last executing test programs: 2m8.382124147s ago: executing program 3 (id=1197): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) fadvise64(r0, 0x92, 0x5, 0x2) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000000)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000) (async) 2m8.325128931s ago: executing program 3 (id=1199): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000100)={r1, &(0x7f0000000080)=""/104}) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/162, 0xa2}, {&(0x7f0000000200)=""/25, 0x19}], 0x2, &(0x7f0000000280)=""/105, 0x69}, 0x4000) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r3, &(0x7f0000000340)="20c2ad587f1fc0ef5e74bc802ac117e449f4768b66fff79226392eb681628e434d711161cda26f30b2869091e3cc7f7bf1479fd5f235170f04dbc8015d2ecd8ee24b55cc529f4eabdc2a9b377523a8bd2e6165eba3c70199be25f5eef8009d5df5b64f7894d24770e1219135accea2", 0x6f, 0x240480c1, &(0x7f00000003c0)={0xa, 0x0, 0x4, @private2, 0x5, 0x3}, 0x20) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1800002, 0x12, r0, 0xad37b000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000400)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000440)={r4}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b) ioctl$KVM_GET_NR_MMU_PAGES(r5, 0xae45, 0x4) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000480)) pipe2$watch_queue(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pidfd_getfd(r7, r2, 0x0) sendmsg$inet6(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000500)="4c31cd3e335a473d2a318ee1e8c55673c15ac0ba26232db2f19fc91ca87e5f2fb78f27c67095a8fcddf8dc6f2469d5889564ed36a171e244af7386317efb0ddd8c85a25e83270950b346e510ad2976e953b9", 0x52}, {&(0x7f0000000580)="eff3bb7f49b037db05352e62a3a2358e4368ddf9f9b7591999e17b991216e2b10b22777717729222e77fd7b64e8d0ce2d022c218502a81f66e8a5d49cad859fdfc2266ee75", 0x45}, {&(0x7f0000000600)="070bf6515155acdae1d29b612fc11d0b9ae6b8df0b99f95696dfe422421b20a0b770ab6376bfaf1230e9609d44f311232f795f654e7620537c0d8f72f15ec9438cf76946221843b51e5b93a57d099412100bfe43", 0x54}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="933658c751a3d7b29b184f592a3167db0ae9a80798f446ecfb1cd831a2873c0e1e54441d7ead4a4f7dbc5c5e92e7d836792519adc80a6b1eb4ec9b5094361d8b6df1039611e5cd7e657461598f849913a3d8703f82b1ca6af4d8084da619cad09cf19eafc7ce60a4a6543b8e687bdfacaed03f8ede1e41270fadea1048150e2bfff65602102dd947509cb8d2c7bc810c27531e9c10661eb2e490153b61abbe6e98e6627e67e962dbcd5d1eabba014fc0075b5f86b5d9b804d033aee0a84badd6897a97ca859383691ee6a6cd922b6adc0747e1f6801827e2431aad5c4d5f2a150e59e7bc05b93e3757c283a36093cab7ca6e4913d4", 0xf5}, {&(0x7f0000001780)="ec832a2b386e", 