device [ 573.977667][ T5889] usb 3-1: USB disconnect, device number 6 [ 574.101233][T17360] /dev/rnullb0: Can't open blockdev [ 574.553201][ T5889] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 574.716187][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.727910][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.744979][ T5889] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 574.754583][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.768694][ T5889] usb 6-1: config 0 descriptor?? [ 575.174471][ T6641] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 575.200057][ T5889] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x0 [ 575.225182][ T5889] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x0 [ 575.229999][T17401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.232548][ T5889] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x0 [ 575.245403][T17401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.271033][T17401] veth1_to_hsr: entered promiscuous mode [ 575.279647][T17401] veth1_to_hsr: entered allmulticast mode [ 575.333543][ T6641] usb 3-1: Using ep0 maxpacket: 32 [ 575.342686][ T6641] usb 3-1: config 0 has an invalid interface number: 108 but max is 0 [ 575.361085][ T6641] usb 3-1: config 0 has no interface number 0 [ 575.368543][ T6641] usb 3-1: config 0 interface 108 has no altsetting 0 [ 575.378348][ T6641] usb 3-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=65.cd [ 575.387751][ T6641] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.396722][ T6641] usb 3-1: Product: syz [ 575.403052][ T5889] hid-led 0003:0FC5:B080.0014: probe with driver hid-led failed with error -71 [ 575.415757][ T6641] usb 3-1: Manufacturer: syz [ 575.420822][ T6641] usb 3-1: SerialNumber: syz [ 575.432528][ T6641] usb 3-1: config 0 descriptor?? [ 575.437887][ T5889] usb 6-1: USB disconnect, device number 39 [ 575.447979][ T6641] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 575.711506][T17416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3860'. [ 575.721784][T17416] openvswitch: netlink: Flow actions attr not present in new flow. [ 575.766903][ T6641] usb 3-1: USB disconnect, device number 7 [ 576.010768][T17430] syzkaller1: entered promiscuous mode [ 576.016584][T17430] syzkaller1: entered allmulticast mode [ 576.018241][T17428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.030354][T17430] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 576.034523][T17428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.052493][T17430] /dev/rnullb0: Can't open blockdev [ 576.189120][T17437] loop2: detected capacity change from 0 to 7 [ 576.204867][T17437] Dev loop2: unable to read RDB block 7 [ 576.211216][T17437] loop2: unable to read partition table [ 576.217406][T17437] loop2: partition table beyond EOD, truncated [ 576.223867][T17437] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 576.364902][ T6641] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 576.518821][ T6641] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 576.527100][ T6641] usb 1-1: config 0 has no interface number 0 [ 576.533281][ T6641] usb 1-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 576.544302][ T6641] usb 1-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 576.555433][ T5902] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 576.562990][ T6641] usb 1-1: config 0 interface 12 has no altsetting 0 [ 576.573376][ T6641] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 576.582507][ T6641] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.590545][ T6641] usb 1-1: Product: syz [ 576.594716][ T6641] usb 1-1: Manufacturer: syz [ 576.599434][ T6641] usb 1-1: SerialNumber: syz [ 576.606658][ T6641] usb 1-1: config 0 descriptor?? [ 576.612427][T17435] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 576.620278][T17435] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 576.630031][ T6641] f81534 1-1:0.12: unsupported endpoint max packet size [ 576.725909][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 