last executing test programs: 6.118039239s ago: executing program 3 (id=380): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="01"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) 5.872212674s ago: executing program 3 (id=382): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, 0x0, 0x917}, 0x14}}, 0x4040804) (async) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000200)={0xc, 0x1}) (async) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) (async) r3 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000480)={0x0, "d53c0eb582cba9f1bc16e9ca85647283ccf9e9b7cfa617c953f8334fb77453e9d63eafb578307ceb8c0de24e1a2799fbe25a20bdffddd2b9708a52e314708472", 0x3d}, 0x48, r2) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES8=r3, @ANYRES16=r5, @ANYBLOB="e6fcffff429ce1f800b6000000001a3580779a5ce6427cde9500040002000d80f58edf88abc2e31983714b3c76563014eb9fa72cc4d13dbb0fd7c45a558fcc6f0bfbb040d611132c17e91709fb0bede112c7c90b9c41d11267b33a55cb098fe478da4cb4d6fffe203f3c3b58924f5d6b2d5af771254ac403f0afffcd98eb5f08504b5d2b38778aa10b81b71c6fb2afd1076008fba38ea80dddb411024798adc508af4fa5fb028e2989d4f6909aa696a26823430061d60395790dbf2a132a7c58a22bff5510dc7075de59398c0ec0341401c879235ba2f17cd1b9d887968f3f07def8abe78db4eea5f5f47e6055df1e"], 0x18}}, 0x20048000) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0xfffffffffffffffe) (async) socketpair(0x26, 0x80000, 0x5, &(0x7f0000000600)={0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000200)=0x9, 0x8) (async) r7 = socket(0x10, 0x3, 0x0) r8 = fsopen(0x0, 0x0) connect$caif(r6, &(0x7f0000000080)=@util={0x25, "07a0d2f7618f26a3b639476c8e240a91"}, 0x18) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r6, 0x6, 0x7fff, 0x3c}) (async, rerun: 32) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001e00010a"], 0x14}}, 0x20000000) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 32) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async, rerun: 32) splice(r9, 0x0, r8, 0x0, 0x8, 0x0) dup(0xffffffffffffffff) r10 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r10, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100006e40b740e1092151c1400102030109021200010000800000000000003cac2400"], 0x0) (async) r11 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmat(r11, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) clock_gettime(0x0, 0x0) 5.71842446s ago: executing program 3 (id=385): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="03000000860400000010000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0200004001190000030080e006030000e05ad60a92c50497"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0xffffffffffffff96, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) syz_usb_connect(0x2, 0x6b, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2403020005029a010209240603040001a5301124d500000000000000050006000100050924030506030501f909240702020005cbad092403060101"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=""/230) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r1, 0x2000) 5.174765941s ago: executing program 1 (id=386): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 3.879295132s ago: executing program 0 (id=389): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x364000, 0x0) ioctl$BLKSSZGET(r0, 0x1268, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001500010000000000000000000a00000004000000140001"], 0x44}}, 0x0) write(r0, &(0x7f0000000000)="fb196dec69a10b2284f761", 0xb) 3.830859257s ago: executing program 3 (id=390): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa9a42, 0x0) write(r0, &(0x7f0000000000)="fb196dec69a10b2284f761", 0xb) 3.809408101s ago: executing program 0 (id=391): creat(&(0x7f0000001380)='./file0\x00', 0x4) syz_open_dev$vim2m(&(0x7f0000000080), 0x6, 0x2) (async, rerun: 64) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) (async, rerun: 64) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x80002, 0x9c) mkdirat(r0, &(0x7f0000000100)='./file1\x00', 0x1f5590cf8e4b9dc3) 3.69925499s ago: executing program 3 (id=392): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003b6bc040950b2b774ca2180203010902120001000001000904"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x400, 0x0) dup2(r0, r2) r3 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) write$rfkill(r4, &(0x7f0000000000)={0x8, 0x0, 0x3, 0x0, 0xe}, 0x8) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000180)=0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0xfffffffffffffff8, 0x3, 0xbdf2, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0xfffffffb, 0x5}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 3.535040738s ago: executing program 0 (id=393): syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b62, 0xfffffffffffffffe) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 3.474862051s ago: executing program 0 (id=394): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x4001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000080)="b922cdd771b1024c1f1f9b3c77606d888451227d5749c538f96ba541525cc189dadadc7e38bd85b7ddf7f7091d9c", 0x2e) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x13, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000ffef00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 3.327485258s ago: executing program 0 (id=395): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb2f00e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 3.040449736s ago: executing program 0 (id=397): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x1, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket(0x10, 0x3, 0x0) 2.24692544s ago: executing program 2 (id=403): ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000002c0)) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) mlock(&(0x7f0000788000/0x3000)=nil, 0x3000) 2.043321369s ago: executing program 2 (id=404): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="01"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) (fail_nth: 5) 1.594313485s ago: executing program 1 (id=405): r0 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000007100)="19", 0x1, 0x0, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x7d, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100008, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}}) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) socket$inet_tcp(0x2, 0x1, 0x0) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000012, 0x0, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="388891", 0x3}], 0x1) shmctl$IPC_RMID(r0, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, 0x0, &(0x7f00000001c0)) r5 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$apparmor_current(r5, &(0x7f0000000200)=@hat={'permhat ', 0x80000000, 0x5e, [' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 'ip6tnl0\x00', '+\x00', '(\\\x81!\x00', 'ip6tnl0\x00', 'qnx4\x00']}, 0x57) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x800448f0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) creat(&(0x7f00000001c0)='./file0\x00', 0x8) creat(&(0x7f0000000000)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@md0, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0) 1.494376331s ago: executing program 1 (id=406): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb5500e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1.404697751s ago: executing program 2 (id=407): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000080)=0x3, 0x4) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x1e1982, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f0000000140)=[{}, {0x80000000}], &(0x7f00000003c0)}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000004c0)={r6, &(0x7f00000002c0), &(0x7f0000000440)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) truncate(&(0x7f0000000240)='./file0\x00', 0x1) ioctl$PPPIOCSMAXCID(r5, 0x40047451, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x9100, &(0x7f0000000580)={0x8e, 0x1e, 0x100000}, 0x20) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'pim6reg0\x00', 0x2}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, 0x0, 0x0) write$uinput_user_dev(r3, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0xc, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x4, 0xffff, 0x3, 0x5, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x2, 0x7, 0x10001, 0x7ff, 0x0, 0x8, 0x6, 0xfffffffa, 0xc, 0xa, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0x1a47, 0x8, 0x3, 0x8, 0x1, 0x2, 0xabff, 0x6, 0x939, 0x5, 0x9, 0x9, 0x2, 0x4, 0xfffffff7, 0x7fff, 0xf9, 0x5, 0x2, 0x56f00ca6, 0x5, 0x2b, 0x1, 0x23], [0x1, 0x9, 0x9, 0xfffffffa, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x3, 0x5, 0x5, 0x0, 0x24a, 0x1, 0xfffffff7, 0x2, 0x3, 0x7, 0x9, 0x82, 0x1008, 0x1, 0x40000040, 0xa3, 0x8, 0x0, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xd, 0x10, 0x2, 0x9, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc6, 0x3, 0x1, 0x9, 0xffffff01, 0x3, 0xfffffff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x2, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x80002, 0x7fffffff, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x7688e9f5, 0x9, 0x5, 0x5, 0x4, 0x10000, 0xc93, 0xffffff40, 0x8b2, 0x7, 0x0, 0x101, 0x140, 0x2, 0x9, 0xb, 0x2, 0x6, 0x7, 0x7c13, 0x5, 0x1, 0x7, 0x8000, 0xe, 0x6, 0x4, 0x8, 0x0, 0xffffff00, 0x900, 0x7, 0x2, 0x0, 0x9, 0xdd, 0x1, 0x9, 0xc3, 0x7751c64, 0x7a3], [0x4, 0x3889, 0xffff9a7f, 0x200, 0x6, 0x2, 0x3, 0x1, 0x5, 0x4, 0x6, 0x1f, 0x3, 0x6, 0xfffffffa, 0x2, 0x8, 0x101, 0x2, 0x66608000, 0x5, 0x7ff, 0x6, 0x5, 0xa476, 0x6, 0x9, 0x770a, 0x7fe, 0x0, 0xffffff81, 0x5, 0x10001, 0x461, 0x10, 0x1000, 0x5, 0x100, 0x7, 0x20000000, 0x8, 0x1001e, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x3, 0x10001, 0x80, 0x200]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x2}, 0x8) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 1.35925711s ago: executing program 1 (id=408): creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext3\x00', 0x400, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000440)={0x100040000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x200, &(0x7f0000000000)="0a5b60f91909606a7bd80175e28e4c6aee2075b77a8953d43aa4b1f0146e9230f6", 0x21, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="0c94b47282f9ae3a30683ddb20a80cc97ef58f4405120fe806ba59a43a56c927b77e5c9f41c08bfe72654eb5d6593ffce6a5e28afe476d126ffa82bb6435a814a9c3a20b02f31d01ee2f1d427e65df5b41d4be00a223d73459bcadfee10ef5a3fd746a94b576dc9fc747dbb8498385176f4009e38f6e45db6826fea59a29e9638b180280f8250bc8c1cabd6b05a5625dd4ff95c17fd924da85aae9cb152670055ca20fa483118400297199d70453395e083720063230f96b0c06c55dfad629c06a7f6e57cf1e6ba5cd1efd3143b9b249a10099cbafbf28cdb250decfe5aabc6e6258a492885b6bb1831d2d534281f6aa64ffacd2a3e1cd66de66693e9cdde3306e2ef8f82b93afaa59137105938743213db3e57d25a96cee721362a0bd4dbcb66c74eb55f36c9caf94616d753ea25e8c38bc8eeef4a78aa85a0d83ead3cbcf3358061f43500257114e44f728de1677befbe02443273dae44aff3629696ebf37e432b22489d4343104854729d2c7b80d93e395c4156ec4fc5c0e0cb485114451e0ea7d2e9c1f6fa80e523082e7892ddbd4b2e6928a869c2a3e463dab4fce432b476b7ef21c5923f2e538bd820336911275ff0200d637ca382e08088a673c2fe2b3d38bee26bf371c83df9f9cb5e160909be68e1c8680d189cf2055e567c4da43278481cddd724eb9073bdebf11bf8e747b8a1da26ed7f0a1b57f64f23dc51f201d4577d586fec85ed0d0ffa2127a16e95004febbb75bec9fbf015d12e2543bd956136ee9ec10f2a62f219636ab3e1ab2facaff39ef5ee5cadd09ebcce6e57acbef7b4958f64d735d713482ef9a24e55230792abd1336570ea41444508fb82028353b052a63dd678deadedce833ea3b57173d26f275bad2c4acaa1f9adf4f5a337589bd99d02e2ebc12a0e95a1a190112cc3f032d1312e096a7b68df6c6320a78780ed396c1cc66bb0d202a5581adb40748934b891449cc799ea0089b92e280d0e9cc985d6833f1b6ac9bc39d129f9da6d6c471b4e50b1cfdaee3b9f93f4477a9421c0e8d9ee74d6da67b07163fbdfaa79320d0a9cb7fcfe713b5d8900178bfd44eac7455e377180338cf0cd547716b0fb39f55db089685791f3d26cf5f75161d9146ea7badae1639719ee4714e7d78c5f95fa019d5eeadddcb2d0e849146f4f0d8851427bfa619fe0cbfef2ff4f650110bda4863971313e143d7d87cbd6857ec351008bd665e30fc9fdb349d8903fa34036382d7850aac4eaf10f8e8cd0fa5921e65e286294f85cc0ab381637505282dcf3e689ce458c8b46cfadf9686d70c46932e33482d3884057ae7390bd83dadfa267a53160a9ca0a1ba435983c440e5a839fab7d55d487ad0fed5d9eb535ae024b48f80bdbc3d205db4b94048ae66f17e8143e30dc454b32b4fdf7691826d204c6c38ae89143b017ba3d41646e482e932030212ecf2ff62a52fc137dbc6a28b35d340bd4a8dadaf360b3149640167542ee33f8d8c8a4fa31958bed9dca0c015a1f41f53710c8f27e569d7744c3628c0a05a7b2d8d9c14a7a519a9ec20441fcb707ae62772ffa047cf6d61b22cf504267d6683bfcf525f61e4c23379faf6c451a7e133dbc01942ede00dfcfe16e1b4ed4047624d7ef887a0cb6035479416e7b2a06d1d9fd1e50f1a62d5f6806858ffd1179908876eda57a649e8efea79bb6c394ccfbdeb568e74372819cf37b8b3f865e3352ba4b6e3622a9b70873b8d7dff980cd550fd3d80200d277b0e60b93abd8e65be621960ebeae942feae036a61bf79bdbd94610620b4fb5ad1ddc64cd39ce5985b3fcf60557ae61eabde39a7f4a88a21d55e8b2726cf68f155286cdace577374f27b9e157e8f645bd1dece6c03af1e2ae354e47297a73d420d02a80921186967be02acf25859ecce5060fdb40a20c053c12b14f8fd5bfbbb6ae239fd98f3f40a2cff3c1afa17a3708e6a46f99e5013da0ccc5ec865e7d88111e8f2d9600ce1e2fedbbf796e2f7c6f8ee27e3c946a8ad6aff78c235d96557be87eb9d8eb1bd89b2571354f77fefd1722c526756eb910ecf1e16c1e71ee48fa11c16ca7e213587e6cd87b41a4cf70d7035e6cb0ccbe3c6946b80329c18fa0c9bc7970089d2391a662c7e7167d05fc17db0c71e5ce62db4d94170efdb9b49f564dde349a317df60cebf0ec9e3eb4ba66420ad9ae7a81870c02ae45da0d061ca051f561fde8da40b42c8d23e87fa19057c73f13b025be7c37f483295a52aedd290522177cc2f51d9f6ed662b8c74ac28d2173a43a764164c5906c9bb12d69c590a276b7d236e362d365e41817e860011b7ca2bdf0902439c74ada39c9b8a95dbeb1d7de5860e27ef7099a48e90808f1213ffbc5a39985aee602525ccbf89604e637033ea455551ad541cd751837f54b7f15d4aefdf8a69c53715ce434ffbfbe6a88d4e21b7985268760b1b0ce7de3d30b2d9bbc536c43bb39a23898849492af8ed3f1655e75a9fe73db94370ba1624b110f040d86e05fc3fec40299cc258768d21e5b64cad59f7a74462b85e9556ffe78362847e0066abac5cac7477b1265ecd43579c39da6d064bc37a765294c27919d279d82dffd70d7261519cab4188cd91b6637f85e6db4142aaa0de415354be1dbc7188c892c4cb2db33dfdc836dc2a5945af7b087c75be9b0056fdce12c0378716edc1eac8ac1154821e11b4ed741516643d97d8c4813993c32e8ffb8591cf53f8d8033e1f77f1d624bfe0cd090455afe33e804f6bc02ed6ce8af44a515d564654734b738d525a8ec0066b6727433b0a6515fc247f1eca0b942ad67ee5ca3304cc4cfce807b8d6f3343cf7a16a64664f4e420652c504e26ba1561b206a410f23e61423e09b8f0809e6b57b7849206de339fc8ece8a2c8eaf970095211bb12ae9b9734c0d383e68c7c55b24a07c79e5a0049a2c039f35ed9179e3618ec3a934ce022923a904bd349ab744ad126b8fcf14e06979610038f2749edfc3047ca04a4a417d81db6b14901b841a90badc9c4922fa9fba2bdf722499ecc207e0b381828e7af34a63b094e67ec6e5b39e9e748a3da66c0da0786db7531d555d99af077a928956799a33ac45b9dbf6c43425736360a51a4fd06e7151e7c48aea6d42b52c27c71e8127b4820d87dd97450620edb7606dbff06fe1c48091ec0287eaed2755f3d491f40526c3bb3fb838c772087aa61e214a3182f72fa7478cd8cb8821fa767a4e0b9c3fea20f24390c622daaacb8f739319ff6935ed3d5d26be07fff89ed75f4183ec6d58f4f2c5c46644e51c1797d276089504a58aa6ded2e0670b7ebaa99879bf5f63c7dbe988b5036baad7eea1210e197e0b04a3a57154fab468289041e0042142e867fd78dfb5c87b855cf32e6b30f8ca2f3562bbd57d3c782611db84cd857f1dba928b1e81456039b807114fc6e6172c24d0b6e0a9f93c374861188e5db67e9a0c7886df19a5b9009e227c9930f609db607575efef5aba371788e39020d12ee3e194399e0425c15220496c0f72d64326fd9d721e0dddda6558c75875cd4e2faab91cf31803b0feb7755f033eba316b69b98760567e6e48334c03d8cd9ef6258851fae805cc066da6d48c76aa5ab8ce5b080018f6c0cd841173380012e4e6df8c8dbc907bfe6391252f4334a83d743da86c8c23ff86f09be429af4f1b641f73f19cbd7c7eda1bca81d26fe409f8da80122568aa468aded024d6ece711883531f91a9b0cad8c27cf73fd8996747adc92efcd15f5ac0fdf4ae9973786dce8df7d05026e9d2a8030a1dcf5a0f67c8867b282bdef7f1d9864a6effd613be052ef09c031e2045197eda74fa3d7302c6fc730e09a456bfb7ef868bd7c3f6cc7dbae77e446750690740aea7513b4d1068bbf8c5ac254b9d28ac72da206a2ccfa896520a6d69284f1e4f2917804cd52951b395bd02326d44736590d97667dd995c811aa069d66cc193275327c58c0673873b946f5f6c24bd0c956f1dae889b99e71783af60f8a0da0d358138b3261ef6180a3d74f6e513c216800ea7c135799277cce6943ce2f4763b8bfb70deca4556e3dae51f6e8cb65c40ab3e652a3cce65f570477c0fc455aedd75001abcea27b5aa5a1349b2e08d869d34b2fcf6c9b60f5b5fec80048c107bb7075232f06aecf5952f07482ab8d147cfc6198ac5baf4a8ff648c6154a99d807d29bd051c6ec035cee6b6e15c4d58876a592a20f7833191031900a194797be4ab04774ed1a6f6dd8f7d478a71aa930db0db0821186ef389f8b0bdd47ec4e723a17ea01e5aa17f292e0a19145778d732deb212adada1c5baf4c9ad36848a906edecef59abb9e3160a8bd1ed0b7c1256bb73edac49053c50870aa29c288a306050f68ba9122354982b75b49e389381a81b7daebe6c528ad6bdafaf4e916b616a40d166b760db16955358e83823ca2f86c6d100f20411c472f4656237a2f0d0d131cb785abade19774117255f7fc0153c1bbb5c6174e3ceb45f41842ec157bf83d7cd65715e12a0449e6af2a6358c6cc18eac0b5a4ddf56c93379c5e1103f280bef97c6e26a1c40b9426a765aec7df4e063e5a2bfa73daefd8b92206589b0d182159d75069f980ea794edc480d72e3d43cd2afb310c24a14c55b775d97b15b8d3b10caf8d78b17d6bc0063d8e9b366b6b0a9fbed9fe47e6f84482ea61c3287bdf0b1b9270cdb20a49ca777c7b6eadb3a585e655add6eb26aaf2b803b6348082a3cac65e62c0fdd742dc4797fc5f7c4302ea17232eafb5f04f2290955b75cb17738d0e0f27c239a41ff2f70b8071b83fa8a099defe1eddb5ac5d6503eed6899749b83b037d4bc478fde5adab582d653ba19a88bc52424397b8e8b9521b6f0aceb51074cfe793d6d330340319d39d1393e0ecd8b7e184b5abc8c06dd3357564d4cf794d641946f134c406e2cabbcadca4ec16a37d198537039f1047e1365732d8e1b7b3e64d8d49b909a32dc6bb9491893a5660cc44723bf9045d92b5c4c99936f8b4434e2a37baf4fa9e462bf785082934d013a55ce828fb0c6109cd53d8340f733da66f0fa0ea4b42e6b0f1ff2698b1f2849dbda1e901cb1b7a5b8196c3056bfe55cd5a43c74658fea2c631abd0ddb15eb07b4970e8af3676cde724dee8adef7d1ad51809d8c7a7822fc422dbd2023e455eae38e901df94546b8dcb73c81bbf2c9590f28ab802f4bf382e520f6ae8df53bda6e84d8388150008884ad4e25dc58b972631ce7697dcc32d9d588aaff0b2e933bf323b3a1ead91dfe452aa3fff7ed3b2539018bc9b4aff20a9a5f600a5eb9aa07a40682a0b64292a69196dac9badd6b78efd38f89fae44b736a660f76c6ff49d13155b315cfe194a275c881253156007bbd12b56137f986f4f39eb51355ac5a4c09d9b0a8d84277464283c36ae1419cc97f50f7828e13e76d863b9d0cc147359e065174d4ee8d6d507157aaff71bc68ffaa45d3af7a95f083fdc59c50049392850fe66686992aeb617a0adc088b1636a6008c121651af77d0b75bf155419f91cd8af1751bebfeb051a25e5044ee24961f01f069b0c285fcce80839207cc04412ea3ec975deade6783ce5878fed8ca9191c08a84a5bcaf2479f84a9502560b0a3ba54e18366e6ff53c3f8ce56c7643ff743e6f574df3d9f88ea64c3627ea71f6c9152aef57147a86524987b8097eea4d6a3f88c2da3094ad7d6c147d2e73c475e74e13f7b905797fe0952156ac5217f686cfba932058c321c64fbf99ca6340138bf9d56e002db40054285af502504d41308d9e48d3f528b0a3e20f318db9a2bbc4ab0") creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext3\x00', 