last executing test programs: 5m20.15204907s ago: executing program 1 (id=2161): r0 = syz_open_dev$vim2m(&(0x7f0000000b00), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x1, @pix={0x0, 0x0, 0x34565559, 0x0, 0x0, 0x8000000}}) 5m20.122058324s ago: executing program 1 (id=2163): futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xfffffffd) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) pwrite64(r1, &(0x7f0000000100), 0x0, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080)={0x9, 0xfffe, 0x6af, 0x3e8}, 0x8) sendto$inet6(r0, &(0x7f0000000200)="cf", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0xfa82, @loopback, 0xffffffff}, 0x1c) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r6, 0x45809000) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e20, @multicast1}}, [0x4b34a766, 0x7d, 0x5, 0x7, 0xe, 0x5, 0xffff, 0xfffffffffffffe00, 0x0, 0x4, 0x100000000, 0x8, 0x9, 0xffff, 0x80000001]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000100)={r7, 0xe7f2}, 0x8) 5m19.964064416s ago: executing program 1 (id=2165): mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1220041, 0x0) mknod(&(0x7f00000000c0)='./cgroup\x00', 0x2, 0x6) time(0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendmmsg$sock(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}}], 0x1, 0x20000844) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000007c0)='binfmt_misc\x00', 0x3000000, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x28, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f0401fa1104"], 0x7) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000380)={0x0, 0x21, "e4edf9b6b891615522f6e289ffd5495f6defe1ed506f63817637c4536049f4da13"}, &(0x7f00000003c0)=0x29) 5m19.844050524s ago: executing program 1 (id=2168): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003640)={0x2c, 0x2b, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@remote}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048091}, 0x8010) r1 = socket$inet6(0xa, 0x3, 0x5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000000200)=[{{&(0x7f0000000180)=@rc={0x1f, @none, 0x7}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffeb4}, 0x5b4}], 0x1, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x680c01, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x2b8200a, 0x0) io_setup(0x1, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040efc01140c"], 0xff) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40043d14, &(0x7f0000000080)={{0xffffffffffffffff, 0x4}, {0x6, 0x571}}) fcntl$getflags(r2, 0x1) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000040)) creat(&(0x7f0000001380)='./file0\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x0, 0x13, r4, 0x81000000) r5 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000100)=0x1) process_madvise(r6, 0x0, 0x0, 0x14, 0x0) 5m19.76019341s ago: executing program 1 (id=2169): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000380), &(0x7f0000000240)=0xfffffffffffffcf2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x15) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3d, &(0x7f0000000080)={0x0, 0x9}, 0x8) ppoll(&(0x7f0000000140)=[{r4, 0x51}], 0x1, &(0x7f0000000180), 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000)="39078b5c5ce5fccc9c1e93348ebfbab443fcef80db", 0x15, 0x4000000, &(0x7f0000000300)={0xa, 0x4e23, 0x9, @private2, 0xd3}, 0x1c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f00000007c0)) socket$packet(0x11, 0x2, 0x300) dup(r6) r8 = fcntl$dupfd(r2, 0x406, r6) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0x4000}) r9 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r9, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) getsockopt$ARPT_SO_GET_ENTRIES(r9, 0x0, 0x61, 0x0, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r10, &(0x7f0000000340)=[{{&(0x7f0000000280)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x80, 0x0}}], 0x1, 0x0) 5m19.423097378s ago: executing program 1 (id=2172): r0 = syz_open_dev$vim2m(&(0x7f0000000b00), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x1, @pix={0x0, 0x0, 0x34565559, 0x0, 0x0, 0x0, 0x300}}) 5m19.067447056s ago: executing program 32 (id=2172): r0 = syz_open_dev$vim2m(&(0x7f0000000b00), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x1, @pix={0x0, 0x0, 0x34565559, 0x0, 0x0, 0x0, 0x300}}) 2m39.639816185s ago: executing program 2 (id=2885): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r0, 0x29, 0x1d, &(0x7f00000001c0)="ec003ab9f7", 0x5) creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0), 0x2) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000200)={&(0x7f0000000240)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000280)={r4, r5, r6, 0x4, 0x0, 0xf7f3a4b3, 0x7f, 0x100, 0xfffffffc, 0x6, 0x8, 0x3}) read(r2, &(0x7f00000001c0)=""/93, 0x5d) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_BALANCE(r7, 0x5000940c, 0x0) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 2m39.350349384s ago: executing program 2 (id=2887): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r0, 0x1) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000008c0)={0x0, 0x7}, 0x8) (async, rerun: 32) sendmmsg$inet6(r0, &(0x7f0000001900)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6e8a}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000900)="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", 0x1000}, {&(0x7f00000000c0)="54a16225b6b4cfdf79bb9ffa61fbdbb70933c9c13493c43a539bf0fedbedae2ddf5beba5256ba2e2e99d1b0c1f46", 0x2e}, {&(0x7f0000000100)="a884343329c7a9d488e3604daa367b37a6262f8900c3cd4cf76fe11dbdbca3849fa01a649cd1b22670dfd7608f8cd5ae50cac1edbef67e34ca09a5ee4127dc73479c634028f2aa800ee884de1c3189209f136cc18f5de0870b1d0ea6cd5b59e3c567ce20dcffa3ef725711411c632528e8fa63f1e2c7361588889339a7cb12c341a18e301c97028b8f71a8f5aa4af8c2ce686eee943e8c50b4fece9f0e65b235f035c976fc8511fc9fa3e4996f630c02b94455bf00c622e96f1aacded93c20d740f2bd296599f0cb7fb90ea26b58383080c9412bd13656750b40", 0xda}], 0x3, &(0x7f0000000380)=[@hoplimit={{0x14}}, @rthdr={{0x68, 0x29, 0x39, {0x2f, 0xa, 0x3, 0x5, 0x0, [@local, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1]}}}, @dstopts={{0xb0, 0x29, 0x37, {0x89, 0x12, '\x00', [@calipso={0x7, 0x58, {0x1, 0x14, 0x80, 0x3, [0x89, 0x7, 0x8d6, 0x45b0, 0xb, 0x100, 0xa45, 0x80000001, 0xf, 0x1]}}, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x20, {0x0, 0x6, 0x8, 0x1, [0x2, 0x401, 0xffffffffffffff01]}}, @jumbo={0xc2, 0x4, 0x4}, @jumbo={0xc2, 0x4, 0x200000}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @rthdr={{0xa8, 0x29, 0x39, {0x21, 0x12, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}, @private1, @empty, @remote, @remote, @dev={0xfe, 0x80, '\x00', 0x43}, @dev={0xfe, 0x80, '\x00', 0x2c}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback]}}}], 0x1f0}}, {{&(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty, 0x10}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000580)="acdd1c9aed994a07378eb58ca1b7741ca830e90c4f5e60126059087fb2cca4a969e1853b0a888752416f23ba0d0b89f55adea939595d093ea628b50a3a40042cabb659a28c53a40b1ebedc55449230a9b42fa81c7798786b0e86a325a8e496327409912e2b4a311947738fb6d21f161d9f791e16645916aad8d42f3cdb58ee9e96cfef2b62fc088af55d6f1150b5705442e9059109d0d9ad0124c0", 0x9b}, {&(0x7f0000000640)="6f8834a5f17247aa8aa94abe191dd674c8ab03499814e164c0b3f65356d6fca76ca778fc040410e7181e17d8426c17e060bacc709e3a8c017a6e0d4503b485b1ec302a2f91a70c7c43ae890100a4792f02e02af7e949d1ed8fca8ec06212a12ab40aea08ac4d05703dbcf82bd609128e61fc5aaca43e835db3f7e510cad663e2a932460dc9d9d7ce176fb4ccb140af3396e5d43a18dcb115c9ceabe7e93cd59f2e97da8968339bb1c2b5ca5a05fcb63cf5dca03110d159ec", 0xb8}, {&(0x7f0000000700)="f72de7c0dac1a27d166b76f2cf555b052b4a0b64e67abbbd5c7e3f9fa8b5bc75d32cf9dea1c240f7f959c080a89e43842c053c7646cf1133ff08a7df6f3fd8b71cc2a6565444345a7d7700ee68c0191f9ff1fc350bf94f53b9fdb3c0ffa453028559920dc58a42064c60fbbbaa1fd7278fab0f2480d99fc4f138902dc37be501537aa713", 0x84}], 0x3, &(0x7f0000000800)=[@rthdrdstopts={{0xa8, 0x29, 0x37, {0x3a, 0x11, '\x00', [@ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @generic={0x7, 0x41, "ec773e16c50bd945177982d40f4c29200e1145f99b3f1bcd6f6969f0d35d241e305f30522f87d23b2205dcbc2cea8fb6aadd626e24618312da216ff88f92bc516e"}, @calipso={0x7, 0x28, {0x3, 0x8, 0x4, 0x800, [0x1, 0x2, 0x8000000000000000, 0x8]}}, @jumbo={0xc2, 0x4, 0xee}]}}}, @tclass={{0x14, 0x29, 0x43, 0x20004000}}], 0xc0}}], 0x2, 0x20008000) (rerun: 32) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 2m39.167868889s ago: executing program 2 (id=2888): futex_waitv(0x0, 0x0, 0x2000000, 0x0, 0x0) (async) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0x9) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2'}, 0x4a) (async) mbind(&(0x7f000026b000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x4, 0x1) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@sr0, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='qnx4\x00', 0x224800a, 0x0) 2m39.122402247s ago: executing program 2 (id=2889): r0 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext3\x00', 0x400, 0x0) 2m38.992353664s ago: executing program 2 (id=2890): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext3\x00', 0x400, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x9c, 0xfffffffd}]}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) mount$nfs4(&(0x7f0000000000)='#\\&\x0e\x00', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x220044, &(0x7f0000000180)={[{']@,'}, {'/dev/rnullb0\x00'}, {'ext3\x00'}, {'ext3\x00'}, {'/dev/rnullb0\x00'}, {}, {'/dev/rnullb0\x00'}, {'S\'$!&%@^'}], [{@subj_role={'subj_role', 0x3d, '/dev/rnullb0\x00'}}, {@uid_lt={'uid<', r2}}]}) 2m38.851660598s ago: executing program 2 (id=2891): open(&(0x7f00000002c0)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000900)={0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x1fd, &(0x7f0000000480)=0x0) io_submit(r4, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r3, 0x0}]) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r7, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)={0x3c, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) getsockopt$XDP_STATISTICS(r9, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x30) mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x400008, &(0x7f00000001c0)={[{@gid={'gid', 0x3d, r6}}]}) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) 2m23.709039214s ago: executing program 33 (id=2891): open(&(0x7f00000002c0)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000900)={0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x1fd, &(0x7f0000000480)=0x0) io_submit(r4, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r3, 0x0}]) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r7, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)={0x3c, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) getsockopt$XDP_STATISTICS(r9, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x30) mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x400008, &(0x7f00000001c0)={[{@gid={'gid', 0x3d, r6}}]}) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) 15.99409661s ago: executing program 3 (id=3866): socket$inet(0x2, 0x6, 0x3) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x20400}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) 15.000082727s ago: executing program 3 (id=3871): syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x30a) getdents64(r1, &(0x7f0000000080)=""/112, 0x70) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) 12.795057239s ago: executing program 3 (id=3883): ioprio_set$pid(0x1, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_get$pid(0x3, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000040)) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x80a80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) (async) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @broadcast}, 0xc) (async) getsockopt(r2, 0x200000000114, 0x8, 0x0, &(0x7f0000000180)=0x17) (async) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x39000}, 0x1c) 8.736761173s ago: executing program 3 (id=3902): r0 = socket$inet(0x2, 0x6, 0x3) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000440)={{{@in=@private, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f00000000c0)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x8, 0x7, {0xffffffffffffffff}, {0xee00}, 0x2, 0x7fff800}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000600)={0x15c, 0x2b, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x8, 0x93, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0xf2, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x11a}, @generic="afb15d75f3e52dc326c48ae44b9b34f69e6ead37687abf909a8c1e", @generic="84c878319d7e186da1b794eb20411db0624287396b3522307fd094c2a88ef22d74d67d6f9b780a74047826dabda8f541ba5eeb8e0bbdabb6a5fdfe069ee325f2d21265034d1ba2aacfbebb394998bdb9b5491b1d6a56255f4908f268a34d6b33ef1ff66160fe47f98b4ca227abce73f4ca40a16d6a5e4ce286300b126cd779bab67a36517db28fb762cd67e9d1776bdd7a993340ff8e95c39ef33c2bae1704e02d5e802a80d4270a459344b8543c4ba5b79cbefd327b8c977ffe882b9e26227ff60c25a4333286593b0c9078d5ab9a1deb8d0321243b6023b5cb6bb441d84348ffbd", @typed={0xb, 0xab, 0x0, 0x0, @str='*!)}*(\x00'}, @typed={0x8, 0xcb, 0x0, 0x0, @uid=r1}, @nested={0x24, 0x3b, 0x0, 0x1, [@nested={0x4, 0x58}, @typed={0x14, 0xac, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x8, 0xbd, 0x0, 0x0, @pid=r2}]}]}, 0x15c}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r7, {0x4}}, './file0\x00'}) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f00000002c0)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg$can_raw(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/17, 0x11}], 0x1}, 0x40) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) 6.459037327s ago: executing program 5 (id=3915): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) fadvise64(r1, 0x7fffffffffffffff, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) 6.213142139s ago: executing program 0 (id=3916): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0x2a, 0x89, 0xdb, 0x10, 0x830, 0x61, 0x23a6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x3, 0x10, 0x36, [{{0x9, 0x4, 0xfd, 0x7f, 0x0, 0x76, 0x33, 0x92, 0x41}}]}}]}}, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000000)={0x14, &(0x7f00000000c0)={0x40, 0x2, 0x46, {0x46, 0xc, "60bdc9b315286c01d5af62e1545f5f41f5db93aecd4c08c845dade14069bed28c8abc0510916079b8380a76f22d86d29ee4a9f1c66e510aa9b7b6bb3ee7798f1712c2e9d"}}, &(0x7f0000000140)={0x0, 0x3, 0x8c, @string={0x8c, 0x3, "1e09470db3a1596d32d263a605f61b90d392b16a75fa1dbe4dc0b52827d1f943d6cc56320f9abde1c47ac39d2db9b495706897765785834be526220d269656dee314c62e06251efa41d52927b149aa0597a370d3e27fb547592ac7d3b62a5cde962111b457bb05f07ca571b3402935bab133864a84a4ac2aebd2528df5b439db14492a5f6ce690c62e0f"}}}, &(0x7f0000000400)={0x34, &(0x7f0000000200)={0x0, 0x17, 0x25, "a3647634451a3da006e2cd6c0799dadb774f8017f8fa9a1525a5123d23884e4a27925545e3"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0x20, 0x0, 0x4c, {0x4a, "db7b8d048981b5354c8710de0e566b323cc358fb51547fc6c543220e14a7c84bfcb83e3037aecfba3aff32c9c7a00e89286e00239588779db545fdef20d8e4dc16f182addfc6ba72dc6c"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0xa}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0xe}}) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) 5.915983465s ago: executing program 5 (id=3917): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000540)={0x0, 0x8c7c8f6744f0b74e, 0x8, "d4a911bb11e39d2e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$alg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="bbc4c310f90651586521a98e753c0fb992934c2b9815a23f010894ab84bc8ff9a12089399f19393ad7421964454e0b112f61053aef1538", 0x37}, {&(0x7f0000001180)="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", 0x1000}], 0x2, &(0x7f0000000240)=[@iv={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x80, 0x117, 0x2, 0x6b, "197e44379c0ec18238c57a175748918005695877224542570ace6261bb8b7c049be14264c273af70edb670fb7645523e408419e754c197aea7dc45d4d8bd9a18644f342c6b63ded0724e1c7637030ca42b9821c49a3fc0c112b1e38b758ef3393602055e92f8f102b34a15"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0xf8, 0x80}, 0x4000) setsockopt$inet6_opts(r4, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d47147"], 0xd0060) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d06, 0x0, 0x5}]}) lsm_list_modules(0x0, &(0x7f0000000040), 0x0) 5.048485077s ago: executing program 3 (id=3919): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x22020600) (async, rerun: 64) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) (async, rerun: 64) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x7}, {0xf, 0x7, 0x5}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRES16]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) personality(0x5400004) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) personality(0x8) (async, rerun: 64) r4 = eventfd2(0x0, 0x80001) (async, rerun: 64) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r4, 0x0, 0x0, 0xffffffffbff7adc0, 0x0, 0x2}]) (async) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000340)={r6}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r3, 0x7dfff000) 4.583549718s ago: executing program 0 (id=3921): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) r0 = syz_usb_connect$cdc_ecm(0x5, 0x94, &(0x7f00000000c0)={{0x12, 0x1, 0x251, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x1, 0x1, 0x3, 0x30, 0x6, [{{0x9, 0x4, 0x0, 0xb, 0x3, 0x2, 0x6, 0x0, 0x64, {{0xa, 0x24, 0x6, 0x0, 0x0, "dc3327d1a9"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5, 0x0, 0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x7f, 0xc0, 0xe}, @country_functional={0x8, 0x24, 0x7, 0xbe, 0x8, [0x3]}, @acm={0x4, 0x24, 0x2, 0x2}, @country_functional={0xe, 0x24, 0x7, 0xb, 0x9, [0x6, 0xff, 0x3, 0x101]}, @country_functional={0x12, 0x24, 0x7, 0x1, 0x3ff, [0x9, 0x7, 0x1, 0x6, 0x1000, 0x7]}, @ncm={0x6, 0x24, 0x1a, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x0, 0x2d}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x7, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x1, 0x1}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0xff, 0x9, 0x0, 0x10, 0x8}, 0x52, &(0x7f00000038c0)=ANY=[@ANYBLOB="050f5237dab8c8ac3355fd04000006071002045207001410046882326cacb2a27ea2052478c97f5bda8f14100a06620000000ff00600003f0000136915010868e64f0ec5eb80c6bd23fdb3d62282f6fa03b23b00040000141004090cf8a54a33b7cd7f9ea6e95b5a62c7253cac854d1700a6e3c77f259a64db8f7281434652f4b56b9a293ef6400e231bc9d62868b8ab8240f08ea14925ef2d9f4ec6a9e5b01228f6744c72ec92744abe9d23e2ae5be4d17ea2c386789f460be71ccd94c9db3067bba8fa83458b684b50c7fffc2b484128d20c1f1113a1b3c112a2ec2743fc1ae46996b0977923c25e397df9b079ee65da1fe03f77595b58c9668ab48774730a384fe17e8027a7b3742f9f91ed099387bd5008f4b545d5a11a2f3fc49d554d15c4c4bb8e76eeda639f72020b004ff75864e83b4296ac853c1223703d55c344053d86c455f6a0e130e376e576b89813130678e319f67c4e6b616941440d458a8498819b76d27cea700819e0dd8683ac6a264a239fa6d472c3fd132c1b44d0261ab5839fda1b09cf112f5db02bb41aaed38530d9a6893f"], 0x5, [{0xab, &(0x7f0000000240)=ANY=[@ANYBLOB="ab030231fa02d600adbcea1c6d2487baefff343bd20dd758a5484ad106c372de4d8ebc1a30af0312026191eb4f0142d96430d08682e5cb81d76ee898c396c7663293304d767578b5120ebd8330b142ae1c2caae15c864a90180f552fc73db5b2da70462a5c5d515b3f455c24fe43579ba624934dbec13294fa136ff92624b9def54585b19e4bba59b37ddeb1c298ddc3622c756aa725607bfc23a0999adfeb62275bed9b05a0a2debb9c29"]}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4}}]}) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x44) fstat(r2, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setreuid(0x0, r6) stat(&(0x7f0000002e00)='./cgroup\x00', &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r9) read$FUSE(r9, &(0x7f0000003a80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r9, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x3, {0x410000006, 0x50, 0x0, {0x0, 0x3ea, 0x10000000, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x8001, 0x0, r10, r11, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getuid() fstat(r1, &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000002fc0)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f00000030c0)=0xe8) r15 = geteuid() getresgid(&(0x7f0000003500), &(0x7f0000003540)=0x0, &(0x7f0000003580)) syz_fuse_handle_req(r4, &(0x7f0000000e00)="c2c4ecebdcf5a3c6bacf8e152a516bd3351d2c79de715cfed02fd4d3192a8bbc3e9712b617edff20a0235479c80cbab0f58df4af07ecb346d2554caee788545fd3476cfa36de204c38e53ee440e1e96b43ffd72a7cf7c0a4f24a8d1d571cedae3208cc21ba12143f21b55e5b9580d49ebd8513bc2d6aa9b87c47870d68f3c15d3d8abaf49aefc587401ceaa89f37dccee49eac73bac86f5cb2c869ce2f047d33ba0eb8748fd32826eb726cb8b69c587506de6a8cb905e37dfd6680fbdce9fa5bf1bfc4cd61b67fb26fe57879b3ca13de7d0b4a514692a4ea9153674406ed4aa9615fd82d90df9b611c84089044c224b95ed00450a891eaaa74b2bda58a213346e739ba1da77a0068cbeece4a49b99766503a8d6c47b6a5744a4a795edebf8fe03cbf1646f66bc800c67f68b57d7b5024f03a9bde1364bc7f6ee1429ef347ab2d3f98d382b598a644fc27668c5590cd62aefd3afe9d35d82d2a2039806adb97781b8cb18c6a944070b7996176e6c97ff0c1f67d27544826de777cc369e1f21799f974edeb61d3733815bfbb911099eec4343d3876deb65ce90ffa0be9ddda09eaa63c43f4bd8ccf32ce9016f88b49352d37cc1019067a232a69c4d69d893c1e3e4088b6d87551c979456499142b29606fd3a6d1d28ae4e630f51d01a423952699290d0d59a77659e1a0442ed78b314aa8fabd9f1d8ab5dddeb8b82b2d249181e5ecf2cb18bfa1b80e6352a7032a3cc07e0041ec38fc593d99468f50fac0b360bcc6cc36b10ce051855fad71d44b79c530821a7bb26f4fb867882f8debc025878763a17892b24ce4b1d165aa6a4f8f4d5d801ac403059c32286694cea181b5bd8f269be916f441fb93fdb93663d2d6aecd95480590fdc69210a08b6c7ba17285bd87d4ad95155369c702cbf68c769ca20c27ed23f4d7151a468d616ea21a64f9c10ba0376f54ff0394ce4edf4ccbc7464dea7d67bfec7e31c27c5cae6d1478f7683603eecb2b1aba44dfc7206c1d5ddbdcc35345e4431e0945c1cc720107ed869dfa8d9b6bc2506c264cdfc6a1dc00630b37d581c82216d20caa09125edc096504b6b2312ff1b2dcc9512571e1c97c0688c4567f841da31fb675e34d83ec2497b23dc40f4dee7b0cad7ebe0804c5d391ddc8111e7d43b0cae3d9c6f177c29623278f5a470c920ab1d5eb90bfd1ade4dfe55867f220249df658648e0a348b83d535963b386c7e0605fe1734df175a191c0dcab40730cd99b545dd7618152361b6ea8cac8efcfbc6c7598f0941eaf7f29775f823b2c0f9d1d3d7a84469e9d321c9e2a5fb70d98c7e5a166df4eec333e7c6a8bf459ed4a52d2c2eb508ce4927623f61d99c0ad1542cefe85bded295369469b95eb42b421352f931c1a331015e34f7d450b13fa7b7b7571f047c5d829bf5b1bbda33047a221e397b2158c9a47be6ea09487bca3f54f249a19cc0019ea711379cd1c6cc37aa14dc458e28c2fa1ee8ba47107b2ff4d6e61d641a0ff778ad4d946a580f979931d5ab01ca80632c9aec6cbaebd56ac5f39d926b27079e7da90d3e1de42f77d1c170e86a8d17bee4632fc9cbd7237fb1c2ddab59aa0b9235704c01d576827434c5bb9f4b8d682e9fcbbbd6e3da016514111e1f15f34f4a648fe9913805075efe4bb42d4f881cf4010f7e79fb1770b6650cdd83a43d53aeb979217f4afd6afe7575bfa7c0aa3b966f79f077ed43a85c9215a0c029e7ec6ba11fd62fd5aadf2c0798e63d8f73c85a7407bc51f08d0b4940957d19fbfdb72fa79d01411fc273a516bcd2fde580731e78e795b6bc5b11a2587925b308ca00a4946bc133d587b03bb6bd85b4c6fd4b2e16169f796d9fbf92f7526459bc0cae94e058f9c47e9b565f7213e02bde308c11ff6633ea8ef8f47b59ea9efbf8e09121402cfdf8a4906d9d8ddcc5a93d743a657b860e12f5d0165e69839d393a8ffef887616ab78e2157a89d55e193213df88f7e5908fe3f9a85d063afd1681d0a956cf4735d989ef4f97ea9c5dc02f8dce4c60dfab21121934c13f108fd8a19e048eea2e5ef63d1630991da020236e73348873a3c4e56158535d67d7b7abdbef48a53f08996fe41a24bd9292ccbe69e9f00018f02d6c1bc8139db28ce5f3fcc98b5b252669f314a133fcc42126855c24067a103c967e4e71a324d329516e86ada6e36515fae3d7502fae64785a5536910984accf7aa230d7191828fe3ac6d0fa4cfe065aa8058d821ca01a54a4b961a603eaff21550ce142fdafd17296bff305a8e0eacf517efc4c1fc6e9d78241a1d50aa359c261707401f5aacf17f256746fd76d80d8cbdaae3bc9c4e097d60e2c76252f9176f1cb2c80a514b7f837246ae3135713ccbed72574e321f02385bd3339d6ec106e0e01884735fbe7246574729ff7a62701a39d0f5510b1ed561f16717309e2c52d1afba3bf5e3bb53b7ae5ce0f3c57ef8873e24cc98f96a9c391bc54a26232