0x6}, {&(0x7f00000017c0)="bb5417efc8a951c58b8d5b191ff490281cde4c22dafb94483d007b36154c482431c0f50444cfa534441dc77282f2041c17e03f437b44fb2162fea54effa253fb8d819cf3c37ff0ecfecc4f630ada7b13e20f04e0586168f9d1230e318443c95f77c090a215979dd3e5b27805420d0ee95799b2dd44cdaf73e3b3f774684c58b45329bffbd6f9e4501d44bfa3c055c83d4a51e5f4f04fc0671327717ffd71e419039d5a14f5970d09a9241e8b4e7fae5c5c576367b36219ae031e773a931fcd602b9bad63383d70ca9dc44f6936cb43f06a7ecdf3848f4993708938c486b4d7da684c2754766288925ae62a4d0875327f044340ee346f962190d820123387a4fc56a23e9a911f130505745c0d735101c41afa9d5ef7f4353f6b12c25c6ef5a28c04c3fb543e7001b9cc4a12301aba99b48dc70fe790625e2d2d65372ee17e518ba575cc52176b5c9470ec3dddc5741136dc1322de7b5217165548ca025bff6db16baa60a8b80afd81492b4e4098604eb2087e5885e80193b9ab17540041502c622e74175f28944a6bcf4146de4d9ec67ece01f1ca67f4add0ec6dd9f5c14cc2ba41e063cac26eb434c96db7f5181014bd8a42200bdf608ce511f6cb37551f1ca0fa0b1e32c857086de99187f21a40ce9d9fba79cca55f4d1eb5ae0d657862ca39466c8efbccccdfe54b4351f54592dc2af8045d8d73294618a79548d50b760e18e183aa29510f3df4403b922162f38fff5cdc57175396ef46b3e51da7ba49db7b5be48030e261121be539a4edc74afce96efa44137c20b31c672998725b30c8f29b4acdc826c7b921b0d1c6caf99849bfd4b84a659d1d58dfbf9b25ab28391bcd8bf402eb88cc18a3a3b161e9f6ec278a90b8cd3aa44c533a82c461648ce1847f73fd829d548e35d8d7738ad7f2456c43426db792a324b5ac6975904581a09954ff6bf5b54957e1ac9d3bd1e3d03c5fa5c945c1bb2c2a688657d89e3c38e2708c7d1be535a37d3372988afc0d4464087439ade963ff78cbeb21e106ef3f72f422c75fb54fc589af6a627452cdba40a0158b2b617f4a8c34f30dbcc24e672aacdfc8531952258032ef3dc5219655bad36a7045eb5e8b6bbe4013b77626412f53ba9b09408f55c4618d0b034f5373fd3945fa28d804c02bf482a41dfd2aa29e256536954fba7505b20e039176a1e88dafcd35db390137bde849f9d0e4f9529d959f611353dc85b1225d541ba998fd2afe35c72953fadfbd0b84b5650ed0df98792c4d8b0c0baba5061f8595f57c1e2695124682e513ffb3bb633d0ea26b5644d112b90fbfcefe00b82699a65355ba92d7766722497007616d36f4683d2de33eeecb4f2aed79c629abb1b1a518379d8695790ad6a0ce363636df89ed8a3d5e70c637e9500c12f849e39a2d67bf548e05f1c323b9291d44735a9bd83b6a14197cfae1f6eef524eefec0fd61c4b2db5f7be83722e95ef9b3b16644e609fd77b5725ace758f77b4b594d8a8d29baa90660fccf27514d6e5eea2e2163c1868c7b53d3780b28923a4d1a01140c5f51343bd7ec91d6a9323c2e4bc1d59a34b678218f6a69150e0048a1174b129858cf246ece19df17bb92ba77275f8d64371c363e1d8a5591a475a355cf1d8f0bd5a53d51adc81e827929f892c5fc26e491e0750ade618315c144a0cdab8d46c3403d99b04a003a6cb03745dec57e077c1be527c8fd55f626a6a0dd13c200511e8565233190bc87e831d6491c61a642d751309a518220608778d73f55c6c0e0d5213c57c83cbb409a5a1e3b036aef64d10bdad41f42759f02f196e7374251ff8d6a91f3a507822c427b7aa214e578418d60000ebbdd0086552071e0176e624fecee21742dbbee7937b5ff3762c8080fa89d98ae9035b3293522a649b6f9e0d458a8fe623075653c3ac14096e3005931efd88447a6d6a5e917084e5494216ab5b1fc5e1bc3ceb6016d63b3f90f5cfb5c5e0fbb233753f9c38fbbc49806cd30304d992c536611b1ea082f24c1a6151747d0ebb85f6733f41b87d764c148ede6dc500bfc0f0de5db44e0c961582c9c302ce3d19fc2b38993f65b91fdffa0e0fb434936b574fa68d0b268cbd64ed8f48a4ba77f62631cc9337160a90291037cc3ae9c26b9028cbae344d8a5ca072a818cf4c1cf47e1bc054dd6e186570e2b0efd490f4631367d3cb9dc113788975d5e25c146014d702783f4371ee1530704bfa0836beee379e725