0x400, 0x0) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone3(&(0x7f0000000440)={0x100040000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone(0x200, &(0x7f0000000000)="0a5b60f91909606a7bd80175e28e4c6aee2075b77a8953d43aa4b1f0146e9230f6", 0x21, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="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") (async) 1.074432003s ago: executing program 1 (id=409): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x7100) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x19, r3, 0xffffffffffffff7f, 0x6) sendmsg$nl_netfilter(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001180)={0x16d4, 0x0, 0x4, 0x401, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0x3}, [@typed={0x4, 0x5a}, @generic="63fd3ea712e55fb3d69edc47c95c0173e83eced6ef7b5e393353649f524c50788838f27b98338cb7c00ca09b32934babc794d32ad34cbc786b7d24422a0a747e28c668c86daa84fd9952ce43a587fe4e6c0de536a317ad666c6d1f6c84ce859bf60ccbbe79dd26d8a44e85531145f626ffa76e9a8425ca80f3fac98fdbd1c5d4d6790837f7995f192072cbeb6260153fbf819c3cd985cddb3b731061b88147290baaa453e40aa39823851b86982198eb524e4b47ea312fe1c72b211a3d91c4145506f1c0280067ffb29a8d97bc9ce03197b6b12053148eafeab956bd", @nested={0x22b, 0x12, 0x0, 0x1, [@generic="60b748b642fdb4fbd8b6ab446c9a79390f7e0efe7504b661c71be5967b7e0124f8651ac949e0d92b5ca8de709f83e8a0a9ed37e14e38607e847f7a04efd9b48125235f6332cd26e66521175ae26b41e26a230febfd0f0e1de0ab9ce5e9f4bfd36279e4913a697e6ba2aa485c5df2739bfc0615c09332d1b7f636460ce5d43474858da68c8ba9be029df4d21ecb16ac32fefc4a8832cb51fea0999cdd819d1fd4a79d888e6a6966de5546f7fbd60bd238cdbeca20624166f8c10dd5cb136363a7a40fbf0a6cbe0b59d2ac10149b49cd531a56b70304446c233493eea5d06c840fb6563a5aa247c192d7", @nested={0x4, 0xc4}, @typed={0x8, 0x1e, 0x0, 0x0, @uid=r2}, @generic="538e0e62c5232cca7d13ba90d0d8745809cb14fd4aa552344fc1c32bed3200636f02ded95bb8e7ddcf5cfefec0bd250e622690360ffcbde73e1a2bd0afe6733b729f621b1c43da13750458b930f09667f854d0de0e2916cc7baa49bc2dbc10c8117843cf71c1071a1086cc25c16b1e0887d924dff3dc0331f7f5", @typed={0xc, 0x9e, 0x0, 0x0, @u64=0x100000000}, @generic="f9eac79302e9922c461db4a17fd3a524061163511eb0ad73def7b1ec7879d0d0c710948d9008b518249026ed3b74ed1bd86e68fcf92a431392ce18136f50607fd946320c1f771e3a9a0f5b031058db48b5eecbaf55d22942f9bedf1cdc7eaf35a7034dd9f0c026769a84b9115ba4e64f2a5decedcb955c1e8f0bd828c4ddf4a575a84bf4893781d16ed4e29037d726f39763d19a2bd7e9eb01e21740", @typed={0x4, 0x43}, @typed={0x8, 0x26, 0x0, 0x0, @pid=r3}, @nested={0x4, 0xac}]}, @typed={0xc, 0x114, 0x0, 0x0, @u64=0x1}, @nested={0x13a6, 0x35, 0x0, 0x1, [@nested={0x12ba, 0x3b, 0x0, 0x1, [@generic="3342de69be86d7bf7c798322dcf8cb461f7a7b34a2c58f6b4bbed6dc0f872965", @generic="c5b1a01cdb318558de410f9f0acc048123c061a302ce25c1a78248d29066ddf233e45a720c59ef8cea09f90349bc023b3ef93e40ca5cd50b9b190b08a4838df2", @typed={0x26, 0x4f, 0x0, 0x0, @str='}\xa8\xc0((}/!%\'@],#)@}]!/-#}\'(+(\\\\+&]*\x00'}, @typed={0x8, 0x41, 0x0, 0x0, @ipv4=@local}, @generic="eed5a9e09f376127ba1875a28652ba65c61faaf732666351b819ec78c50f83aaeaec770272421e522eb1fc62c72119e04376582051ee21caf4e00af55f6fd98a8800597865ed23e047ccaf235b39efc70589ce79f2955ed1040f3e1c5a9062ead48a60a0855decdf12f52b6e6a8c2b3a963989f250f6ab180ca4831397071855e866fc4ca48e495eb99af1a747edbd5d6529e327dc2ae663617e1f000334a2f8ec05aba7fc84c0ad1fde7f46a680043704854d1f762d7f7f", @nested={0x10e9, 0xe5, 0x0, 0x1, [@nested={0x4, 0x101}, @generic="49b5bd5776c48acabf09e9f3321c43cfbfc3080a2175cc486f996a3ca56605c057154eab6f4e661b8d674780ee001156a5c9d1e6674427cc431fb433da690faa6277f7505c7b9212a0f96ada13677ac7d2d3d5cf748c624c1b267aa91dc0e552a18d947ef79277f27dcf4b8a26372816b425278d60ab521890ee355cc2b27b529e3042a7424a73cccc3bd02e0fd140c5597e0be2a5988190d3cbd854f543b2c5a3468688bcd256b5b70b5b3329", @nested={0x4, 0xe2}, @generic="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", @typed={0xc, 0x11a, 0x0, 0x0, @u64=0x3}, @generic="3ca10365a38f2e16a4616fcc32b5d69df63eafc75ca2232e2e441715e9979e4bd6eb3f4e"]}, @generic="74be945a6917e7f886aac49a45f56a421df456353d713603f437b6e5e87ff38e9b6482aafadd0894139cad2cfc8531390919287ca49617fba153bb2419938dbee73f3037eb0233b2453e73f18a5781e4a4a9389121569d2f817c2c0c46eb9a6ad4e983fb3a98c1a6ecffabc1f06c0e36aeda70083876162e20d72fd8c86cf617920a"]}, @generic="f6071f2d03aa80cadb05dd17ef27bb8147b93ec39f8fe903c460ca881e899847684bf4aeb36c622731d7754f8707ea68af40e13f160a50b6b42dec1d617ac3af41818ee213ca1647dab9241b844808750a730a9077925f5d3a1c916bf1cf9ab9ee12a563cb170f8ae1af65483351fa3793e2c973a02b514ddc71384750351722103cdc45e028c6abaa6aa0fe2ab50ea4514336d00010e6f39a73749b3e6287d1b2726998431ffaf2d8418019700955e26a1ab4c229f104d46c8d9209e9940a1a747f3ab1f85b743bc64e930b474aea5331c7a1cd6a68e2a785f32f57b71f41f0fa67de18efe6"]}]}, 0x16d4}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) unshare(0x64000600) r4 = socket(0xa, 0x801, 0x0) getsockopt(r4, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f00000000c0)=0x54) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, 0x0, 0x310) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TCSETS(r5, 0x8910, &(0x7f0000000080)={0xffffffff, 0xe, 0x2, 0x6af, 0xd, "1a9f0a3f7b52f26ea6fa6a6638d7219c6a5310"}) sendfile(r0, r0, 0x0, 0x7ffff000) 898.422002ms ago: executing program 2 (id=410): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000400006803c00040067636d28616573290000000000000000000000000000000800000000000000000014"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000000)=0x3, 0x4) 677.839294ms ago: executing program 3 (id=411): r0 = userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x82482, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b531, 0x1, 0x6, 0x16, "55af0f284ee66c29bf81c1817ea9f5f73eb62f"}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="01"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) setrlimit(0x9, &(0x7f0000000200)={0x10000, 0x7}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) r5 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="03dd"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r5, 0x81, 0xfffffffffffffd77, &(0x7f0000000000)="00012c61020000001c11447298a9538f168516ff037f291e463685b0139216171afd0eafbd9c28d93b8b8fbdd59f3d473eb9d29d3de65dea17") mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, 0xffffffffffffffff, 0x7dfff000) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r6, 0xc0105702, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000001c0)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2}) 581.984915ms ago: executing program 2 (id=412): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000003ac0)={0x0, [[0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x7b7f, 0x0, 0x0, 0x0, 0x0, 0x1], [0x1]], '\x00', [{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1ff}, {0x0, 0x1000}, {}, {}, {0x0, 0x1}, {}, {0x1}], '\x00', 0x3b}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000003ac0)={0x0, [[0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x7b7f, 0x0, 0x0, 0x0, 0x0, 0x1], [0x1]], '\x00', [{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1ff}, {0x0, 0x1000}, {}, {}, {0x0, 0x1}, {}, {0x1}], '\x00', 0x3b}) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) (async) 307.15018ms ago: executing program 2 (id=413): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=414): r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x18, 0x0, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup(r1) mount(&(0x7f0000000080)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x400, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.174' (ED25519) to the list of known hosts. [ 65.575795][ T5823] cgroup: Unknown subsys name 'net' [ 65.735699][ T5823] cgroup: Unknown subsys name 'cpuset' [ 65.743912][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.149738][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.478583][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.488015][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.495592][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.513945][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.521562][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.603590][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.611791][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.620529][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.629117][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.653157][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.661064][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.668365][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.676568][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.679796][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.691381][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.699466][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.707300][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.716667][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.724089][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.732599][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.921662][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 70.147887][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.156818][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.164951][ T5832] bridge_slave_0: entered allmulticast mode [ 70.174872][ T5832] bridge_slave_0: entered promiscuous mode [ 70.184916][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.192089][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.199342][ T5832] bridge_slave_1: entered allmulticast mode [ 70.207269][ T5832] bridge_slave_1: entered promiscuous mode [ 70.263526][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.279200][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.291213][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 70.373611][ T5832] team0: Port device team_slave_0 added [ 70.400540][ T5832] team0: Port device team_slave_1 added [ 70.450515][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 70.506827][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.513982][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.539914][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.579939][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.589270][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.615747][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.675929][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.684346][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.691428][ T5837] bridge_slave_0: entered allmulticast mode [ 70.698968][ T5837] bridge_slave_0: entered promiscuous mode [ 70.707104][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.714506][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.721630][ T5837] bridge_slave_1: entered allmulticast mode [ 70.729243][ T5837] bridge_slave_1: entered promiscuous mode [ 70.741019][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 70.846149][ T5832] hsr_slave_0: entered promiscuous mode [ 70.852410][ T5832] hsr_slave_1: entered promiscuous mode [ 70.865711][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.886860][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.896463][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.903780][ T5838] bridge_slave_0: entered allmulticast mode [ 70.910644][ T5838] bridge_slave_0: entered promiscuous mode [ 70.940755][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.964226][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.971335][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.979185][ T5838] bridge_slave_1: entered allmulticast mode [ 70.987158][ T5838] bridge_slave_1: entered promiscuous mode [ 71.051631][ T5837] team0: Port device team_slave_0 added [ 71.093604][ T5837] team0: Port device team_slave_1 added [ 71.109059][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.163385][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.172785][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.179924][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.187772][ T5836] bridge_slave_0: entered allmulticast mode [ 71.195246][ T5836] bridge_slave_0: entered promiscuous mode [ 71.208934][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.215938][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.241881][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.266150][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.273705][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.280791][ T5836] bridge_slave_1: entered allmulticast mode [ 71.288755][ T5836] bridge_slave_1: entered promiscuous mode [ 71.298677][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.305200][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.319158][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.326334][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.352275][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.405865][ T5838] team0: Port device team_slave_0 added [ 71.416571][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.449128][ T5838] team0: Port device team_slave_1 added [ 71.458225][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.558580][ T5836] team0: Port device team_slave_0 added [ 71.569738][ T5837] hsr_slave_0: entered promiscuous mode [ 71.576850][ T5837] hsr_slave_1: entered promiscuous mode [ 71.583551][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 71.589338][ T5837] Cannot create hsr debugfs directory [ 71.613888][ T5845] Bluetooth: hci0: command tx timeout [ 71.613889][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.619264][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.619310][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.621697][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.669697][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.696120][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.709656][ T5836] team0: Port device team_slave_1 added [ 71.772714][ T5845] Bluetooth: hci1: command tx timeout [ 71.778299][ T5845] Bluetooth: hci3: command tx timeout [ 71.783804][ T5155] Bluetooth: hci2: command tx timeout [ 71.791713][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.798952][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.826965][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.867646][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.874673][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.900710][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.927221][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.971998][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.981698][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.992164][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.009372][ T5838] hsr_slave_0: entered promiscuous mode [ 72.016218][ T5838] hsr_slave_1: entered promiscuous mode [ 72.022176][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 72.028020][ T5838] Cannot create hsr debugfs directory [ 72.094673][ T5836] hsr_slave_0: entered promiscuous mode [ 72.100785][ T5836] hsr_slave_1: entered promiscuous mode [ 72.109032][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 72.114799][ T5836] Cannot create hsr debugfs directory [ 72.395032][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.428799][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.440469][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.450688][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.550149][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.569412][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.580437][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.602998][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.609900][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.686715][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.697915][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.728879][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.740548][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.747751][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.765585][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.780639][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.798146][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.805238][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.933630][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.969060][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.984757][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.991933][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.049691][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.056853][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.098385][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.150490][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.178492][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.197097][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.225176][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.232305][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.263334][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.270449][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.332344][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.357725][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.377025][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.384192][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.429774][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.436942][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.536604][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.592496][ T5832] veth0_vlan: entered promiscuous mode [ 73.619332][ T5832] veth1_vlan: entered promiscuous mode [ 73.699062][ T5832] veth0_macvtap: entered promiscuous mode [ 73.701177][ T5155] Bluetooth: hci0: command tx timeout [ 73.709215][ T5832] veth1_macvtap: entered promiscuous mode [ 73.729850][ T5837] veth0_vlan: entered promiscuous mode [ 73.786587][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.808482][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.838577][ T5837] veth1_vlan: entered promiscuous mode [ 73.853651][ T5155] Bluetooth: hci3: command tx timeout [ 73.854514][ T5835] Bluetooth: hci2: command tx timeout [ 73.866361][ T5845] Bluetooth: hci1: command tx timeout [ 73.876315][ T1111] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.888482][ T1111] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.917645][ T1111] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.930095][ T1111] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.985355][ T5837] veth0_macvtap: entered promiscuous mode [ 74.021148][ T5837] veth1_macvtap: entered promiscuous mode [ 74.047133][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.073248][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.083090][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.094443][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.123696][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.164152][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.184245][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.192061][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.200794][ T5838] veth0_vlan: entered promiscuous mode [ 74.241457][ T5838] veth1_vlan: entered promiscuous mode [ 74.261017][ T5836] veth0_vlan: entered promiscuous mode [ 74.286070][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.317751][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.329632][ T1111] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.368331][ T1111] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.379108][ T1111] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.392918][ T5836] veth1_vlan: entered promiscuous mode [ 74.476286][ T5838] veth0_macvtap: entered promiscuous mode [ 74.498641][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.510738][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.526550][ T5838] veth1_macvtap: entered promiscuous mode [ 74.555048][ T5836] veth0_macvtap: entered promiscuous mode [ 74.579932][ T5836] veth1_macvtap: entered promiscuous mode [ 74.591340][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.600952][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.617535][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.621772][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.671790][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.685332][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.697525][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.705130][ T5893] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.719151][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.735203][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.768896][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.818657][ T150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.848464][ T150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.854662][ T5922] loop4: detected capacity change from 0 to 7 [ 74.863804][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 74.875876][ T5893] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 74.890663][ T150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.897226][ T5893] usb 1-1: config 0 has no interface number 0 [ 74.911371][ T5893] usb 1-1: config 0 interface 12 has no altsetting 0 [ 74.918368][ T5922] Dev loop4: unable to read RDB block 7 [ 74.923388][ T150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.927413][ T5922] loop4: unable to read partition table [ 74.939615][ T5922] loop4: partition table beyond EOD, truncated [ 74.947963][ T5893] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 74.963262][ T5922] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 74.977731][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.996813][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.007613][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.008072][ T5893] usb 1-1: Product: syz [ 75.034917][ T5893] usb 1-1: Manufacturer: syz [ 75.039601][ T5205] Dev loop4: unable to read RDB block 7 [ 75.045374][ T5893] usb 1-1: SerialNumber: syz [ 75.052189][ T5205] loop4: unable to read partition table [ 75.060575][ T5893] usb 1-1: config 0 descriptor?? [ 75.065956][ T5205] loop4: partition table beyond EOD, truncated [ 75.129009][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.154276][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.162310][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.193212][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.328934][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.348065][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.399353][ T5929] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 75.405975][ T5929] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 75.413347][ T5928] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 75.419843][ T5928] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 75.430041][ T5929] vhci_hcd vhci_hcd.0: Device attached [ 75.456133][ T5928] vhci_hcd vhci_hcd.0: Device attached [ 75.578788][ T5835] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 75.585535][ T5835] Bluetooth: Wrong link type (-22) [ 75.590951][ T5835] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 75.598232][ T5835] Bluetooth: Wrong link type (-22) [ 75.603899][ T5880] vhci_hcd: vhci_device speed not set [ 75.609526][ T5835] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 75.616535][ T5835] Bluetooth: Wrong link type (-22) [ 75.682597][ T5880] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 75.728039][ T5938] batadv_slave_1: entered promiscuous mode [ 75.773295][ T5835] Bluetooth: hci0: command tx timeout [ 75.807168][ T5937] batadv_slave_1: left promiscuous mode [ 75.932992][ T5835] Bluetooth: hci2: command tx timeout [ 75.938456][ T5845] Bluetooth: hci3: command tx timeout [ 75.938473][ T5155] Bluetooth: hci1: command tx timeout [ 75.960703][ T5930] vhci_hcd: connection reset by peer [ 75.960854][ T5947] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 75.967396][ T5931] vhci_hcd: connection closed [ 75.975010][ T5947] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 75.984695][ T49] vhci_hcd: stop threads [ 75.991874][ T49] vhci_hcd: release socket [ 76.007171][ T49] vhci_hcd: disconnect device [ 76.021368][ T49] vhci_hcd: stop threads [ 76.039944][ T49] vhci_hcd: release socket [ 76.045127][ T49] vhci_hcd: disconnect device [ 76.216469][ T5959] loop4: detected capacity change from 0 to 7 [ 76.244809][ T5959] Dev loop4: unable to read RDB block 7 [ 76.265650][ T5959] loop4: unable to read partition table [ 76.271626][ T5959] loop4: partition table beyond EOD, truncated [ 76.289405][ T5959] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 76.438755][ T5155] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 76.447016][ T5155] Bluetooth: Wrong link type (-22) [ 76.452167][ T5155] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 76.458815][ T5155] Bluetooth: Wrong link type (-22) [ 76.463993][ T5155] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 76.470592][ T5155] Bluetooth: Wrong link type (-22) [ 76.581774][ T5966] hfs: can't find a HFS filesystem on dev rnullb0 [ 76.741692][ T5893] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 76.749356][ T5893] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 76.787867][ T5893] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 76.817508][ T5893] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 76.860294][ T5893] usb 1-1: USB disconnect, device number 2 [ 77.377699][ T5155] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 77.384406][ T5155] Bluetooth: Wrong link type (-22) [ 77.389561][ T5155] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 77.396207][ T5155] Bluetooth: Wrong link type (-22) [ 77.401353][ T5155] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 77.407995][ T5155] Bluetooth: Wrong link type (-22) [ 77.528174][ T5996] vxfs: WRONG superblock magic 00000000 at 1 [ 77.535279][ T5996] vxfs: WRONG superblock magic 00000000 at 8 [ 77.541520][ T5996] vxfs: can't find superblock. [ 77.728222][ T6008] qnx4: no qnx4 filesystem (no root dir). [ 77.853007][ T5155] Bluetooth: hci0: command tx timeout [ 77.901232][ T6015] /dev/rnullb0: Can't open blockdev [ 77.990802][ T6013] /dev/rnullb0: Can't open blockdev [ 78.013585][ T5155] Bluetooth: hci3: command tx timeout [ 78.013614][ T5835] Bluetooth: hci1: command tx timeout [ 78.025511][ T5845] Bluetooth: hci2: command tx timeout [ 78.038196][ T5835] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 78.044824][ T5835] Bluetooth: Wrong link type (-22) [ 78.050324][ T5835] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 78.057294][ T5835] Bluetooth: Wrong link type (-22) [ 78.062946][ T5835] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 78.069562][ T5835] Bluetooth: Wrong link type (-22) [ 78.102665][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.273384][ T24] usb 3-1: device descriptor read/64, error -71 [ 78.342355][ T6031] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.433060][ T5924] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.532599][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.597664][ T5924] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.619116][ T5924] usb 2-1: config 0 interface 0 has no altsetting 0 [ 78.637765][ T5924] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 78.654095][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.662952][ T5924] usb 2-1: Product: syz [ 78.667126][ T5924] usb 2-1: Manufacturer: syz [ 78.671715][ T5924] usb 2-1: SerialNumber: syz [ 78.682602][ T24] usb 3-1: device descriptor read/64, error -71 [ 78.689387][ T5924] usb 2-1: config 0 descriptor?? [ 78.701747][ T5924] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 78.716876][ T5924] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 78.733627][ T5924] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 78.751247][ T5924] usb 2-1: media controller created [ 78.780830][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 78.803434][ T24] usb usb3-port1: attempt power cycle [ 78.867287][ T5924] DVB: Unable to find symbol tda10046_attach() [ 78.871932][ T6048] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 78.878713][ T5924] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 78.881305][ T6048] /dev/rnullb0: Can't open blockdev [ 78.894262][ T5924] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 78.957080][ T5835] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 78.966079][ T5835] Bluetooth: Wrong link type (-22) [ 78.971231][ T5835] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 78.978374][ T5835] Bluetooth: Wrong link type (-22) [ 78.984171][ T5835] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 78.990689][ T5835] Bluetooth: Wrong link type (-22) [ 78.998907][ T1212] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 79.143819][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 79.152613][ T1212] usb 1-1: device descriptor read/64, error -71 [ 79.176390][ T24] usb 3-1: device descriptor read/8, error -71 [ 79.392819][ T1212] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 79.414838][ T6057] /dev/rnullb0: Can't open blockdev [ 79.422735][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 79.458885][ T24] usb 3-1: device descriptor read/8, error -71 [ 79.533269][ T1212] usb 1-1: device descriptor read/64, error -71 [ 79.573093][ T24] usb usb3-port1: unable to enumerate USB device [ 79.593432][ T6062] /dev/rnullb0: Can't open blockdev [ 79.645327][ T1212] usb usb1-port1: attempt power cycle [ 79.872718][ T5893] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.951103][ T6027] /dev/rnullb0: Can't open blockdev [ 79.958762][ T5924] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 79.981774][ T5924] usb 2-1: USB disconnect, device number 2 [ 80.003821][ T1212] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 80.032758][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 80.038325][ T1212] usb 1-1: device descriptor read/8, error -71 [ 80.047814][ T5893] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 80.056952][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.066548][ T5893] usb 4-1: Product: syz [ 80.070704][ T5893] usb 4-1: Manufacturer: syz [ 80.075340][ T5893] usb 4-1: SerialNumber: syz [ 80.086880][ T5893] usb 4-1: config 0 descriptor?? [ 80.294840][ T1212] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 80.302487][ T5893] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 80.324071][ T1212] usb 1-1: device descriptor read/8, error -71 [ 80.434251][ T1212] usb usb1-port1: unable to enumerate USB device [ 80.650035][ T6066] can0: slcan on ptm1. [ 80.706944][ T5893] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 80.739069][ T5893] usb 4-1: USB disconnect, device number 2 [ 80.802857][ T5880] vhci_hcd: vhci_device speed not set [ 80.859385][ T6067] can0 (unregistered): slcan off ptm1. [ 81.058288][ T5835] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 81.067690][ T5835] Bluetooth: Wrong link type (-22) [ 81.073062][ T5835] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 81.079663][ T5835] Bluetooth: Wrong link type (-22) [ 81.086545][ T5835] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 81.093234][ T5835] Bluetooth: Wrong link type (-22) [ 81.282618][ T5918] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 81.445437][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 81.459010][ T5918] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 81.483593][ T5918] usb 3-1: config 0 has no interface number 0 [ 81.499608][ T5918] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 81.521236][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.534240][ T982] cfg80211: failed to load regulatory.db [ 81.541149][ T5918] usb 3-1: Product: syz [ 81.553397][ T5918] usb 3-1: Manufacturer: syz [ 81.559832][ T5918] usb 3-1: SerialNumber: syz [ 