a1eab5f79d842085fea484be0d9edea649078940fc6c4e03727dcfbafc7e98db7c2d0df9a49bac9a5d81f950c9315ee211a2448b1e15119a8c2f13cd793a670deaf41d79b811e5e8dfce846ce3b557c3a6aa32780ceec9d991a75203ce1d7ff44e722fc70e5e36b0b9623634694d190e64df4566f9088d5f1bae9275180a37906f541acd44bd66455e7c32b2ce41df53ea05e5aec8ff15b116a7733eb64912c8cefac062b4aa24e94a06dd71cef75f6335210339a4d1e69c35f5fae50763a4235d770b67c6b4bca8b09a03454b4c4beaeee04d884a8f211ed9b38ef94bb6365f6e87e2d2ea00caf74a1729b2bf71629258dbc893edc929d8010354bd09ad98244d700867ebf52695c1a6ea238d0e093189d7b44fd6ed1c1b125c64a44bcbeb4f75e4289b5a213d8d1402466148f10d82f9cb134b1fe534ca4a7db567d3fdc9d295e687a5d37172896243daefacc1df96167453f183dcdf888bac7cfe46e3b560c3c4065e40107c8c56779b5edd5978a51aa8753468425afad1dff782586fb7293afb4d83e8ac3d50787d1d1922befd9ca66a37f22d745bdabda8c17943d7d67c2364b82675d2173eaf517e54390347192376f04de4d14a3f4deeb04f17d2e25e948a2df47ca281c81edca5fdeab0549ee2aee5f7b3d68ba67042dba51a45ef95bd4050c19a4039e036cc09f3592323b7282a62810ea3d5ab8f20255638e4a104095a96e52482dde1d03837cf901d04abe0fc573ddcdf1716b957541d5d63ea29af87d93c971ce9033f77c0d74443720241298127f07ad31ad33318b7e442d3c2a004c6b70a6e10ea05c56383670055a96b19c8d47f63081c4cf3f03f921ef48180dc7bf185b452de3d106a7a9d258a0e684d14f2ca8e23ff0a263287dd7624e4c228a229d014ecb88cdb20c0b3b751c8db7f766b98fa36c98f8c3a865389ccd890c3d3f004035d3ba94215b53e9b9b7d1655ecb5154fbbb8d601654c71b8f7859b433dfeac2b81f3a17423298c30d1473dd9f1270d09f1ad66a141bdf81240b3f30d6c3aa52a2bda12b305a9e6e9a9d9aba2ef29b0aff15097ba0ac03c6bfbe2a1f89d272b239d2fa26c91f45d9847d6251c844bc71b2f13e7cb2d3f3344305212fc641df29977d7b0cc9c9f69a94ec909ed1023cbb83bb2b6ce711c9d7a92d09a23fc7b38bb622d320ce5d83956d53cae68a8b480243611fd5a726d210f2493197371b4c995f8d9c327177d3d9b408e59452c52eea1cf752aa1b4a64688750ff290e87f23f80b37f150977b88daf91ebfd563b20f04df27364232f4ce7d89f7af531559dd1b73a90d5a7be748332fe35cf4b557dcd39be8d816305c98f40c5f412ca42cd581cc023071503295ea5e122e0087a641072653d3a9068b89336a0c327b5dd9c33a5a7a1a73ca647ce5bef71e3aff89af00f4d982e42c4971cd65cd3e53d9650bd7dea0a2160e33d373851f69923671f87562db1e62abb9c73fe6dc50430100fe48d33de08db907ff87d322f108e417f48e3ff81a8c71a6e5493f0c196abeaa7405a8628ec0b1da4fb131cb0b0cb50b1f0e56f14d57531ebcda5aee87455dcd375e16165a252a127a35ab158f60b14e83d0acb221174474e117c4e0063281b36fd7a50efceb78f8e9b88ab63973c8e8ea0712ee6b0a188bce5cad9923768c6e101ffed4fc99c5a9f51416e501783794bce537c0ad0d8a1df64cb4b0bfc8f64b0c3fa1c8f93290dd8222f264ac561f6ebaf970d63863093db8cacf103ac02a57bb2dbfb33ef469ba32db0c357ba8e6f6d3fa03d9f644fa2dfe49ce5fbae22b039d0c4c9e1b98a95ae51d3a8c132b18eea4b780b4a207527fecdaf910529790e2ad7a79145f318c37ea987714b6516a0e0affe639ef324bb12a403bc6306d339932106852ab102668909f12eaaef8847f5a6556401c8990fe363ba3e3b39823e03ebc2e096def4ba0a704a07ffb0b9114e86671fdd177545d56ba87be01f38ea3e7fbb86d8ecdb6ae1e2fd0cedd16665d7bab8a6bcd7e0816738c8924ea35eef1a45c2444eb50e241d2a3895c01dc2b1c925621ec3f7f06f6a929a73058732cf12ab5cefae7c47ab7b936cb0df5ec2be4ecdba4cc6abde8d755f722e50594d54366c6316226dfee8218a1d97ee59e72396c9a54f5f561f92837ccd2bb989102b41257a30134722c42511e2d1b54604a07d728e514b45bf5424ef16c7ba8c747ee7070c9c1260249e86a3aed2720da3de1f9c3de4cbd55cd057b4494b990142b3d486569f0bdb9a6c896e9375a012fe6e2aa36f9eb36c769a826065c513e886d8047291608562acd7471cb4b0d85fa1a1c65a1873c6c199902e09de0f0c2fc1c8f6dbb94628b9a7f53d529dd88b6f60b733227f3c2e9f064abe75d3bea298bc0da53140e193c8f4847d7a5478431af310e000b5d71ac4e6faf1c3d8200916f99626ab86c7c015981712c444f36a109c1b0d1d777f0123c396bdf7e26d140879f9bbc81eaa1b7e3b6c29fe0bd6c58ce7dbf5a79a49c7c3f5bbceeb64b0cf5720c92495b6f418fcb1bfe3c5ea1d433c025cfa94a28400ece80229f05deece45aab563788f1ee5755298765315618d1c835f2d7e146f2242f3002b3394b17f75b31f90fb9770d41271fffe0778a1062871b0f274c4f6045b7d795025548e24c3c2383eee6d51583d0225eb550827f8c47670237d7ddb80fa8aaba4f6adbada516ecb796deb5e67de84173ab67b297523cfa277f43f58394d74ba99410f00df5fa8f4d939a7a9ee31059053b0a37eae2adfb2b4fa9542aa2dd8d8e737b890b1c559f6fba3e04bb50f7ff16a3bcad7d1c227481c8eca63df365b6d83bb402412a2fbda9bc8a3506bdc8da578bb03cf3f7b6d50b3746fdb81fcffa2a5f1905979247b0120b7ece9ffd6e712e5068025cd9208e9ee87b37aeb096c1b527e38f0a4760c1508568351004898649595a13d4c9103f9831ec555c9c403c7f7e98266bada70b9cb909536dc212b148b48cb830a669849e8364af7c7f4a4f57bcb33312b1654b2d66ca5d73d2720a28b32f709d5296340abcd40b99618912614021dc2b36c435d782f19903ba599104f52c91fc77e2f8d67b652b733c3afdbcc8301152bb8d6a328ce944b34d4b9fe292cb6af13decdd39748d85b1665cc88f0b976b7663503e324455a1aa456041ff49ce890ef53671f501417a70d4ea0adfb494bd707938b1d23d6d4f31d862b98c02094cb94725a2efd1a05d2ef72274c1a4c79a667fb881282f45502a375807d1df96ad3746c345c01d58f07aee5d0d8d6be278a3bc7282f94744f738f84207ee09671a301409119327fd58474c3de555b7803b645c58abec1a1c9e1d404312cc502bf48f2a2b5656166da5dfad1dcf900eff99ada2b30bcde9f2a63f378b488ba66e8766e2e724e4678f1a6c326294993e820c64e80dec7b93aeb262ee9b0087a2a63aade37cc71dc8c9f3bd22fa5c444e40348947b9ec089ff2726c9a4c3aee34525073d9c68c918ecc498a6b14e09237dbbdb72d6160cc204993199188ab7ddf9e06e7cdca52661a221db152f01a816a156c3e25d1ee08c3c727e859266da647673c0fbd6350312632e0e409141c5dad021732b3d663368a5c3f304f5027afdbeca28d147ae3d0d1736ff2f7b4d68b5d68a1c99cd632fffe22144162dd73b14a196f94c630f44bd5fd82ea9ebf1a33a20bb8345fc1b2ce2d6cf4061016957105f474231b3163d33317c4addd4a7d61e565c386c6ea4d61d4e4fd933e1e4c2008015c62ce2141e449219166c5f930606f3568ded7a437aa5c9c9f1ef5c8bbfdf34266c57517961e67e90b4ea31b1a7f1fd901e844ff1970171c37c5dfd43300d0f670eaf2cc486f6d3f6ee1b6e993f791776501e924e3f36bdc402bfc654d93b1b869004d616c1d902bd2f492b3f9fb9fbbb94dbbf391e567a335c80ae3f50fadfc11e4212eb8697def3a642356d335e658c9e78d27a5dd1a7ae63e2f98f6af1917f3451f810fe7b4000d959d07ef3337476305dd42bd2836732db56339b41049e67796f00ecb44416892e93b7dbd28560789d8cd881331b9152f6b5d583b1c4ceec4ff5a02b1946e7a8bfb3884e83a48a06af3ebac69831893420c05d51c5d0882ad1a5a0caa5acac55febf04baba81270b508d5411a9939405a99a8dde749d789658ce7e9376fa7b4d3db5ceb1e637e2ea6b32e1103b03af5f64b91b5d76aab14583c03ab452fedccfbe4e3af7442006a94139dfe9a3262137e966cff654a5628ee47e90e094b727648829e910e8c25ce2d510e39dd0fbc429ec19f933bac91da59acba73015abf6b6068c26738434fe285599e0d37485be05bc4b06e35178836cca3ae19b934a963f55153002b3e7ac6cf20b6704d202147199f2e3875ced14e2f20d03fb8c75a442470a58dcb1e35b614ad78ee178f0b7950fc0f9913f49f8207474c1db93974a9f9388f79a5d81e641178c5cd394be0adbacb5b5034b426eb3d7f6ecf7d3b06888639c0ec6069b5aa5c39e08d0ca88cdf16c2c973fcf5b182158b39d99ce086bc2af948c31199458fbdc54e9ab754ccabcae3f1e26c2467e241c1f491f446c7ffa3c3861f27ccd07eab1f16411d2a04eb6029f32fdf7c535ccd6234efe2e363f38a349fad5fd47fcf07b5ec20b865d811953e4b4a8ef1de8c93a278945834e8c79141dcaa125b7593b2ae9bc3f32876f721304cf5780939c0cd8825e67c9487cad202ae5455d69efd48a5c8920d1510f98ff1c690a3ecf6e3d70c92129ded5c044bbc431824057a8a8beb247225206a801c3f64aa9d691a479a45cc3147957e35dd8442e2df0a5d5979946ef1fad3a46ad828c17618cef011b93109c5a4fd4bee3347c33a937c0b89f10ac21bf7b3ae243df973750caa403d414c48bbc14e111fc85230769c52fd4b5ae3034d0b4605b617884183ef6e780a8f17c8002f15df5896f378da2ca4c4c2d63d6e5e150cda09fba9a8a26c205f7d88f51bc0abd7ff64c76075aed7e1fd0865a2a35f791c23be9d331276e7376de54bef9f2380501abbece22969bdfd10854fb1b38c44833aef032307b414bd7fddcfb659e0f3d0f562dc04dfb1478863cdd46b76c028deb7f6514ef2139ebc0f7d4531b3c1dd8f9b598c2e82c52cc9ab1434d5466f125a2ffad5eb4f8eb4c5dfd437465e35dcd48bcae8dea69ceddd5bafa13842f379a385ca0a8de2780a573129fd27be1826a437a9bc2b28fcb49395bf426fa156f5d644658d618048f964ba3abad14a8ad351f7d2a4e3773e93325064daca3a604adcb7720bd7eb547b3bd50482a700cc867ff00eee96f1e76c0dc2998344e5014c1fc38a13f253ad9e4390024244fceb891b955043bc86091c21caabb77982186928b7062780d47294996402839f7c40400fd85eb7d5f624003cb71bba9a8a46784d0bd5afeec4858e15ef62473443b7c31c72dea299322f70e53c1aece607671b08cc559ccf34bf2d9ad53120194b69a38cd2323ae0ec51f81e7b072331526c37b5912097d76911b6fb564eb6bd799ea40b11b13ca28551ea3a599282d31a515e53cbad0b25d42ea627ae1927c71ecf98016e57dca8d2484e995489cfb5b9bb3d37adc7ab82cbcce9bb876ccbe4823f3451ea9011d079a45e63ff4615ef436fab4dd20412099e04a7ad89faaaa6fb71f5b90294f64ecaca5ec8954e98e1990b903adac827b01d1aa65c2f7bca8d1a8a0e97fe06d1e73ce72999dd911d0450e49f374fc359c73182b36c5f1bf7f02543668a387f58680770c581e4cef586ec779645b5efe6f959e58288373633729ab96c5795a2d918c8f13a52d8c59fa58268b49d167e785b3bae4fd062b50008a6a34f0a6d83b6027e0c911a933ad3d378b475c74b6f654d67d3895603c6f6c254d2cc42718e12b131170ed770a5f07a39ce11deea24e434669a1f5a082958dcc40e3243c697a1ead71ba719e57274ae8737ae4ff7cf96cecc70f45e0699bb8387974ad89129e63e47e89694cfcc420253a499544cb07b616f3e6a3e48369c741520443718cad2c8a67be1f34d2b22fd9a75257b830d12e8c6c5219ff292664709bfafc7e496e350bcd1be4c0b71db7bd41060430d7b685230265bd3c49872579f34368709e4b6c105c4c513c129d6226060102dfc444743bc82ac9a967765f64362f78654a486e8e0c5e35521ca8b1883e6c92fe1b9952cc66744ca551b0a9c911b8449fd6a3b0e5457c01a7c1a3e92211fdbf61095049a7512a6052d16da5023b8c44e25f3456b7178004071be517118dd2fd828116ce736cf3cfe49b7ea4421fcda94bd9cbe2663e78f4b74f51f5043df16fea95366d69a04a67c4b159bb0082ac4708222b08320c48f6f5539cb0dffcf4cdc0929015f400ed3fcd38679bb90f7afab15796300b34978c3c0cb09a6c573740fd413f0a6e75c93801c64e231bd327683c35fb5e521156e7619b258200246f74d9f8019bf1d968d35a8d7565dbb08624ae32f5bd2068e9a4b29ea77b5c74a82189b2bfe44c5ad724f0e7bc0c1a4562922b2f283121e1b5b41e92f68fef1e39dd24e7c64a3f3971202c0fc57a5a2827ec726b3a0c203e001126b722f6b812042d41d47216c9107b41f36641a53e587aa1465690d1c0b4aa48ac412adb6d7ba0e7a3e0cfcaf4103f04786a520fc3a7524c57af13a25d8612205b3d96d7cbce689f11325e7f9c4a3b7e20084fdc60382d984726f65e4e33b1f39b72ef904747df20fefe7701856ba1a83264bfc1fd0cc01ce5a1bda42765ee654a2d400a389b2d699c009bdc9aac2a370fd1997cdb507b73aa7860ed7c28e668902911379795b726e536a2e82561563751fc545efb74d1f887775be6197b42b5cf1eae9a9f2446caf0b5e80bb1070ccd271b65e9ce60b719ae37de4a4b0a7a0bf6a21696b46c9d1ac3fc5eb59d73fab4dd45f7662be91bb726931cd1185b1d32d74ac782bb602d58c429f15e0f85fc3d5baddd9beafb7b75cb8c4082731561b75490c967ac3f5b59658bcbcc99eb7d53b022a08e129cf40532ec4e5ed653459221201cdb4d2f3a5068f002df08d1d3b8720ce75fe883130875b4e344c4194ce340c3f171ee5df78ea2986f9eaf799304c40918f2cbd38bc18032552e19066fa9c3187cd04fd009439dfb6f31111a34d200c8d1832a0544784268e3011b12a0e28761c79eb9ccbf6609e0e6ca8dc690ab1ae9e511b943ddc049103ed5f46e584b8aedac335aef42918b178c50e607bb10ee37ba68a91a1ff82286e6f440489448d9d7b5d24005a1b55bed424cbf15437cd245c63269dbd5da50bf5bb0c6f35b5b5002c7f88a9b5ef4b0282f0eaa812f78bf4cb0a2334185db8ab9e612c7f82aaedb0329390f921d04278b708ddd4a39529f109de3ad0ed286898ebcecad4e9f9be6a6b28fad4c7a19edf8378e98477472a1e69b7604751cadbca3fd221e09e3f96f95039f71ecb055dce8cbac553f5a3f4982692fca68fe3ee5326a2f5259c23f45efe5856d6bbb2fa250fc4a3e590be81416273f78a11c60f3b19ecdb8233b9010979f9d5293a555aba1e77f4c5791c1ead63d27d6e764078cff3e35fd3fb92c1e0a792c589964dbbfc111c44096178bb04aafaa401b0c273248bbb4b6d46d053d2f42f303d783bbf8be6380a06a80a41a73549122bc794b2ebcdbbe75a67ed3a5e37c5ec82102ba10f2a781121c2bac57a461c26d5b94e66b0c0e488aed37ff976ee750c77a0c759172c4981ad3c651ca41ecf79ac7accb3b05d6bc97585630f4b6a751504a299683e7435a60a7037de1dd0cde79c803a1ad0ac94fe9b67a4bbd686956d631cde0d6ad010ca81a463ea74c30ee9bec617ce21c6b3ec1b6f7aed012e9156f25c264cab0fe031bd0ac7262e57ef7216271ee1bf0aed29d84eb2c0930f2756fb3f18451f591a79e8bdcae9df7f78721669b1a0a8ee5ac99993ad284dc472b85ce75069ffc9eeeae90437e3536fc4500e45be40d14ef2bcbb040daa32c1bfe7a495eaa23a27acdceeba66ecd0fb26cf8484fc623dbc07f93414c0705e1110e5de222822c14866984055199bc8af536a1a6e14ccb4fc89bf06a68b59904d8bbb2afed1ffef85cf55046fd253651d6916ae6722ffc776704e1ae1ca02980142cfd3b7c07b97d5296d2dad42876bbe8102d26247955df98094ebb035380a8d6977ad8bcb4c9dc1974d0182e39986d0b9c985c0c5799bdbfc805d2c92141d0864080b8f1890853a94888fb0996bf6ef6962442ac4bf2879dac52ba6c921815752b439b7b5ee6527f471a12f78d12a4a7f6ea8b60ae274f18afb081854c43a1966874d1bb7702d53a3aebf3d98354ed0b1293840d5a390a2cf04770d0886d1abb6ab1bb13fd350a5f2e84d69854f1cb6c949f96aa525bc26f32f0097cb6056dac05ff9d9efb670b5b0cd6250337de4309e8f5c2e9af826b4a83a83e316fa336b74dcf0681a00ddc14083207f618ff49ae18d6bed72068baac13c9bd4b3b557844d968eea26bee60f8086f615336147e1136e87687aac3943cc73c50ae7a0cf219b13230e0346cfc61aa2579675bf8e16a43f30ebf27c0d824a3620817c5a880bdd217a4d19eca5e55d99ccc2493632ec720072c842d8ede0f41a1de2cfe4d67c046e04dd8303335e2fd5456384d7025f4eff3473c2868b0a169fd945eb4f57bfa7d27b76b375b295bc0c9f6c02c99748f3155d64e9e946d14fcf1e3a2a9963e037b3856e8d70b380e47c0f3e3326eeb12ddcc22a92eeee4dcfdb36f03a284e340db47911bfb48ec6a0ebecdb819adfcf4cd6b9bb8a8894db7f4a510f88713266e8eb66ac889ab2059f813ecbc67a69f7cb7322aeb8fb5fd08dfb972e299451b4729623568fbc2e2877afe702b194b08e53d22b8b4c646aedf8b4abc695818258c6e190bf8b4bf49fdc0cc8eea6a040128bb57137cab84349851158d2f0160d09c1cf3e02dbd201dcd75ea602d4e177e1128b989d4cd1531633688b86c4e13775ac45c83343eaae175e21c7607a2b93577ed6c05c72d10cb3f30b858a9b8f547bc6ec7affb0604822472822bcef721011892d9340f05f41bf16193921802fc1fb410ea475f57f13e", 0x2000, &(0x7f0000003800)={&(0x7f0000000480)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x9, 0x1, 0x1, 0x0, 0x50000000, 0x0, 0x0, 0x0, 0x1, 0x1}}, &(0x7f0000000500)={0x18, 0xffffffffffffffda, 0x4, {0xf9a7}}, &(0x7f0000000540)={0x18, 0x0, 0xbe, {0x6}}, &(0x7f0000000580)={0x18, 0xffffffffffffffda, 0xfffffffffffffffc, {0x5}}, &(0x7f00000005c0)={0x18, 0x24, 0x9, {0x2}}, &(0x7f0000000640)={0x28, 0x9cc5ea4f691a3898, 0x7, {{0x9, 0x8, 0x1}}}, &(0x7f0000000680)={0x60, 0xfffffffffffffffe, 0x7, {{0xc0, 0x91ac087, 0x8, 0x1, 0x5, 0x8, 0x8f0a}}}, &(0x7f0000000700)={0x18, 0x0, 0xb, {0xa03}}, &(0x7f0000000740)={0x1d, 0x0, 0x0, {'/dev/rnullb0\x00'}}, &(0x7f0000000780)={0x20, 0x0, 0x3, {0x0, 0x15}}, &(0x7f00000008c0)={0x78, 0x0, 0xcd, {0x6, 0x0, 0x0, {0x5, 0x9, 0x6, 0x4, 0x6, 0x100000000, 0x4, 0x6, 0x3, 0x2000, 0x8000, 0x0, 0x0, 0x4, 0x911}}}, &(0x7f0000000ac0)={0x90, 0x0, 0x1, {0x0, 0x0, 0x7fffffffffffffff, 0xfff, 0xdd, 0x2, {0x6, 0x80000001, 0x4, 0x5, 0x10001, 0x2, 0x6, 0x10001, 0x3, 0x8000, 0x8, 0x0, 0x0, 0x1fa5, 0x200}}}, &(0x7f0000000b80)={0xa0, 0x0, 0x100, [{0x3, 0x2, 0x1, 0x9, '\x00'}, {0x6, 0x7, 0xd, 0x3, '/dev/rnullb0\x00'}, {0x2, 0x1, 0xc, 0x3, '/dev/audio1\x00'}, {0x3, 0x422ba0aa, 0x1, 0x725f, '\x00'}]}, &(0x7f0000003100)={0x3d0, 0xffffffffffffffda, 0x10, [{{0x4, 0x2, 0x1, 0x0, 0x2, 0x7f, {0x0, 0x401, 0xffff, 0xbb7, 0x3, 0x5, 0x5, 0x9b, 0x1, 0xf000, 0xfb, 0x0, 0x0, 0x7, 0x8}}, {0x3, 0x9, 0x0, 0x80}}, {{0x4, 0x1, 0x9, 0x3, 0x400, 0x0, {0x5, 0x0, 0x5, 0xd891, 0x9, 0x7, 0x903, 0x100, 0x2, 0x6000, 0x800000, 0xee00, r5, 0x0, 0x9}}, {0x0, 0x7, 0x1, 0x2, ','}}, {{0x3, 0x1, 0xf, 0x3f, 0x100, 0xfff, {0x2, 0x7, 0x8, 0x6, 0x6, 0x840, 0x7, 0x8000, 0x2, 0x1000, 0x9, r6, r7, 0x1, 0x5}}, {0x1, 0x6, 0x7, 0x10000, '\fC-#{-8'}}, {{0x6, 0x2, 0x7, 0xfffffffffffffff8, 0x101, 0x128c, {0x3, 0x9, 0x8, 0xb0e, 0xf7, 0x9, 0x4, 0x6, 0x8000, 0x8000, 0x1, r8, r11, 0x597a, 0x1}}, {0x4, 0x2, 0xc, 0x0, '/dev/audio1\x00'}}, {{0x2, 0x1, 0x8, 0xffffffffffffffda, 0x5, 0x7fffffff, {0x0, 0x5, 0x891c, 0x6, 0x800, 0x6, 0x0, 0xed, 0xb, 0x2000, 0x401, r12, r13, 0x587c, 0x1}}, {0x4, 0x200, 0x2, 0xfff, '*}'}}, {{0x4, 0x3, 0x0, 0xfcf, 0x2, 0x2, {0x2, 0xa85, 0x0, 0xfff, 0x4, 0xffffffff, 0x9, 0xdf0, 0x5, 0xa000, 0x0, r14, 0xee00, 0x5, 0xfffffff6}}, {0x5, 0x6, 0x5, 0x84, '}&}*&'}}]}, &(0x7f00000035c0)={0xa0, 0xfffffffffffffff5, 0x8, {{0x0, 0x1, 0x611, 0xd, 0x7fff, 0x6, {0x0, 0x2, 0x0, 0x3, 0x3, 0x0, 0x9, 0x6, 0x4, 0x2000, 0x2, r15, r16, 0x7, 0x6}}, {0x0, 0x1}}}, &(0x7f0000003680)={0x20, 0x0, 0x2, {0x2, 0x0, 0x1}}, &(0x7f00000036c0)={0x130, 0x0, 0xc, {0x5, 0x0, 0x0, '\x00', {0x800, 0xffff, 0x101, 0x6, 0xee00, 0xee01, 0xa000, '\x00', 0x0, 0xa, 0x8, 0x7, {0x5, 0x1ff}, {0x7, 0x5}, {0x1000000000000000, 0x40}, {0x1000, 0x5}, 0x81, 0x2}}}}) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000f, 0x40a2012, r1, 0x0) read$dsp(r1, 0x0, 0x0) syz_usb_disconnect(r0) 4.423599292s ago: executing program 3 (id=3922): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xef2c2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x10010, r0, 0x45809000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x20000, 0xf3) io_setup(0x4, &(0x7f0000000040)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00006a2000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00004a6000/0x2000)=nil) 3.19363207s ago: executing program 5 (id=3926): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) sendfile(0xffffffffffffffff, r0, 0x0, 0xf8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r2) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000240)={0x0, 0x1, r2}) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000380)="8b863749d92c", 0x6}, {&(0x7f00000003c0)="b7fa79fd4673d083380dd24eb4b2b01a7d2dcf9395138a3d8474253b13166505f5dde18dd6b97b67d133fcfdc0", 0x2d}], 0x2) syz_usb_ep_write(r3, 0x8d, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r4, 0x10000, {0x0, 0xa1ffffff, 0x0, 0x2eed, 0x7fff, 0x0, 0x0, 0x0, 0xc, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a6a4274f040000000001000010e200"}}) writev(r5, &(0x7f0000000300)=[{&(0x7f00000000c0)='\b', 0x7e00}], 0x1) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x1) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91", 0x3) write$dsp(0xffffffffffffffff, &(0x7f0000000140)="20795899ff6b620c2ddcc324d361b62a5f22a23c2cfc0d2813668a977e4be4f9c46f2ca2752bdcf4a6e1576b00ca1d3dc3517c5eecdf8947d0127b01000000000000004c73", 0x45) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r6) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f00007c7000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0) 3.052089371s ago: executing program 4 (id=3927): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r1 = syz_open_dev$radio(&(0x7f0000002b40), 0x3, 0x2) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000000)={0x98f907, 0x5, @name="03489dc364b8b035b088af7cd259cf32928518e18ff9ffffff08581448a7fc5e"}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') read$dsp(r2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0xfffffffffffffd78) socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000200)="cf", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0xfa82, @loopback, 0xffffffff}, 0x1c) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) 2.961563862s ago: executing program 4 (id=3928): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="00fbff008600000000003271a5bf00", 0x20) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000100)) socket$inet(0x2, 0x6, 0x3) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805513, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r4 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001040)=""/4095, 0xfff}, {&(0x7f0000003240)=""/4132, 0x1024}, {&(0x7f0000000340)=""/198, 0xc6}, {&(0x7f0000000540)=""/228, 0xe4}], 0x4}, 0x0) sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x32, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x20020400}, 0x40004) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) 2.014580041s ago: executing program 4 (id=3929): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x800, 0x0) 1.818695974s ago: executing program 4 (id=3930): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xfffffff9}}, './file0\x00'}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200401, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f00000000c0)) sendmsg(r3, &(0x7f0000000580)={&(0x7f0000000100)=@isdn={0x22, 0x2, 0x2, 0xfc, 0x10}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="6f496af0c65d99579fcab4c8140bc0e5bd89e447ff49a0690d68cbc99329e4bc33b9fef1dbdfdccdf174376d66c424f86f87716929cfb65d5575029af7d30db255f8da0ad34fdf698a6249d2736d2d990916b1458c49c863e0324f6079e99528f65c19c9d9e4c3d64ce29165dad4e3e9f4a503236b696ab11cb52dd886b54888e613b8b9ae5341bc59c34a3c7fbb2d19fb901fc53aa691e7c391aadc9f60f87a7e88fa80207d66d15fa1fa60e35b0e4135499a1e0dd173dbb30db525d75ef8d571ba38f535d1c74608760f52ff82ec615ac6", 0xd2}], 0x1, &(0x7f00000002c0)=[{0xa8, 0x101, 0x7, "fab4ff647154d551c225c946030021789e86323a24e21b60deebc5c74fc0397005c87842373e61aa1de07cd571523b4dcb7d6762d075b3dd729578c7647fb36ee49509330298143ad85ed4daf1488ddea1915208dda93924799be5b726fde568a8573763a091d5cffefc4486380885a2c0b5880703fbcd89cde6a2ed6850aa7336dde30c63dbbe68d56c44ae9e44bb2b3ca0"}, {0xd8, 0x111, 0x4, "c480e18d291ffcd71327192fda51a695e4a479be23369b61966aef0887ec416cb051816295ab4150769c25dabaf4a6eaa6212233c60c73d036fae1c1e546706ceb4d68e0ee1b2c38cf6dc77485882d65a0371c486fc94703574dac2965caaf4a39acbc0723c19bc480d1ea743669fe15e4c2c4ee70baed586ce9cb039fc12c6c3da853de007754a9a14095bc8322c1b472ef0e670da30b33583d1ebe26ae9c91fb72144748f41504c7e5dcdee5106580930b7df39d097afab826fcadd0ee160f353d54"}, {0x110, 0x110, 0x9, "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"}], 0x290}, 0x400c1) close(r1) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000640)={r4, 0xa}, 0x8) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000006c0)={&(0x7f0000000680)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000700)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000780)={&(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000840)={r5, r6, r7, 0x0, 0x0, 0x2, &(0x7f0000000800)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000880)={0x2, r6, 0x0, 0x6, 0x6, 0x9, 0x80000000, 0x0, 0x5}) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000008c0), &(0x7f0000000900), 0x2, 0x3) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000940)={0x9, 0x1, 0x76, 0xd, 0x7, "383cd31dd4ea23d9"}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r3) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000009c0), r0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x14c, 0xa, 0x6, 0x802, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @random="a035abebc0ce"}, @IPSET_ATTR_IFACE={0x14, 0x17, 'syzkaller1\x00'}, @IPSET_ATTR_SKBMARK={0xc}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x40}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x5}, @IPSET_ATTR_IFACE={0x14, 0x17, 'erspan0\x00'}, @IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9000000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x9}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_batadv\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xecea}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x11}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}}]}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xb}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x80}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000c40)="39637ea15277b769a31c9fb907899acf2ea464e28751f01ea64414b73dd340bc74c0f4ed77fcfd72193c5840e6e9f30274b43ce03a0eda8a8df76a40fe697e3ee555324ae68e5764ac4f3ea0cce7050b7b563ef2b06e6cefc51548347e1e333044c832a8b8daaac06fabce73c5e300121b6cce397bd52a3c0075735f11d49e2d7b3e9ca3", 0x84) recvfrom(r3, &(0x7f0000000d00)=""/4096, 0x1000, 0x0, &(0x7f0000001d00)=@l2tp6={0xa, 0x0, 0x6, @mcast1, 0x3, 0x2}, 0x80) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001d80), 0x410c00, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r12 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001dc0), 0x1, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000001e00)=0x2a) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000001e80)={&(0x7f0000001e40), 0x0, r8, r9, 0x8, 0x7, 0x10001, 0x81, {0xaba, 0x8, 0x8, 0x2d5, 0x0, 0x7, 0xff, 0x7, 0xdf5, 0x101, 0x2, 0x66e4d385, 0x2, 0x8, "b4a82eb467abda174b76dad5764742057d141bae3eb21a38e8198c990c0b3fdb"}}) r13 = accept4(r12, &(0x7f0000001f00)=@ax25={{0x3, @bcast}, [@rose, @netrom, @null, @default, @remote, @default, @bcast, @rose]}, &(0x7f0000001f80)=0x80, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r13, 0x8983, &(0x7f0000001fc0)={0x7, 'batadv_slave_1\x00', {0x3}, 0x9}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000020c0)={&(0x7f0000002000), 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x1c, r10, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x280000a1}, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) 