249133bf3d65538adc5adeb581f75b2a2f5d0e48771ebc00f1bae61492d18eff41f564c7b48a90ec93ae580f5a3ffa0023749b1a238f86cf103f4e2b063a4f655a1807bcf7d98fba95a91651c3c972e97b9d6a64eeff424ce7887608b8c19434132114dd1a138234eea3f1d42597a74999bd029a6971dba72913a7321fe43743c5dab4ba13831d0ac3811106741d8e684ee042f112026f77bec885a2f5fe90cd58bbb1fe4c6526f06e5f8a656ce39274be7256ee6f3c0df68386215cbcb410d4e7b5ea8a919556ffa3a8308cabb3d0fe4df9161d5697b2b7d850450f59083bbc4faa9728dc25d399067964f46dfa33d332e082b214ac696daf4446ab248f10d41bdc68f53a6f68baf287e49c89450c0795bc0a1afe832c146bb18c1b1d5a24067ac9a72c837a79ab75d2b6c0f8a214049e54e6fbaefbdce2dc1118f9f30f478c2c75e005cc4864ff10ad9f4e39c2074febbf48899d1f37f1fa729737c5e1855152a343599c41c75a5c80160eb75907475d5843bb26c10d6309475cf036561d0c75c48e43314c7234e908fc2b79b6cadd3cece2f30ea7b477c0858d6f2237ec3479bc5406ea115f6ac41cd830d63d428a80e877768653326720abe8a6b8d305445ec6a18ba01541154e5471d9ac13f814f06f9d4f5bea733ddbf3b43c8ba999ac332ec277758333f2e4cc21d4d20c91dfb2ab4c85187d16ceec5fa01a6958530485abac58f0ed90f3a956b3b90e414844457c856b864dec3c599ebe9d9f05ffff5c6e61d4122914b9193d70d40cc96f71ed6c400e2aae8966e48518f80765eedde0af9c6f930c49f2b42212566a1a833bb34b57330cd0f815727c8c82c810f73bd12f7e75eef09a045cd938293f111bb4be60fbba784852b91532a4b8d04648593cb2200845b7bda1116146a7203066408100eea1c2b81b92643733f265c91c14f53499eadc9e624a20e6d75138952157c1d41133063c5e46f33a1581026a6165ab95c5819a0898210b22801e4e601caf0161510afd7bbc6a38e59681bdd367bdefa519b0d268f546ceed0a285a0a11e89c861fd489e4faf2cb7a6f27c362c9fa8b64a988fa4f7d751e66c50d0dfbdd1186dc8a1b850ee41479caa3606d1f26300a30071700dd3d9fe48a1b5a4170043de8728bb86bd4e0fd096e3cc9dc3885bf1c74852c23fe479fd0597986e23b3921be6351a11c0c69e936facd46d58afeaf182c3091a2758beaad571915c7d4288ce7eb3a6d091b1505b5d8e445836327967e558d8f34f1f3d89bdbf39d6af44ae6be13bddef412aa99c22a6b49a677bc82b67106aaea37a72c3003857dc47d0907d43dce36fa04805cccc81e9d42cde6840b153dad84cd86aac71948ccea09a1cecdff50ec52a77ba1686822b6646b7c82738fa482577fb0a5633511104878b094aad2a8286886e0b5cc4c5c2c60364e8b94e08cf9e5e94fcf0f93bb355515ed5ad302db2fec2ca6ae21070d7de013403bd828682a20c6242278fb945f84652416afa78f5301841b198398b6a703eb1c376caae9f14bafd7d5b93b331ec66e08485a6909ada93acd23ff8063d2df454fcecd6acc529ebcf0133feab3db982ddf441b9d97c6df9eb1d5795bf4b81bc7d374fb49bf5c961dc42e4326bce11ee2d504f2ce53b83dce58d85da4c3faf349c23b864a8340db3e055ebbd470d56439b37fde1db4137bd25d29a8cc964d8ebba8ea2742a3ad279418dd25f4e15dae5e7294e4f6dfa5f5e786abed6bc229133262ee70edf7969410488d02af1f52e6daabfd935231774a630224dca72776d9649da5d934bd74b6cad1119c939d94c1818e106fb6239326442043092524bdafc67b98e098947538744db1d0a1155bddfcb2419d393355a5ed306d081f7d5232ec2313cbb95851cbf6cada068db100a115d3a8bd7c8f73d64692934018630671805893acf3f1f3ed26bfeb8ab49d71debc56d6ab5786516172c179ede35b10fabe6dd97412b4a8941d2e966f94b636281005bbe777022b21771add8c8ff09929a491f18987ea87b6755e3921c73bb6363