81.622577][ T5918] usb 3-1: config 0 descriptor?? [ 81.648954][ T5918] smsc95xx v2.0.0 [ 81.678304][ T6112] ======================================================= [ 81.678304][ T6112] WARNING: The mand mount option has been deprecated and [ 81.678304][ T6112] and is ignored by this kernel. Remove the mand [ 81.678304][ T6112] option from the mount to silence this warning. [ 81.678304][ T6112] ======================================================= [ 81.777974][ T6112] XFS (rnullb0): Invalid superblock magic number [ 81.813577][ T6115] loop4: detected capacity change from 0 to 7 [ 81.844880][ T6071] Dev loop4: unable to read RDB block 7 [ 81.861685][ T6071] loop4: unable to read partition table [ 81.870623][ T6071] loop4: partition table beyond EOD, truncated [ 81.885389][ T6115] Dev loop4: unable to read RDB block 7 [ 81.911900][ T6115] loop4: unable to read partition table [ 81.913181][ T6123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.923268][ T6115] loop4: partition table beyond EOD, truncated [ 81.932228][ T6115] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 81.952148][ T6125] Zero length message leads to an empty skb [ 81.976844][ T5205] Dev loop4: unable to read RDB block 7 [ 81.982448][ T5205] loop4: unable to read partition table [ 81.982559][ T6123] bond0: (slave rose0): Enslaving as an active interface with an up link [ 82.017766][ T5205] loop4: partition table beyond EOD, truncated [ 82.056828][ T5918] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 82.074257][ T6128] hfs: can't find a HFS filesystem on dev rnullb0 [ 82.094973][ T5918] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 82.145553][ T5835] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 82.152111][ T5835] Bluetooth: Wrong link type (-22) [ 82.157760][ T5835] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 82.167807][ T5835] Bluetooth: Wrong link type (-22) [ 82.173446][ T5835] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 82.180016][ T5835] Bluetooth: Wrong link type (-22) [ 82.369015][ T6140] Can't find a SQUASHFS superblock on rnullb0 [ 82.554424][ T6147] /dev/rnullb0: Can't open blockdev [ 82.602652][ T982] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 82.789012][ T982] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 82.808598][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.825766][ T982] usb 2-1: Product: syz [ 82.830053][ T982] usb 2-1: Manufacturer: syz [ 82.835707][ T982] usb 2-1: SerialNumber: syz [ 82.859853][ T982] usb 2-1: config 0 descriptor?? [ 82.902792][ T5924] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.072628][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 83.084776][ T5924] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 83.101623][ T982] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 83.110395][ T5924] usb 4-1: config 0 has no interface number 0 [ 83.122407][ T5924] usb 4-1: config 0 interface 12 has no altsetting 0 [ 83.152910][ T5924] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 83.165575][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.184941][ T5924] usb 4-1: Product: syz [ 83.197262][ T5924] usb 4-1: Manufacturer: syz [ 83.212014][ T5924] usb 4-1: SerialNumber: syz [ 83.234648][ T5924] usb 4-1: config 0 descriptor?? [ 83.425564][ T6152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.461068][ T6152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.674838][ T5893] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 84.106315][ T5918] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 84.128393][ T5918] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 84.168023][ T5918] usb 3-1: USB disconnect, device number 6 [ 84.240678][ T6177] loop4: detected capacity change from 0 to 7 [ 84.260786][ T6177] Dev loop4: unable to read RDB block 7 [ 84.300711][ T6177] loop4: unable to read partition table [ 84.322401][ T982] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 84.325753][ T6177] loop4: partition table beyond EOD, truncated [ 84.402362][ T6177] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 84.639847][ T6187] capability: warning: `syz.0.73' uses deprecated v2 capabilities in a way that may be insecure [ 84.926950][ T5924] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 84.951114][ T5924] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 84.979122][ T5924] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 85.002078][ T5924] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 85.036068][ T5924] usb 4-1: USB disconnect, device number 3 [ 85.370767][ T5893] usb 2-1: USB disconnect, device number 3 [ 85.752736][ T982] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 85.822743][ T5880] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 85.902934][ T982] usb 1-1: device descriptor read/64, error -71 [ 85.926287][ T5918] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 85.965004][ T5880] usb 4-1: device descriptor read/64, error -71 [ 86.095024][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.105250][ T5918] usb 2-1: New USB device found, idVendor=05ad, idProduct=0265, bcdDevice= 0.00 [ 86.114726][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.127975][ T5918] usb 2-1: config 0 descriptor?? [ 86.162764][ T982] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 86.202725][ T5880] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 86.304682][ T982] usb 1-1: device descriptor read/64, error -71 [ 86.342732][ T5880] usb 4-1: device descriptor read/64, error -71 [ 86.415189][ T982] usb usb1-port1: attempt power cycle [ 86.453020][ T5880] usb usb4-port1: attempt power cycle [ 86.542047][ T5918] hid-generic 0003:05AD:0265.0001: item fetching failed at offset 5/7 [ 86.550923][ T5918] hid-generic 0003:05AD:0265.0001: probe with driver hid-generic failed with error -22 [ 86.738647][ T5918] usb 2-1: USB disconnect, device number 4 [ 86.753317][ T982] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 86.785561][ T982] usb 1-1: device descriptor read/8, error -71 [ 86.802679][ T5880] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 86.823347][ T5880] usb 4-1: device descriptor read/8, error -71 [ 87.022630][ T982] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 87.043235][ T982] usb 1-1: device descriptor read/8, error -71 [ 87.062750][ T5880] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 87.084444][ T5880] usb 4-1: device descriptor read/8, error -71 [ 87.153098][ T982] usb usb1-port1: unable to enumerate USB device [ 87.193767][ T5880] usb usb4-port1: unable to enumerate USB device [ 87.564260][ T5880] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 87.714323][ T5880] usb 2-1: config 5 has an invalid interface number: 143 but max is 1 [ 87.722697][ T5880] usb 2-1: config 5 has an invalid interface number: 179 but max is 1 [ 87.730840][ T5880] usb 2-1: config 5 has an invalid descriptor of length 10, skipping remainder of the config [ 87.741067][ T5880] usb 2-1: config 5 has no interface number 0 [ 87.747152][ T5880] usb 2-1: config 5 has no interface number 1 [ 87.753319][ T5880] usb 2-1: config 5 interface 143 altsetting 138 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 87.765315][ T5880] usb 2-1: config 5 interface 143 has no altsetting 0 [ 87.775429][ T5880] usb 2-1: New USB device found, idVendor=19d2, idProduct=0038, bcdDevice= e.8c [ 87.784485][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.792456][ T5880] usb 2-1: Product: syz [ 87.796624][ T5880] usb 2-1: Manufacturer: syz [ 87.801205][ T5880] usb 2-1: SerialNumber: syz [ 88.026522][ T5880] usb 2-1: bad CDC descriptors [ 88.038388][ T5880] usb 2-1: USB disconnect, device number 5 [ 88.760007][ T6257] loop8: detected capacity change from 0 to 7 [ 88.768056][ T6257] Dev loop8: unable to read RDB block 7 [ 88.776359][ T6257] loop8: AHDI p1 p2 p3 [ 88.781392][ T6257] loop8: partition table partially beyond EOD, truncated [ 88.789428][ T6257] loop8: p1 start 1601398130 is beyond EOD, truncated [ 88.796229][ T6257] loop8: p2 start 1702059890 is beyond EOD, truncated [ 88.892955][ T5918] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 88.969890][ T6262] cgroup: Unknown subsys name 'appraise' [ 88.979481][ T1212] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 89.044404][ T5918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.066087][ T5918] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 89.080693][ T5918] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 89.090953][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.098982][ T5918] usb 1-1: Product: syz [ 89.103204][ T5918] usb 1-1: Manufacturer: syz [ 89.107790][ T5918] usb 1-1: SerialNumber: syz [ 89.115854][ T5918] usb 1-1: config 0 descriptor?? [ 89.147880][ T1212] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 89.158134][ T1212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.169735][ T1212] usb 4-1: Product: syz [ 89.174168][ T1212] usb 4-1: Manufacturer: syz [ 89.178747][ T1212] usb 4-1: SerialNumber: syz [ 89.187925][ T1212] usb 4-1: config 0 descriptor?? [ 89.243549][ T5880] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 89.379862][ T30] audit: type=1800 audit(1751625352.982:2): pid=6249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.85" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 89.407301][ T1212] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 89.423406][ T5880] usb 2-1: Using ep0 maxpacket: 8 [ 89.430980][ T5880] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 89.439403][ T5880] usb 2-1: config 179 has no interface number 0 [ 89.446047][ T5880] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 89.457240][ T5880] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 89.468979][ T5880] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 89.480145][ T5880] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 89.491547][ T5880] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 89.505823][ T5880] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 89.514989][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.523068][ T5893] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 89.538105][ T6262] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 89.672657][ T5893] usb 3-1: device descriptor read/64, error -71 [ 89.757273][ T6262] o2cb: This node has not been configured. [ 89.764045][ T6262] o2cb: Cluster check failed. Fix errors before retrying. [ 89.771201][ T6262] (syz.1.90,6262,1):user_dlm_register:674 ERROR: status = -22 [ 89.779514][ T6262] (syz.1.90,6262,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 89.912821][ T5893] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 90.052715][ T5893] usb 3-1: device descriptor read/64, error -71 [ 90.165689][ T5893] usb usb3-port1: attempt power cycle [ 90.502689][ T5893] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 90.523398][ T5893] usb 3-1: device descriptor read/8, error -71 [ 90.586727][ T24] usb 2-1: USB disconnect, device number 6 [ 90.586765][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 90.601374][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 90.640030][ T1212] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 90.762605][ T5893] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 90.783173][ T5893] usb 3-1: device descriptor read/8, error -71 [ 90.893025][ T5893] usb usb3-port1: unable to enumerate USB device [ 91.146922][ T6284] loop8: detected capacity change from 0 to 7 [ 91.154575][ T6284] Dev loop8: unable to read RDB block 7 [ 91.160536][ T6284] loop8: AHDI p1 p2 p3 [ 91.170051][ T6284] loop8: partition table partially beyond EOD, truncated [ 91.185165][ T6284] loop8: p1 start 1601398130 is beyond EOD, truncated [ 91.191993][ T6284] loop8: p2 start 1702059890 is beyond EOD, truncated [ 91.571011][ T1212] usb 1-1: USB disconnect, device number 12 [ 91.608887][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'. [ 91.621636][ T6292] netlink: 64 bytes leftover after parsing attributes in process `syz.1.100'. [ 91.645139][ T6292] /dev/rnullb0: Can't open blockdev [ 91.687348][ T5918] usb 4-1: USB disconnect, device number 8 [ 91.800066][ T6296] /dev/rnullb0: Can't open blockdev [ 91.898619][ T5835] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 91.905222][ T5835] Bluetooth: Wrong link type (-22) [ 92.113361][ T5893] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 92.285667][ T5893] usb 1-1: config 0 has no interfaces? [ 92.291176][ T5893] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 92.312563][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.343736][ T5893] usb 1-1: config 0 descriptor?? [ 92.384823][ T6319] NILFS (rnullb0): couldn't find nilfs on the device [ 92.417160][ T6320] netlink: 'syz.1.109': attribute type 8 has an invalid length. [ 92.440759][ T6314] netlink: 116 bytes leftover after parsing attributes in process `syz.1.109'. [ 92.450475][ T6314] netlink: 116 bytes leftover after parsing attributes in process `syz.1.109'. [ 92.454557][ T5918] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 92.565747][ T6301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.593031][ T6301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.605045][ T6301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.634487][ T6301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.651578][ T5918] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 92.665981][ T6301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.678953][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.687668][ T6301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.707782][ T5918] usb 4-1: Product: syz [ 92.712048][ T5893] usb 1-1: USB disconnect, device number 13 [ 92.712759][ T5918] usb 4-1: Manufacturer: syz [ 92.731761][ T5918] usb 4-1: SerialNumber: syz [ 92.770978][ T5918] usb 4-1: config 0 descriptor?? [ 92.996277][ T5918] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 93.222997][ T5893] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 93.299641][ T6345] loop8: detected capacity change from 0 to 7 [ 93.307912][ T6345] Dev loop8: unable to read RDB block 7 [ 93.314263][ T6345] loop8: AHDI p1 p2 p3 [ 93.318501][ T6345] loop8: partition table partially beyond EOD, truncated [ 93.326119][ T6345] loop8: p1 start 1601398130 is beyond EOD, truncated [ 93.333076][ T6345] loop8: p2 start 1702059890 is beyond EOD, truncated [ 93.395166][ T5893] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.414224][ T5893] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.431515][ T5893] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 93.456334][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.473387][ T5893] usb 1-1: Product: syz [ 93.477557][ T5893] usb 1-1: Manufacturer: syz [ 93.482144][ T5893] usb 1-1: SerialNumber: syz [ 93.508055][ T5893] usb 1-1: unit 9 not found! [ 93.713770][ T6354] /dev/rnullb0: Can't open blockdev [ 93.723204][ T5893] usb 1-1: 4:0: cannot get min/max values for control 2 (id 4) [ 93.758353][ T5893] usb 1-1: USB disconnect, device number 14 [ 93.809353][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.219641][ T6363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.226488][ T5918] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 94.229730][ T6363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.293659][ T6366] /dev/rnullb0: Can't open blockdev [ 94.300726][ T6366] /dev/rnullb0: Can't open blockdev [ 94.583355][ T6374] netlink: 92 bytes leftover after parsing attributes in process `syz.2.130'. [ 94.771996][ T6380] syz.2.132 uses obsolete (PF_INET,SOCK_PACKET) [ 94.910361][ T6385] /dev/rnullb0: Can't open blockdev [ 95.217226][ T6400] /dev/rnullb0: Can't open blockdev [ 95.266988][ T5893] usb 4-1: USB disconnect, device number 9 [ 95.344654][ T6403] block nbd3: shutting down sockets [ 95.433248][ T1212] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 95.500784][ T6413] loop8: detected capacity change from 0 to 7 [ 95.509254][ T6413] Dev loop8: unable to read RDB block 7 [ 95.514905][ T6413] loop8: AHDI p1 p2 p3 [ 95.519195][ T6413] loop8: partition table partially beyond EOD, truncated [ 95.526585][ T6413] loop8: p1 start 1601398130 is beyond EOD, truncated [ 95.533687][ T6413] loop8: p2 start 1702059890 is beyond EOD, truncated [ 95.572622][ T5918] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 95.582613][ T1212] usb 1-1: device descriptor read/64, error -71 [ 95.621613][ T30] audit: type=1326 audit(1751625359.222:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6414 comm="syz.3.143" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8fd118e929 code=0x0 [ 95.675546][ T30] audit: type=1326 audit(1751625359.282:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6414 comm="syz.3.143" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fd118e929 code=0x0 [ 