1.702526114s ago: executing program 4 (id=3931): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffa888}}}}}}}, 0xfdef) write$tun(r0, &(0x7f0000000000)={@void, @val={0x2, 0x80, 0x400, 0xbe, 0x6, 0x3}, @arp=@generic={0x100, 0xf6, 0x6, 0x6, 0x2, @local, "c22bf9ce64b5", @local, 'l'}}, 0x25) 1.507148931s ago: executing program 0 (id=3932): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES64, @ANYRES64, @ANYBLOB="e7341c160272730949c14a81879a02240b44830369f7e9b9e7bacdcb5640673568e2c243cd8aa3e744753b589c2d618e40000f5b65fbbcc2d3280acac73028ae824f3f8799c4cf7889597c4806cbae5aaa25bc7e1f2afcae8aab6408494fa5acb52092f1e7145c", @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="5ad2b25ac7ee7cf67e4ed28ae2b11065d9d8"], 0x2) 1.371780941s ago: executing program 4 (id=3933): writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="720e08733a245d4d89a5c41888a6cdeb07316aa2c9c12e47f60e788da5638bf22207c42671fab2b6f17b7e187cb6aa02b05ad6d1fab5bd3589e6091fab3c3d7c86f8e3f2e618ff21", 0x48}], 0x1) r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) fanotify_init(0x40, 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000240)='./file1\x00') chdir(&(0x7f00000001c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000400)=""/94, 0x5e}, {&(0x7f0000000600)=""/143, 0x8f}, {&(0x7f00000006c0)=""/147, 0x93}], 0x3, &(0x7f0000000780)=""/146, 0x92}, 0x2040) r8 = socket(0x10, 0x3, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8000000, 0x9, 0x800000, 0x0, 0x7ffffffe}, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001a0001002abd7000000000000a"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) 1.362674414s ago: executing program 0 (id=3934): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) close(0x3) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x12c) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) pipe(&(0x7f0000000300)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0xa, 0x300) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) close(0x3) (async) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) (async) creat(&(0x7f0000001380)='./file0\x00', 0x12c) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) (async) 1.096582062s ago: executing program 5 (id=3935): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$packet(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be10a42f01fe8000000000000000000000000000aaff0200000000000000000022eb000001"], 0x10da) 664.049766ms ago: executing program 0 (id=3936): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) close(r0) getpeername$ax25(r0, 0x0, 0x0) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0) 506.804745ms ago: executing program 0 (id=3937): creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) add_key(&(0x7f0000000200)='logon\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="ab61c4", 0x3, 0xfffffffffffffffb) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r1], 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x80ff, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) getdents(r1, &(0x7f00000002c0)=""/155, 0x9b) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b, 0x200000a00000}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r6, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003fc0)=ANY=[], 0x1060}, 0x1, 0x0, 0x0, 0x4805}, 0x20000000) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103001) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x6, 0xb0, @scatter={0x0, 0x40000000, 0x0}, &(0x7f0000000280)="0ac5264913cd", 0x0, 0x3, 0x10000, 0x22, 0x0}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x12, r6, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 330.083259ms ago: executing program 5 (id=3938): r0 = socket$inet(0x2, 0x6, 0x3) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x20400}, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_TSC(0x1a, 0x1) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000140)={0x5}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x0, 0x80000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) r3 = accept(r0, &(0x7f0000000080)=@generic, &(0x7f0000000100)=0x80) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000180), &(0x7f00000001c0)={'L+', 0x80}, 0x16, 0x3) 0s ago: executing program 5 (id=3939): openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYBLOB="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"], 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000080)={&(0x7f0000000040)=[{0xa75d, 0x3000, 0x3, &(0x7f00000000c0)="515b8e"}], 0x1}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="1800000014006b05c84e21000ab16d6e230675f811000000440002", 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r6, 0xc018480d, &(0x7f00000011c0)={0x3, 0x100, 0x300, 0x8000005, 0x590f, 0x9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) kernel console output (not intermixed with test programs): rb failed: -71 [ 673.233275][ T10] input input150: Device does not respond to id packet N [ 673.253906][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 673.279153][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 673.319260][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 673.337506][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 673.391887][ T10] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input150 [ 673.507164][ T10] usb 5-1: USB disconnect, device number 58 [ 674.299252][ T10] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 674.417026][T17171] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3334'. [ 674.442993][T14701] Bluetooth: hci2: Malformed LE Event: 0x1b [ 674.469118][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 674.485023][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.507471][ T10] usb 5-1: config 0 has no interfaces? [ 674.519954][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 674.537873][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.566600][T17174] netlink: 'syz.3.3336': attribute type 15 has an invalid length. [ 674.574636][ T10] usb 5-1: config 0 descriptor?? [ 674.635210][T17174] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3336'. [ 674.697000][T17179] /dev/rnullb0: Can't open blockdev [ 674.734729][T17181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.759553][T17181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.790786][T17181] /dev/rnullb0: Can't open blockdev [ 674.811626][T17165] loop6: detected capacity change from 0 to 63 [ 674.819852][T17165] ldm_validate_partition_table(): Disk read failed. [ 674.826851][T17165] Dev loop6: unable to read RDB block 0 [ 674.848439][T17165] loop6: unable to read partition table [ 674.854909][T17165] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 674.892884][T17165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.905602][T17165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.240689][T13127] usb 5-1: USB disconnect, device number 59 [ 675.947718][T14701] Bluetooth: hci1: Malformed LE Event: 0x1b [ 676.167441][T17120] Set syz1 is full, maxelem 65536 reached [ 676.173600][T17212] /dev/rnullb0: Can't open blockdev [ 676.273925][T17215] netlink: 'syz.3.3348': attribute type 29 has an invalid length. [ 676.366026][T17225] sd 0:0:1:0: device reset [ 677.057612][T14701] Bluetooth: hci2: unexpected cc 0x2039 length: 9 > 1 [ 677.065586][T14701] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 677.283678][T17245] /dev/rnullb0: Can't open blockdev [ 677.328758][T14701] Bluetooth: hci1: Malformed LE Event: 0x1b [ 677.739517][ T5838] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 677.873309][T17272] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3363'. [ 677.904598][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 677.927058][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 677.938621][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 677.956591][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 677.973955][ T5838] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 677.983347][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.990502][T17273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.001086][T17278] /dev/rnullb0: Can't open blockdev [ 678.008490][ T5838] usb 5-1: config 0 descriptor?? [ 678.051585][T17273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.243762][T17254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.267740][T17284] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3366'. [ 678.269636][T17254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.409180][ T5889] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 678.514169][ T5838] plantronics 0003:047F:FFFF.002C: ignoring exceeding usage max [ 678.541728][ T5838] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 678.549547][ T5889] usb 1-1: device descriptor read/64, error -71 [ 678.604639][T14701] Bluetooth: hci0: Malformed LE Event: 0x1b [ 678.836011][ T5889] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 678.999248][ T5889] usb 1-1: device descriptor read/64, error -71 [ 679.121035][ T5889] usb usb1-port1: attempt power cycle [ 679.293775][T17311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3372'. [ 679.340787][T17312] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3372'. [ 679.462643][ T5889] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 679.492039][ T5889] usb 1-1: device descriptor read/8, error -71 [ 679.528678][T17314] /dev/rnullb0: Can't open blockdev [ 679.729082][ T5889] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 679.760280][ T5889] usb 1-1: device descriptor read/8, error -71 [ 679.871961][ T5889] usb usb1-port1: unable to enumerate USB device [ 679.881818][T17326] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 679.888927][T17326] /dev/rnullb0: Can't open blockdev [ 679.995058][T14701] Bluetooth: hci0: Malformed LE Event: 0x1b [ 680.170439][T17334] /dev/rnullb0: Can't open blockdev [ 680.529764][T17345] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 680.538569][T17345] overlayfs: missing 'lowerdir' [ 680.553034][T17345] netlink: 'syz.4.3384': attribute type 4 has an invalid length. [ 680.561848][T17345] 8021q: VLANs not supported on sit0 [ 680.623417][T17347] /dev/rnullb0: Can't open blockdev [ 680.630998][ T10] usb 5-1: USB disconnect, device number 60 [ 680.707003][T14701] Bluetooth: hci3: Malformed LE Event: 0x1b [ 680.760485][ T5889] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 680.960726][ T5889] usb 6-1: Using ep0 maxpacket: 16 [ 680.968370][T17353] /dev/rnullb0: Can't open blockdev [ 680.970415][ T5889] usb 6-1: unable to get BOS descriptor or descriptor too short [ 680.989643][ T5889] usb 6-1: config 1 interface 0 has no altsetting 0 [ 681.008616][ T5889] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 681.028095][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.047652][ T5889] usb 6-1: Product: syz [ 681.053775][ T5889] usb 6-1: Manufacturer: 綖䒨ꔻ쭱證ʬꭷឳꇢ쌔ဿí䆻㉒ᘛᤗ繂耓Lj䔵ി媌譸粮ﲣá•î„‹ç¸›Î¢ïµ¶îµƒá†ƒæ©æ›§è”ƒç­±î¼‚ê·â§„埗삔褺⧾å•ê³±æ½šë¢ï°‹í‹•æ­¿ï§žê‡»è±Žë›²í˜¢â¾”ä´å¹¤ãˆƒï£¨åž½â´•é°¥á˜ºê±©ì¶ƒåœ™î¶€äš¦ä¶’⩲宙ꦬ﯀튭䥯៖ê§î§‘标괌際æ­æ€éŸ¥ë™—ꌲല혪魎嵎 [ 681.093983][ T5889] usb 6-1: SerialNumber: syz [ 681.128716][T14701] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 681.138816][T14701] Bluetooth: hci2: Injecting HCI hardware error event [ 681.148490][ T5831] Bluetooth: hci2: hardware error 0x00 [ 681.193680][T17362] /dev/rnullb0: Can't open blockdev [ 681.340186][ T5838] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 681.489512][ T5838] usb 5-1: Using ep0 maxpacket: 16 [ 681.496769][ T5838] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 681.505331][ T5838] usb 5-1: config 0 has no interface number 0 [ 681.511542][ T5838] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 681.521577][ T5838] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 681.535696][ T5838] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 681.544867][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.552998][ T8797] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 681.563173][ T5838] usb 5-1: Product: syz [ 681.566760][ T5889] usbhid 6-1:1.0: can't add hid device: -71 [ 681.567455][ T5838] usb 5-1: Manufacturer: syz [ 681.579224][ T5889] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 681.581796][ T5838] usb 5-1: SerialNumber: syz [ 681.595017][ T5889] usb 6-1: USB disconnect, device number 13 [ 681.616336][ T5838] usb 5-1: config 0 descriptor?? [ 681.626576][T17360] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 681.634386][T17360] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 681.709069][ T8797] usb 1-1: device descriptor read/64, error -71 [ 681.769370][T14701] Bluetooth: hci1: Malformed LE Event: 0x1b [ 681.837736][T17376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.845757][T17360] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 681.847293][T17376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.866223][T17360] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 681.949053][ T8797] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 682.068096][T17376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.080369][T17376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.090896][ T8797] usb 1-1: device descriptor read/64, error -71 [ 682.136340][T17378] /dev/rnullb0: Can't open blockdev [ 682.197543][T17380] /dev/rnullb0: Can't open blockdev [ 682.222014][ T8797] usb usb1-port1: attempt power cycle [ 682.281020][ T5838] asix 5-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 682.293665][ T5838] asix 5-1:0.251: probe with driver asix failed with error -524 [ 682.559042][ T8797] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 682.592081][ T8797] usb 1-1: device descriptor read/8, error -71 [ 682.657528][T17391] /dev/rnullb0: Can't open blockdev [ 682.696276][ T5919] usb 5-1: USB disconnect, device number 61 [ 682.815162][T17396] ntfs3(loop5): try to read out of volume at offset 0x0 [ 682.839086][ T8797] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 682.880482][ T8797] usb 1-1: device descriptor read/8, error -71 [ 682.886788][T14701] Bluetooth: hci1: Malformed LE Event: 0x1b [ 683.002528][ T30] audit: type=1326 audit(1751440756.658:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17402 comm="syz.3.3406" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f720b18e929 code=0x0 [ 683.009406][ T8797] usb usb1-port1: unable to enumerate USB device [ 683.148661][T17409] /dev/rnullb0: Can't open blockdev [ 683.199352][ T5831] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 683.449183][ T8797] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 683.609079][ T8797] usb 5-1: Using ep0 maxpacket: 8 [ 683.615862][ T8797] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 683.629435][ T8797] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 683.639841][ T8797] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 683.650416][ T8797] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 683.663828][ T8797] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 683.677336][ T8797] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 683.690974][ T8797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.906236][ T8797] usb 5-1: usb_control_msg returned -32 [ 683.915572][ T8797] usbtmc 5-1:16.0: can't read capabilities [ 684.284269][T17427] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 684.306822][ T10] usb 5-1: USB disconnect, device number 62 [ 684.312955][ T5831] Bluetooth: hci1: Malformed LE Event: 0x1b [ 684.445879][T17431] ntfs3(loop0): try to read out of volume at offset 0x0 [ 684.466317][T17435] netlink: 'syz.5.3416': attribute type 30 has an invalid length. [ 684.513614][T17434] netlink: 'syz.5.3416': attribute type 30 has an invalid length. [ 684.709686][ T5919] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 684.718197][T17444] /dev/rnullb0: Can't open blockdev [ 684.769196][T13127] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 684.876145][ T5919] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 684.898145][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 684.909310][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 684.926429][ T5919] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 684.937017][T17447] /dev/rnullb0: Can't open blockdev [ 684.952434][T13127] usb 1-1: Using ep0 maxpacket: 16 [ 684.960277][ T5919] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 684.977506][T13127] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 684.986817][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.995394][T13127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.010497][ T5919] usb 6-1: config 0 descriptor?? [ 685.020886][T13127] usb 1-1: config 0 descriptor?? [ 685.042288][T13127] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 685.402961][ T5831] Bluetooth: hci1: Malformed LE Event: 0x1b [ 685.433250][ T5919] plantronics 0003:047F:FFFF.002D: ignoring exceeding usage max [ 685.452060][ T5919] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 685.560127][ T8797] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 685.604122][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.610647][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.680610][T17468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.696322][T17468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.721440][ T8797] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 685.729889][ T8797] usb 5-1: config 8 has no interface number 0 [ 685.736032][ T8797] usb 5-1: config 8 interface 177 has no altsetting 0 [ 685.743462][ T8797] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 685.755860][ T8797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.986233][ T8797] usb 5-1: string descriptor 0 read error: -71 [ 686.002438][ T8797] ir_toy 5-1:8.177: required endpoints not found [ 686.014767][ T8797] usb 5-1: USB disconnect, device number 63 [ 686.568616][T17471] /dev/rnullb0: Can't open blockdev [ 686.644307][T17473] /dev/rnullb0: Can't open blockdev [ 686.720899][T17475] /dev/rnullb0: Can't open blockdev [ 686.817406][T11752] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 687.049040][ T10] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 687.071637][T13127] gspca_sonixj: reg_r err -71 [ 687.076648][T13127] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 687.087175][T13127] usb 1-1: USB disconnect, device number 60 [ 687.209548][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 687.229650][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.246326][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 687.256544][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.279914][ T10] usb 5-1: config 0 descriptor?? [ 687.344808][ T5831] Bluetooth: hci1: Malformed LE Event: 0x1b [ 687.436743][ T5919] usb 6-1: USB disconnect, device number 14 [ 687.500955][ T10] arvo 0003:1E7D:30D4.002E: unknown main item tag 0x0 [ 687.507900][ T10] arvo 0003:1E7D:30D4.002E: unknown main item tag 0x0 [ 687.509740][T17487] /dev/rnullb0: Can't open blockdev [ 687.535432][ T10] arvo 0003:1E7D:30D4.002E: unknown main item tag 0x0 [ 687.549099][ T10] arvo 0003:1E7D:30D4.002E: unknown main item tag 0x0 [ 687.556085][ T10] arvo 0003:1E7D:30D4.002E: unknown main item tag 0x0 [ 687.595393][ T10] arvo 0003:1E7D:30D4.002E: hidraw0: USB HID v0.05 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 687.693471][ T10] arvo 0003:1E7D:30D4.002E: couldn't init struct arvo_device [ 687.726437][ T10] arvo 0003:1E7D:30D4.002E: couldn't install keyboard [ 687.763022][ T10] arvo 0003:1E7D:30D4.002E: probe with driver arvo failed with error -71 [ 687.798181][ T10] usb 5-1: USB disconnect, device number 64 [ 687.807752][T17496] /dev/rnullb0: Can't open blockdev [ 687.863082][T17496] /dev/rnullb0: Can't open blockdev [ 688.054479][T17504] netlink: 'syz.0.3440': attribute type 1 has an invalid length. [ 688.073017][T17497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.083877][T17497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.097290][T17504] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3440'. [ 688.115433][T17505] netlink: 'syz.0.3440': attribute type 1 has an invalid length. [ 688.123643][T17505] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3440'. [ 688.419284][ T5838] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 688.427201][T17513] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3442'. [ 688.469082][T17513] /dev/rnullb0: Can't open blockdev [ 688.569070][ T5838] usb 1-1: device descriptor read/64, error -71 [ 688.598187][T17515] /dev/rnullb0: Can't open blockdev [ 688.660426][T17520] rtc_cmos 00:00: Alarms can be up to one day in the future [ 688.685796][ T5831] Bluetooth: hci0: Malformed LE Event: 0x1b [ 688.747021][T17524] netlink: 'syz.4.3446': attribute type 1 has an invalid length. [ 688.779823][T17524] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 688.791694][T17524] /dev/rnullb0: Can't open blockdev [ 688.819496][ T5838] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 688.941695][T17529] /dev/rnullb0: Can't open blockdev [ 688.990253][ T5838] usb 1-1: device descriptor read/64, error -71 [ 689.109533][ T5838] usb usb1-port1: attempt power cycle [ 689.243904][T17542] /dev/rnullb0: Can't open blockdev [ 689.459296][ T5838] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 689.481386][ T5838] usb 1-1: device descriptor read/8, error -71 [ 689.553265][T17551] /dev/rnullb0: Can't open blockdev [ 689.563119][ T5831] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 689.569238][ T8797] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 689.570124][ T5831] Bluetooth: Wrong link type (-22) [ 689.584582][ T5831] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 689.591493][ T5831] Bluetooth: Wrong link type (-22) [ 689.597712][ T5831] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 689.604469][ T5831] Bluetooth: Wrong link type (-22) [ 689.610117][ T5831] Bluetooth: hci0: link tx timeout [ 689.615729][ T5831] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 689.729140][ T5838] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 689.736861][ T8797] usb 5-1: Using ep0 maxpacket: 8 [ 689.752056][ T8797] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.763071][ T8797] usb 5-1: config 0 has no interfaces? [ 689.768699][ T8797] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 689.778026][ T8797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.793202][ T5838] usb 1-1: device descriptor read/8, error -71 [ 689.803593][ T8797] usb 5-1: config 0 descriptor?? [ 689.909313][ T5838] usb usb1-port1: unable to enumerate USB device [ 690.095122][T17566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.171879][T17566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.360417][T17576] /dev/rnullb0: Can't open blockdev [ 690.432800][T17575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.476525][T17575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.661370][ T5842] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 690.765011][T17544] loop6: detected capacity change from 0 to 63 [ 690.775514][T15952] buffer_io_error: 45 callbacks suppressed [ 690.775533][T15952] Buffer I/O error on dev loop6, logical block 0, async page read [ 690.799355][ T5842] usb 6-1: device descriptor read/64, error -71 [ 690.811244][T15952] Buffer I/O error on dev loop6, logical block 0, async page read [ 690.829260][T15952] Buffer I/O error on dev loop6, logical block 0, async page read [ 690.837451][T15952] Buffer I/O error on dev loop6, logical block 0, async page read [ 690.845902][T15952] Buffer I/O error on dev loop6, logical block 0, async page read [ 690.855900][T15952] Buffer I/O error on dev loop6, logical block 0, async page read [ 690.864232][T15952] Buffer I/O error on dev loop6, logical block 0, async page read [ 