c6b80aee7fb9f5d45274c59792b565052d8cbac0eaf6698f7ccfa70b1d26e21b73890c551bfbcb83ca9deb60a4a64b0c5f4e0fa72861497e9b01277e0f92d1d5e1910f23ebcfba94eaa0aa76df8b5ca935d627eaa0d1baee19f42285214fbe3d26c61d3977bb78947179dd9bb20d052a80599259d53b850bcfee75c41f20ec7418549984184e71ca415a629f36789b75a8f25d141cb9ac556829392292fc5dae380cdf673d1b0e8acbc871652ba1146ffa168994a76655d2605a236fb5dc82c6eeb3b968823de2093c4e0e298227d851ee83eff0381a72795954a658232df762ed50d70f375c62cbf26b23f163bca2144577266d1685ddb094cc408cf9eb6f731ecfc5a832593c273994db995aa0afb760b38fb6b4a8a4c4d6857370d44c3842f96f46943c57ef54add36466569ee25f52c23da84be45ca8c6aed0562fb695795daf7af5e2ab3d2f0c20dc74bdbfc76ef99af6b858f9829be9d55ef28335cff7e132b7022bd88fdfc1b380eceaf93a78ccc93b48734a35b92243d92bb18df3ec54cfa900543599fd758dc531e6b05412a3006278fd819076521285539464e545358128802b9060dc78b5f3ac99ff92a68895a02b3f8987bb9be591ab3e77ba2d500011eccddacb97d690ec76bb8fd8ea7f7cbd42afd5c526e55959207e4006a47608568325937945802ad59e2d465cb993290b6c95531cce7892d4fe026eceff4fd04fef6454e946d9c9cec7bd600475fc599f04c8702ba726f2402571788c7524ca68071ccbc0d1db7463a822e4f71e1f91b172dec698c23e13cdb0cab820e3bb113aaecbfdfccd559f77cf5fc151de997547f99e5e1293139f3d4f2f21238d26038875714dced40faf6cf1a8e93afc849bf3a2f895670baf68be9d12cd15ae01d91f56433fcd00570da47ed2fc9a533a6476d1619eb434ff9c0bd5c4b88635a4b2234d47b8167a17fd8964def00e1b1c5c6bc852e57f79d19b3b15fb573db96da6cf17e7b71ef835788143b843a23a86e35ae72752e59a864b540c97a704f03e1900d59121a0068147f98f9919b6ae97d41c723dd1e9e16fb94c679a8bf594c673914988a4dde796eaf800a017ddc816d864f655ba2649a1fc3884a33f26f229b6c12242aa7a68f5341bc34c4aca7af814baa1228e441a2682cc87d61a46e46ef7a1e8cf40918b2e6105306c6dcd665ae27e5133a8ae909a962c70bacf356fae5f1e7952da864c28ef3997f0dfd98441b5b93d1e1611a45a831f413de12b346ccb2f30f9e8e915df13cf153cf52c67703f826a3aa0e794af2764d4346776f702b55a597c9ecec055dc10c9958b267fcf9a6a7b47ca53004f75f00d99aee8f04dd35f97a0e1c5402d5187250e35d00a82a8ee43611c71403c0ea432d1ac30f70a2fe3ae1cc0505a284c7d3bbcebbaa7f0a091fe572197f218079a8df37e5feb30bf5547039dae61976366e5672c317e2a669ed0d30f5f79cd289636775b442ec928c532d0", 0x1000}, {&(0x7f00000027c0)="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", 0xfd}, {&(0x7f00000028c0)="f24e6b4e7a1a95ca11230fec85b6bcd9492e99099b186c67bf70bb8a92970d52a7badeeeb3ba0185159fc2d5b21d7c437e9163bb85c4c89a4d9fc4ecda19d3a5f41502001f7c0384f59ba0279ecc66908492ec0028f7b16ee78a70a69065e678e15a2b60f4daf74d12094adf644df90e70e646025c6c1a6e4266060d4e881dd9892ddd31089bc333cbf8fc20f716c808d26096b2", 0x94}], 0x9, &(0x7f0000002a40)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x33, 0x6, 0x0, 0x8, 0x0, [@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7fff}}], 0x60}, 0x8000) setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000002b00)=@netrom={'nr', 0x0}, 