95.742580][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 95.751957][ T5918] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 95.761171][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 95.769340][ T5918] usb 3-1: Product: syz [ 95.773823][ T5918] usb 3-1: Manufacturer: syz [ 95.778604][ T5918] usb 3-1: SerialNumber: syz [ 95.786488][ T5918] usb 3-1: config 0 descriptor?? [ 95.854841][ T1212] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 95.997461][ T5893] usb 3-1: USB disconnect, device number 12 [ 96.004309][ T1212] usb 1-1: device descriptor read/64, error -71 [ 96.112910][ T1212] usb usb1-port1: attempt power cycle [ 96.462613][ T1212] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 96.486248][ T1212] usb 1-1: device descriptor read/8, error -71 [ 96.636425][ T6423] loop4: detected capacity change from 0 to 7 [ 96.655634][ T6423] Dev loop4: unable to read RDB block 7 [ 96.668178][ T6423] loop4: unable to read partition table [ 96.682801][ T6423] loop4: partition table beyond EOD, truncated [ 96.689084][ T6423] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 96.732886][ T1212] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 96.775816][ T1212] usb 1-1: device descriptor read/8, error -71 [ 96.791935][ T6429] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 96.808172][ T6429] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 96.892966][ T1212] usb usb1-port1: unable to enumerate USB device [ 97.032972][ T5923] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 97.092629][ T5893] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 97.196041][ T5923] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 97.205205][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.214233][ T5923] usb 2-1: Product: syz [ 97.218406][ T5923] usb 2-1: Manufacturer: syz [ 97.223040][ T5923] usb 2-1: SerialNumber: syz [ 97.229511][ T5923] usb 2-1: config 0 descriptor?? [ 97.242727][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 97.251448][ T5893] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 97.259951][ T5893] usb 3-1: config 0 has no interface number 0 [ 97.266296][ T5893] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 97.276555][ T5893] usb 3-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 97.288034][ T5893] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 97.298551][ T5893] usb 3-1: config 0 interface 126 has no altsetting 0 [ 97.308388][ T5893] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 97.319451][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.328130][ T5893] usb 3-1: Product: syz [ 97.332289][ T5893] usb 3-1: Manufacturer: syz [ 97.338720][ T5893] usb 3-1: SerialNumber: syz [ 97.346552][ T5893] usb 3-1: config 0 descriptor?? [ 97.352434][ T6432] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 97.352658][ T5918] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 97.439497][ T5923] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 97.502837][ T5918] usb 4-1: device descriptor read/64, error -71 [ 97.742612][ T5918] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 97.768963][ T5893] ir_usb 3-1:0.126: IR Dongle converter detected [ 97.872653][ T5918] usb 4-1: device descriptor read/64, error -71 [ 97.970234][ T5893] usb 3-1: IRDA class descriptor not found, device not bound [ 97.985777][ T5918] usb usb4-port1: attempt power cycle [ 98.332776][ T5918] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 98.348783][ T6453] /dev/rnullb0: Can't open blockdev [ 98.366928][ T5918] usb 4-1: device descriptor read/8, error -71 [ 98.612891][ T5918] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 98.634047][ T5918] usb 4-1: device descriptor read/8, error -71 [ 98.662961][ T5923] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 98.695331][ T6466] Bluetooth: MGMT ver 1.23 [ 98.745785][ T5918] usb usb4-port1: unable to enumerate USB device [ 98.826093][ T6470] loop4: detected capacity change from 0 to 7 [ 98.834739][ T6071] Dev loop4: unable to read RDB block 7 [ 98.840336][ T6071] loop4: unable to read partition table [ 98.846445][ T6071] loop4: partition table beyond EOD, truncated [ 98.856513][ T6470] Dev loop4: unable to read RDB block 7 [ 98.862088][ T6470] loop4: unable to read partition table [ 98.868433][ T6470] loop4: partition table beyond EOD, truncated [ 98.874853][ T6470] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 99.201195][ T6478] Bluetooth: MGMT ver 1.23 [ 99.796448][ T5918] usb 2-1: USB disconnect, device number 7 [ 99.905297][ T5923] usb 3-1: USB disconnect, device number 13 [ 99.976407][ T6485] netlink: 'syz.1.162': attribute type 28 has an invalid length. [ 99.995478][ T6485] /dev/rnullb0: Can't open blockdev [ 100.306132][ T6502] loop4: detected capacity change from 0 to 7 [ 100.320704][ T6502] Dev loop4: unable to read RDB block 7 [ 100.357265][ T6502] loop4: unable to read partition table [ 100.380274][ T6502] loop4: partition table beyond EOD, truncated [ 100.462905][ T6502] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 100.593920][ T5205] Dev loop4: unable to read RDB block 7 [ 100.599526][ T5205] loop4: unable to read partition table [ 100.611699][ T5205] loop4: partition table beyond EOD, truncated [ 100.892125][ T5923] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 100.929961][ T6524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.174'. [ 100.946711][ T6524] /dev/rnullb0: Can't open blockdev [ 101.080421][ T5923] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 101.122279][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.138394][ T5923] usb 3-1: Product: syz [ 101.147502][ T5923] usb 3-1: Manufacturer: syz [ 101.155322][ T5923] usb 3-1: SerialNumber: syz [ 101.171887][ T5923] usb 3-1: config 0 descriptor?? [ 101.213256][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.222563][ T5835] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 101.386767][ T5923] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 101.409180][ T6544] loop4: detected capacity change from 0 to 7 [ 101.435878][ T6544] Dev loop4: unable to read RDB block 7 [ 101.441498][ T6544] loop4: unable to read partition table [ 101.476340][ T6544] loop4: partition table beyond EOD, truncated [ 101.485518][ T6544] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 101.640893][ T6553] Can't find a SQUASHFS superblock on rnullb0 [ 101.647648][ T6552] /dev/rnullb0: Can't open blockdev [ 102.027027][ T6571] /dev/rnullb0: Can't open blockdev [ 102.112627][ T5893] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 102.212604][ T5880] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 102.264281][ T5893] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.274423][ T5893] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.286454][ T5893] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 102.295555][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 102.304451][ T5893] usb 2-1: SerialNumber: syz [ 102.364665][ T5880] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.374980][ T5880] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 102.386401][ T5880] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 102.396498][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.405513][ T5880] usb 1-1: Product: syz [ 102.409714][ T5880] usb 1-1: Manufacturer: syz [ 102.414431][ T5880] usb 1-1: SerialNumber: syz [ 102.421760][ T5880] usb 1-1: config 0 descriptor?? [ 102.520667][ T5893] usb 2-1: 0:2 : does not exist [ 102.528265][ T5893] usb 2-1: unit 5: unexpected type 0x09 [ 102.546143][ T5893] usb 2-1: USB disconnect, device number 8 [ 102.574841][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.618180][ T5923] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 102.644989][ T30] audit: type=1800 audit(1751625366.242:5): pid=6567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.187" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 103.084978][ T6577] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 103.091873][ T6577] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 103.166691][ T6579] loop4: detected capacity change from 0 to 7 [ 103.175889][ T6071] Dev loop4: unable to read RDB block 7 [ 103.181452][ T6071] loop4: unable to read partition table [ 103.188089][ T6071] loop4: partition table beyond EOD, truncated [ 103.198418][ T6579] Dev loop4: unable to read RDB block 7 [ 103.206903][ T6579] loop4: unable to read partition table [ 103.214600][ T6579] loop4: partition table beyond EOD, truncated [ 103.226842][ T6579] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 103.646408][ T5893] usb 3-1: USB disconnect, device number 14 [ 103.742274][ T6590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.757768][ T6590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.965552][ T6596] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 104.018396][ T6598] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.032674][ T5893] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 104.090844][ T6600] netlink: 184 bytes leftover after parsing attributes in process `syz.1.199'. [ 104.104503][ T6600] xt_socket: unknown flags 0xd0 [ 104.202719][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 104.223241][ T5893] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 104.233881][ T5893] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.256807][ T5893] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 104.268372][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.276729][ T5893] usb 3-1: Product: syz [ 104.281358][ T5893] usb 3-1: Manufacturer: à°Œ [ 104.287826][ T5893] usb 3-1: SerialNumber: syz [ 104.440981][ T6612] loop4: detected capacity change from 0 to 7 [ 104.450265][ T6612] Dev loop4: unable to read RDB block 7 [ 104.456230][ T6612] loop4: unable to read partition table [ 104.462015][ T6612] loop4: partition table beyond EOD, truncated [ 104.468417][ T6612] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 104.508789][ T6591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.525427][ T6591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.561932][ T6590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.577055][ T6590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.620712][ T5893] usb 3-1: 0:2 : does not exist [ 104.660884][ T5893] usb 3-1: USB disconnect, device number 15 [ 104.710218][ T6071] udevd[6071]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.731983][ T6620] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 104.746773][ T6620] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 104.755593][ T6620] UDF-fs: Scanning with blocksize 4096 failed [ 104.763566][ T6620] proc: Unknown parameter '/dev/iommu' [ 104.812708][ T5923] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 104.946598][ T5893] usb 1-1: USB disconnect, device number 19 [ 104.963472][ T6625] loop8: detected capacity change from 0 to 7 [ 104.977265][ T5923] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 105.000579][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.003896][ T6625] Dev loop8: unable to read RDB block 7 [ 105.014944][ T6625] loop8: AHDI p1 p2 p3 [ 105.019128][ T6625] loop8: partition table partially beyond EOD, truncated [ 105.020137][ T5923] usb 2-1: Product: syz [ 105.031736][ T5923] usb 2-1: Manufacturer: syz [ 105.037004][ T5923] usb 2-1: SerialNumber: syz [ 105.037433][ T6625] loop8: p1 start 1601398130 is beyond EOD, truncated [ 105.046781][ T5923] usb 2-1: config 0 descriptor?? [ 105.059824][ T6625] loop8: p2 start 1702059890 is beyond EOD, truncated [ 105.259749][ T5923] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 105.480561][ T6639] loop4: detected capacity change from 0 to 7 [ 105.487647][ T6639] Dev loop4: unable to read RDB block 7 [ 105.493729][ T6639] loop4: unable to read partition table [ 105.499776][ T6639] loop4: partition table beyond EOD, truncated [ 105.506363][ T6639] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 105.580269][ T6641] loop4: detected capacity change from 0 to 7 [ 105.587456][ T6641] Dev loop4: unable to read RDB block 7 [ 105.593348][ T6641] loop4: unable to read partition table [ 105.599415][ T6641] loop4: partition table beyond EOD, truncated [ 105.605942][ T6641] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 105.725157][ T6643] netlink: 924 bytes leftover after parsing attributes in process `syz.3.215'. [ 105.849562][ T6648] loop8: detected capacity change from 0 to 7 [ 105.865664][ T5844] Dev loop8: unable to read RDB block 7 [ 105.871247][ T5844] loop8: AHDI p1 p2 p3 [ 105.876150][ T5844] loop8: partition table partially beyond EOD, truncated [ 105.885487][ T5844] loop8: p1 start 1601398130 is beyond EOD, truncated [ 105.892799][ T5844] loop8: p2 start 1702059890 is beyond EOD, truncated [ 105.901900][ T6648] Dev loop8: unable to read RDB block 7 [ 105.911054][ T6648] loop8: AHDI p1 p2 p3 [ 105.915364][ T6648] loop8: partition table partially beyond EOD, truncated [ 105.923176][ T6648] loop8: p1 start 1601398130 is beyond EOD, truncated [ 105.930048][ T6648] loop8: p2 start 1702059890 is beyond EOD, truncated [ 106.047636][ T6653] warning: `syz.2.218' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.155696][ T6657] /dev/rnullb0: Can't open blockdev [ 106.245176][ T6659] loop4: detected capacity change from 0 to 7 [ 106.255113][ T5844] Dev loop4: unable to read RDB block 7 [ 106.260694][ T5844] loop4: unable to read partition table [ 106.266893][ T5844] loop4: partition table beyond EOD, truncated [ 106.283172][ T6659] Dev loop4: unable to read RDB block 7 [ 106.288968][ T6659] loop4: unable to read partition table [ 106.296324][ T6659] loop4: partition table beyond EOD, truncated [ 106.313719][ T6659] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 106.402421][ T6664] loop4: detected capacity change from 0 to 7 [ 106.410566][ T6664] Dev loop4: unable to read RDB block 7 [ 106.418000][ T6664] loop4: unable to read partition table [ 106.425455][ T6664] loop4: partition table beyond EOD, truncated [ 106.431632][ T6664] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 106.497605][ T5923] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 106.584557][ T6669] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 106.761565][ T6678] loop8: detected capacity change from 0 to 7 [ 106.769511][ T6071] Dev loop8: unable to read RDB block 7 [ 106.782567][ T6071] loop8: AHDI p1 p2 p3 [ 106.786752][ T6071] loop8: partition table partially beyond EOD, truncated [ 106.816823][ T6071] loop8: p1 start 1601398130 is beyond EOD, truncated [ 106.824229][ T6071] loop8: p2 start 1702059890 is beyond EOD, truncated [ 106.832215][ T6678] Dev loop8: unable to read RDB block 7 [ 106.843593][ T6678] loop8: AHDI p1 p2 p3 [ 106.847833][ T6678] loop8: partition table partially beyond EOD, truncated [ 106.888414][ T6678] loop8: p1 start 1601398130 is beyond EOD, truncated [ 106.898283][ T6678] loop8: p2 start 1702059890 is beyond EOD, truncated [ 107.000383][ T6688] loop4: detected capacity change from 0 to 7 [ 107.009821][ T6688] Dev loop4: unable to read RDB block 7 [ 107.030854][ T6688] loop4: unable to read partition table [ 107.046460][ T6688] loop4: partition table beyond EOD, truncated [ 107.056403][ T6688] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 107.237589][ T6698] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 107.597880][ T1212] usb 2-1: USB disconnect, device number 9 [ 107.680123][ T6714] loop8: detected capacity change from 0 to 7 [ 107.696760][ T6071] Dev loop8: unable to read RDB block 7 [ 107.702364][ T6071] loop8: AHDI p1 p2 p3 [ 107.708355][ T6717] loop4: detected capacity change from 0 to 7 [ 107.711667][ T6071] loop8: partition table partially beyond EOD, truncated [ 107.728301][ T6717] Dev loop4: unable to read RDB block 7 [ 107.733053][ T6071] loop8: p1 start 1601398130 is beyond EOD, truncated [ 107.741794][ T6071] loop8: p2 start 1702059890 is beyond EOD, truncated [ 107.742726][ T6717] loop4: unable to read partition table [ 107.755549][ T6714] Dev loop8: unable to read RDB block 7 [ 107.765897][ T6717] loop4: partition table beyond EOD, truncated [ 107.773275][ T6714] loop8: AHDI p1 p2 p3 [ 107.777575][ T6714] loop8: partition table partially beyond EOD, truncated [ 107.783611][ T6717] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 107.798109][ T6714] loop8: p1 start 1601398130 is beyond EOD, truncated [ 107.820211][ T6714] loop8: p2 start 1702059890 is beyond EOD, truncated [ 107.831029][ T5205] Dev loop4: unable to read RDB block 7 [ 107.836708][ T5205] loop4: unable to read partition table [ 107.862665][ T5205] loop4: partition table beyond EOD, truncated [ 108.082769][ T6728] loop4: detected capacity change from 0 to 7 [ 108.091127][ T6071] Dev loop4: unable to read RDB block 7 [ 108.097368][ T6071] loop4: unable to read partition table [ 