690.875947][T15952] Buffer I/O error on dev loop6, logical block 0, async page read [ 690.887263][T15952] ldm_validate_partition_table(): Disk read failed. [ 690.895053][T15952] Buffer I/O error on dev loop6, logical block 0, async page read [ 690.895670][T17587] /dev/rnullb0: Can't open blockdev [ 690.904083][T15952] Buffer I/O error on dev loop6, logical block 0, async page read [ 690.923396][T15952] Dev loop6: unable to read RDB block 0 [ 690.929533][T15952] loop6: unable to read partition table [ 690.942928][T17544] ldm_validate_partition_table(): Disk read failed. [ 690.949965][T17544] Dev loop6: unable to read RDB block 0 [ 690.956306][T17544] loop6: unable to read partition table [ 690.976498][T17544] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 691.059047][ T5842] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 691.069369][ T5204] ldm_validate_partition_table(): Disk read failed. [ 691.076420][ T5204] Dev loop6: unable to read RDB block 0 [ 691.091910][ T5204] loop6: unable to read partition table [ 691.102585][ T5838] usb 5-1: USB disconnect, device number 65 [ 691.160273][T17591] netlink: 'syz.3.3465': attribute type 10 has an invalid length. [ 691.195267][T17593] cgroup: Unknown subsys name 'cpuset' [ 691.209039][ T5842] usb 6-1: device descriptor read/64, error -71 [ 691.319465][ T5842] usb usb6-port1: attempt power cycle [ 691.625395][T17604] syz.0.3469(17604): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 691.651443][T17604] /dev/rnullb0: Can't open blockdev [ 691.669136][ T5842] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 691.679312][T15014] Bluetooth: hci0: command 0x0406 tx timeout [ 691.719809][ T5842] usb 6-1: device descriptor read/8, error -71 [ 691.959045][ T5842] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 691.979175][T13127] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 691.991028][ T5842] usb 6-1: device descriptor read/8, error -71 [ 692.115015][ T5842] usb usb6-port1: unable to enumerate USB device [ 692.151309][T13127] usb 5-1: unable to get BOS descriptor or descriptor too short [ 692.159062][T14701] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 692.159133][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 692.186367][T13127] usb 5-1: not running at top speed; connect to a high speed hub [ 692.203702][T13127] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 692.215897][T13127] usb 5-1: config 0 has no interface number 0 [ 692.224384][T13127] usb 5-1: config 0 interface 122 has no altsetting 0 [ 692.235820][T13127] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=9a.f6 [ 692.252590][T13127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.261668][T13127] usb 5-1: Product: syz [ 692.265934][T13127] usb 5-1: Manufacturer: syz [ 692.274583][T13127] usb 5-1: SerialNumber: syz [ 692.285003][T13127] usb 5-1: config 0 descriptor?? [ 692.293955][T17622] /dev/rnullb0: Can't open blockdev [ 692.508339][T17634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.525693][T17634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.558004][T13127] usb 5-1: USB disconnect, device number 66 [ 693.059116][T13127] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 693.209190][T13127] usb 1-1: Using ep0 maxpacket: 8 [ 693.219337][T13127] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.229696][T13127] usb 1-1: config 0 has no interfaces? [ 693.235205][T13127] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 693.245138][T13127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.255929][T13127] usb 1-1: config 0 descriptor?? [ 693.300691][T17648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.330834][T17648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.342671][T17648] /dev/rnullb0: Can't open blockdev [ 693.454585][T17652] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 693.479534][T17642] loop6: detected capacity change from 0 to 63 [ 693.487258][T17642] ldm_validate_partition_table(): Disk read failed. [ 693.497825][T17642] Dev loop6: unable to read RDB block 0 [ 693.504140][T17642] loop6: unable to read partition table [ 693.510921][T17642] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 693.526425][T17642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.542829][T17642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.835599][ T5919] usb 1-1: USB disconnect, device number 65 [ 694.035167][T17668] pim6reg9: entered allmulticast mode [ 694.160014][T17673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.168737][T17673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.226500][T17668] program syz.5.3487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 694.285547][T17674] /dev/rnullb0: Can't open blockdev [ 694.323654][T17677] netlink: 'syz.4.3489': attribute type 4 has an invalid length. [ 694.339105][T17677] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3489'. [ 694.447513][T17681] /dev/rnullb0: Can't open blockdev [ 694.676458][T17692] /dev/rnullb0: Can't open blockdev [ 695.003223][T17707] /dev/rnullb0: Can't open blockdev [ 695.076546][T17709] syzkaller1: entered promiscuous mode [ 695.086444][T17709] syzkaller1: entered allmulticast mode [ 695.097152][T17709] /dev/rnullb0: Can't open blockdev [ 695.171194][T17711] /dev/rnullb0: Can't open blockdev [ 695.230627][ T5919] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 695.389000][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 695.396080][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.416825][ T5919] usb 5-1: config 0 has no interfaces? [ 695.429088][ T5919] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 695.447104][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.470227][ T5919] usb 5-1: config 0 descriptor?? [ 695.567078][T17726] /dev/rnullb0: Can't open blockdev [ 695.680404][T17703] loop6: detected capacity change from 0 to 63 [ 695.688186][T17703] ldm_validate_partition_table(): Disk read failed. [ 695.709426][T17703] Dev loop6: unable to read RDB block 0 [ 695.719702][T17703] loop6: unable to read partition table [ 695.736345][T17703] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 695.753515][T17703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.763396][T17703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.794132][T17736] /dev/rnullb0: Can't open blockdev [ 695.801240][T17736] /dev/rnullb0: Can't open blockdev [ 695.807355][T17736] /dev/rnullb0: Can't open blockdev [ 695.820992][T17736] /dev/rnullb0: Can't open blockdev [ 695.827212][T17736] /dev/rnullb0: Can't open blockdev [ 695.835317][T17736] /dev/rnullb0: Can't open blockdev [ 695.844470][T17736] /dev/rnullb0: Can't open blockdev [ 695.850570][T17736] /dev/rnullb0: Can't open blockdev [ 695.858176][T17736] /dev/rnullb0: Can't open blockdev [ 695.864740][T17736] /dev/rnullb0: Can't open blockdev [ 695.872156][T17736] /dev/rnullb0: Can't open blockdev [ 695.878104][T17736] /dev/rnullb0: Can't open blockdev [ 695.909998][T17736] /dev/rnullb0: Can't open blockdev [ 695.939887][T17736] /dev/rnullb0: Can't open blockdev [ 695.945943][T17736] /dev/rnullb0: Can't open blockdev [ 695.961802][T17736] /dev/rnullb0: Can't open blockdev [ 695.967805][T17736] /dev/rnullb0: Can't open blockdev [ 696.001640][T17736] /dev/rnullb0: Can't open blockdev [ 696.007650][T17736] /dev/rnullb0: Can't open blockdev [ 696.023286][T17736] /dev/rnullb0: Can't open blockdev [ 696.063359][T17736] /dev/rnullb0: Can't open blockdev [ 696.077367][T17736] /dev/rnullb0: Can't open blockdev [ 696.079468][ T5831] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 696.089571][T14701] Bluetooth: hci1: command 0x0c1a tx timeout [ 696.093592][T17736] /dev/rnullb0: Can't open blockdev [ 696.133396][T17736] /dev/rnullb0: Can't open blockdev [ 696.158350][T17736] /dev/rnullb0: Can't open blockdev [ 696.182687][T17736] /dev/rnullb0: Can't open blockdev [ 696.188680][T17736] /dev/rnullb0: Can't open blockdev [ 696.199879][ T5838] usb 5-1: USB disconnect, device number 67 [ 696.231544][T17736] /dev/rnullb0: Can't open blockdev [ 696.256120][T17736] /dev/rnullb0: Can't open blockdev [ 696.276933][T17736] /dev/rnullb0: Can't open blockdev [ 696.292982][T17736] /dev/rnullb0: Can't open blockdev [ 696.306276][T17741] /dev/rnullb0: Can't open blockdev [ 696.316114][T17736] /dev/rnullb0: Can't open blockdev [ 696.323133][T17736] /dev/rnullb0: Can't open blockdev [ 696.340286][T17736] /dev/rnullb0: Can't open blockdev [ 696.358269][T17736] /dev/rnullb0: Can't open blockdev [ 696.364729][T17736] /dev/rnullb0: Can't open blockdev [ 696.371577][T17736] /dev/rnullb0: Can't open blockdev [ 696.378268][T17736] /dev/rnullb0: Can't open blockdev [ 696.385300][T17736] /dev/rnullb0: Can't open blockdev [ 696.392189][T17736] /dev/rnullb0: Can't open blockdev [ 696.398526][T17736] /dev/rnullb0: Can't open blockdev [ 696.406008][T17736] /dev/rnullb0: Can't open blockdev [ 696.412904][T17736] /dev/rnullb0: Can't open blockdev [ 696.420202][T17736] /dev/rnullb0: Can't open blockdev [ 696.426362][T17736] /dev/rnullb0: Can't open blockdev [ 696.432743][T17736] /dev/rnullb0: Can't open blockdev [ 696.438922][T17736] /dev/rnullb0: Can't open blockdev [ 696.445423][T17736] /dev/rnullb0: Can't open blockdev [ 696.459990][T17736] /dev/rnullb0: Can't open blockdev [ 696.470341][T17736] /dev/rnullb0: Can't open blockdev [ 696.476413][T17736] /dev/rnullb0: Can't open blockdev [ 696.488363][T17736] /dev/rnullb0: Can't open blockdev [ 696.495019][T17736] /dev/rnullb0: Can't open blockdev [ 696.501428][T17736] /dev/rnullb0: Can't open blockdev [ 696.507774][T17736] /dev/rnullb0: Can't open blockdev [ 696.511578][T17748] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3513'. [ 696.514271][T17736] /dev/rnullb0: Can't open blockdev [ 696.523719][T17748] fuse: Bad value for 'fd' [ 696.528352][T17736] /dev/rnullb0: Can't open blockdev [ 696.543839][T17748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3513'. [ 696.568766][T17736] /dev/rnullb0: Can't open blockdev [ 696.588059][T17736] /dev/rnullb0: Can't open blockdev [ 696.610264][T17736] /dev/rnullb0: Can't open blockdev [ 696.616154][T17736] /dev/rnullb0: Can't open blockdev [ 696.629171][T17736] /dev/rnullb0: Can't open blockdev [ 696.635347][T17736] /dev/rnullb0: Can't open blockdev [ 696.643323][T17736] /dev/rnullb0: Can't open blockdev [ 696.650136][T17736] /dev/rnullb0: Can't open blockdev [ 696.700354][T17752] geneve0: mtu less than device minimum [ 696.754933][T17752] Invalid source name [ 696.769327][T17752] UBIFS error (pid: 17752): cannot open "/dev/rnullb0", error -22 [ 696.965340][T17764] /dev/rnullb0: Can't open blockdev [ 697.002842][T17765] /dev/rnullb0: Can't open blockdev [ 697.037316][T17770] /dev/rnullb0: Can't open blockdev [ 697.118052][T17777] /dev/rnullb0: Can't open blockdev [ 697.202420][T17780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 697.223002][T17780] /dev/rnullb0: Can't open blockdev [ 697.295904][T17782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3524'. [ 697.619189][ T5919] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 697.622410][T17787] NILFS (nullb0): couldn't find nilfs on the device [ 697.799229][ T5919] usb 1-1: Using ep0 maxpacket: 8 [ 697.819753][ T5919] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.831275][ T5919] usb 1-1: config 0 has no interfaces? [ 697.836841][ T5919] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 697.847690][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.864975][ T5919] usb 1-1: config 0 descriptor?? [ 698.039157][ T5842] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 698.085730][T17785] loop6: detected capacity change from 0 to 63 [ 698.092674][T17785] buffer_io_error: 98 callbacks suppressed [ 698.092688][T17785] Buffer I/O error on dev loop6, logical block 0, async page read [ 698.111025][T17785] Buffer I/O error on dev loop6, logical block 0, async page read [ 698.121415][T17785] Buffer I/O error on dev loop6, logical block 0, async page read [ 698.132353][T17785] Buffer I/O error on dev loop6, logical block 0, async page read [ 698.144981][T17785] Buffer I/O error on dev loop6, logical block 0, async page read [ 698.155265][T17785] loop6: unable to read partition table [ 698.155636][T17791] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 698.171740][T17785] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 698.199054][ T5842] usb 5-1: Using ep0 maxpacket: 32 [ 698.205914][T17791] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 698.207039][T17785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.229253][T17791] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 698.233136][T17785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.250496][ T5842] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 698.258563][ T5842] usb 5-1: config 0 has no interface number 0 [ 698.274756][ T5842] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 698.291829][T17791] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 698.300745][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.308737][ T5842] usb 5-1: Product: syz [ 698.327215][ T5842] usb 5-1: Manufacturer: syz [ 698.331977][ T5842] usb 5-1: SerialNumber: syz [ 698.337414][T17791] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 698.363203][ T5842] usb 5-1: config 0 descriptor?? [ 698.375895][ T5842] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 698.385206][ T5842] usb 5-1: selecting invalid altsetting 1 [ 698.391627][ T5842] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 698.413108][ T5842] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 698.424358][ T5842] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 698.432729][ T5842] usb 5-1: media controller created [ 698.442675][T17799] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3529'. [ 698.465233][ T5842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 698.466592][T17799] /dev/rnullb0: Can't open blockdev [ 698.613413][ T5204] ldm_validate_partition_table(): Disk read failed. [ 698.626277][T17801] /dev/rnullb0: Can't open blockdev [ 698.630785][ T5204] Dev loop6: unable to read RDB block 0 [ 698.659209][ T5204] loop6: unable to read partition table [ 698.666942][ T5919] usb 1-1: USB disconnect, device number 66 [ 698.780369][T17803] /dev/rnullb0: Can't open blockdev [ 698.813776][ T5842] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 698.822422][ T5842] zl10353_read_register: readreg error (reg=127, ret==-71) [ 698.831585][ T5842] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 698.897438][ T5842] usb 5-1: USB disconnect, device number 68 [ 698.985757][T17807] /dev/rnullb0: Can't open blockdev [ 699.006404][T17809] /dev/rnullb0: Can't open blockdev [ 699.052960][T17813] /dev/rnullb0: Can't open blockdev [ 699.100074][T17815] /dev/rnullb0: Can't open blockdev [ 699.153811][T17819] overlayfs: failed to resolve './file0': -2 [ 699.229469][ T8797] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 699.391560][ T8797] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 699.409594][ T8797] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 699.432918][ T8797] usb 6-1: config 1 has no interface number 1 [ 699.449264][ T8797] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 699.479045][ T8797] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 699.496369][ T8797] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 699.506427][ T8797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.524857][ T5919] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 699.524936][ T8797] usb 6-1: Product: syz [ 699.538506][ T8797] usb 6-1: Manufacturer: syz [ 699.543749][ T8797] usb 6-1: SerialNumber: syz [ 699.694545][ T5919] usb 1-1: no configurations [ 699.699499][ T5919] usb 1-1: can't read configurations, error -22 [ 699.717138][T17837] /dev/rnullb0: Can't open blockdev [ 699.758673][T17808] /dev/rnullb0: Can't open blockdev [ 699.789676][ T8797] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 699.797569][ T8797] usb 6-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 699.816661][ T8797] usb 6-1: 2:1 : sample bitwidth 189 in over sample bytes 3 [ 699.826286][ T5842] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 699.839023][ T5919] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 699.879440][ T8797] usb 6-1: USB disconnect, device number 19 [ 699.955308][T15953] udevd[15953]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 700.002751][ T5842] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 700.014830][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.023457][ T5919] usb 1-1: no configurations [ 700.030338][ T5842] usb 5-1: Product: syz [ 700.034531][ T5842] usb 5-1: Manufacturer: syz [ 700.039066][ T5919] usb 1-1: can't read configurations, error -22 [ 700.039543][ T5842] usb 5-1: SerialNumber: syz [ 700.049599][ T5919] usb usb1-port1: attempt power cycle [ 700.061593][ T5842] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 700.081387][ T5838] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 700.409072][ T5919] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 700.451081][ T5919] usb 1-1: no configurations [ 700.455896][ T5919] usb 1-1: can't read configurations, error -22 [ 700.500831][T17832] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 700.509921][T17832] /dev/rnullb0: Can't open blockdev [ 700.520420][T13127] usb 5-1: USB disconnect, device number 69 [ 700.590685][ T5919] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 700.630197][ T5919] usb 1-1: no configurations [ 700.634844][ T5919] usb 1-1: can't read configurations, error -22 [ 700.650221][ T5919] usb usb1-port1: unable to enumerate USB device [ 700.677217][T17850] ./file0: Can't lookup blockdev [ 700.699119][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 700.788716][T17855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.797563][T17855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.849042][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 700.855779][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.870119][ T24] usb 6-1: config 0 has no interfaces? [ 700.875647][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 700.885220][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.901895][ T24] usb 6-1: config 0 descriptor?? [ 701.111354][T17847] loop6: detected capacity change from 0 to 63 [ 701.130504][T17847] ldm_validate_partition_table(): Disk read failed. [ 701.133013][ T5838] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 701.138639][T17847] Dev loop6: unable to read RDB block 0 [ 701.151897][T17847] loop6: unable to read partition table [ 701.169199][ T5838] ath9k_htc: Failed to initialize the device [ 701.169609][T17847] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 701.184839][T13127] usb 5-1: ath9k_htc: USB layer deinitialized [ 701.229113][T17847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.242170][T17847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.541937][T17866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.557674][T17866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.570220][T17866] /dev/rnullb0: Can't open blockdev [ 701.637594][ T5204] ldm_validate_partition_table(): Disk read failed. [ 701.648893][ T5204] Dev loop6: unable to read RDB block 0 [ 701.655378][ T5204] loop6: unable to read partition table [ 701.667659][ T5842] usb 6-1: USB disconnect, device number 20 [ 701.732993][T17869] vivid-004: disconnect [ 701.738027][T17869] vivid-004: reconnect [ 702.559126][ T5838] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 702.575788][T17889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.588872][T17889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.739215][ T5838] usb 6-1: Using ep0 maxpacket: 16 [ 702.746120][ T5838] usb 6-1: config 0 has an invalid interface number: 111 but max is 0 [ 702.755213][ T5838] usb 6-1: config 0 has no interface number 0 [ 702.764711][ T5838] usb 6-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=fc.66 [ 702.774287][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.782604][ T5838] usb 6-1: Product: syz [ 702.786793][ T5838] usb 6-1: Manufacturer: syz [ 702.792156][ T5838] usb 6-1: SerialNumber: syz [ 702.822228][ T5838] usb 6-1: config 0 descriptor?? [ 702.873974][T17894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.886761][T17894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.042237][T17880] /dev/rnullb0: Can't open blockdev [ 703.060663][ T24] usb 6-1: USB disconnect, device number 21 [ 703.112279][ T5838] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 703.255063][ T5838] usb 5-1: device descriptor read/64, error -71 [ 703.474045][T17920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.490613][T17920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.500365][ T5838] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 703.583130][T17924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.639380][T17924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.647286][ T5838] usb 5-1: device descriptor read/64, error -71 [ 703.762461][ T5838] usb usb5-port1: attempt power cycle [ 703.928031][T17896] cgroup: fork rejected by pids controller in /syz0 [ 704.132819][ T5838] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 704.169840][ T5838] usb 5-1: device descriptor read/8, error -71 [ 704.404889][T17938] 9pnet_fd: Insufficient options for proto=fd [ 704.411382][ T5838] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 704.441035][ T5838] usb 5-1: device descriptor read/8, error -71 [ 704.531495][T17920] loop6: detected capacity change from 0 to 63 [ 704.579436][ T5838] usb usb5-port1: unable to enumerate USB device [ 704.657911][T17944] /dev/rnullb0: Can't open blockdev [ 704.670404][T17920] buffer_io_error: 64 callbacks suppressed [ 704.670424][T17920] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.721579][T17920] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.746822][T17920] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.796963][T17920] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.834682][T17920] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.877529][T17920] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.908679][T17920] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.922433][T17920] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.931966][T17920] ldm_validate_partition_table(): Disk read failed. [ 704.938645][T17920] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.942331][T17949] /dev/rnullb0: Can't open blockdev [ 704.958375][T17920] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.967077][T17920] Dev loop6: unable to read RDB block 0 [ 704.973406][T17920] loop6: unable to read partition table [ 704.979580][T17920] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 705.154025][T17952] /dev/rnullb0: Can't open blockdev [ 705.376320][T17956] /dev/rnullb0: Can't open blockdev [ 705.480236][T17961] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 705.487264][T17961] /dev/rnullb0: Can't open blockdev [ 705.795508][T17963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.821404][T17963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.058507][T17963] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 706.085093][T17969] /dev/rnullb0: Can't open blockdev [ 706.219140][T13127] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 706.267897][T17971] raw_sendmsg: syz.5.3578 forgot to set AF_INET. Fix it! [ 706.374343][T17973] syz.0.3579: attempt to access beyond end of device [ 706.374343][T17973] loop0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 706.387851][T17973] MINIX-fs: unable to read superblock [ 706.401973][T13127] usb 5-1: Using ep0 maxpacket: 8 [ 706.411248][T13127] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 706.415190][T17973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3579'. [ 