576.740503][ T5902] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 576.751937][ T5902] usb 3-1: config 0 has no interface number 0 [ 576.755586][ T43] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 576.758346][ T5902] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 576.781734][ T5902] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 576.791423][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.802681][ T5902] usb 3-1: Product: syz [ 576.808164][ T5902] usb 3-1: Manufacturer: syz [ 576.813020][ T5902] usb 3-1: SerialNumber: syz [ 576.826040][ T5902] usb 3-1: config 0 descriptor?? [ 576.847380][ T5902] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 576.847589][ T5920] usb 1-1: USB disconnect, device number 126 [ 576.860176][ T5902] em28xx 3-1:0.132: Video interface 132 found: [ 576.945874][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 576.952977][ T43] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 576.968993][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 576.983026][ T43] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 576.992503][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.003451][ T43] usb 6-1: Product: syz [ 577.007968][ T43] usb 6-1: Manufacturer: syz [ 577.012591][ T43] usb 6-1: SerialNumber: syz [ 577.022950][ T43] usb 6-1: config 0 descriptor?? [ 577.039565][ T43] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 577.050797][ T43] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 577.090267][ T5902] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 577.302946][T17474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.321259][T17474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.332358][T17471] /dev/sg0: Can't lookup blockdev [ 577.342724][T17471] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3878'. [ 577.551000][ T5902] em28xx 3-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 577.569651][ T5902] em28xx 3-1:0.132: board has no eeprom [ 577.636486][ T5902] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 577.646027][ T5902] em28xx 3-1:0.132: analog set to bulk mode. [ 577.648922][ T43] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 577.654870][ T6641] em28xx 3-1:0.132: Registering V4L2 extension [ 577.660451][ T43] em28xx 6-1:0.0: Config register raw data: 0x16 [ 577.672119][ T5902] usb 3-1: USB disconnect, device number 8 [ 577.679875][ T5902] em28xx 3-1:0.132: Disconnecting em28xx [ 577.786637][ T6641] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 577.794278][ T6641] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 577.805338][ T6641] em28xx 3-1:0.132: No AC97 audio processor [ 577.818749][ T6641] usb 3-1: Decoder not found [ 577.823488][ T6641] em28xx 3-1:0.132: failed to create media graph [ 577.830069][ T6641] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 577.842585][ T6641] em28xx 3-1:0.132: Remote control support is not available for this card. [ 577.853497][ T5902] em28xx 3-1:0.132: Closing input extension [ 577.866126][ T5902] em28xx 3-1:0.132: Freeing device [ 577.877258][ T5920] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 577.888212][ T43] em28xx 6-1:0.0: AC97 command still being executed: not handled properly! [ 577.898823][ T43] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 577.907117][ T43] em28xx 6-1:0.0: No AC97 audio processor [ 578.067120][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 578.086463][ T5920] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 578.094988][ T5920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.106768][ T5920] usb 1-1: config 0 has no interface number 0 [ 578.113333][ T5920] usb 1-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 578.123907][ T5920] usb 1-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 578.180956][ T5920] usb 1-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 578.197229][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.215613][ T5920] usb 1-1: Product: syz [ 578.225736][ T5920] usb 1-1: Manufacturer: syz [ 578.237920][ T5920] usb 1-1: SerialNumber: syz [ 578.245538][ T5920] usb 1-1: config 0 descriptor?? [ 578.260996][T17479] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 578.280551][ T5920] usb-storage 1-1:0.231: USB Mass Storage device detected [ 578.514889][ T5920] usb 1-1: USB disconnect, device number 127 [ 578.575119][T17498] /dev/rnullb0: Can't open blockdev [ 578.789035][T17508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.799751][T17508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.408864][ T6641] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 579.496668][ T5902] usb 6-1: USB disconnect, device number 40 [ 579.510468][ T5902] em28xx 6-1:0.0: Disconnecting em28xx [ 579.521249][ T5902] em28xx 6-1:0.0: Freeing device [ 579.568940][ T6641] usb 1-1: device descriptor read/64, error -71 [ 579.809384][ T6641] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 579.963836][ T6641] usb 1-1: device descriptor read/64, error -71 [ 580.079866][ T6641] usb usb1-port1: attempt power cycle [ 580.279813][ T5902] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 580.421127][ T6641] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 580.432511][ T5902] usb 6-1: Using ep0 maxpacket: 16 [ 580.439654][ T5902] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 580.451765][ T5902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 580.463928][ T6641] usb 1-1: device descriptor read/8, error -71 [ 580.472421][ T5902] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 580.481696][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.490215][ T5902] usb 6-1: Product: syz [ 580.494400][ T5902] usb 6-1: Manufacturer: syz [ 580.499999][ T5902] usb 6-1: SerialNumber: syz [ 580.507399][ T5902] usb 6-1: config 0 descriptor?? [ 580.521556][ T5902] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 580.531018][ T5902] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 580.672279][T17555] batadv_slave_1: entered promiscuous mode [ 580.720454][ T6641] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 580.742601][ T6641] usb 1-1: device descriptor read/8, error -71 [ 580.843639][T17554] batadv_slave_1: left promiscuous mode [ 580.851096][ T6641] usb usb1-port1: unable to enumerate USB device [ 580.893280][T17559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.903729][T17559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.961811][T17559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.970457][T17559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.982667][T17559] qrtr: Invalid version 43 [ 581.120498][ T5902] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 581.127209][ T5902] em28xx 6-1:0.0: Config register raw data: 0x16 [ 581.351169][ T5902] em28xx 6-1:0.0: AC97 command still being executed: not handled properly! [ 581.359935][ T5902] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 581.367066][ T5902] em28xx 6-1:0.0: No AC97 audio processor [ 581.539477][ T5902] usb 6-1: USB disconnect, device number 41 [ 581.552492][ T5902] em28xx 6-1:0.0: Disconnecting em28xx [ 581.575364][ T5902] em28xx 6-1:0.0: Freeing device [ 581.687498][T17570] syz.1.3911: attempt to access beyond end of device [ 581.687498][T17570] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 581.707303][T17570] EXT4-fs (loop1): unable to read superblock [ 582.173276][ T5902] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 582.180982][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 582.247640][T17597] /dev/rnullb0: Can't open blockdev [ 582.261870][T17595] usb usb1: usbfs: process 17595 (syz.1.3920) did not claim interface 0 before use [ 582.262794][T17597] /dev/rnullb0: Can't open blockdev [ 582.312300][T17599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 582.322532][ T5902] usb 3-1: device descriptor read/64, error -71 [ 582.330406][T17599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3922'. [ 582.395197][T17599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 