108.103693][ T6071] loop4: partition table beyond EOD, truncated [ 108.113662][ T6728] Dev loop4: unable to read RDB block 7 [ 108.119245][ T6728] loop4: unable to read partition table [ 108.127041][ T6728] loop4: partition table beyond EOD, truncated [ 108.139582][ T6728] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 108.467066][ T1212] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 108.496294][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 108.662714][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 108.676383][ T24] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 108.678711][ T1212] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 108.700757][ T1212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.709060][ T24] usb 2-1: config 0 has no interface number 0 [ 108.709103][ T24] usb 2-1: config 0 interface 253 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 108.709127][ T24] usb 2-1: config 0 interface 253 has no altsetting 0 [ 108.734059][ T1212] usb 4-1: Product: syz [ 108.738259][ T1212] usb 4-1: Manufacturer: syz [ 108.739403][ T24] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=ea.ae [ 108.744158][ T1212] usb 4-1: SerialNumber: syz [ 108.763824][ T6745] loop8: detected capacity change from 0 to 7 [ 108.768549][ T1212] usb 4-1: config 0 descriptor?? [ 108.770143][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.792134][ T24] usb 2-1: Product: syz [ 108.793323][ T6745] Dev loop8: unable to read RDB block 7 [ 108.796366][ T24] usb 2-1: Manufacturer: syz [ 108.810407][ T24] usb 2-1: SerialNumber: syz [ 108.819157][ T24] usb 2-1: config 0 descriptor?? [ 108.827443][ T6745] loop8: AHDI p1 p2 p3 [ 108.832202][ T6745] loop8: partition table partially beyond EOD, truncated [ 108.844979][ T24] gspca_main: sq905-2.14.0 probing 2770:9120 [ 108.857677][ T6745] loop8: p1 start 1601398130 is beyond EOD, truncated [ 108.865931][ T6745] loop8: p2 start 1702059890 is beyond EOD, truncated [ 108.984066][ T1212] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 109.042827][ T6737] netlink: 'syz.1.249': attribute type 63 has an invalid length. [ 109.050628][ T6737] netlink: 5 bytes leftover after parsing attributes in process `syz.1.249'. [ 109.065261][ T6751] /dev/rnullb0: Can't open blockdev [ 109.093940][ T6737] /dev/rnullb0: Can't open blockdev [ 109.101502][ T24] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 109.125885][ T24] sq905 2-1:0.253: probe with driver sq905 failed with error -71 [ 109.165418][ T24] usb 2-1: USB disconnect, device number 10 [ 109.910741][ T6764] loop4: detected capacity change from 0 to 7 [ 109.992757][ T6764] Dev loop4: unable to read RDB block 7 [ 109.999490][ T6764] loop4: unable to read partition table [ 110.076711][ T6764] loop4: partition table beyond EOD, truncated [ 110.084564][ T6764] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 110.140249][ T6770] exFAT-fs (rnullb0): invalid boot record signature [ 110.163234][ T6770] exFAT-fs (rnullb0): failed to read boot sector [ 110.190970][ T6770] exFAT-fs (rnullb0): failed to recognize exfat type [ 110.416446][ T6781] /dev/sg0: Can't lookup blockdev [ 110.445143][ T6781] tipc: Enabling of bearer rejected, failed to enable media [ 110.465664][ T6783] loop8: detected capacity change from 0 to 7 [ 110.482977][ T6783] Dev loop8: unable to read RDB block 7 [ 110.496823][ T6783] loop8: AHDI p1 p2 p3 [ 110.513897][ T6783] loop8: partition table partially beyond EOD, truncated [ 110.529608][ T6781] binder: 6780:6781 ioctl c0306201 2000000003c0 returned -14 [ 110.537820][ T6783] loop8: p1 start 1601398130 is beyond EOD, truncated [ 110.548282][ T6783] loop8: p2 start 1702059890 is beyond EOD, truncated [ 110.838840][ T6797] loop4: detected capacity change from 0 to 7 [ 110.866098][ T6797] Dev loop4: unable to read RDB block 7 [ 110.871720][ T6797] loop4: unable to read partition table [ 110.895616][ T6797] loop4: partition table beyond EOD, truncated [ 110.903207][ T6797] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 111.009207][ T6804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.273'. [ 111.033099][ T1212] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 111.148396][ T6809] Can't find a SQUASHFS superblock on rnullb0 [ 111.241717][ T1212] usb 4-1: USB disconnect, device number 14 [ 111.414871][ T6822] loop8: detected capacity change from 0 to 7 [ 111.423492][ T6822] Dev loop8: unable to read RDB block 7 [ 111.429078][ T6822] loop8: AHDI p1 p2 p3 [ 111.441228][ T6824] hfs: can't find a HFS filesystem on dev rnullb0 [ 111.454255][ T6826] hfs: can't find a HFS filesystem on dev rnullb0 [ 111.461219][ T6822] loop8: partition table partially beyond EOD, truncated [ 111.469480][ T6822] loop8: p1 start 1601398130 is beyond EOD, truncated [ 111.477437][ T6822] loop8: p2 start 1702059890 is beyond EOD, truncated [ 111.593504][ T6830] loop4: detected capacity change from 0 to 7 [ 111.601340][ T6071] Dev loop4: unable to read RDB block 7 [ 111.607352][ T6071] loop4: unable to read partition table [ 111.622306][ T6071] loop4: partition table beyond EOD, truncated [ 111.649332][ T6830] Dev loop4: unable to read RDB block 7 [ 111.655394][ T6830] loop4: unable to read partition table [ 111.661603][ T6830] loop4: partition table beyond EOD, truncated [ 111.668272][ T6830] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 111.681323][ T5205] Dev loop4: unable to read RDB block 7 [ 111.688336][ T5205] loop4: unable to read partition table [ 111.698508][ T5205] loop4: partition table beyond EOD, truncated [ 111.722885][ T6832] loop4: detected capacity change from 0 to 7 [ 111.735027][ T6071] Dev loop4: unable to read RDB block 7 [ 111.742602][ T6071] loop4: unable to read partition table [ 111.748470][ T6071] loop4: partition table beyond EOD, truncated [ 111.773470][ T6832] Dev loop4: unable to read RDB block 7 [ 111.779060][ T6832] loop4: unable to read partition table [ 111.789048][ T6832] loop4: partition table beyond EOD, truncated [ 111.795407][ T6832] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 112.152593][ T5893] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 112.172777][ T1212] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 112.292780][ T5893] usb 4-1: device descriptor read/64, error -71 [ 112.302833][ T1212] usb 2-1: device descriptor read/64, error -71 [ 112.475413][ T6857] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 112.542616][ T1212] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 112.550204][ T5893] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 112.598573][ T6859] loop4: detected capacity change from 0 to 7 [ 112.609150][ T6859] Dev loop4: unable to read RDB block 7 [ 112.615236][ T6859] loop4: unable to read partition table [ 112.621102][ T6859] loop4: partition table beyond EOD, truncated [ 112.630128][ T6859] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 112.683789][ T1212] usb 2-1: device descriptor read/64, error -71 [ 112.691618][ T5893] usb 4-1: device descriptor read/64, error -71 [ 112.793885][ T1212] usb usb2-port1: attempt power cycle [ 112.802970][ T5893] usb usb4-port1: attempt power cycle [ 112.894327][ T5835] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 112.896708][ T5845] Bluetooth: hci4: command 0x1003 tx timeout [ 112.943011][ T5880] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 113.009590][ T6863] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 113.016735][ T6863] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 113.069368][ T6865] netlink: 44 bytes leftover after parsing attributes in process `syz.2.295'. [ 113.117616][ T5880] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 113.127311][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.135553][ T1212] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 113.143151][ T5880] usb 1-1: Product: syz [ 113.147300][ T5880] usb 1-1: Manufacturer: syz [ 113.152684][ T5893] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 113.160515][ T5880] usb 1-1: SerialNumber: syz [ 113.167625][ T5880] usb 1-1: config 0 descriptor?? [ 113.173149][ T1212] usb 2-1: device descriptor read/8, error -71 [ 113.183197][ T5893] usb 4-1: device descriptor read/8, error -71 [ 113.322644][ T5901] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 113.382321][ T5880] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 113.412565][ T1212] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 113.422603][ T5893] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 113.433238][ T1212] usb 2-1: device descriptor read/8, error -71 [ 113.444609][ T5893] usb 4-1: device descriptor read/8, error -71 [ 113.485114][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.496084][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.506009][ T5901] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 113.515116][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.525397][ T5901] usb 3-1: config 0 descriptor?? [ 113.542835][ T1212] usb usb2-port1: unable to enumerate USB device [ 113.553151][ T5893] usb usb4-port1: unable to enumerate USB device [ 114.140187][ T5901] hid-led 0003:27B8:01ED.0002: probe with driver hid-led failed with error -71 [ 114.162018][ T5901] usb 3-1: USB disconnect, device number 16 [ 114.947562][ T6876] x_tables: duplicate underflow at hook 1 [ 114.975581][ C1] Unknown status report in ack skb [ 114.996667][ T5880] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 115.098790][ T5835] Bluetooth: hci3: link tx timeout [ 115.109165][ T5835] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.171789][ T6885] netlink: 'syz.2.302': attribute type 5 has an invalid length. [ 115.179624][ T6885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.302'. [ 115.188723][ T6885] netlink: 'syz.2.302': attribute type 1 has an invalid length. [ 115.213489][ T5901] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 115.327717][ T6888] /dev/rnullb0: Can't open blockdev [ 115.372660][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 115.396470][ T5901] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 115.427083][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.453103][ T5901] usb 2-1: Product: syz [ 115.457274][ T5901] usb 2-1: Manufacturer: syz [ 115.473013][ T5901] usb 2-1: SerialNumber: syz [ 115.488090][ T5901] usb 2-1: config 0 descriptor?? [ 115.498890][ T6892] loop4: detected capacity change from 0 to 7 [ 115.499343][ T5901] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 115.526282][ T6892] Dev loop4: unable to read RDB block 7 [ 115.531982][ T6892] loop4: unable to read partition table [ 115.538378][ T6892] loop4: partition table beyond EOD, truncated [ 115.545721][ T6892] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 115.615966][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.305'. [ 115.740463][ T5901] usb 2-1: clie_3_5_startup: get interface number failed: -71 [ 115.759694][ T5901] visor 2-1:0.0: probe with driver visor failed with error -71 [ 115.808537][ T5901] usb 2-1: USB disconnect, device number 15 [ 116.039079][ T982] usb 1-1: USB disconnect, device number 20 [ 116.227483][ T5845] Bluetooth: hci3: link tx timeout [ 116.232972][ T5845] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.585113][ T6922] overlayfs: workdir and upperdir must be separate subtrees [ 116.892396][ T6928] /dev/rnullb0: Can't open blockdev [ 117.138138][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 117.618485][ T982] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 117.629876][ T6943] loop4: detected capacity change from 0 to 7 [ 117.637871][ T6943] Dev loop4: unable to read RDB block 7 [ 117.648154][ T6943] loop4: unable to read partition table [ 117.656307][ T6943] loop4: partition table beyond EOD, truncated [ 117.666709][ T6945] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003 [ 117.676537][ T6943] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 117.807300][ T982] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 117.820302][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.830587][ T982] usb 2-1: Product: syz [ 117.837853][ T982] usb 2-1: Manufacturer: syz [ 117.842857][ T982] usb 2-1: SerialNumber: syz [ 117.951375][ T982] usb 2-1: config 0 descriptor?? [ 118.011388][ T6952] /dev/rnullb0: Can't open blockdev [ 118.220315][ T982] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 118.845991][ T5893] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 119.058556][ T6968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.080344][ T6968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.086739][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.113746][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.127114][ T6970] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 119.129548][ T6968] /dev/rnullb0: Can't open blockdev [ 119.138027][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.141070][ T6970] UDF-fs: Scanning with blocksize 4096 failed [ 119.153498][ T5893] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.169375][ T6972] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 119.179830][ T6972] UDF-fs: Scanning with blocksize 4096 failed [ 119.185992][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.203529][ T5893] usb 4-1: config 0 descriptor?? [ 119.322576][ T5918] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 119.487449][ T6978] loop4: detected capacity change from 0 to 7 [ 119.494731][ T6978] Dev loop4: unable to read RDB block 7 [ 119.502251][ T6978] loop4: unable to read partition table [ 119.508171][ T6978] loop4: partition table beyond EOD, truncated [ 119.514470][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 119.514858][ T6978] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 119.521468][ T5918] usb 3-1: config 0 has an invalid interface number: 151 but max is 1 [ 119.541238][ T5918] usb 3-1: config 0 has no interface number 1 [ 119.547841][ T5918] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 119.560044][ T5918] usb 3-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 119.573849][ T5205] Dev loop4: unable to read RDB block 7 [ 119.575286][ T5918] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 119.579495][ T5205] loop4: unable to read partition table [ 119.597604][ T5918] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 119.598131][ T5205] loop4: partition table beyond EOD, [ 119.610064][ T5918] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.611930][ T5205] truncated [ 119.617031][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.326'. [ 119.660428][ T5918] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 119.669927][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.682810][ T6962] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 119.692172][ T5918] usb 3-1: Product: syz [ 119.696664][ T5918] usb 3-1: Manufacturer: syz [ 119.706074][ T6962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.726083][ T5893] usbhid 4-1:0.0: can't add hid device: -71 [ 119.726641][ T5918] usb 3-1: SerialNumber: syz [ 119.743840][ T5893] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 119.769561][ T5918] usb 3-1: config 0 descriptor?? [ 119.776587][ T6967] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 119.780126][ T5893] usb 4-1: USB disconnect, device number 19 [ 119.792920][ T5918] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 119.820789][ T5918] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 119.850225][ T5918] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 119.860931][ T982] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 119.991671][ T5918] usb 3-1: USB disconnect, device number 17 [ 120.052599][ T24] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 120.182644][ T24] usb 1-1: device descriptor read/64, error -71 [ 120.341867][ T6988] Can't find a SQUASHFS superblock on rnullb0 [ 120.442732][ T24] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 120.481058][ T6995] netlink: 'syz.3.338': attribute type 8 has an invalid length. [ 120.573311][ T24] usb 1-1: device descriptor read/64, error -71 [ 120.703264][ T24] usb usb1-port1: attempt power cycle [ 120.726612][ T7007] loop4: detected capacity change from 0 to 7 [ 120.736349][ T6071] Dev loop4: unable to read RDB block 7 [ 120.742043][ T6071] loop4: unable to read partition table [ 120.748476][ T6071] loop4: partition table beyond EOD, truncated [ 120.760027][ T7007] Dev loop4: unable to read RDB block 7 [ 120.766333][ T7007] loop4: unable to read partition table [ 120.772248][ T7007] loop4: partition table beyond EOD, truncated [ 120.778891][ T7007] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 120.920519][ T5893] usb 2-1: USB disconnect, device number 16 [ 120.923172][ T7011] /dev/rnullb0: Can't open blockdev [ 121.028159][ T5880] hid-generic 0003:0000:0005.0003: item fetching failed at offset 