706.429114][T13127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.443518][T13127] usb 5-1: Product: syz [ 706.447737][T13127] usb 5-1: Manufacturer: syz [ 706.457393][T13127] usb 5-1: SerialNumber: syz [ 706.468266][T13127] usb 5-1: config 0 descriptor?? [ 706.482749][T13127] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 706.658146][T17983] binder: Binderfs stats mode cannot be changed during a remount [ 706.811234][T17992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.829518][ T24] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 706.839567][T17992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.857171][T17992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.869466][T17992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.883819][T17992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3584'. [ 706.898319][T17992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 706.992344][ T24] usb 6-1: config 0 interface 0 altsetting 238 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.003902][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 707.013746][ T24] usb 6-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 707.023000][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.049886][ T24] usb 6-1: config 0 descriptor?? [ 707.103592][T17965] /dev/rnullb0: Can't open blockdev [ 707.113962][T13127] gspca_sonixj: reg_w1 err -71 [ 707.124593][T13127] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 707.144766][T13127] usb 5-1: USB disconnect, device number 74 [ 707.325350][T18002] netlink: 4416 bytes leftover after parsing attributes in process `syz.0.3587'. [ 707.468857][ T24] acrux 0003:1A34:F705.002F: hidraw0: USB HID v0.00 Device [HID 1a34:f705] on usb-dummy_hcd.5-1/input0 [ 707.484978][ T24] acrux 0003:1A34:F705.002F: no inputs found [ 707.493439][ T24] acrux 0003:1A34:F705.002F: Failed to enable force feedback support, error: -19 [ 707.639513][ T5838] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 707.722491][T17976] /dev/rnullb0: Can't open blockdev [ 707.771893][T18014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.783559][T18014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.800824][ T5838] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 707.810929][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.831543][ T5838] usb 1-1: config 0 descriptor?? [ 707.833904][ T24] usb 6-1: USB disconnect, device number 22 [ 707.984839][T18019] netlink: 'syz.4.3591': attribute type 6 has an invalid length. [ 708.234605][T18023] /dev/rnullb0: Can't open blockdev [ 708.445592][T18002] input: syz1 as /devices/virtual/input/input152 [ 708.462530][T18002] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3587'. [ 708.474407][T18002] /dev/rnullb0: Can't open blockdev [ 708.499054][ T24] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 708.583183][T18028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.594661][ T5838] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 708.605757][T18028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.624811][ T5838] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 708.675119][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 708.684436][ T24] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 708.697855][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 708.707270][ T24] usb 5-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.40 [ 708.716749][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.725119][ T24] usb 5-1: Product: 㘽禂挺玒ã»à­”툖朾⩭चᳰÑ挻䬷璉䇃臇两塒䓾樳淜볂깘鶓帾갌좌央â²ê•™á–©â—™å•¬ä‹Œï¶´ãœ°î“邏匥蔲â¥î¬Šï‹’䵴ꙧ놬♲└脹翧൥絋淗å拽㖙뗈箸罡⒡뛹ꢪ잪쟺痎泓賚Ȉ䔘ᘡಜ鉓ᔡ닀࣡抧 [ 708.750918][ T24] usb 5-1: Manufacturer: Е [ 708.755520][ T24] usb 5-1: SerialNumber: 䱾첒ёⷲ䂊ਔ仮税鞜íŸî•‹ç¡¥á®‹ì–뿅鵹銩튮樯袟㑈놿堑㉾ [ 708.801135][ T5838] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 708.816220][ T5838] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 708.984903][ T24] usbhid 5-1:1.0: can't add hid device: -71 [ 708.995384][ T24] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 709.014415][ T5838] asix 1-1:0.0 eth5: register 'asix' at usb-dummy_hcd.0-1, ASIX AX88178 USB 2.0 Ethernet, aa:aa:aa:aa:aa:bb [ 709.019076][ T24] usb 5-1: USB disconnect, device number 75 [ 709.053938][ T5838] usb 1-1: USB disconnect, device number 71 [ 709.065415][ T5838] asix 1-1:0.0 eth5: unregister 'asix' usb-dummy_hcd.0-1, ASIX AX88178 USB 2.0 Ethernet [ 709.129420][ T5889] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 709.250346][T18040] /dev/rnullb0: Can't open blockdev [ 709.310835][ T5889] usb 6-1: Using ep0 maxpacket: 32 [ 709.320310][ T5889] usb 6-1: unable to get BOS descriptor or descriptor too short [ 709.332706][ T5889] usb 6-1: config 7 has an invalid interface number: 187 but max is 0 [ 709.337907][T18046] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3600'. [ 709.341949][ T5889] usb 6-1: config 7 has no interface number 0 [ 709.356899][ T5889] usb 6-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 709.371287][ T5889] usb 6-1: config 7 interface 187 has no altsetting 0 [ 709.393203][ T5889] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 709.419213][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.437705][ T5889] usb 6-1: Product: syz [ 709.459694][ T5889] usb 6-1: Manufacturer: syz [ 709.464349][ T5889] usb 6-1: SerialNumber: syz [ 709.480745][T18033] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 709.507848][T18051] /dev/rnullb0: Can't open blockdev [ 709.702742][ T5889] usb 6-1: Limiting number of CPorts to U8_MAX [ 709.716949][T18059] /dev/rnullb0: Can't open blockdev [ 709.726299][ T5889] usb 6-1: Unknown endpoint type found, address 0x07 [ 709.744294][ T5889] usb 6-1: Not enough endpoints found in device, aborting! [ 709.759258][ T8797] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 709.929091][ T8797] usb 1-1: Using ep0 maxpacket: 32 [ 709.936405][ T8797] usb 1-1: config 0 has an invalid interface number: 232 but max is 0 [ 709.945972][ T8797] usb 1-1: config 0 has no interface number 0 [ 709.960928][ T8797] usb 1-1: config 0 interface 232 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 709.979137][ T8797] usb 1-1: New USB device found, idVendor=2040, idProduct=651b, bcdDevice=29.5a [ 709.988554][ T8797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.997297][ T8797] usb 1-1: Product: syz [ 710.004179][ T8797] usb 1-1: Manufacturer: syz [ 710.008882][ T8797] usb 1-1: SerialNumber: syz [ 710.019669][ T8797] usb 1-1: config 0 descriptor?? [ 710.030351][T18051] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 710.042969][ T8797] em28xx 1-1:0.232: New device syz syz @ 480 Mbps (2040:651b, interface 232, class 232) [ 710.053466][ T8797] em28xx 1-1:0.232: Video interface 232 found: bulk [ 710.269496][T18046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 710.321773][T18046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 710.349590][ T8797] em28xx 1-1:0.232: unknown em28xx chip ID (0) [ 710.372712][T18046] bond0 (unregistering): Released all slaves [ 710.457509][ T8797] em28xx 1-1:0.232: reading from i2c device at 0xa0 failed (error=-5) [ 710.474230][ T8797] em28xx 1-1:0.232: board has no eeprom [ 710.553575][ T8797] em28xx 1-1:0.232: Identified as Hauppauge WinTV HVR 950 (card=16) [ 710.593756][ T8797] em28xx 1-1:0.232: analog set to bulk mode. [ 710.606929][ T10] em28xx 1-1:0.232: Registering V4L2 extension [ 710.640333][ T8797] usb 1-1: USB disconnect, device number 72 [ 710.672051][ T8797] em28xx 1-1:0.232: Disconnecting em28xx [ 710.752744][T18084] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 710.769288][T18084] /dev/rnullb0: Can't open blockdev [ 710.859166][ T10] em28xx 1-1:0.232: Config register raw data: 0xffffffed [ 710.866345][ T10] em28xx 1-1:0.232: AC97 chip type couldn't be determined [ 710.891759][ T10] em28xx 1-1:0.232: No AC97 audio processor [ 710.899013][ T10] em28xx 1-1:0.232: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 710.908047][ T10] em28xx 1-1:0.232: Binding DVB extension [ 710.944529][ T10] em28xx 1-1:0.232: no endpoint for DVB mode and transfer type 0 [ 710.954297][ T10] em28xx 1-1:0.232: failed to pre-allocate USB transfer buffers for DVB. [ 710.963983][ T10] em28xx 1-1:0.232: Registering input extension [ 710.973774][ T8797] em28xx 1-1:0.232: Closing input extension [ 710.989535][ T8797] em28xx 1-1:0.232: Freeing device [ 711.070223][T18095] /dev/rnullb0: Can't open blockdev [ 711.095949][T18097] Option '²Ÿ¹' to dns_resolver key: bad/missing value [ 711.144169][T18099] netlink: 'syz.3.3609': attribute type 28 has an invalid length. [ 711.188523][T18103] /dev/rnullb0: Can't open blockdev [ 711.242345][T18105] /dev/rnullb0: Can't open blockdev [ 711.445751][ T30] audit: type=1326 audit(1751440785.098:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18111 comm="syz.0.3616" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f737058e929 code=0x0 [ 711.898338][T13127] usb 6-1: USB disconnect, device number 23 [ 712.423400][T18138] /dev/rnullb0: Can't open blockdev [ 712.973328][T18163] /dev/rnullb0: Can't open blockdev [ 713.249360][T18157] /dev/rnullb0: Can't open blockdev [ 713.345900][ T30] audit: type=1326 audit(1751440786.988:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18171 comm="syz.5.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394578e929 code=0x7fc00000 [ 713.690225][T18181] /dev/rnullb0: Can't open blockdev [ 713.991464][T18195] /dev/rnullb0: Can't open blockdev [ 714.172909][T18200] /dev/rnullb0: Can't open blockdev [ 714.239836][T18202] ALSA: mixer_oss: invalid OSS volume '' [ 714.286103][T18204] /dev/rnullb0: Can't open blockdev [ 714.328677][T18209] /dev/rnullb0: Can't open blockdev [ 714.379153][T13127] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 714.549493][T13127] usb 1-1: Using ep0 maxpacket: 16 [ 714.562266][T13127] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 714.576994][T13127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.609927][T13127] usb 1-1: Product: syz [ 714.614140][T13127] usb 1-1: Manufacturer: syz [ 714.620162][T13127] usb 1-1: SerialNumber: syz [ 714.631882][T13127] usb 1-1: config 0 descriptor?? [ 714.782799][T18224] batadv_slave_1: entered promiscuous mode [ 714.796982][T18224] /dev/rnullb0: Can't open blockdev [ 714.890326][T18223] batadv_slave_1: left promiscuous mode [ 715.050436][T13127] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 715.062941][T13127] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 715.073111][T13127] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 715.082135][T13127] usb 1-1: media controller created [ 715.125482][T13127] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 715.163720][T18231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.176550][T18231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.211160][T18231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.225500][T18231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.270352][T13127] zl10353_read_register: readreg error (reg=127, ret==0) [ 715.277477][T13127] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 715.309761][T13127] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 715.343922][T13127] usb 1-1: USB disconnect, device number 73 [ 715.413446][T13127] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 715.558864][T18240] C: renamed from team_slave_0 (while UP) [ 715.571828][T18240] netlink: 'syz.4.3661': attribute type 3 has an invalid length. [ 715.580098][T18240] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3661'. [ 715.594865][T18239] /dev/rnullb0: Can't open blockdev [ 715.656579][ T5831] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 715.839034][T14701] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 715.842690][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 716.109037][T13127] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 716.269160][T13127] usb 5-1: Using ep0 maxpacket: 16 [ 716.276770][T13127] usb 5-1: config 254 has an invalid interface number: 235 but max is 0 [ 716.285809][T13127] usb 5-1: config 254 has no interface number 0 [ 716.292569][T13127] usb 5-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 716.316747][T13127] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 716.343934][T13127] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 716.365096][T13127] usb 5-1: config 254 interface 235 has no altsetting 0 [ 716.378770][T13127] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 716.390116][T13127] usb 5-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 716.398533][T13127] usb 5-1: Product: syz [ 716.407200][T13127] usb 5-1: Manufacturer: syz [ 716.413129][T13127] usb 5-1: SerialNumber: syz [ 716.418181][T18262] /dev/rnullb0: Can't open blockdev [ 716.431107][T18247] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 716.542527][T18264] /dev/rnullb0: Can't open blockdev [ 716.550823][T18266] /dev/rnullb0: Can't open blockdev [ 716.676654][T18247] ./cgroup: Can't lookup blockdev [ 716.702512][T13127] usbtest 5-1:254.235: couldn't get endpoints, -71 [ 716.727568][T13127] usbtest 5-1:254.235: probe with driver usbtest failed with error -71 [ 716.761439][T13127] usb 5-1: USB disconnect, device number 76 [ 716.881972][T18277] /dev/rnullb0: Can't open blockdev [ 716.897074][T18277] /dev/rnullb0: Can't open blockdev [ 717.085213][ T30] audit: type=1326 audit(1751440790.738:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18291 comm="syz.0.3678" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f737058e929 code=0x0 [ 717.173942][T18289] /dev/rnullb0: Can't open blockdev [ 717.555511][T18301] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3681'. [ 717.736824][T18312] /dev/sg0: Can't lookup blockdev [ 717.745844][ T5831] Bluetooth: hci1: Malformed LE Event: 0x1b [ 717.844502][T11752] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 717.979073][T13127] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 718.151819][T13127] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 718.168468][T13127] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 718.193531][T13127] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 718.212451][T13127] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 718.236190][T18330] libceph: resolve '4' (ret=-3): failed [ 718.241913][T13127] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 718.241944][T13127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.261401][T13127] usb 6-1: config 0 descriptor?? [ 718.270554][T18330] syz.0.3690: attempt to access beyond end of device [ 718.270554][T18330] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 718.286797][T18330] EXT4-fs (loop0): unable to read superblock [ 718.586136][T18340] usb usb7: usbfs: process 18340 (syz.3.3693) did not claim interface 0 before use [ 718.612641][T18340] /dev/rnullb0: Can't open blockdev [ 718.679174][ T24] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 718.700335][T13127] plantronics 0003:047F:FFFF.0030: ignoring exceeding usage max [ 718.726715][T13127] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 718.781914][T18342] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4093662463 (4093662463 ns) > initial count (1099723850 ns). Using initial count to start timer. [ 718.849367][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 718.871196][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 718.888451][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 718.918684][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 718.933712][T18347] /dev/rnullb0: Can't open blockdev [ 718.955203][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 718.974665][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.994619][ T24] usb 1-1: config 0 descriptor?? [ 719.107742][T18353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.133420][T18353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.221500][ T5831] Bluetooth: hci3: Malformed LE Event: 0x1b [ 719.244266][ T5919] usb 6-1: USB disconnect, device number 24 [ 719.323914][T18364] fuse: Bad value for 'fd' [ 719.424783][ T24] plantronics 0003:047F:FFFF.0031: ignoring exceeding usage max [ 719.476999][T18370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.488198][ T24] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 719.493907][T18370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.531498][T18370] /dev/rnullb0: Can't open blockdev [ 719.882610][T18378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.894087][T18378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.925036][ T10] usb 1-1: USB disconnect, device number 74 [ 719.966114][T18383] /dev/rnullb0: Can't open blockdev [ 719.985963][T18387] /dev/rnullb0: Can't open blockdev [ 720.193092][T18392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.205133][T18392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.219614][T18392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.229427][T18392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.352327][T18390] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.3705'. [ 720.891781][ T5831] Bluetooth: hci0: Malformed LE Event: 0x1b [ 720.912833][T18418] /dev/sg0: Can't lookup blockdev [ 721.218911][T18424] /dev/rnullb0: Can't open blockdev [ 721.684294][ T5919] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 721.773730][T18433] /dev/rnullb0: Can't open blockdev [ 721.864035][T18438] /dev/rnullb0: Can't open blockdev [ 721.869416][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 721.876677][ T5919] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 721.887217][ T5919] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 721.915202][ T5919] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 721.947283][ T5919] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 721.988967][ T5919] usb 1-1: config 0 interface 0 has no altsetting 0 [ 722.013781][ T5919] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 722.025105][T18440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.037186][ T5919] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=6 [ 722.047463][T18440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.059970][ T5919] usb 1-1: Product: syz [ 722.064187][ T5919] usb 1-1: Manufacturer: syz [ 722.068809][ T5919] usb 1-1: SerialNumber: syz [ 722.095747][ T5919] usb 1-1: config 0 descriptor?? [ 722.113641][T18440] [U]  [ 722.123052][ T5919] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 722.159619][ T5919] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 722.281432][T18444] netlink: 666 bytes leftover after parsing attributes in process `syz.5.3722'. [ 722.292442][T18445] netlink: 666 bytes leftover after parsing attributes in process `syz.5.3722'. [ 722.324358][ T5919] usb 1-1: USB disconnect, device number 75 [ 722.330436][ C1] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 722.341807][ T5919] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 722.449186][ T10] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 722.538565][T18427] ldusb: No device or device unplugged -19 [ 722.599265][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 722.608376][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.619128][ T10] usb 5-1: config 0 has no interfaces? [ 722.624642][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 722.634112][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.651045][ T10] usb 5-1: config 0 descriptor?? [ 722.742048][T18449] /dev/rnullb0: Can't open blockdev [ 722.776333][T18452] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 722.799590][T18452] /dev/rnullb0: Can't open blockdev [ 722.842560][T18454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.868623][T18454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.940536][T18457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.966860][T18457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.577875][T18443] loop6: detected capacity change from 0 to 63 [ 723.594812][T15952] buffer_io_error: 13 callbacks suppressed [ 723.594830][T15952] Buffer I/O error on dev loop6, logical block 0, async page read [ 723.610798][T15952] Buffer I/O error on dev loop6, logical block 0, async page read [ 723.618720][T15952] Buffer I/O error on dev loop6, logical block 0, async page read [ 723.643975][T18467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.657256][T18467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.691558][T15952] Buffer I/O error on dev loop6, logical block 0, async page read [ 723.702988][T15952] Buffer I/O error on dev loop6, logical block 0, async page read [ 723.712165][T15952] Buffer I/O error on dev loop6, logical block 0, async page read [ 723.724075][T15952] Buffer I/O error on dev loop6, logical block 0, async page read [ 723.733197][T15952] Buffer I/O error on dev loop6, logical block 0, async page read [ 723.744579][T15952] ldm_validate_partition_table(): Disk read failed. [ 723.749118][ T5919] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 723.752736][T15952] Buffer I/O error on dev loop6, logical block 0, async page read [ 723.774205][T15952] Buffer I/O error on dev loop6, logical block 0, async page read [ 723.788692][T15952] Dev loop6: unable to read RDB block 0 [ 723.795335][T15952] loop6: unable to read partition table [ 723.804219][T18443] ldm_validate_partition_table(): Disk read failed. [ 723.818646][T18443] Dev loop6: unable to read RDB block 0 [ 723.839506][T18443] loop6: unable to read partition table [ 723.845387][T18443] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 723.921314][ T5919] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 723.941664][ T5919] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 723.963486][ T5919] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 723.970929][ T5838] usb 5-1: USB disconnect, device number 78 [ 723.979721][ T5919] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 723.994482][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.035749][T18462] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 724.159959][T14701] Bluetooth: hci1: command 0x0c1a tx timeout [ 724.162877][ T5831] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 724.538483][T18480] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 724.607048][T18484] /dev/rnullb0: Can't open blockdev [ 724.716987][T18487] /dev/rnullb0: Can't open blockdev [ 724.804529][T18494] /dev/rnullb0: Can't open blockdev [ 725.072894][ T5919] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 725.171320][ T5919] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input154 [ 725.229476][ T5919] usb 1-1: USB disconnect, device number 76 [ 725.235511][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 725.599653][T18506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3744'. [ 725.632738][T18506] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3744'. [ 726.009075][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 726.159204][T15014] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 726.159278][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 726.171838][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 726.179411][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 726.188635][ T10] usb 6-1: config 6 has an invalid interface number: 7 but max is 0 [ 726.200324][ T5838] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 726.207999][ T10] usb 6-1: config 6 has no interface number 0 [ 726.217099][ T10] usb 6-1: config 6 interface 7 has no altsetting 0 [ 726.228652][ T10] usb 6-1: New USB device found, idVendor=07b8, idProduct=110c, bcdDevice=e4.e2 [ 726.238002][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.246730][ T10] usb 6-1: Product: syz [ 726.251051][ T10] usb 6-1: Manufacturer: syz [ 726.255721][ T10] usb 6-1: SerialNumber: syz [ 726.373244][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 