582.456816][T17599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 582.572984][ T5902] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 582.722817][ T5902] usb 3-1: device descriptor read/64, error -71 [ 582.833694][ T5902] usb usb3-port1: attempt power cycle [ 582.866623][T17604] tipc: Enabling of bearer rejected, already enabled [ 583.038270][T17612] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3925'. [ 583.049268][T17606] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3925'. [ 583.060250][T17606] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3925'. [ 583.070248][T17607] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3925'. [ 583.180272][ T5902] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 583.203899][ T5902] usb 3-1: device descriptor read/8, error -71 [ 583.236982][T17617] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.3929'. [ 583.253388][ T5920] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 583.413653][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 583.436755][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 583.453057][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 583.453669][ T5902] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 583.468245][ T5920] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 583.483302][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.491604][ T5920] usb 1-1: Product: syz [ 583.496108][ T5920] usb 1-1: Manufacturer: syz [ 583.500834][ T5920] usb 1-1: SerialNumber: syz [ 583.506146][ T5902] usb 3-1: device descriptor read/8, error -71 [ 583.508610][ T5920] usb 1-1: config 0 descriptor?? [ 583.518977][T17628] FAULT_INJECTION: forcing a failure. [ 583.518977][T17628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.527665][ T5920] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 583.542221][T17628] CPU: 1 UID: 0 PID: 17628 Comm: syz.1.3934 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 583.542244][T17628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 583.542256][T17628] Call Trace: [ 583.542263][T17628] [ 583.542271][T17628] dump_stack_lvl+0x189/0x250 [ 583.542296][T17628] ? __pfx____ratelimit+0x10/0x10 [ 583.542321][T17628] ? __pfx_dump_stack_lvl+0x10/0x10 [ 583.542341][T17628] ? __pfx__printk+0x10/0x10 [ 583.542370][T17628] should_fail_ex+0x414/0x560 [ 583.542394][T17628] _copy_to_user+0x31/0xb0 [ 583.542412][T17628] simple_read_from_buffer+0xe1/0x170 [ 583.542439][T17628] proc_fail_nth_read+0x1df/0x250 [ 583.542459][T17628] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 583.542477][T17628] ? rw_verify_area+0x258/0x650 [ 583.542498][T17628] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 583.542515][T17628] vfs_read+0x200/0x980 [ 583.542540][T17628] ? __pfx___mutex_lock+0x10/0x10 [ 583.542558][T17628] ? __pfx_vfs_read+0x10/0x10 [ 583.542580][T17628] ? __fget_files+0x2a/0x420 [ 583.542608][T17628] ? __fget_files+0x3a0/0x420 [ 583.542629][T17628] ? __fget_files+0x2a/0x420 [ 583.542668][T17628] ksys_read+0x145/0x250 [ 583.542687][T17628] ? __fget_files+0x3a0/0x420 [ 583.542709][T17628] ? __pfx_ksys_read+0x10/0x10 [ 583.542733][T17628] ? do_syscall_64+0xbe/0x3b0 [ 583.542753][T17628] do_syscall_64+0xfa/0x3b0 [ 583.542768][T17628] ? lockdep_hardirqs_on+0x9c/0x150 [ 583.542792][T17628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.542809][T17628] ? clear_bhb_loop+0x60/0xb0 [ 583.542830][T17628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.542845][T17628] RIP: 0033:0x7f804198d33c [ 583.542861][T17628] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 583.542876][T17628] RSP: 002b:00007f8042857030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 583.542894][T17628] RAX: ffffffffffffffda RBX: 00007f8041bb6080 RCX: 00007f804198d33c [ 583.542906][T17628] RDX: 000000000000000f RSI: 00007f80428570a0 RDI: 0000000000000005 [ 583.542916][T17628] RBP: 00007f8042857090 R08: 0000000000000000 R09: 0000000000000000 [ 583.542925][T17628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.542934][T17628] R13: 