6/62 [ 121.060638][ T5880] hid-generic 0003:0000:0005.0003: probe with driver hid-generic failed with error -22 [ 121.072875][ T24] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 121.117993][ T5835] Bluetooth: hci2: link tx timeout [ 121.123423][ T5835] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 121.133176][ T24] usb 1-1: device descriptor read/8, error -71 [ 121.203693][ T5918] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 121.354586][ T5918] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 121.382181][ T24] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 121.390739][ T5918] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 121.409708][ T5918] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 121.419834][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.429369][ T5918] usb 4-1: Product: syz [ 121.429501][ T24] usb 1-1: device descriptor read/8, error -71 [ 121.440580][ T5918] usb 4-1: Manufacturer: syz [ 121.446653][ T5918] usb 4-1: SerialNumber: syz [ 121.462205][ T5918] usb 4-1: config 0 descriptor?? [ 121.469007][ T7013] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 121.478658][ T7013] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 121.528975][ T7023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.347'. [ 121.554340][ T24] usb usb1-port1: unable to enumerate USB device [ 121.690865][ T7013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.703562][ T7013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.713093][ T7013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.727476][ T7013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.739740][ T7013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.751538][ T7013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.771411][ T7013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.784344][ T7013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.800141][ T7013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.811299][ T7013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.841967][ T7011] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 121.850133][ T7011] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 122.044891][ T7029] omfs: Invalid superblock (0) [ 122.091250][ T5918] Error reading MAC address [ 122.110658][ T5918] usb 4-1: USB disconnect, device number 20 [ 122.225225][ T7038] FAT-fs (rnullb0): bogus number of reserved sectors [ 122.232416][ T7038] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 122.337389][ T7041] loop4: detected capacity change from 0 to 7 [ 122.347013][ T6071] Dev loop4: unable to read RDB block 7 [ 122.352679][ T6071] loop4: unable to read partition table [ 122.353574][ T7043] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 122.358505][ T6071] loop4: partition table beyond EOD, [ 122.365931][ T7043] VFS: Can't find a romfs filesystem on dev rnullb0. [ 122.365931][ T7043] [ 122.368966][ T6071] truncated [ 122.384989][ T7041] Dev loop4: unable to read RDB block 7 [ 122.390577][ T7041] loop4: unable to read partition table [ 122.411151][ T7041] loop4: partition table beyond EOD, truncated [ 122.422603][ T7041] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 122.544716][ T5918] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 122.597377][ T7053] process 'syz.1.356' launched './file1' with NULL argv: empty string added [ 122.718961][ T5918] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 122.738269][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.756560][ T5918] usb 4-1: Product: syz [ 122.762787][ T5918] usb 4-1: Manufacturer: syz [ 122.771980][ T5918] usb 4-1: SerialNumber: syz [ 122.844394][ T5918] usb 4-1: config 0 descriptor?? [ 122.953535][ T7059] loop4: detected capacity change from 0 to 7 [ 122.979373][ T6071] Dev loop4: unable to read RDB block 7 [ 122.991527][ T6071] loop4: unable to read partition table [ 122.997892][ T6071] loop4: partition table beyond EOD, truncated [ 123.012268][ T7059] Dev loop4: unable to read RDB block 7 [ 123.022147][ T7059] loop4: unable to read partition table [ 123.031789][ T7059] loop4: partition table beyond EOD, truncated [ 123.038442][ T7059] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 123.075128][ T5918] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 123.099789][ T5205] Dev loop4: unable to read RDB block 7 [ 123.106914][ T5205] loop4: unable to read partition table [ 123.119241][ T5205] loop4: partition table beyond EOD, truncated [ 123.215878][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 123.353876][ T5893] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 123.514897][ T5893] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 123.529618][ T5893] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.540414][ T5893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 123.547085][ T5893] usb 1-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 123.556169][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.573606][ T5893] usb 1-1: config 0 descriptor?? [ 123.625889][ T7068] /dev/rnullb0: Can't open blockdev [ 123.794792][ T7061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.830820][ T7061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.912705][ T7061] [ 124.117866][ T5893] hid-alps 0003:044E:120B.0004: unknown main item tag 0x0 [ 124.134495][ T5893] hid-alps 0003:044E:120B.0004: unknown main item tag 0x0 [ 124.141637][ T5893] hid-alps 0003:044E:120B.0004: unknown main item tag 0x0 [ 124.163524][ T5893] hid-alps 0003:044E:120B.0004: unknown main item tag 0x0 [ 124.181569][ T5893] hid-alps 0003:044E:120B.0004: unknown main item tag 0x0 [ 124.191198][ T5893] hid-alps 0003:044E:120B.0004: unknown main item tag 0x0 [ 124.209558][ T5893] hid-alps 0003:044E:120B.0004: unknown main item tag 0x0 [ 124.230130][ T5893] hid-alps 0003:044E:120B.0004: unknown main item tag 0x0 [ 124.242212][ T5893] hid-alps 0003:044E:120B.0004: unknown main item tag 0x0 [ 124.251475][ T5893] hid-alps 0003:044E:120B.0004: unknown main item tag 0x0 [ 124.277329][ T5893] hid-alps 0003:044E:120B.0004: hidraw0: USB HID v0.00 Device [HID 044e:120b] on usb-dummy_hcd.0-1/input0 [ 124.323746][ T5893] usb 1-1: USB disconnect, device number 25 [ 124.420534][ T7085] fido_id[7085]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 124.513155][ T5923] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 124.694486][ T5923] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 124.702976][ T5923] usb 2-1: config 0 has no interface number 0 [ 124.709100][ T5923] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 124.720963][ T5923] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 124.733956][ T5918] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 124.746089][ T5923] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 124.758165][ T5923] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 124.769586][ T5923] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 124.781850][ T5923] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 124.797141][ T5923] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 124.808327][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.821677][ T5923] usb 2-1: config 0 descriptor?? [ 124.835293][ T7082] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 124.843139][ T7082] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 124.866437][ T5923] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 124.942219][ T7092] loop8: detected capacity change from 0 to 7 [ 124.950029][ T7092] Dev loop8: unable to read RDB block 7 [ 124.956860][ T7092] loop8: AHDI p1 p2 p3 [ 124.961174][ T7092] loop8: partition table partially beyond EOD, truncated [ 124.971564][ T7092] loop8: p1 start 1601398130 is beyond EOD, truncated [ 124.978724][ T7092] loop8: p2 start 1702059890 is beyond EOD, truncated [ 125.130279][ T7100] FAULT_INJECTION: forcing a failure. [ 125.130279][ T7100] name failslab, interval 1, probability 0, space 0, times 1 [ 125.147375][ T7100] CPU: 0 UID: 0 PID: 7100 Comm: syz.2.371 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 125.147397][ T7100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.147412][ T7100] Call Trace: [ 125.147419][ T7100] [ 125.147426][ T7100] dump_stack_lvl+0x189/0x250 [ 125.147455][ T7100] ? __pfx____ratelimit+0x10/0x10 [ 125.147475][ T7100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.147493][ T7100] ? __pfx__printk+0x10/0x10 [ 125.147514][ T7100] ? __pfx___might_resched+0x10/0x10 [ 125.147531][ T7100] ? fs_reclaim_acquire+0x7d/0x100 [ 125.147556][ T7100] should_fail_ex+0x414/0x560 [ 125.147584][ T7100] should_failslab+0xa8/0x100 [ 125.147605][ T7100] __kmalloc_noprof+0xcb/0x4f0 [ 125.147621][ T7100] ? tomoyo_encode+0x28b/0x550 [ 125.147644][ T7100] tomoyo_encode+0x28b/0x550 [ 125.147668][ T7100] tomoyo_realpath_from_path+0x58d/0x5d0 [ 125.147688][ T7100] ? tomoyo_domain+0xd9/0x130 [ 125.147711][ T7100] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 125.147735][ T7100] tomoyo_path_number_perm+0x1e8/0x5a0 [ 125.147760][ T7100] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 125.147801][ T7100] ? __lock_acquire+0xab9/0xd20 [ 125.147843][ T7100] ? __fget_files+0x2a/0x420 [ 125.147866][ T7100] ? __fget_files+0x2a/0x420 [ 125.147885][ T7100] ? __fget_files+0x3a0/0x420 [ 125.147902][ T7100] ? __fget_files+0x2a/0x420 [ 125.147926][ T7100] security_file_ioctl+0xcb/0x2d0 [ 125.147950][ T7100] __se_sys_ioctl+0x47/0x170 [ 125.147969][ T7100] do_syscall_64+0xfa/0x3b0 [ 125.147988][ T7100] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.148007][ T7100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.148022][ T7100] ? clear_bhb_loop+0x60/0xb0 [ 125.148042][ T7100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.148056][ T7100] RIP: 0033:0x7fcd6518e929 [ 125.148075][ T7100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.148088][ T7100] RSP: 002b:00007fcd6604d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.148105][ T7100] RAX: ffffffffffffffda RBX: 00007fcd653b5fa0 RCX: 00007fcd6518e929 [ 125.148116][ T7100] RDX: 00002000000000c0 RSI: 000000004008ae8a RDI: 0000000000000006 [ 125.148125][ T7100] RBP: 00007fcd6604d090 R08: 0000000000000000 R09: 0000000000000000 [ 125.148133][ T7100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.148141][ T7100] R13: 0000000000000000 R14: 00007fcd653b5fa0 R15: 00007ffc576e2808 [ 125.148168][ T7100] [ 125.148187][ T7100] ERROR: Out of memory at tomoyo_realpath_from_path. [ 125.366626][ T30] audit: type=1800 audit(1751625388.962:6): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.373" name="bus" dev="overlay" ino=498 res=0 errno=0 [ 125.370356][ T5845] Bluetooth: hci0: link tx timeout [ 125.431023][ T5845] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 125.479247][ T5901] usb 2-1: USB disconnect, device number 17 [ 125.514448][ T5901] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 125.611127][ T7115] 9pnet_fd: Insufficient options for proto=fd [ 125.771894][ T5880] usb 4-1: USB disconnect, device number 21 [ 125.901511][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.378'. [ 126.011679][ T7126] netlink: 64 bytes leftover after parsing attributes in process `syz.3.378'. [ 126.052931][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.378'. [ 126.102652][ T5893] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 126.193474][ T7134] /dev/rnullb0: Can't open blockdev [ 126.252617][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 126.284279][ T5893] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 126.305254][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.341498][ T5893] pvrusb2: Hardware description: Terratec Grabster AV400 [ 126.380777][ T5893] pvrusb2: ********** [ 126.392570][ T5893] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 126.423254][ T5893] pvrusb2: Important functionality might not be entirely working. [ 126.458141][ T5893] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 126.487709][ T5893] pvrusb2: ********** [ 126.599756][ T7157] FAULT_INJECTION: forcing a failure. [ 126.599756][ T7157] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 126.613683][ T7157] CPU: 1 UID: 0 PID: 7157 Comm: syz.1.384 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 126.613705][ T7157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.613715][ T7157] Call Trace: [ 126.613721][ T7157] [ 126.613728][ T7157] dump_stack_lvl+0x189/0x250 [ 126.613752][ T7157] ? __pfx____ratelimit+0x10/0x10 [ 126.613774][ T7157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.613791][ T7157] ? __pfx__printk+0x10/0x10 [ 126.613809][ T7157] ? __might_fault+0xb0/0x130 [ 126.613840][ T7157] should_fail_ex+0x414/0x560 [ 126.613869][ T7157] _copy_from_user+0x2d/0xb0 [ 126.613886][ T7157] kvm_arch_vcpu_ioctl+0xb5d/0x2a40 [ 126.613911][ T7157] ? __lock_acquire+0xab9/0xd20 [ 126.613946][ T7157] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 126.613973][ T7157] ? __lock_acquire+0xab9/0xd20 [ 126.614013][ T7157] ? is_bpf_text_address+0x26/0x2b0 [ 126.614040][ T7157] ? is_bpf_text_address+0x292/0x2b0 [ 126.614061][ T7157] ? is_bpf_text_address+0x26/0x2b0 [ 126.614086][ T7157] ? kernel_text_address+0xa5/0xe0 [ 126.614107][ T7157] ? __kernel_text_address+0xd/0x40 [ 126.614126][ T7157] ? unwind_get_return_address+0x4d/0x90 [ 126.614142][ T7157] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 126.614160][ T7157] ? arch_stack_walk+0xfc/0x150 [ 126.614190][ T7157] ? stack_trace_save+0x9c/0xe0 [ 126.614210][ T7157] ? stack_depot_save_flags+0x40/0x900 [ 126.614236][ T7157] ? kasan_save_track+0x4f/0x80 [ 126.614250][ T7157] ? kasan_save_track+0x3e/0x80 [ 126.614276][ T7157] ? __lock_acquire+0xab9/0xd20 [ 126.614306][ T7157] ? __mutex_trylock_common+0x153/0x260 [ 126.614327][ T7157] ? __pfx___mutex_trylock_common+0x10/0x10 [ 126.614349][ T7157] ? rcu_is_watching+0x15/0xb0 [ 126.614366][ T7157] ? trace_contention_end+0x39/0x120 [ 126.614383][ T7157] ? __mutex_lock+0x330/0xe80 [ 126.614406][ T7157] ? kasan_quarantine_put+0xdd/0x220 [ 126.614427][ T7157] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 126.614448][ T7157] ? __pfx___mutex_lock+0x10/0x10 [ 126.614469][ T7157] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 126.614496][ T7157] ? do_vfs_ioctl+0xf1c/0x1430 [ 126.614522][ T7157] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 126.614543][ T7157] kvm_vcpu_ioctl+0x74d/0xe90 [ 126.614567][ T7157] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 126.614583][ T7157] ? __lock_acquire+0xab9/0xd20 [ 126.614625][ T7157] ? __fget_files+0x2a/0x420 [ 126.614649][ T7157] ? __fget_files+0x2a/0x420 [ 126.614669][ T7157] ? __fget_files+0x3a0/0x420 [ 126.614687][ T7157] ? __fget_files+0x2a/0x420 [ 126.614710][ T7157] ? bpf_lsm_file_ioctl+0x9/0x20 [ 126.614726][ T7157] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 126.614744][ T7157] __se_sys_ioctl+0xf9/0x170 [ 126.614764][ T7157] do_syscall_64+0xfa/0x3b0 [ 126.614783][ T7157] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.614802][ T7157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.614818][ T7157] ? clear_bhb_loop+0x60/0xb0 [ 126.614838][ T7157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.614853][ T7157] RIP: 0033:0x7fd60898e929 [ 126.614867][ T7157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.614880][ T7157] RSP: 002b:00007fd6097ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.614898][ T7157] RAX: ffffffffffffffda RBX: 00007fd608bb5fa0 RCX: 00007fd60898e929 [ 126.614910][ T7157] RDX: 00002000000000c0 RSI: 000000004008ae8a RDI: 0000000000000006 [ 126.614920][ T7157] RBP: 00007fd6097ed090 R08: 0000000000000000 R09: 0000000000000000 [ 126.614936][ T7157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.614945][ T7157] R13: 0000000000000000 R14: 00007fd608bb5fa0 R15: 00007ffe585b05b8 [ 126.614970][ T7157] [ 127.008911][ T2342] pvrusb2: Invalid write control endpoint [ 127.089099][ T2342] pvrusb2: Invalid write control endpoint [ 127.099319][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 127.102858][ T5880] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 127.109851][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 127.109873][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 127.109883][ T2342] pvrusb2: Device being rendered inoperable [ 127.111045][ T2342] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 127.148987][ T2342] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 127.158758][ T2342] pvrusb2: Attached sub-driver cx25840 [ 127.164438][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 127.175353][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 127.276239][ T5880] usb 4-1: unable to get BOS descriptor or descriptor too short [ 127.284717][ T5880] usb 4-1: not running at top speed; connect to a high speed hub [ 127.305449][ T5880] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 