726.391537][ T5838] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 726.403420][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.419876][ T5838] usb 1-1: config 0 descriptor?? [ 726.677463][ T10] pegasus 6-1:6.7: probe with driver pegasus failed with error -32 [ 726.723104][ T5838] usbhid 1-1:0.0: can't add hid device: -71 [ 726.740149][ T5838] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 726.783733][ T24] usb 6-1: USB disconnect, device number 25 [ 726.785108][ T5838] usb 1-1: USB disconnect, device number 77 [ 726.811728][T18523] /dev/rnullb0: Can't open blockdev [ 726.836966][T18522] /dev/rnullb0: Can't open blockdev [ 726.927450][T18530] /dev/rnullb0: Can't open blockdev [ 727.222776][ T24] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 727.379187][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 727.385823][ T24] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 727.394488][ T24] usb 6-1: config 179 has no interface number 0 [ 727.403714][ T24] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 727.416254][ T24] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 727.427606][ T24] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 727.444358][ T24] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 727.455870][ T24] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 727.473079][ T24] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 727.485706][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.503944][T18529] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 727.599381][T13127] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 727.752672][T13127] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 727.766175][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input155 [ 727.785711][T13127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.820555][T13127] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 727.830459][T13127] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 727.840703][T13127] usb 1-1: Manufacturer: syz [ 727.894811][T13127] usb 1-1: config 0 descriptor?? [ 727.946647][T18529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.958841][T18529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.021834][T13127] rc_core: IR keymap rc-hauppauge not found [ 728.029187][T13127] Registered IR keymap rc-empty [ 728.037400][T13127] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 728.053575][T13127] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input156 [ 728.160196][T18543] fuseblk: Bad value for 'rootmode' [ 728.211235][T18529] /dev/rnullb0: Can't open blockdev [ 728.218083][ T8797] usb 6-1: USB disconnect, device number 26 [ 728.218159][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 728.232413][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 728.253003][T18543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.302403][T18543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.326398][T18559] /dev/rnullb0: Can't open blockdev [ 728.395543][T15014] Bluetooth: hci3: SCO packet too small [ 728.410019][ T10] usb 1-1: USB disconnect, device number 78 [ 729.158015][T15014] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 729.170337][T18576] /dev/rnullb0: Can't open blockdev [ 729.279617][T15014] Bluetooth: hci1: command 0x0c1a tx timeout [ 729.286771][ T5831] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 729.769646][T13127] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 729.792659][T18593] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 729.800627][T18593] /dev/rnullb0: Can't open blockdev [ 729.929014][T13127] usb 5-1: Using ep0 maxpacket: 16 [ 729.936507][T13127] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 729.947422][T13127] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 729.962406][T13127] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 729.973969][T13127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 729.982374][T13127] usb 5-1: SerialNumber: syz [ 729.992046][T18584] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 730.220661][T18584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.229746][T18584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.263625][T18601] /dev/rnullb0: Can't open blockdev [ 730.432438][T18605] /dev/rnullb0: Can't open blockdev [ 730.556150][T18611] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3774'. [ 730.569534][ T5831] Bluetooth: hci0: Malformed LE Event: 0x1b [ 730.642190][T18605] /dev/rnullb0: Can't open blockdev [ 730.665552][ T5831] Bluetooth: hci0: SCO packet too small [ 730.734459][T18618] /dev/rnullb0: Can't open blockdev [ 730.777909][T13127] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 730.858179][T13127] usb 5-1: USB disconnect, device number 79 [ 731.177700][T18622] Bluetooth: MGMT ver 1.23 [ 731.894090][T18647] /dev/rnullb0: Can't open blockdev [ 732.453923][T18659] /dev/rnullb0: Can't open blockdev [ 732.677337][T18666] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3789'. [ 732.701100][T18658] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3789'. [ 732.732558][T18666] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3789'. [ 732.817571][ T5831] Bluetooth: hci0: SCO packet too small [ 732.902200][T18673] fuse: Bad value for 'rootmode' [ 733.289403][ T8797] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 733.403055][T18687] /dev/rnullb0: Can't open blockdev [ 733.457409][T18689] befs: (nbd4): No write support. Marking filesystem read-only [ 733.466292][ T5831] Bluetooth: hci3: unexpected cc 0x2039 length: 9 > 1 [ 733.474332][ T5831] Bluetooth: hci3: unexpected event for opcode 0x2039 [ 733.489660][T18689] syz.4.3798: attempt to access beyond end of device [ 733.489660][T18689] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 733.504461][ T8797] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 733.514312][ T8797] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 733.529073][ T8797] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 733.540158][ T8797] usb 6-1: config 0 interface 0 has no altsetting 0 [ 733.547991][ T8797] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 733.557200][ T8797] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 733.568360][ T8797] usb 6-1: config 0 interface 0 has no altsetting 0 [ 733.576321][ T8797] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 733.585432][ T8797] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 733.596487][ T8797] usb 6-1: config 0 interface 0 has no altsetting 0 [ 733.605341][ T8797] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 733.614939][ T8797] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 733.626010][ T8797] usb 6-1: config 0 interface 0 has no altsetting 0 [ 733.647901][ T8797] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 733.659509][ T8797] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 733.685628][ T8797] usb 6-1: config 0 interface 0 has no altsetting 0 [ 733.707280][ T8797] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 733.720533][ T8797] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 733.732654][ T8797] usb 6-1: config 0 interface 0 has no altsetting 0 [ 733.748013][ T8797] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 733.767357][ T8797] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 733.789237][ T8797] usb 6-1: config 0 interface 0 has no altsetting 0 [ 733.804593][ T8797] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 733.818744][ T8797] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 733.848983][ T8797] usb 6-1: config 0 interface 0 has no altsetting 0 [ 733.861625][ T8797] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 733.878995][ T8797] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 733.919874][ T8797] usb 6-1: Product: syz [ 733.924623][ T8797] usb 6-1: Manufacturer: syz [ 733.936535][ T8797] usb 6-1: SerialNumber: syz [ 733.961032][ T8797] usb 6-1: config 0 descriptor?? [ 733.988086][ T8797] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 734.621109][T18622] qnx6: unable to read the first superblock [ 734.732769][T18721] binder: 18720:18721 ioctl 400c620e 200000000500 returned -22 [ 734.936544][T18732] /dev/rnullb0: Can't open blockdev [ 734.943033][T18730] /dev/rnullb0: Can't open blockdev [ 734.972892][T18732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.029670][T18732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.061466][T18732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.079478][T18732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.628081][T18747] /dev/rnullb0: Can't open blockdev [ 735.651769][T18747] program syz.4.3814 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 735.667584][T18747] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 735.698444][T18749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.720996][T18749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.762738][ T5838] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 735.801724][T18751] /dev/rnullb0: Can't open blockdev [ 735.921445][ T5838] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 735.934092][ T5838] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 735.944375][ T5838] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 735.953893][ T5838] usb 1-1: config 1 has no interface number 1 [ 735.960210][ T5838] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 735.974112][ T5838] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 735.990846][ T5838] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 736.000519][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.008587][ T5838] usb 1-1: Product: syz [ 736.012930][ T5838] usb 1-1: Manufacturer: syz [ 736.018079][ T5838] usb 1-1: SerialNumber: syz [ 736.025894][ T24] usb 6-1: USB disconnect, device number 27 [ 736.059666][ T24] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 736.077447][T18755] /dev/rnullb0: Can't open blockdev [ 736.114804][ T8797] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 736.165960][T18757] /dev/rnullb0: Can't open blockdev [ 736.177814][T18757] /dev/rnullb0: Can't open blockdev [ 736.299710][ T8797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.322416][ T8797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.344114][ T8797] usb 5-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 736.376771][ T5838] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 736.399121][ T5838] usb 1-1: MIDIStreaming interface descriptor not found [ 736.406388][ T8797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.431060][ T8797] usb 5-1: config 0 descriptor?? [ 736.469475][ T5838] usb 1-1: USB disconnect, device number 79 [ 736.580032][T18772] udevd[18772]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 736.739065][ T5889] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 736.871775][T18776] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 736.873521][T18777] /dev/rnullb0: Can't open blockdev [ 736.879471][ T24] IPVS: starting estimator thread 0... [ 736.891167][ T5889] usb 6-1: Using ep0 maxpacket: 8 [ 736.898011][ T5889] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.916266][ T5889] usb 6-1: config 0 has no interfaces? [ 736.959257][ T5889] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 736.968347][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.032009][T18778] IPVS: using max 33 ests per chain, 79200 per kthread [ 737.042507][T18782] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 737.059061][ T8797] usb 5-1: string descriptor 0 read error: -71 [ 737.068466][ T5889] usb 6-1: config 0 descriptor?? [ 737.078230][T18782] /dev/rnullb0: Can't open blockdev [ 737.104415][ T8797] usbhid 5-1:0.0: can't add hid device: -71 [ 737.119132][ T8797] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 737.142816][ T8797] usb 5-1: USB disconnect, device number 80 [ 737.161916][T18788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.193471][T18788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.259422][T18791] /dev/rnullb0: Can't open blockdev [ 737.293825][T18768] loop6: detected capacity change from 0 to 63 [ 737.310586][T18771] buffer_io_error: 29 callbacks suppressed [ 737.310602][T18771] Buffer I/O error on dev loop6, logical block 0, async page read [ 737.331664][T18793] /dev/rnullb0: Can't open blockdev [ 737.343230][T18771] Buffer I/O error on dev loop6, logical block 0, async page read [ 737.351282][T18795] /dev/rnullb0: Can't open blockdev [ 737.358610][T18771] Buffer I/O error on dev loop6, logical block 0, async page read [ 737.373100][T18771] loop6: unable to read partition table [ 737.373476][T18796] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 737.380220][T18768] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 737.430920][T18768] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 737.433175][T18798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.448979][T18798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.464011][T18768] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 737.484030][T18796] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 737.495877][T18796] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 737.519220][ T5831] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 737.528071][ T5831] Bluetooth: hci3: Injecting HCI hardware error event [ 737.528290][T18768] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 737.538209][ T5831] Bluetooth: hci3: hardware error 0x00 [ 737.556263][T18803] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 737.612851][T18768] ldm_validate_partition_table(): Disk read failed. [ 737.632704][T18768] Dev loop6: unable to read RDB block 0 [ 737.638766][T18768] loop6: unable to read partition table [ 737.680045][T18768] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 737.878060][T18809] /dev/rnullb0: Can't open blockdev [ 737.920981][ T24] usb 6-1: USB disconnect, device number 28 [ 738.269048][ T5889] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 738.445780][ T5889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.457491][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 738.473961][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 738.486567][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 738.501069][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 738.518607][ T5889] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 738.533930][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 738.542831][ T5889] usb 5-1: Product: syz [ 738.547186][ T5889] usb 5-1: Manufacturer: syz [ 738.567468][ T5889] usb 5-1: SerialNumber: syz [ 738.589555][T18825] /dev/rnullb0: Can't open blockdev [ 738.613248][ T5889] usb 5-1: config 0 descriptor?? [ 738.681752][T18829] netlink: 57 bytes leftover after parsing attributes in process `syz.3.3840'. [ 738.696208][T18827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3839'. [ 738.725544][T18829] /dev/rnullb0: Can't open blockdev [ 738.824321][ T5889] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 738.850592][ T5889] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 738.869444][T18839] /dev/rnullb0: Can't open blockdev [ 738.873500][T18838] /dev/rnullb0: Can't open blockdev [ 739.024876][ T5889] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 739.036985][T18847] /dev/rnullb0: Can't open blockdev [ 739.043494][T18849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3846'. [ 739.053286][ T5889] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 739.066211][T18848] /dev/rnullb0: Can't open blockdev [ 739.073698][T18849] /dev/rnullb0: Can't open blockdev [ 739.079304][ T5889] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 739.225461][ T5889] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 739.337150][T18861] /dev/rnullb0: Can't open blockdev [ 739.394031][T18863] /dev/rnullb0: Can't open blockdev [ 739.486849][T18870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 739.603188][ T5831] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 740.090357][T18889] hugetlbfs: Bad value 'ßø‰' for mount option 'size' [ 740.090357][T18889] [ 740.161533][ T5831] Bluetooth: hci0: Malformed LE Event: 0x1b [ 740.301128][T18813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.310274][T18813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.385421][ T5889] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 740.406106][ T5889] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 740.426006][ T5889] usb 5-1: USB disconnect, device number 81 [ 740.726587][T18907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.760922][T18907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.808446][T18907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.836908][T18909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.849446][T18907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.856823][T18909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.959642][ T5842] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 741.090156][ T5842] usb 6-1: device descriptor read/64, error -71 [ 741.219010][ T5838] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 741.349093][ T5842] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 741.380598][ T5838] usb 1-1: config 0 has an invalid descriptor of length 151, skipping remainder of the config [ 741.393570][ T5838] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 741.422582][ T5838] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 741.435879][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.445000][ T5838] usb 1-1: Product: syz [ 741.449309][ T5838] usb 1-1: Manufacturer: syz [ 741.453987][ T5838] usb 1-1: SerialNumber: syz [ 741.476975][ T5838] usb 1-1: config 0 descriptor?? [ 741.489030][ T5842] usb 6-1: device descriptor read/64, error -71 [ 741.568401][T18918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.599611][ T5842] usb usb6-port1: attempt power cycle [ 741.618040][T18918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.692428][ T5838] usb 1-1: USB disconnect, device number 80 [ 741.939059][ T5842] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 741.979696][ T5842] usb 6-1: device descriptor read/8, error -71 [ 742.000788][T18925] /dev/rnullb0: Can't open blockdev [ 742.219002][ T5842] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 742.221237][T18926] sctp: [Deprecated]: syz.3.3866 (pid 18926) Use of int in max_burst socket option. [ 742.221237][T18926] Use struct sctp_assoc_value instead [ 742.240948][ T5842] usb 6-1: device descriptor read/8, error -71 [ 742.288903][ T5831] Bluetooth: hci1: Malformed LE Event: 0x1b [ 742.349482][ T5842] usb usb6-port1: unable to enumerate USB device [ 742.617302][T18939] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3869'. [ 742.641547][T18939] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3869'. [ 742.674877][T18940] /dev/rnullb0: Can't open blockdev [ 742.691593][T18941] /dev/rnullb0: Can't open blockdev [ 742.803519][T18943] /dev/rnullb0: Can't open blockdev [ 743.529224][ T5889] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 743.689301][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 743.702911][ T5889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.713288][ T5889] usb 5-1: config 0 has no interfaces? [ 743.718879][ T5889] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 743.772995][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.802272][ T5889] usb 5-1: config 0 descriptor?? [ 744.022276][T18953] loop6: detected capacity change from 0 to 63 [ 744.029238][T18953] buffer_io_error: 23 callbacks suppressed [ 744.029255][T18953] Buffer I/O error on dev loop6, logical block 0, async page read [ 744.047735][T18953] Buffer I/O error on dev loop6, logical block 0, async page read [ 744.089292][T18953] Buffer I/O error on dev loop6, logical block 0, async page read [ 744.097297][T18953] Buffer I/O error on dev loop6, logical block 0, async page read [ 744.147021][T18963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.155660][T18953] Buffer I/O error on dev loop6, logical block 0, async page read [ 744.164622][T18963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.174112][T18953] Buffer I/O error on dev loop6, logical block 0, async page read [ 744.189263][T18953] Buffer I/O error on dev loop6, logical block 0, async page read [ 744.197438][T18953] Buffer I/O error on dev loop6, logical block 0, async page read [ 744.214579][T18953] loop6: unable to read partition table [ 744.215004][T18961] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 744.222586][T18953] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 744.288126][T18961] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 744.838394][ T5838] usb 5-1: USB disconnect, device number 82 [ 744.882394][T18970] /dev/rnullb0: Can't open blockdev [ 745.253683][T18974] /dev/rnullb0: Can't open blockdev [ 745.503004][T18980] /dev/rnullb0: Can't open blockdev [ 745.691211][T18987] /dev/rnullb0: Can't open blockdev [ 745.851976][T18993] FAULT_INJECTION: forcing a failure. [ 745.851976][T18993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.880345][T18993] CPU: 0 UID: 0 PID: 18993 Comm: syz.0.3890 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 745.880373][T18993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 745.880386][T18993] Call Trace: [ 745.880394][T18993] [ 745.880403][T18993] dump_stack_lvl+0x189/0x250 [ 745.880432][T18993] ? __pfx____ratelimit+0x10/0x10 [ 745.880457][T18993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 745.880479][T18993] ? __pfx__printk+0x10/0x10 [ 745.880501][T18993] ? __might_fault+0xb0/0x130 [ 745.880533][T18993] should_fail_ex+0x414/0x560 [ 745.880567][T18993] _copy_from_user+0x2d/0xb0 [ 745.880598][T18993] ___sys_sendmsg+0x158/0x2a0 [ 745.880631][T18993] ? __pfx____sys_sendmsg+0x10/0x10 [ 745.880694][T18993] ? __fget_files+0x2a/0x420 [ 745.880720][T18993] ? __fget_files+0x3a0/0x420 [ 745.880756][T18993] __x64_sys_sendmsg+0x19b/0x260 [ 745.880789][T18993] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 745.880826][T18993] ? __pfx_ksys_write+0x10/0x10 [ 745.880847][T18993] ? rcu_is_watching+0x15/0xb0 [ 745.880871][T18993] ? do_syscall_64+0xbe/0x3b0 [ 745.880899][T18993] do_syscall_64+0xfa/0x3b0 [ 745.880921][T18993] ? lockdep_hardirqs_on+0x9c/0x150 [ 745.880944][T18993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.880963][T18993] ? clear_bhb_loop+0x60/0xb0 [ 745.880986][T18993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.881005][T18993] RIP: 0033:0x7f737058e929 [ 745.881023][T18993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.881038][T18993] RSP: 002b:00007f736e3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 745.881058][T18993] RAX: ffffffffffffffda RBX: 00007f73707b6080 RCX: 00007f737058e929 [ 745.881072][T18993] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 745.881084][T18993] RBP: 00007f736e3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 745.881096][T18993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.881114][T18993] R13: 0000000000000000 R14: 00007f73707b6080 R15: 00007ffe69480b68 [ 745.881143][T18993] [ 746.517730][T19002] /dev/rnullb0: Can't open blockdev [ 746.959674][ T5842] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 747.051817][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.129059][ T5842] usb 1-1: Using ep0 maxpacket: 8 [ 747.145617][ T5842] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 747.159658][ T5842] usb 1-1: config 0 has no interfaces? [ 747.165167][ T5842] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 747.189025][ T10] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 747.196740][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.227853][ T5842] usb 1-1: config 0 descriptor?? [ 747.379507][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 