0000000000000001 R14: 00007f8041bb6080 R15: 00007ffcd1956c28 [ 583.542957][T17628] [ 583.775806][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.788957][ T5920] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 583.793459][ T5902] usb usb3-port1: unable to enumerate USB device [ 583.870220][T17630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.885935][T17630] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3935'. [ 583.906685][ T5902] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 583.916200][ T5902] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 583.923077][ T5902] ------------[ cut here ]------------ [ 583.929051][ T5902] no supported rates for sta 08:02:11:00:00:00 (0x7f, band 0) in rate_mask 0x80 with flags 0x0 [ 583.940233][ T5902] WARNING: CPU: 0 PID: 5902 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820 [ 583.950343][ T5902] Modules linked in: [ 583.954923][ T5902] CPU: 0 UID: 0 PID: 5902 Comm: kworker/0:5 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 583.967062][ T5902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 583.977290][ T5902] Workqueue: events cfg80211_conn_work [ 583.983127][ T5902] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 583.989467][ T5902] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 13 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 02 ad 9f f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 584.009237][ T5902] RSP: 0018:ffffc90004476798 EFLAGS: 00010246 [ 584.015379][ T5902] RAX: 711435155ea1f300 RBX: ffff88807a004f3c RCX: ffff88807e2fbc00 [ 584.022533][T17630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.023352][ T5902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 584.041234][ T5902] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 584.049362][ T5902] R10: dffffc0000000000 R11: fffffbfff1c3aa04 R12: ffff88823bf6cf28 [ 584.057582][ T5902] R13: 0000000000000000 R14: ffff888028db0e40 R15: ffff888028db30d8 [ 584.065641][ T5902] FS: 0000000000000000(0000) GS:ffff888125a1b000(0000) knlGS:0000000000000000 [ 584.074833][ T5902] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 584.081546][ T5902] CR2: 0000200000000080 CR3: 000000000e138000 CR4: 00000000003526f0 [ 584.087380][T17630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.089594][ T5902] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 584.089615][ T5902] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 584.115794][ T5902] Call Trace: [ 584.119174][ T5902] [ 584.122175][ T5902] rate_control_send_low+0xf2/0x7a0 [ 584.127675][ T5902] rate_control_get_rate+0x20b/0x5d0 [ 584.133106][ T5902] ieee80211_tx_h_rate_ctrl+0xb32/0x1780 [ 584.138881][ T5902] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 584.145152][ T5902] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 584.151360][ T5902] invoke_tx_handlers_late+0xb6/0x1820 [ 584.156923][ T5902] ? ieee80211_tx_h_select_key+0x13d4/0x1900 [ 584.162945][ T5902] ? sta_info_get+0x28d/0x2a0 [ 584.167802][ T5902] ? invoke_tx_handlers_early+0xa11/0x1d10 [ 584.173680][ T5902] ieee80211_tx+0x2ac/0x420 [ 584.178271][ T5902] ? __pfx_ieee80211_tx+0x10/0x10 [ 584.183436][ T5902] ? ieee80211_set_qos_hdr+0x1ca/0x520 [ 584.189179][ T5902] ? ieee80211_xmit+0x315/0x400 [ 584.194086][ T5902] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 584.200161][ T5902] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 584.206037][ T5902] ? ieee80211_tx_skb_tid+0x2f/0x420 [ 584.211359][ T5902] ieee80211_tx_skb_tid+0x266/0x420 [ 584.216649][ T5902] ieee80211_send_auth+0x415/0x5a0 [ 584.221802][ T5902] ? __pfx_ieee80211_send_auth+0x10/0x10 [ 584.223330][ T5920] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 584.227880][ T5902] ? __pfx__printk+0x10/0x10 [ 584.227919][ T5902] ieee80211_auth+0x472/0x8e0 [ 584.227954][ T5902] ? __pfx_ieee80211_auth+0x10/0x10 [ 584.227986][ T5902] ieee80211_mgd_auth+0x1083/0x1770 [ 584.228008][ T5902] ? __lock_acquire+0xab9/0xd20 [ 584.228038][ T5902] ? lockdep_hardirqs_on+0x9c/0x150 [ 584.228070][ T5902] ? __pfx_ieee80211_mgd_auth+0x10/0x10 [ 584.228094][ T5902] ? rcu_is_watching+0x15/0xb0 [ 584.228129][ T5902] cfg80211_mlme_auth+0x632/0x9c0 [ 584.228162][ T5902] cfg80211_conn_do_work+0x501/0xd10 [ 584.228190][ T5902] ? __pfx_cfg80211_conn_do_work+0x10/0x10 [ 584.228222][ T5902] ? wake_up_q+0xca/0x110 [ 584.228320][ T5902] ? ret_from_fork_asm+0x1a/0x30 [ 584.240747][ T5920] em28xx 1-1:0.0: Config register raw data: 0x41 [ 584.243639][ T5902] ? stack_trace_save+0x9c/0xe0 [ 584.243672][ T5902] ? cfg80211_conn_work+0x298/0x440 [ 584.317728][ T5902] cfg80211_conn_work+0x2c0/0x440 [ 584.322791][ T5902] ? __pfx_cfg80211_conn_work+0x10/0x10 [ 584.328431][ T5902] ? arch_scale_cpu_capacity+0x18/0xb0 [ 584.333933][ T5902] ? kvm_sched_clock_read+0x11/0x20 [ 584.339341][ T5902] ? sched_clock+0x3f/0x60 [ 584.343899][ T5902] ? sched_clock_cpu+0x74/0x430 [ 584.348858][ T5902] ? psi_task_switch+0x39a/0x6d0 [ 584.353942][ T5902] ? __lock_acquire+0xab9/0xd20 [ 584.359082][ T5902] ? do_raw_spin_lock+0x121/0x290 [ 584.364165][ T5902] ? look_up_lock_class+0x74/0x170 [ 584.369391][ T5902] ? register_lock_class+0x51/0x320 [ 584.374768][ T5902] ? __lock_acquire+0xab9/0xd20 [ 584.379718][ T5902] ? process_scheduled_works+0x9ef/0x17b0 [ 584.385544][ T5902] ? _raw_spin_unlock_irq+0x23/0x50 [ 584.390788][ T5902] ? process_scheduled_works+0x9ef/0x17b0 [ 584.396611][ T5902] ? process_scheduled_works+0x9ef/0x17b0 [ 584.402543][ T5902] process_scheduled_works+0xae1/0x17b0 [ 584.408394][ T5902] ? __pfx_process_scheduled_works+0x10/0x10 [ 584.414520][ T5902] worker_thread+0x8a0/0xda0 [ 584.419208][ T5902] kthread+0x70e/0x8a0 [ 584.423395][ T5902] ? __pfx_worker_thread+0x10/0x10 [ 584.428820][ T5902] ? __pfx_kthread+0x10/0x10 [ 584.433434][ T5902] ? _raw_spin_unlock_irq+0x23/0x50 [ 584.438706][ T5902] ? lockdep_hardirqs_on+0x9c/0x150 [ 584.443929][ T5902] ? __pfx_kthread+0x10/0x10 [ 584.448731][ T5902] ret_from_fork+0x3fc/0x770 [ 584.453343][ T5902] ? __pfx_ret_from_fork+0x10/0x10 [ 584.458624][ T5902] ? __switch_to_asm+0x39/0x70 [ 584.463603][ T5902] ? __switch_to_asm+0x33/0x70 [ 584.468466][ T5902] ? __pfx_kthread+0x10/0x10 [ 584.473264][ T5902] ret_from_fork_asm+0x1a/0x30 [ 584.478308][ T5902] [ 584.481352][ T5902] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 584.488646][ T5902] CPU: 0 UID: 0 PID: 5902 Comm: kworker/0:5 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 584.500803][ T5902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 584.511128][ T5902] Workqueue: events cfg80211_conn_work [ 584.516675][ T5902] Call Trace: [ 584.519965][ T5902] [ 584.523169][ T5902] dump_stack_lvl+0x99/0x250 [ 584.527860][ T5902] ? __asan_memcpy+0x40/0x70 [ 584.532494][ T5902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 584.537709][ T5902] ? __pfx__printk+0x10/0x10 [ 584.542415][ T5902] panic+0x2db/0x790 [ 584.546323][ T5902] ? __pfx_panic+0x10/0x10 [ 584.550922][ T5902] ? ret_from_fork_asm+0x1a/0x30 [ 584.555971][ T5902] __warn+0x31b/0x4b0 [ 584.560082][ T5902] ? __rate_control_send_low+0x5df/0x820 [ 584.565752][ T5902] ? __rate_control_send_low+0x5df/0x820 [ 584.571497][ T5902] report_bug+0x2be/0x4f0 [ 584.576291][ T5902] ? __rate_control_send_low+0x5df/0x820 [ 584.581935][ T5902] ? __rate_control_send_low+0x5df/0x820 [ 584.587693][ T5902] ? __rate_control_send_low+0x5e1/0x820 [ 584.593515][ T5902] handle_bug+0x84/0x160 [ 584.597973][ T5902] exc_invalid_op+0x1a/0x50 [ 584.602536][ T5902] asm_exc_invalid_op+0x1a/0x20 [ 584.607403][ T5902] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 584.613751][ T5902] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 13 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 02 ad 9f f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 584.633791][ T5902] RSP: 0018:ffffc90004476798 EFLAGS: 00010246 [ 584.639871][ T5902] RAX: 711435155ea1f300 RBX: ffff88807a004f3c RCX: ffff88807e2fbc00 [ 584.647874][ T5902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 