127.318133][ T5880] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 127.332732][ T5880] usb 4-1: config 4 has no interface number 0 [ 127.356743][ T5880] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 127.366259][ T5893] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 127.380734][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.390238][ T5880] usb 4-1: Product: syz [ 127.397804][ T5880] usb 4-1: Manufacturer: syz [ 127.402425][ T5880] usb 4-1: SerialNumber: syz [ 127.452959][ T5155] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.527499][ T5893] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 127.536750][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.539299][ T7173] ªªªªªª: renamed from lo (while UP) [ 127.544801][ T5893] usb 2-1: Product: syz [ 127.544818][ T5893] usb 2-1: Manufacturer: syz [ 127.544831][ T5893] usb 2-1: SerialNumber: syz [ 127.559839][ T5893] usb 2-1: config 0 descriptor?? [ 127.724961][ T7162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.737757][ T7162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.778781][ T5893] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 127.831141][ T5880] usb 4-1: Found UVC 0.00 device syz (04f2:b746) [ 127.842796][ T5880] usb 4-1: No streaming interface found for terminal 6. [ 127.867422][ T5880] usb 4-1: USB disconnect, device number 22 [ 128.422007][ T7176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.389'. [ 128.652632][ T5845] Bluetooth: hci1: command 0x0405 tx timeout [ 128.788131][ T7186] hpfs: Bad magic ... probably not HPFS [ 128.812639][ T982] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 128.849121][ T7189] loop4: detected capacity change from 0 to 7 [ 128.857479][ T7189] Dev loop4: unable to read RDB block 7 [ 128.864203][ T7189] loop4: unable to read partition table [ 128.870030][ T7189] loop4: partition table beyond EOD, truncated [ 128.876275][ T7189] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 128.977025][ T7191] loop8: detected capacity change from 0 to 7 [ 128.986780][ T982] usb 4-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 128.989044][ T6071] Dev loop8: unable to read RDB block 7 [ 129.002005][ T6071] loop8: AHDI p1 p2 p3 [ 129.012778][ T6071] loop8: partition table partially beyond EOD, truncated [ 129.021019][ T6071] loop8: p1 start 1601398130 is beyond EOD, truncated [ 129.032304][ T6071] loop8: p2 start 1702059890 is beyond EOD, truncated [ 129.066743][ T982] usb 4-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 129.077436][ T7191] Dev loop8: unable to read RDB block 7 [ 129.081869][ T982] usb 4-1: Product: syz [ 129.087558][ T982] usb 4-1: Manufacturer: syz [ 129.092268][ T982] usb 4-1: SerialNumber: syz [ 129.100000][ T5880] usb 3-1: USB disconnect, device number 18 [ 129.102889][ T7191] loop8: AHDI p1 p2 p3 [ 129.118715][ T7191] loop8: partition table partially beyond EOD, truncated [ 129.128299][ T982] usb 4-1: config 0 descriptor?? [ 129.148255][ T7191] loop8: p1 start 1601398130 is beyond EOD, truncated [ 129.163482][ T7191] loop8: p2 start 1702059890 is beyond EOD, truncated [ 129.463757][ T5893] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 129.484550][ T7204] exFAT-fs (rnullb0): invalid boot record signature [ 129.491415][ T7204] exFAT-fs (rnullb0): failed to read boot sector [ 129.499306][ T7204] exFAT-fs (rnullb0): failed to recognize exfat type [ 129.552723][ T5923] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 129.724428][ T5923] usb 1-1: Using ep0 maxpacket: 32 [ 129.739711][ T5923] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 129.750398][ T5923] usb 1-1: config 0 has no interface number 0 [ 129.758130][ T5923] usb 1-1: config 0 interface 12 has no altsetting 0 [ 129.769282][ T5923] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 129.779190][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.787576][ T5923] usb 1-1: Product: syz [ 129.791959][ T5923] usb 1-1: Manufacturer: syz [ 129.796979][ T5923] usb 1-1: SerialNumber: syz [ 129.807928][ T5923] usb 1-1: config 0 descriptor?? [ 129.820584][ T5923] f81534 1-1:0.12: required endpoints missing [ 130.255060][ T7215] FAULT_INJECTION: forcing a failure. [ 130.255060][ T7215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.268295][ T7215] CPU: 0 UID: 0 PID: 7215 Comm: syz.2.404 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 130.268317][ T7215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.268327][ T7215] Call Trace: [ 130.268333][ T7215] [ 130.268340][ T7215] dump_stack_lvl+0x189/0x250 [ 130.268363][ T7215] ? __pfx____ratelimit+0x10/0x10 [ 130.268385][ T7215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.268403][ T7215] ? __pfx__printk+0x10/0x10 [ 130.268435][ T7215] should_fail_ex+0x414/0x560 [ 130.268465][ T7215] _copy_from_user+0x2d/0xb0 [ 130.268483][ T7215] vmemdup_user+0x59/0xd0 [ 130.268506][ T7215] kvm_vcpu_ioctl_set_cpuid+0x8a/0x5b0 [ 130.268528][ T7215] kvm_arch_vcpu_ioctl+0x1352/0x2a40 [ 130.268552][ T7215] ? __lock_acquire+0xab9/0xd20 [ 130.268580][ T7215] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 130.268611][ T7215] ? __lock_acquire+0xab9/0xd20 [ 130.268652][ T7215] ? is_bpf_text_address+0x26/0x2b0 [ 130.268680][ T7215] ? is_bpf_text_address+0x292/0x2b0 [ 130.268701][ T7215] ? is_bpf_text_address+0x26/0x2b0 [ 130.268727][ T7215] ? kernel_text_address+0xa5/0xe0 [ 130.268748][ T7215] ? __kernel_text_address+0xd/0x40 [ 130.268768][ T7215] ? unwind_get_return_address+0x4d/0x90 [ 130.268784][ T7215] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 130.268803][ T7215] ? arch_stack_walk+0xfc/0x150 [ 130.268833][ T7215] ? stack_trace_save+0x9c/0xe0 [ 130.268854][ T7215] ? stack_depot_save_flags+0x40/0x900 [ 130.268880][ T7215] ? kasan_save_track+0x4f/0x80 [ 130.268895][ T7215] ? kasan_save_track+0x3e/0x80 [ 130.268920][ T7215] ? __lock_acquire+0xab9/0xd20 [ 130.268950][ T7215] ? __mutex_trylock_common+0x153/0x260 [ 130.268971][ T7215] ? __pfx___mutex_trylock_common+0x10/0x10 [ 130.268993][ T7215] ? rcu_is_watching+0x15/0xb0 [ 130.269009][ T7215] ? trace_contention_end+0x39/0x120 [ 130.269027][ T7215] ? __mutex_lock+0x330/0xe80 [ 130.269050][ T7215] ? kasan_quarantine_put+0xdd/0x220 [ 130.269072][ T7215] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 130.269093][ T7215] ? __pfx___mutex_lock+0x10/0x10 [ 130.269115][ T7215] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 130.269142][ T7215] ? do_vfs_ioctl+0xf1c/0x1430 [ 130.269163][ T7215] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 130.269184][ T7215] kvm_vcpu_ioctl+0x74d/0xe90 [ 130.269209][ T7215] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 130.269225][ T7215] ? __lock_acquire+0xab9/0xd20 [ 130.269271][ T7215] ? __fget_files+0x2a/0x420 [ 130.269295][ T7215] ? __fget_files+0x2a/0x420 [ 130.269315][ T7215] ? __fget_files+0x3a0/0x420 [ 130.269333][ T7215] ? __fget_files+0x2a/0x420 [ 130.269358][ T7215] ? bpf_lsm_file_ioctl+0x9/0x20 [ 130.269374][ T7215] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 130.269393][ T7215] __se_sys_ioctl+0xf9/0x170 [ 130.269413][ T7215] do_syscall_64+0xfa/0x3b0 [ 130.269433][ T7215] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.269454][ T7215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.269469][ T7215] ? clear_bhb_loop+0x60/0xb0 [ 130.269489][ T7215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.269504][ T7215] RIP: 0033:0x7fcd6518e929 [ 130.269519][ T7215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.269532][ T7215] RSP: 002b:00007fcd6604d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.269549][ T7215] RAX: ffffffffffffffda RBX: 00007fcd653b5fa0 RCX: 00007fcd6518e929 [ 130.269561][ T7215] RDX: 00002000000000c0 RSI: 000000004008ae8a RDI: 0000000000000006 [ 130.269572][ T7215] RBP: 00007fcd6604d090 R08: 0000000000000000 R09: 0000000000000000 [ 130.269588][ T7215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.269597][ T7215] R13: 0000000000000000 R14: 00007fcd653b5fa0 R15: 00007ffc576e2808 [ 130.269626][ T7215] [ 130.670158][ T5893] usb 2-1: USB disconnect, device number 18 [ 130.725602][ T7219] mmap: syz.1.405 (7219) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 130.740615][ T7219] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.757240][ T30] audit: type=1400 audit(1751625394.362:7): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7218 comm="syz.1.405" [ 130.833015][ T7221] loop8: detected capacity change from 0 to 7 [ 130.840491][ T7221] Dev loop8: unable to read RDB block 7 [ 130.856605][ T7221] loop8: AHDI p1 p2 p3 [ 130.860795][ T7221] loop8: partition table partially beyond EOD, truncated [ 130.870993][ T7221] loop8: p1 start 1601398130 is beyond EOD, truncated [ 130.879306][ T7221] loop8: p2 start 1702059890 is beyond EOD, truncated [ 130.955856][ T7225] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 131.158360][ T7229] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 131.256097][ T7236] netlink: 5820 bytes leftover after parsing attributes in process `syz.1.409'. [ 131.612680][ T982] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 131.627934][ T982] asix 4-1:0.0: probe with driver asix failed with error -71 [ 131.656279][ T982] usb 4-1: USB disconnect, device number 23 [ 132.263052][ T5893] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 132.322553][ T982] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 132.362066][ T5923] usb 1-1: USB disconnect, device number 26 [ 132.394428][ T7266] [ 132.396782][ T7266] ============================================ [ 132.402911][ T7266] WARNING: possible recursive locking detected [ 132.409046][ T7266] 6.16.0-rc4-next-20250702-syzkaller #0 Not tainted [ 132.415609][ T7266] -------------------------------------------- [ 132.421746][ T7266] syz.1.414/7266 is trying to acquire lock: [ 132.427622][ T7266] ffff88805d6448c8 (&sb->s_type->i_mutex_key#26){+.+.}-{4:4}, at: rpc_close_pipes+0x10a/0x730 [ 132.437880][ T7266] [ 132.437880][ T7266] but task is already holding lock: [ 132.445224][ T7266] ffff88805d6411c8 (&sb->s_type->i_mutex_key#26){+.+.}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 132.456430][ T7266] [ 132.456430][ T7266] other info that might help us debug this: [ 132.464467][ T7266] Possible unsafe locking scenario: [ 132.464467][ T7266] [ 132.471894][ T7266] CPU0 [ 132.475164][ T7266] ---- [ 132.478424][ T7266] lock(&sb->s_type->i_mutex_key#26); [ 132.483874][ T7266] lock(&sb->s_type->i_mutex_key#26); [ 132.489320][ T7266] [ 132.489320][ T7266] *** DEADLOCK *** [ 132.489320][ T7266] [ 132.497447][ T7266] May be due to missing lock nesting notation [ 132.497447][ T7266] [ 132.505749][ T7266] 4 locks held by syz.1.414/7266: [ 132.510760][ T7266] #0: ffff88807ded60e0 (&type->s_umount_key#85){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 132.520943][ T7266] #1: ffff88814cca00a0 (&sn->pipefs_sb_lock){+.+.}-{4:4}, at: rpc_kill_sb+0x77/0x190 [ 132.530505][ T7266] #2: ffffffff8f8e2df0 ((rpc_pipefs_notifier_list).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 132.542586][ T7266] #3: ffff88805d6411c8 (&sb->s_type->i_mutex_key#26){+.+.}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 132.554240][ T7266] [ 132.554240][ T7266] stack backtrace: [ 132.560113][ T7266] CPU: 0 UID: 0 PID: 7266 Comm: syz.1.414 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 132.560131][ T7266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.560140][ T7266] Call Trace: [ 132.560145][ T7266] [ 132.560151][ T7266] dump_stack_lvl+0x189/0x250 [ 132.560171][ T7266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.560186][ T7266] ? __pfx__printk+0x10/0x10 [ 132.560202][ T7266] ? print_lock_name+0xde/0x100 [ 132.560217][ T7266] print_deadlock_bug+0x28b/0x2a0 [ 132.560231][ T7266] validate_chain+0x1a3f/0x2140 [ 132.560252][ T7266] __lock_acquire+0xab9/0xd20 [ 132.560272][ T7266] ? rpc_close_pipes+0x10a/0x730 [ 132.560283][ T7266] lock_acquire+0x120/0x360 [ 132.560299][ T7266] ? rpc_close_pipes+0x10a/0x730 [ 132.560314][ T7266] down_write+0x96/0x1f0 [ 132.560331][ T7266] ? rpc_close_pipes+0x10a/0x730 [ 132.560342][ T7266] ? __pfx_down_write+0x10/0x10 [ 132.560359][ T7266] ? __pfx_find_submount+0x10/0x10 [ 132.560371][ T7266] ? _raw_spin_unlock+0x28/0x50 [ 132.560383][ T7266] ? d_walk+0x6f4/0x780 [ 132.560407][ T7266] rpc_close_pipes+0x10a/0x730 [ 132.560419][ T7266] ? d_invalidate+0x204/0x260 [ 132.560430][ T7266] ? __pfx_rpc_close_pipes+0x10/0x10 [ 132.560442][ T7266] ? up_write+0x1c4/0x420 [ 132.560455][ T7266] ? __pfx_rpc_close_pipes+0x10/0x10 [ 132.560466][ T7266] __simple_recursive_removal+0x208/0x510 [ 132.560481][ T7266] ? __pfx_rpc_close_pipes+0x10/0x10 [ 132.560494][ T7266] rpc_unlink+0x56/0x80 [ 132.560506][ T7266] rpc_pipefs_event+0xc0/0x170 [ 132.560524][ T7266] notifier_call_chain+0x1b3/0x3e0 [ 132.560539][ T7266] blocking_notifier_call_chain+0x6a/0x90 [ 132.560552][ T7266] rpc_kill_sb+0xd0/0x190 [ 132.560566][ T7266] deactivate_locked_super+0xb9/0x130 [ 132.560580][ T7266] cleanup_mnt+0x425/0x4c0 [ 132.560591][ T7266] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.560607][ T7266] task_work_run+0x1d1/0x260 [ 132.560623][ T7266] ? __pfx_task_work_run+0x10/0x10 [ 132.560640][ T7266] ? exit_to_user_mode_loop+0x40/0x110 [ 132.560658][ T7266] exit_to_user_mode_loop+0xec/0x110 [ 132.560674][ T7266] do_syscall_64+0x2bd/0x3b0 [ 132.560690][ T7266] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.560705][ T7266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.560717][ T7266] ? clear_bhb_loop+0x60/0xb0 [ 132.560730][ T7266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.560742][ T7266] RIP: 0033:0x7fd60898e929 [ 132.560755][ T7266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.560765][ T7266] RSP: 002b:00007fd6097ed038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 132.560779][ T7266] RAX: ffffffffffffffec RBX: 00007fd608bb5fa0 RCX: 00007fd60898e929 [ 132.560789][ T7266] RDX: 0000200000000040 RSI: 0000200000001440 RDI: 0000200000000080 [ 132.560797][ T7266] RBP: 00007fd608a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 132.560805][ T7266] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000000 [ 132.560812][ T7266] R13: 0000000000000000 R14: 00007fd608bb5fa0 R15: 00007ffe585b05b8 [ 132.560826][ T7266] [ 132.703973][ T982] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 132.745551][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.762528][ T982] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.765743][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.770793][ T982] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 132.827926][ T5893] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 132.932213][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.941360][ T5893] usb 3-1: Product: syz [ 132.955526][ T5893] usb 3-1: Manufacturer: syz [ 132.960184][ T5893] usb 3-1: SerialNumber: syz [ 133.021629][ T5893] usb 3-1: config 0 descriptor?? [ 133.041500][ T982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.064539][ T982] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 133.073780][ T982] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 133.081762][ T982] usb 4-1: Product: syz [ 133.092533][ T982] usb 4-1: Manufacturer: syz [ 133.104539][ T982] cdc_wdm 4-1:1.0: skipping garbage [ 133.112691][ T982] cdc_wdm 4-1:1.0: skipping garbage [ 133.130198][ T982] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 133.137640][ T982] cdc_wdm 4-1:1.0: Unknown control protocol [ 133.254626][ T5893] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 133.329580][ C1] cdc_wdm 4-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 133.338539][ C1] cdc_wdm 4-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 133.347506][ C1] cdc_wdm 4-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 133.356677][ C1] cdc_wdm 4-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 133.365570][ C1] cdc_wdm 4-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 133.375210][ C1] cdc_wdm 4-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 133.384353][ C1] cdc_wdm 4-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 133.393265][ C1] cdc_wdm 4-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 133.402078][ C1] cdc_wdm 4-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 133.410940][ C1] cdc_wdm 4-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 133.419785][ C1] cdc_wdm 4-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 133.428859][ C1] cdc_wdm 4-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 133.437919][ C1] cdc_wdm 4-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 134.674717][ T5901] usb 4-1: USB disconnect, device number 24 [ 134.868554][ T5893] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 135.887796][ T982] usb 3-1: USB disconnect, device number 19