747.385362][ T10] usb 5-1: too many configurations: 85, using maximum allowed: 8 [ 747.404358][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 747.415089][ T10] usb 5-1: can't read configurations, error -61 [ 747.439480][T19004] loop6: detected capacity change from 0 to 63 [ 747.447078][T19004] ldm_validate_partition_table(): Disk read failed. [ 747.454965][T19004] Dev loop6: unable to read RDB block 0 [ 747.461222][T19004] loop6: unable to read partition table [ 747.470375][T19004] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 747.507366][T19004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.535451][T19004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.689053][ T10] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 747.879801][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 747.896563][ T10] usb 5-1: too many configurations: 85, using maximum allowed: 8 [ 747.929879][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 747.937492][ T10] usb 5-1: can't read configurations, error -61 [ 747.949836][ T10] usb usb5-port1: attempt power cycle [ 748.013023][ T5838] usb 1-1: USB disconnect, device number 81 [ 748.227116][ T5889] hid-generic C98F:0003:0000.0032: unknown main item tag 0x0 [ 748.251790][ T5889] hid-generic C98F:0003:0000.0032: unknown main item tag 0x0 [ 748.282885][ T5889] hid-generic C98F:0003:0000.0032: hidraw0: HID v0.00 Device [syz0] on syz1 [ 748.319156][ T10] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 748.359804][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 748.369495][ T10] usb 5-1: too many configurations: 85, using maximum allowed: 8 [ 748.394110][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 748.402517][ T10] usb 5-1: can't read configurations, error -61 [ 748.539084][ T10] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 748.589848][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 748.595680][ T10] usb 5-1: too many configurations: 85, using maximum allowed: 8 [ 748.605385][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 748.613161][ T10] usb 5-1: can't read configurations, error -61 [ 748.627937][ T10] usb usb5-port1: unable to enumerate USB device [ 748.688432][T19029] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 748.974152][T11752] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 749.386249][T19050] FAULT_INJECTION: forcing a failure. [ 749.386249][T19050] name failslab, interval 1, probability 0, space 0, times 0 [ 749.409014][T19050] CPU: 0 UID: 0 PID: 19050 Comm: syz.0.3903 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 749.409054][T19050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 749.409077][T19050] Call Trace: [ 749.409085][T19050] [ 749.409093][T19050] dump_stack_lvl+0x189/0x250 [ 749.409120][T19050] ? __pfx____ratelimit+0x10/0x10 [ 749.409143][T19050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 749.409163][T19050] ? __pfx__printk+0x10/0x10 [ 749.409189][T19050] ? __pfx___might_resched+0x10/0x10 [ 749.409212][T19050] should_fail_ex+0x414/0x560 [ 749.409243][T19050] should_failslab+0xa8/0x100 [ 749.409267][T19050] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 749.409288][T19050] ? __alloc_skb+0x112/0x2d0 [ 749.409317][T19050] __alloc_skb+0x112/0x2d0 [ 749.409363][T19050] netlink_sendmsg+0x5c6/0xb30 [ 749.409398][T19050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 749.409427][T19050] ? aa_sock_msg_perm+0xf1/0x1d0 [ 749.409450][T19050] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 749.409493][T19050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 749.409536][T19050] __sock_sendmsg+0x21c/0x270 [ 749.409562][T19050] ____sys_sendmsg+0x505/0x830 [ 749.409597][T19050] ? __pfx_____sys_sendmsg+0x10/0x10 [ 749.409635][T19050] ? import_iovec+0x74/0xa0 [ 749.409667][T19050] ___sys_sendmsg+0x21f/0x2a0 [ 749.409699][T19050] ? __pfx____sys_sendmsg+0x10/0x10 [ 749.409762][T19050] ? __fget_files+0x2a/0x420 [ 749.409788][T19050] ? __fget_files+0x3a0/0x420 [ 749.409834][T19050] __x64_sys_sendmsg+0x19b/0x260 [ 749.409882][T19050] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 749.409920][T19050] ? __pfx_ksys_write+0x10/0x10 [ 749.409940][T19050] ? rcu_is_watching+0x15/0xb0 [ 749.409964][T19050] ? do_syscall_64+0xbe/0x3b0 [ 749.409992][T19050] do_syscall_64+0xfa/0x3b0 [ 749.410015][T19050] ? lockdep_hardirqs_on+0x9c/0x150 [ 749.410046][T19050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.410066][T19050] ? clear_bhb_loop+0x60/0xb0 [ 749.410090][T19050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.410109][T19050] RIP: 0033:0x7f737058e929 [ 749.410127][T19050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 749.410144][T19050] RSP: 002b:00007f736e3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 749.410164][T19050] RAX: ffffffffffffffda RBX: 00007f73707b6080 RCX: 00007f737058e929 [ 749.410179][T19050] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 749.410191][T19050] RBP: 00007f736e3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 749.410203][T19050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.410214][T19050] R13: 0000000000000000 R14: 00007f73707b6080 R15: 00007ffe69480b68 [ 749.410242][T19050] [ 749.573554][T19054] syz.5.3906: attempt to access beyond end of device [ 749.573554][T19054] loop5: rw=0, sector=1, nr_sectors = 1 limit=0 [ 749.773049][T19054] qnx4: unable to read the superblock [ 750.235977][ T10] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 750.520431][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 750.528141][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 750.539503][ T10] usb 5-1: config 0 has no interfaces? [ 750.550589][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 750.565588][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.596209][ T10] usb 5-1: config 0 descriptor?? [ 750.755208][ T30] audit: type=1326 audit(3502881637.531:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19070 comm="syz.0.3911" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f737058e929 code=0x0 [ 750.808156][T19057] loop6: detected capacity change from 0 to 63 [ 750.815101][T19057] buffer_io_error: 35 callbacks suppressed [ 750.815119][T19057] Buffer I/O error on dev loop6, logical block 0, async page read [ 750.842557][T19057] Buffer I/O error on dev loop6, logical block 0, async page read [ 750.851534][T19057] Buffer I/O error on dev loop6, logical block 0, async page read [ 750.870174][T19057] Buffer I/O error on dev loop6, logical block 0, async page read [ 750.878133][T19057] Buffer I/O error on dev loop6, logical block 0, async page read [ 750.891984][T19074] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 750.907287][T19074] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 750.939214][T19057] loop6: unable to read partition table [ 750.963377][T19057] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 750.975967][T19074] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 750.988190][ T5831] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 750.988245][ T5831] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 750.991668][T19075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.996080][ T5831] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 751.046186][T19074] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 751.125869][T19080] /dev/rnullb0: Can't open blockdev [ 751.127714][T19075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.142667][ T30] audit: type=1400 audit(3502881637.901:155): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=19079 comm="syz.5.3913" [ 751.175225][T19074] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 751.275559][ T5831] Bluetooth: hci0: SCO packet too small [ 751.468249][ T5204] ldm_validate_partition_table(): Disk read failed. [ 751.478627][ T5204] Dev loop6: unable to read RDB block 0 [ 751.488855][ T5204] loop6: unable to read partition table [ 751.500616][ T10] usb 5-1: USB disconnect, device number 87 [ 751.869107][ T5842] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 752.043412][ T5842] usb 1-1: Using ep0 maxpacket: 16 [ 752.083008][ T5842] usb 1-1: unable to get BOS descriptor or descriptor too short [ 752.091763][ T5842] usb 1-1: config 6 has an invalid interface number: 253 but max is 0 [ 752.108252][ T5842] usb 1-1: config 6 has no interface number 0 [ 752.114510][ T5842] usb 1-1: config 6 interface 253 has no altsetting 0 [ 752.124005][ T5842] usb 1-1: New USB device found, idVendor=0830, idProduct=0061, bcdDevice=23.a6 [ 752.133680][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.142594][ T5842] usb 1-1: Product: syz [ 752.147106][ T5842] usb 1-1: Manufacturer: syz [ 752.158966][ T5842] usb 1-1: SerialNumber: syz [ 752.169273][ T24] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 752.429140][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 752.437056][ T24] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 752.445813][ T24] usb 6-1: config 0 has no interface number 0 [ 752.452273][ T24] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 752.474446][ T24] usb 6-1: config 0 interface 85 has no altsetting 0 [ 752.492771][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 752.503105][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.514748][ T24] usb 6-1: Product: syz [ 752.521879][ T24] usb 6-1: Manufacturer: syz [ 752.528988][ T24] usb 6-1: SerialNumber: syz [ 752.543356][ T24] usb 6-1: config 0 descriptor?? [ 752.595675][T19088] /dev/rnullb0: Can't open blockdev [ 752.605801][ T5842] usb 1-1: active config #6 != 1 ?? [ 752.626626][ T5842] usb 1-1: USB disconnect, device number 82 [ 752.945735][T19098] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 753.152295][ T24] appletouch 6-1:0.85: Geyser mode initialized. [ 753.199563][ T24] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input157 [ 753.228072][T19105] /dev/rnullb0: Can't open blockdev [ 753.499065][ T5838] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 753.660388][ T5838] usb 1-1: Using ep0 maxpacket: 8 [ 753.683256][ T5838] usb 1-1: unable to get BOS descriptor set [ 753.700324][ T5838] usb 1-1: config 1 interface 0 altsetting 11 bulk endpoint 0x82 has invalid maxpacket 1024 [ 753.722991][ T5838] usb 1-1: config 1 interface 0 altsetting 11 bulk endpoint 0x3 has invalid maxpacket 1023 [ 753.743686][ T5838] usb 1-1: config 1 interface 0 has no altsetting 0 [ 753.754990][ T5838] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 753.770416][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.778601][ T5838] usb 1-1: Product: ﳿ [ 753.787505][ T5838] usb 1-1: Manufacturer: Ñ‹ [ 753.792761][ T5889] usb 6-1: USB disconnect, device number 33 [ 753.794771][ T5838] usb 1-1: SerialNumber: à „ [ 753.798783][ C1] appletouch 6-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 753.826194][T19105] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 753.841317][T19105] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 753.931923][ T5889] appletouch 6-1:0.85: input: appletouch disconnected [ 754.127094][T19110] /dev/rnullb0: Can't open blockdev [ 754.298814][ T5838] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 754.322833][ T5838] usb 1-1: USB disconnect, device number 83 [ 754.969114][ T24] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 755.229890][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 755.237629][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.248753][ T24] usb 6-1: config 0 has no interfaces? [ 755.261041][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 755.273156][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.293713][ T24] usb 6-1: config 0 descriptor?? [ 755.505235][T19119] loop6: detected capacity change from 0 to 63 [ 755.590612][T19119] ldm_validate_partition_table(): Disk read failed. [ 755.600632][T19119] Dev loop6: unable to read RDB block 0 [ 755.614873][T19119] loop6: unable to read partition table [ 755.663857][T19128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.695659][T19119] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 755.717953][T19128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.884334][T19127] buffer_io_error: 41 callbacks suppressed [ 755.884355][T19127] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 755.899205][T19127] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 755.907765][T19127] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 755.917281][T19127] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 755.949645][T19127] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 755.966004][T19127] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 755.987214][T19127] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 756.155459][ T5838] usb 6-1: USB disconnect, device number 34 [ 756.484179][T19140] /dev/rnullb0: Can't open blockdev [ 756.504512][T19141] /dev/rnullb0: Can't open blockdev [ 756.648269][T18896] syz.3.3853 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 756.678836][T18896] CPU: 1 UID: 0 PID: 18896 Comm: syz.3.3853 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 756.678864][T18896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 756.678877][T18896] Call Trace: [ 756.678885][T18896] [ 756.678894][T18896] dump_stack_lvl+0x189/0x250 [ 756.678928][T18896] ? __pfx_dump_stack_lvl+0x10/0x10 [ 756.678950][T18896] ? __pfx__printk+0x10/0x10 [ 756.678987][T18896] dump_header+0xd3/0x480 [ 756.679014][T18896] oom_kill_process+0x3b6/0x950 [ 756.679044][T18896] out_of_memory+0xf09/0x12a0 [ 756.679079][T18896] ? __pfx_out_of_memory+0x10/0x10 [ 756.679111][T18896] mem_cgroup_out_of_memory+0x145/0x240 [ 756.679139][T18896] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 756.679184][T18896] ? _raw_spin_unlock+0x28/0x50 [ 756.679204][T18896] ? memcg1_oom_prepare+0x37f/0x450 [ 756.679227][T18896] try_charge_memcg+0xdff/0x1290 [ 756.679266][T18896] ? __pfx_try_charge_memcg+0x10/0x10 [ 756.679289][T18896] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 756.679323][T18896] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 756.679355][T18896] charge_memcg+0x9f/0x180 [ 756.679379][T18896] __mem_cgroup_charge+0x25/0x80 [ 756.679401][T18896] shmem_alloc_and_add_folio+0x7c1/0xf60 [ 756.679430][T18896] ? filemap_get_entry+0xad/0x2f0 [ 756.679453][T18896] ? filemap_get_entry+0xad/0x2f0 [ 756.679477][T18896] ? filemap_get_entry+0x28f/0x2f0 [ 756.679504][T18896] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 756.679531][T18896] ? shmem_allowable_huge_orders+0x1f8/0x420 [ 756.679563][T18896] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 756.679591][T18896] shmem_get_folio_gfp+0x59d/0x1660 [ 756.679629][T18896] shmem_write_begin+0xf7/0x2b0 [ 756.679657][T18896] generic_perform_write+0x2c4/0x910 [ 756.679699][T18896] ? __pfx_generic_perform_write+0x10/0x10 [ 756.679730][T18896] ? mnt_put_write_access_file+0xc0/0x100 [ 756.679751][T18896] ? file_update_time+0x416/0x490 [ 756.679775][T18896] shmem_file_write_iter+0xf8/0x120 [ 756.679795][T18896] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 756.679819][T18896] __kernel_write_iter+0x393/0x860 [ 756.679845][T18896] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 756.679869][T18896] ? __pfx___kernel_write_iter+0x10/0x10 [ 756.679889][T18896] ? __up_read+0x280/0x680 [ 756.679918][T18896] ? __asan_memset+0x22/0x50 [ 756.679948][T18896] ? iov_iter_bvec+0xb8/0x180 [ 756.679979][T18896] dump_user_range+0x8a0/0xc90 [ 756.680017][T18896] ? __pfx_dump_user_range+0x10/0x10 [ 756.680039][T18896] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 756.680076][T18896] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 756.680109][T18896] ? __kasan_kmalloc+0x93/0xb0 [ 756.680133][T18896] ? dump_emit+0xa6/0xe0 [ 756.680153][T18896] ? elf_core_dump+0x2c68/0x3900 [ 756.680188][T18896] elf_core_dump+0x32ed/0x3900 [ 756.680233][T18896] ? __pfx_elf_core_dump+0x10/0x10 [ 756.680261][T18896] ? kasan_save_track+0x4f/0x80 [ 756.680278][T18896] ? kasan_save_track+0x3e/0x80 [ 756.680295][T18896] ? __kasan_kmalloc+0x93/0xb0 [ 756.680313][T18896] ? __kvmalloc_node_noprof+0x30d/0x5f0 [ 756.680334][T18896] ? coredump_write+0x340/0x1900 [ 756.680354][T18896] ? vfs_coredump+0x1a4b/0x2ab0 [ 756.680374][T18896] ? get_signal+0x1109/0x1340 [ 756.680400][T18896] ? arch_do_signal_or_restart+0x9a/0x750 [ 756.680426][T18896] ? irqentry_exit_to_user_mode+0x81/0x120 [ 756.680449][T18896] ? exc_general_protection+0x171/0x200 [ 756.680475][T18896] ? asm_exc_general_protection+0x26/0x30 [ 756.680542][T18896] ? 0xffffffffff600000 [ 756.680566][T18896] ? up_write+0x1c4/0x420 [ 756.680593][T18896] coredump_write+0x1169/0x1900 [ 756.680635][T18896] ? __pfx_coredump_write+0x10/0x10 [ 756.680674][T18896] ? unshare_files+0xa9/0x140 [ 756.680701][T18896] vfs_coredump+0x1a4b/0x2ab0 [ 756.680746][T18896] ? __pfx_vfs_coredump+0x10/0x10 [ 756.680774][T18896] ? is_bpf_text_address+0x26/0x2b0 [ 756.680808][T18896] ? __lock_acquire+0xab9/0xd20 [ 756.680849][T18896] ? __lock_acquire+0xab9/0xd20 [ 756.680882][T18896] ? is_bpf_text_address+0x26/0x2b0 [ 756.680921][T18896] ? is_bpf_text_address+0x26/0x2b0 [ 756.680955][T18896] ? is_bpf_text_address+0x292/0x2b0 [ 756.680981][T18896] ? is_bpf_text_address+0x26/0x2b0 [ 756.681013][T18896] ? kernel_text_address+0xa5/0xe0 [ 756.681038][T18896] ? __kernel_text_address+0xd/0x40 [ 756.681063][T18896] ? unwind_get_return_address+0x4d/0x90 [ 756.681082][T18896] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 756.681105][T18896] ? arch_stack_walk+0xfc/0x150 [ 756.681142][T18896] ? stack_depot_save_flags+0x40/0x900 [ 756.681187][T18896] ? kasan_save_track+0x4f/0x80 [ 756.681204][T18896] ? kasan_save_track+0x3e/0x80 [ 756.681220][T18896] ? kasan_save_free_info+0x46/0x50 [ 756.681244][T18896] ? __kasan_slab_free+0x62/0x70 [ 756.681262][T18896] ? kmem_cache_free+0x18f/0x400 [ 756.681281][T18896] ? get_signal+0xa4c/0x1340 [ 756.681306][T18896] ? arch_do_signal_or_restart+0x9a/0x750 [ 756.681330][T18896] ? irqentry_exit_to_user_mode+0x81/0x120 [ 756.681351][T18896] ? exc_general_protection+0x171/0x200 [ 756.681376][T18896] ? asm_exc_general_protection+0x26/0x30 [ 756.681448][T18896] ? _raw_spin_unlock_irq+0x23/0x50 [ 756.681469][T18896] ? lockdep_hardirqs_on+0x9c/0x150 [ 756.681495][T18896] get_signal+0x1109/0x1340 [ 756.681545][T18896] arch_do_signal_or_restart+0x9a/0x750 [ 756.681578][T18896] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 756.681620][T18896] ? local_irq_enable_exit_to_user+0x5/0x10 [ 756.681652][T18896] irqentry_exit_to_user_mode+0x81/0x120 [ 756.681677][T18896] exc_general_protection+0x171/0x200 [ 756.681715][T18896] ? exc_page_fault+0x9f/0xf0 [ 756.681740][T18896] asm_exc_general_protection+0x26/0x30 [ 756.681758][T18896] RIP: 0033:0x7f720b18e931 [ 756.681775][T18896] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 756.681791][T18896] RSP: 002b:0000200000000160 EFLAGS: 00010217 [ 756.681809][T18896] RAX: 0000000000000000 RBX: 00007f720b3b6160 RCX: 00007f720b18e929 [ 756.681823][T18896] RDX: 0000200000000180 RSI: 0000200000000160 RDI: 0000000004000000 [ 756.681835][T18896] RBP: 00007f720b210b39 R08: 0000200000000280 R09: 0000200000000280 [ 756.681848][T18896] R10: 00002000000001c0 R11: 0000000000000206 R12: 0000000000000000 [ 756.681860][T18896] R13: 0000000000000001 R14: 00007f720b3b6160 R15: 00007ffdca5edda8 [ 756.681890][T18896] [ 756.689073][ T10] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 756.720700][T18896] memory: usage 307200kB, limit 307200kB, failcnt 18605 [ 756.952132][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.001150][T18896] memory+swap: usage 432148kB, limit 9007199254740988kB, failcnt 0 [ 757.010972][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 757.261540][T18896] kmem: usage 8224kB, limit 9007199254740988kB, failcnt 0 [ 757.278033][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 757.314674][T18896] Memory cgroup stats for [ 757.338444][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 757.366622][T18896] /syz3 [ 757.373826][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 757.398178][T18896] : [ 757.401799][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 757.402069][T18896] cache 299290624 [ 757.404249][ T10] usb 5-1: Manufacturer: syz [ 757.417261][T18896] rss 2322432 [ 757.424362][T18896] rss_huge 0 [ 757.426615][ T10] usb 5-1: config 0 descriptor?? [ 757.434419][T18896] shmem 299286528 [ 757.438718][T18896] mapped_file 0 [ 757.446524][T18896] dirty 0 [ 757.450381][T18896] writeback 0 [ 757.457602][T18896] workingset_refault_anon 903 [ 757.465526][T18896] workingset_refault_file 117 [ 757.472086][T18896] swap 127946752 [ 757.476756][T18896] swapcached 49152 [ 757.483188][T18896] pgpgin 544778 [ 757.496891][T18896] pgpgout 476166 [ 757.504284][T18896] pgfault 476881 [ 757.507872][T18896] pgmajfault 363 [ 757.513298][T18896] inactive_anon 231825408 [ 757.523263][T18896] active_anon 72257536 [ 757.527629][T18896] inactive_file 0 [ 757.533805][T18896] active_file 4096 [ 757.537555][T18896] unevictable 2064384 [ 757.544399][T18896] hierarchical_memory_limit 314572800 [ 757.552910][T18896] hierarchical_memsw_limit 9223372036854771712 [ 757.561498][T18896] total_cache 299290624 [ 757.565677][T18896] total_rss 2322432 [ 757.574739][T18896] total_rss_huge 0 [ 757.581676][T18896] total_shmem 299286528 [ 757.587529][T18896] total_mapped_file 0 [ 757.593939][T18896] total_dirty 0 [ 757.597436][T18896] total_writeback 0 [ 757.605925][T18896] total_workingset_refault_anon 903 [ 757.613184][T18896] total_workingset_refault_file 117 [ 757.621875][T18896] total_swap 127946752 [ 757.626073][T18896] total_swapcached 49152 [ 757.630689][ T24] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 757.643044][T18896] total_pgpgin 544778 [ 757.647382][T18896] total_pgpgout 476166 [ 757.653033][T18896] total_pgfault 476881 [ 757.658024][T18896] total_pgmajfault 363 [ 757.666976][T18896] total_inactive_anon 231825408 [ 757.671949][T18896] total_active_anon 72257536 [ 757.676560][T18896] total_inactive_file 0 [ 757.688252][T18896] total_active_file 4096 [ 757.692664][T18896] total_unevictable 2064384 [ 757.697186][T18896] anon_cost 0 [ 757.704109][T18896] file_cost 0 [ 757.708034][T18896] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3853,pid=18884,uid=0 [ 757.731081][T18896] Memory cgroup out of memory: Killed process 18884 (syz.3.3853) total-vm:98240kB, anon-rss:1092kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 757.799654][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 757.806824][ T24] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 757.818372][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.829071][ T10] rc_core: IR keymap rc-hauppauge not found [ 757.841684][ T10] Registered IR keymap rc-empty [ 757.852150][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 757.856878][ T24] usb 1-1: config 0 has no interface number 0 [ 757.878705][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 757.889233][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 757.894421][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.907543][ T24] usb 1-1: Product: syz [ 757.915709][ T24] usb 1-1: Manufacturer: syz [ 757.920559][ T24] usb 1-1: SerialNumber: syz [ 757.922405][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 757.937693][ T31] INFO: task syz.2.2891:15599 blocked for more than 143 seconds. [ 757.946831][ T24] usb 1-1: config 0 descriptor?? [ 757.954146][ T31] Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 [ 757.967186][ T24] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 757.968988][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 757.978449][ T24] usb 1-1: No valid video chain found. [ 757.993646][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input158 [ 758.008984][ T31] task:syz.2.2891 state:D stack:25096 pid:15599 