584.655852][ T5902] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 584.664003][ T5902] R10: dffffc0000000000 R11: fffffbfff1c3aa04 R12: ffff88823bf6cf28 [ 584.672233][ T5902] R13: 0000000000000000 R14: ffff888028db0e40 R15: ffff888028db30d8 [ 584.680229][ T5902] ? __rate_control_send_low+0x5de/0x820 [ 584.685902][ T5902] rate_control_send_low+0xf2/0x7a0 [ 584.691140][ T5902] rate_control_get_rate+0x20b/0x5d0 [ 584.696503][ T5902] ieee80211_tx_h_rate_ctrl+0xb32/0x1780 [ 584.702322][ T5902] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 584.708406][ T5902] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 584.714670][ T5902] invoke_tx_handlers_late+0xb6/0x1820 [ 584.720305][ T5902] ? ieee80211_tx_h_select_key+0x13d4/0x1900 [ 584.726333][ T5902] ? sta_info_get+0x28d/0x2a0 [ 584.731118][ T5902] ? invoke_tx_handlers_early+0xa11/0x1d10 [ 584.736963][ T5902] ieee80211_tx+0x2ac/0x420 [ 584.741589][ T5902] ? __pfx_ieee80211_tx+0x10/0x10 [ 584.746647][ T5902] ? ieee80211_set_qos_hdr+0x1ca/0x520 [ 584.752119][ T5902] ? ieee80211_xmit+0x315/0x400 [ 584.757114][ T5902] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 584.763274][ T5902] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 584.769103][ T5902] ? ieee80211_tx_skb_tid+0x2f/0x420 [ 584.774423][ T5902] ieee80211_tx_skb_tid+0x266/0x420 [ 584.779688][ T5902] ieee80211_send_auth+0x415/0x5a0 [ 584.784827][ T5902] ? __pfx_ieee80211_send_auth+0x10/0x10 [ 584.790463][ T5902] ? __pfx__printk+0x10/0x10 [ 584.795072][ T5902] ieee80211_auth+0x472/0x8e0 [ 584.799778][ T5902] ? __pfx_ieee80211_auth+0x10/0x10 [ 584.805077][ T5902] ieee80211_mgd_auth+0x1083/0x1770 [ 584.810279][ T5902] ? __lock_acquire+0xab9/0xd20 [ 584.815150][ T5902] ? lockdep_hardirqs_on+0x9c/0x150 [ 584.820445][ T5902] ? __pfx_ieee80211_mgd_auth+0x10/0x10 [ 584.826539][ T5902] ? rcu_is_watching+0x15/0xb0 [ 584.831337][ T5902] cfg80211_mlme_auth+0x632/0x9c0 [ 584.836384][ T5902] cfg80211_conn_do_work+0x501/0xd10 [ 584.841695][ T5902] ? __pfx_cfg80211_conn_do_work+0x10/0x10 [ 584.848064][ T5902] ? wake_up_q+0xca/0x110 [ 584.852466][ T5902] ? ret_from_fork_asm+0x1a/0x30 [ 584.857498][ T5902] ? stack_trace_save+0x9c/0xe0 [ 584.862347][ T5902] ? cfg80211_conn_work+0x298/0x440 [ 584.867549][ T5902] cfg80211_conn_work+0x2c0/0x440 [ 584.872574][ T5902] ? __pfx_cfg80211_conn_work+0x10/0x10 [ 584.878121][ T5902] ? arch_scale_cpu_capacity+0x18/0xb0 [ 584.883610][ T5902] ? kvm_sched_clock_read+0x11/0x20 [ 584.888824][ T5902] ? sched_clock+0x3f/0x60 [ 584.893261][ T5902] ? sched_clock_cpu+0x74/0x430 [ 584.898109][ T5902] ? psi_task_switch+0x39a/0x6d0 [ 584.903056][ T5902] ? __lock_acquire+0xab9/0xd20 [ 584.907979][ T5902] ? do_raw_spin_lock+0x121/0x290 [ 584.913093][ T5902] ? look_up_lock_class+0x74/0x170 [ 584.918231][ T5902] ? register_lock_class+0x51/0x320 [ 584.923455][ T5902] ? __lock_acquire+0xab9/0xd20 [ 584.928411][ T5902] ? process_scheduled_works+0x9ef/0x17b0 [ 584.934144][ T5902] ? _raw_spin_unlock_irq+0x23/0x50 [ 584.939346][ T5902] ? process_scheduled_works+0x9ef/0x17b0 [ 584.945087][ T5902] ? process_scheduled_works+0x9ef/0x17b0 [ 584.950826][ T5902] process_scheduled_works+0xae1/0x17b0 [ 584.956403][ T5902] ? __pfx_process_scheduled_works+0x10/0x10 [ 584.962411][ T5902] worker_thread+0x8a0/0xda0 [ 584.967111][ T5902] kthread+0x70e/0x8a0 [ 584.971290][ T5902] ? __pfx_worker_thread+0x10/0x10 [ 584.976493][ T5902] ? __pfx_kthread+0x10/0x10 [ 584.981090][ T5902] ? _raw_spin_unlock_irq+0x23/0x50 [ 584.986406][ T5902] ? lockdep_hardirqs_on+0x9c/0x150 [ 584.991909][ T5902] ? __pfx_kthread+0x10/0x10 [ 584.996640][ T5902] ret_from_fork+0x3fc/0x770 [ 585.001262][ T5902] ? __pfx_ret_from_fork+0x10/0x10 [ 585.006404][ T5902] ? __switch_to_asm+0x39/0x70 [ 585.011169][ T5902] ? __switch_to_asm+0x33/0x70 [ 585.015941][ T5902] ? __pfx_kthread+0x10/0x10 [ 585.020532][ T5902] ret_from_fork_asm+0x1a/0x30 [ 585.025317][ T5902] [ 585.028469][ T5902] Kernel Offset: disabled [ 585.032785][ T5902] Rebooting in 86400 seconds..