tgid:15599 ppid:13080 task_flags:0x400040 flags:0x00004006 [ 758.034163][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 758.044987][ T31] Call Trace: [ 758.048458][ T31] [ 758.060570][ T31] __schedule+0x16f5/0x4d00 [ 758.072338][ T31] ? do_raw_spin_lock+0x121/0x290 [ 758.085686][ T31] ? schedule+0x165/0x360 [ 758.091602][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 758.109072][ T31] ? __lock_acquire+0xab9/0xd20 [ 758.117496][ T31] ? __pfx___schedule+0x10/0x10 [ 758.122546][ T5838] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 758.130644][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 758.142821][ T31] ? schedule+0x91/0x360 [ 758.147153][ T31] schedule+0x165/0x360 [ 758.159286][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 758.166685][ T31] __fuse_simple_request+0xf15/0x18d0 [ 758.172397][ T31] ? __pfx___fuse_simple_request+0x10/0x10 [ 758.178488][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 758.184793][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 758.193041][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 758.199401][ T31] fuse_flush+0x5d4/0x800 [ 758.204155][ T31] ? __pfx_locks_remove_posix+0x10/0x10 [ 758.210075][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 758.218177][ T31] ? __pfx_fuse_flush+0x10/0x10 [ 758.223780][ T31] ? css_rstat_updated+0x24f/0x4e0 [ 758.239172][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 758.246660][ T31] ? __pfx_fuse_flush+0x10/0x10 [ 758.252224][ T31] filp_flush+0xbd/0x190 [ 758.256790][ T31] filp_close+0x1d/0x40 [ 758.266279][ T31] __se_sys_close_range+0x359/0x650 [ 758.272193][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 758.285189][ T31] ? __pfx___se_sys_close_range+0x10/0x10 [ 758.297652][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 758.303339][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 758.313861][ T5838] usb 6-1: config 1 has an invalid descriptor of length 219, skipping remainder of the config [ 758.339077][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 758.352179][ T5838] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 758.371400][ T31] ? do_syscall_64+0xbe/0x3b0 [ 758.389364][ T10] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 758.399217][ T31] do_syscall_64+0xfa/0x3b0 [ 758.404093][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 758.412355][ T5838] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 758.429025][ T10] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 758.437577][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.443880][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 758.462192][ T31] ? clear_bhb_loop+0x60/0xb0 [ 758.472328][ T5838] usb 6-1: SerialNumber: syz [ 758.486071][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.514626][ T31] RIP: 0033:0x7efcad18e929 [ 758.532753][T19170] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 758.537617][ T31] RSP: 002b:00007ffcde2bd758 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 758.566794][T19170] /dev/rnullb0: Can't open blockdev [ 758.580080][ T31] RAX: ffffffffffffffda RBX: 00000000000923ad RCX: 00007efcad18e929 [ 758.588890][T13339] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 758.626807][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 758.644161][ T31] RBP: 00007efcad3b7ba0 R08: 0000000000000001 R09: 00000015de2bda4f [ 758.661857][ T31] R10: 00007efcad000000 R11: 0000000000000246 R12: 00007efcad3b5fac [ 758.675042][ T31] R13: 00007efcad3b5fa0 R14: ffffffffffffffff R15: 00007ffcde2bd870 [ 758.687519][ T31] [ 758.692610][ T31] [ 758.692610][ T31] Showing all locks held in the system: [ 758.709692][ T31] 1 lock held by khungtaskd/31: [ 758.711111][T19160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.721611][ T31] #0: ffffffff8e33bee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 758.734253][T19160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.757071][T19160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.770679][ T31] 2 locks held by kworker/u8:2/36: [ 758.775904][ T31] #0: ffff88801a889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 758.807717][T19160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.818260][ T31] #1: ffffc90000ac7bc0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 758.857560][ T5838] usb 6-1: 0:2 : does not exist [ 758.862643][ T31] 2 locks held by getty/5597: [ 758.867385][ T31] #0: ffff88814e1780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 758.902357][ T31] #1: ffffc9000331b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 758.920581][ T5838] usb 6-1: USB disconnect, device number 35 [ 758.923158][T13339] CPU: 1 UID: 0 PID: 13339 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 758.923191][T13339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 758.923208][T13339] Call Trace: [ 758.923217][T13339] [ 758.923227][T13339] dump_stack_lvl+0x189/0x250 [ 758.923287][T13339] ? __pfx_dump_stack_lvl+0x10/0x10 [ 758.923319][T13339] ? __pfx__printk+0x10/0x10 [ 758.923363][T13339] dump_header+0xd3/0x480 [ 758.923398][T13339] oom_kill_process+0x3b6/0x950 [ 758.923437][T13339] out_of_memory+0xf09/0x12a0 [ 758.923484][T13339] ? __pfx_out_of_memory+0x10/0x10 [ 758.923529][T13339] mem_cgroup_out_of_memory+0x145/0x240 [ 758.923567][T13339] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 758.923616][T13339] ? _raw_spin_unlock+0x28/0x50 [ 758.923642][T13339] ? memcg1_oom_prepare+0x37f/0x450 [ 758.923671][T13339] try_charge_memcg+0xdff/0x1290 [ 758.923721][T13339] ? __pfx_try_charge_memcg+0x10/0x10 [ 758.923750][T13339] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 758.923795][T13339] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 758.923834][T13339] charge_memcg+0x9f/0x180 [ 758.923866][T13339] __mem_cgroup_charge+0x25/0x80 [ 758.923894][T13339] filemap_add_folio+0x49/0x270 [ 758.923931][T13339] __filemap_get_folio+0x4f6/0xaf0 [ 758.923983][T13339] filemap_fault+0x89d/0x1200 [ 758.924028][T13339] ? __pfx_filemap_fault+0x10/0x10 [ 758.924066][T13339] ? __pfx_filemap_map_pages+0x10/0x10 [ 758.924100][T13339] ? __handle_mm_fault+0x27b7/0x5440 [ 758.924142][T13339] __do_fault+0x135/0x390 [ 758.924176][T13339] __handle_mm_fault+0x3611/0x5440 [ 758.924199][T13339] ? __lock_acquire+0xab9/0xd20 [ 758.924251][T13339] ? __pfx___handle_mm_fault+0x10/0x10 [ 758.924295][T13339] ? lock_vma_under_rcu+0xe0/0x410 [ 758.924323][T13339] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 758.924360][T13339] handle_mm_fault+0x40a/0x8e0 [ 758.924398][T13339] do_user_addr_fault+0xa81/0x1390 [ 758.924443][T13339] ? rcu_is_watching+0x15/0xb0 [ 758.924466][T13339] ? trace_page_fault_user+0x84/0x1e0 [ 758.924503][T13339] exc_page_fault+0x76/0xf0 [ 758.924535][T13339] asm_exc_page_fault+0x26/0x30 [ 758.924556][T13339] RIP: 0033:0x7f720b065974 [ 758.924591][T13339] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 28 fe e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 fd e7 00 48 01 d1 [ 758.924612][T13339] RSP: 002b:00007ffdca5ee130 EFLAGS: 00010202 [ 758.924633][T13339] RAX: 0000001b2c920000 RBX: 000000000000056c RCX: 00000000000b8920 [ 758.924649][T13339] RDX: 00000000087f2bf7 RSI: 00007ffdca5ee1c0 RDI: 0000000000000001 [ 758.924665][T13339] RBP: 00007ffdca5ee16c R08: 0000000020699f29 R09: 7fffffffffffffff [ 758.924680][T13339] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000001388 [ 758.924696][T13339] R13: 00000000000927c0 R14: 00000000000b84bb R15: 00007ffdca5ee1c0 [ 758.924732][T13339] [ 758.943341][T13339] memory: usage 306800kB, limit 307200kB, failcnt 19029 [ 758.968468][ T31] 3 locks held by kworker/u9:2/5831: [ 759.253319][T13339] memory+swap: usage 431972kB, limit 9007199254740988kB, failcnt 0 [ 759.269354][T13339] kmem: usage 8204kB, limit 9007199254740988kB, failcnt 0 [ 759.276531][T13339] Memory cgroup stats for /syz3: [ 759.276943][T13339] cache 299106304 [ 759.344810][T13339] rss 2523136 [ 759.355881][T13339] rss_huge 0 [ 759.364396][ T31] #0: ffff8880472f3948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 759.377878][T13339] shmem 299102208 [ 759.381660][ T31] #1: ffffc90003f17bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 759.401252][ T31] #2: ffff888027430dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 759.416346][ T31] 3 locks held by kworker/0:3/5838: [ 759.424737][ T31] #0: ffff888140468148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 759.433070][T13339] mapped_file 0 [ 759.444116][ T31] #1: ffffc90003f77bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 759.467427][ T31] #2: ffff888144bdc198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 759.489099][ T5889] usb 5-1: USB disconnect, device number 88 [ 759.503397][T13339] dirty 0 [ 759.507172][T13339] writeback 0 [ 759.514847][ T31] 6 locks held by kworker/1:4/5889: [ 759.514965][T13339] workingset_refault_anon 903 [ 759.528484][T13339] workingset_refault_file 117 [ 759.533841][ T31] #0: ffff888140468148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 759.536138][T13339] swap 127901696 [ 759.553209][T13339] swapcached 49152 [ 759.556958][T13339] pgpgin 545031 [ 759.568149][ T31] #1: ffffc900041f7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 759.590219][ T31] #2: ffff88823be6c998 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 759.591927][T13339] pgpgout 476414 [ 759.605680][ T31] #3: ffff88804f04a198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 759.606565][T15014] Bluetooth: hci0: command 0x0406 tx timeout [ 759.620992][ T31] #4: ffff88823bfda960 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 759.621079][ T31] #5: ffffffff8f1aade8 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x2d8/0x5e0 [ 759.636787][ T5831] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 759.659056][ T31] 1 lock held by syz-executor/12798: [ 759.665271][T13339] pgfault 476932 [ 759.668853][T13339] pgmajfault 363 [ 759.670703][ T31] #0: ffffffff8e3419f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 759.685828][ T31] 3 locks held by syz-executor/13339: [ 759.691750][ T31] 3 locks held by syz.3.3853/18866: [ 759.697096][ T31] 3 locks held by syz.3.3853/18868: [ 759.703258][ T31] #0: ffff88806bd9c428 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x1a4b/0x2ab0 [ 759.713149][ T31] #1: ffff88805d6271d0 (&sb->s_type->i_mutex_key#13){++++}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 759.724773][ T31] #2: ffffe8ffffc1f250 (&per_cpu_ptr(pool->acomp_ctx, cpu)->mutex){+.+.}-{4:4}, at: zswap_store+0xc74/0x1d10 [ 759.737539][T13339] inactive_anon 232071168 [ 759.737864][ T31] 2 locks held by syz.3.3853/18873: [ 759.747538][ T31] 3 locks held by syz.3.3853/18874: [ 759.753210][ T31] #0: ffff88806bd9c428 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x1a4b/0x2ab0 [ 759.754371][T13339] active_anon 71409664 [ 759.764220][ T31] #1: ffff88805d621ce8 (&sb->s_type->i_mutex_key#13){++++}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 759.779743][ T31] #2: ffffffff8e3fd3e8 (oom_lock){+.+.}-{4:4}, at: mem_cgroup_out_of_memory+0xa1/0x240 [ 759.790077][ T31] 3 locks held by syz.3.3853/18880: [ 759.795394][ T31] 3 locks held by syz.3.3853/18881: [ 759.801212][ T31] #0: ffff88806bd9c428 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x1a4b/0x2ab0 [ 759.807844][T13339] inactive_file 4096 [ 759.811740][ T31] #1: ffff88807bb0caa0 (&sb->s_type->i_mutex_key#13){++++}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 759.826679][ T31] #2: ffffffff8e3fd3e8 (oom_lock){+.+.}-{4:4}, at: mem_cgroup_out_of_memory+0xa1/0x240 [ 759.838034][ T31] 3 locks held by syz.3.3853/18886: [ 759.844502][ T31] #0: ffff88806bd9c428 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x1a4b/0x2ab0 [ 759.853608][T13339] active_file 0 [ 759.854495][ T31] #1: [ 759.857354][T13339] unevictable 2273280 [ 759.857369][T13339] hierarchical_memory_limit 314572800 [ 759.857381][T13339] hierarchical_memsw_limit 9223372036854771712 [ 759.860842][ T31] ffff88804ffe3080 (&sb->s_type->i_mutex_key#13){++++}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 759.888117][ T31] #2: ffffffff8e3fd3e8 (oom_lock){+.+.}-{4:4}, at: mem_cgroup_out_of_memory+0xa1/0x240 [ 759.894317][T13339] total_cache 299106304 [ 759.898541][ T31] 3 locks held by syz.3.3853/18896: [ 759.908042][ T31] #0: ffff88806bd9c428 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x1a4b/0x2ab0 [ 759.918115][ T31] #1: ffff88806356de38 (&sb->s_type->i_mutex_key#13){++++}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 759.929442][T13339] total_rss 2523136 [ 759.929459][T13339] total_rss_huge 0 [ 759.929468][T13339] total_shmem 299102208 [ 759.929479][T13339] total_mapped_file 0 [ 759.929489][T13339] total_dirty 0 [ 759.929499][T13339] total_writeback 0 [ 759.929508][T13339] total_workingset_refault_anon 903 [ 759.929519][T13339] total_workingset_refault_file 117 [ 759.929530][T13339] total_swap 127901696 [ 759.929540][T13339] total_swapcached 49152 [ 759.929550][T13339] total_pgpgin 545031 [ 759.935627][ T31] #2: [ 759.953176][T13339] total_pgpgout 476414 [ 759.958987][ T31] ffffffff8e3fd3e8 (oom_lock){+.+.}-{4:4}, at: mem_cgroup_out_of_memory+0xa1/0x240 [ 759.993423][ T31] 1 lock held by syz.3.3922/19116: [ 759.998822][ T31] #0: ffff8880251a01e0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1bd/0x4c0 [ 760.003362][T13339] total_pgfault 476932 [ 760.008726][ T31] 2 locks held by syz.3.3922/19117: [ 760.018816][ T31] #0: ffff8880251a01e0 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x16f/0x380 [ 760.028992][ T31] #1: ffffe8ffffc1f250 (&per_cpu_ptr(pool->acomp_ctx, cpu)->mutex){+.+.}-{4:4}, at: zswap_store+0xc74/0x1d10 [ 760.041908][ T31] 1 lock held by syz.0.3937/19151: [ 760.047144][ T31] #0: ffff88805ddf8208 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 760.057884][ T31] 1 lock held by dhcpcd/19164: [ 760.060209][T13339] total_pgmajfault 363 [ 760.063151][ T31] #0: [ 760.066737][T13339] total_inactive_anon 232071168 [ 760.066753][T13339] total_active_anon 71409664 [ 760.066765][T13339] total_inactive_file 4096 [ 760.070121][ T31] ffff888067950258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 760.094876][ T31] [ 760.097366][ T31] ============================================= [ 760.097366][ T31] [ 760.122984][ T31] NMI backtrace for cpu 1 [ 760.123001][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 760.123023][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 760.123034][ T31] Call Trace: [ 760.123041][ T31] [ 760.123050][ T31] dump_stack_lvl+0x189/0x250 [ 760.123074][ T31] ? __wake_up_klogd+0xd9/0x110 [ 760.123100][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 760.123127][ T31] ? __pfx__printk+0x10/0x10 [ 760.123160][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 760.123183][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 760.123200][ T31] ? _printk+0xcf/0x120 [ 760.123225][ T31] ? __pfx__printk+0x10/0x10 [ 760.123248][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 760.123277][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 760.123300][ T31] watchdog+0xfee/0x1030 [ 760.123327][ T31] ? watchdog+0x1de/0x1030 [ 760.123360][ T31] kthread+0x70e/0x8a0 [ 760.123385][ T31] ? __pfx_watchdog+0x10/0x10 [ 760.123409][ T31] ? __pfx_kthread+0x10/0x10 [ 760.123432][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 760.123454][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 760.123474][ T31] ? __pfx_kthread+0x10/0x10 [ 760.123498][ T31] ret_from_fork+0x3fc/0x770 [ 760.123529][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 760.123564][ T31] ? __switch_to_asm+0x39/0x70 [ 760.123585][ T31] ? __switch_to_asm+0x33/0x70 [ 760.123606][ T31] ? __pfx_kthread+0x10/0x10 [ 760.123630][ T31] ret_from_fork_asm+0x1a/0x30 [ 760.123686][ T31] [ 760.123694][ T31] Sending NMI from CPU 1 to CPUs 0: [ 760.146471][T13339] total_active_file 0 [ 760.150374][ C0] NMI backtrace for cpu 0 [ 760.150389][ C0] CPU: 0 UID: 0 PID: 13339 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 760.150409][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 760.150419][ C0] RIP: 0010:__lock_acquire+0xaf0/0xd20 [ 760.150448][ C0] Code: 75 2e 48 8b 1c 24 4c 89 bb e0 0a 00 00 8b 83 e8 0a 00 00 ff c0 89 83 e8 0a 00 00 83 f8 30 0f 83 64 01 00 00 3b 05 78 81 2d 12 <0f> 87 c9 01 00 00 41 bf 01 00 00 00 e9 a7 01 00 00 48 89 fb e8 57 [ 760.150463][ C0] RSP: 0018:ffffc90000007738 EFLAGS: 00000093 [ 760.150478][ C0] RAX: 0000000000000005 RBX: ffff888024c8bc00 RCX: d0c34df48542cf00 [ 760.150490][ C0] RDX: 0000000000000000 RSI: ffff888024c8c790 RDI: ffff888024c8bc00 [ 760.150502][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8190851a [ 760.150512][ C0] R10: dffffc0000000000 R11: fffffbfff1f852e7 R12: 00000000f53f2a93 [ 760.150524][ C0] R13: ffff888024c8c6f0 R14: ffff888024c8c790 R15: e70776d9a3a803e8 [ 760.150537][ C0] FS: 0000555592463500(0000) GS:ffff8881259e4000(0000) knlGS:0000000000000000 [ 760.150551][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 760.150562][ C0] CR2: 00007feb67780ab8 CR3: 000000005d786000 CR4: 00000000003526f0 [ 760.150576][ C0] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 760.150586][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 760.150596][ C0] Call Trace: [ 760.150602][ C0] [ 760.150612][ C0] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 760.150637][ C0] lock_acquire+0x120/0x360 [ 760.150659][ C0] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 760.150685][ C0] ? stack_depot_save_flags+0x40/0x900 [ 760.150712][ C0] _raw_spin_lock_nested+0x32/0x50 [ 760.150731][ C0] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 760.150754][ C0] raw_spin_rq_lock_nested+0x2a/0x140 [ 760.150790][ C0] sched_balance_rq+0x3361/0x57a0 [ 760.150824][ C0] ? __pfx_sched_balance_rq+0x10/0x10 [ 760.150846][ C0] ? __lock_acquire+0xab9/0xd20 [ 760.150879][ C0] ? rcu_is_watching+0x15/0xb0 [ 760.150903][ C0] ? __lock_acquire+0xab9/0xd20 [ 760.150933][ C0] sched_balance_domains+0x49f/0x9e0 [ 760.150957][ C0] ? sched_balance_domains+0x121/0x9e0 [ 760.150999][ C0] handle_softirqs+0x286/0x870 [ 760.151015][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 760.151032][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 760.151048][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 760.151069][ C0] __irq_exit_rcu+0xca/0x1f0 [ 760.151083][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 760.151101][ C0] irq_exit_rcu+0x9/0x30 [ 760.151115][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 760.151133][ C0] [ 760.151139][ C0] [ 760.151145][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 760.151162][ C0] RIP: 0010:vprintk_emit+0x58f/0x7a0 [ 760.151179][ C0] Code: 85 32 01 00 00 e8 21 6b 1f 00 41 89 df 4d 85 f6 48 8b 1c 24 75 07 e8 10 6b 1f 00 eb 06 e8 09 6b 1f 00 fb 48 c7 c7 80 01 33 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 b9 36 [ 760.151192][ C0] RSP: 0018:ffffc90003367200 EFLAGS: 00000293 [ 760.151205][ C0] RAX: ffffffff81a0b087 RBX: ffffffff81a0af44 RCX: ffff888024c8bc00 [ 760.151218][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e330180 [ 760.151228][ C0] RBP: ffffc90003367310 R08: ffffffff8fc29737 R09: 1ffffffff1f852e6 [ 760.151240][ C0] R10: dffffc0000000000 R11: fffffbfff1f852e7 R12: dffffc0000000000 [ 760.151252][ C0] R13: 1ffff9200066ce44 R14: 0000000000000200 R15: 0000000000000013 [ 760.151265][ C0] ? vprintk_emit+0x444/0x7a0 [ 760.151281][ C0] ? vprintk_emit+0x587/0x7a0 [ 760.151299][ C0] ? vprintk_emit+0x444/0x7a0 [ 760.151315][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 760.151330][ C0] ? vsnprintf+0x386/0xf00 [ 760.151346][ C0] ? vsnprintf+0xe11/0xf00 [ 760.151365][ C0] _printk+0xcf/0x120 [ 760.151384][ C0] ? __pfx__printk+0x10/0x10 [ 760.151404][ C0] ? memcg1_stat_format+0xa4d/0xa70 [ 760.151422][ C0] seq_buf_do_printk+0x19e/0x280 [ 760.151444][ C0] mem_cgroup_print_oom_meminfo+0x2b5/0x4b0 [ 760.151469][ C0] ? __pfx_mem_cgroup_print_oom_meminfo+0x10/0x10 [ 760.151500][ C0] dump_header+0x107/0x480 [ 760.151520][ C0] oom_kill_process+0x3b6/0x950 [ 760.151541][ C0] out_of_memory+0xf09/0x12a0 [ 760.151565][ C0] ? __pfx_out_of_memory+0x10/0x10 [ 760.151588][ C0] mem_cgroup_out_of_memory+0x145/0x240 [ 760.151610][ C0] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 760.151637][ C0] ? _raw_spin_unlock+0x28/0x50 [ 760.151653][ C0] ? memcg1_oom_prepare+0x37f/0x450 [ 760.151670][ C0] try_charge_memcg+0xdff/0x1290 [ 760.151694][ C0] ? __pfx_try_charge_memcg+0x10/0x10 [ 760.151713][ C0] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 760.151738][ C0] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 760.151762][ C0] charge_memcg+0x9f/0x180 [ 760.151780][ C0] __mem_cgroup_charge+0x25/0x80 [ 760.151797][ C0] filemap_add_folio+0x49/0x270 [ 760.151835][ C0] __filemap_get_folio+0x4f6/0xaf0 [ 760.151866][ C0] filemap_fault+0x89d/0x1200 [ 760.151892][ C0] ? __pfx_filemap_fault+0x10/0x10 [ 760.151915][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 760.151938][ C0] ? __handle_mm_fault+0x27b7/0x5440 [ 760.151959][ C0] __do_fault+0x135/0x390 [ 760.151980][ C0] __handle_mm_fault+0x3611/0x5440 [ 760.151997][ C0] ? __lock_acquire+0xab9/0xd20 [ 760.152026][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 760.152049][ C0] ? lock_vma_under_rcu+0xe0/0x410 [ 760.152068][ C0] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 760.152090][ C0] handle_mm_fault+0x40a/0x8e0 [ 760.152113][ C0] do_user_addr_fault+0xa81/0x1390 [ 760.152140][ C0] ? rcu_is_watching+0x15/0xb0 [ 760.152156][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 760.152180][ C0] exc_page_fault+0x76/0xf0 [ 760.152200][ C0] asm_exc_page_fault+0x26/0x30 [ 760.152215][ C0] RIP: 0033:0x7f720b065974 [ 760.152230][ C0] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 28 fe e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 fd e7 00 48 01 d1 [ 760.152244][ C0] RSP: 002b:00007ffdca5ee130 EFLAGS: 00010202 [ 760.152258][ C0] RAX: 0000001b2c920000 RBX: 000000000000056c RCX: 00000000000b8920 [ 760.152269][ C0] RDX: 00000000087f2bf7 RSI: 00007ffdca5ee1c0 RDI: 0000000000000001 [ 760.152281][ C0] RBP: 00007ffdca5ee16c R08: 0000000020699f29 R09: 7fffffffffffffff [ 760.152293][ C0] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000001388 [ 760.152304][ C0] R13: 00000000000927c0 R14: 00000000000b84bb R15: 00007ffdca5ee1c0 [ 760.152323][ C0] [ 760.167445][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 760.167470][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 760.167501][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 760.167518][ T31] Call Trace: [ 760.167529][ T31] [ 760.167540][ T31] dump_stack_lvl+0x99/0x250 [ 760.167575][ T31] ? __asan_memcpy+0x40/0x70 [ 760.167614][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 760.167641][ T31] ? __pfx__printk+0x10/0x10 [ 760.167685][ T31] panic+0x2db/0x790 [ 760.167714][ T31] ? __pfx_panic+0x10/0x10 [ 760.167737][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 760.167770][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 760.167809][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 760.167845][ T31] watchdog+0x102d/0x1030 [ 760.167880][ T31] ? watchdog+0x1de/0x1030 [ 760.167923][ T31] kthread+0x70e/0x8a0 [ 760.167956][ T31] ? __pfx_watchdog+0x10/0x10 [ 760.167989][ T31] ? __pfx_kthread+0x10/0x10 [ 760.168021][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 760.168048][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 760.168077][ T31] ? __pfx_kthread+0x10/0x10 [ 760.168112][ T31] ret_from_fork+0x3fc/0x770 [ 760.168165][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 760.168211][ T31] ? __switch_to_asm+0x39/0x70 [ 760.168249][ T31] ? __switch_to_asm+0x33/0x70 [ 760.168275][ T31] ? __pfx_kthread+0x10/0x10 [ 760.168303][ T31] ret_from_fork_asm+0x1a/0x30 [ 760.168345][ T31] [ 761.064394][ T31] Kernel Offset: disabled [ 761.068739][ T31] Rebooting in 86400 seconds..