0x10) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002b40)) sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000002cc0)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002c80)={&(0x7f0000002bc0)={0xb0, 0x4, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x58, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_vlan\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x404bb788}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x41c90cae}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x762c6fa3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x44000}, 0x1) ioctl$KVM_CREATE_VM(r7, 0xae01, 0xd) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000002d00)=0x7) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f0000002e80)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002d80)={0xc0, 0x1, 0x8, 0x801, 0x0, 0x0, {0xf, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x703e}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6007}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1a) ioctl$KVM_GET_NR_MMU_PAGES(r8, 0xae45, 0xa) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000002ec0)=0x800000) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000002f00)={0x6, 0x6}) mount(&(0x7f0000002f40)=@rnullb, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002fc0)='sysfs\x00', 0x12, 0x0) openat$cgroup_ro(r7, &(0x7f0000003000)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) close_range(r6, r5, 0x0) socket$netlink(0x10, 0x3, 0x13) 2m7.494256448s ago: executing program 3 (id=1204): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000828bd7000fddbdf251000000008000600030000002c00038006000400010000000600040001800000080001000200000008000100000000000800090000000000"], 0x48}, 0x1, 0x0, 0x0, 0x54}, 0x4040) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x8000, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) socket(0x2c, 0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r6, 0x52fbe000) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sigaltstack(0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r8 = socket(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f00000000c0)={@multicast1, @multicast1, r9}, 0xc) setsockopt$inet_mreqn(r8, 0x0, 0x24, &(0x7f0000000040)={@multicast1, @broadcast}, 0xc) 2m7.473508719s ago: executing program 3 (id=1205): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101a02, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xa) r3 = dup(r2) rt_sigaction(0x20, 0x0, &(0x7f0000000380)={&(0x7f0000000280)="f20f34c4e1f82b710026f3440faedac4e27d1d318f491891c6c4617167302e3e660fe6a30e000000f04383720406426e420f01da", 0x0, 0x0}, 0x0, 0x0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) write$cgroup_netprio_ifpriomap(r4, &(0x7f00000010c0)={'vlan1', 0x32, 0x39}, 0x8) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffff20}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)={0x30, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0xd, 0x7, 0x0, 0x0, @str='\xd0@:-}-+)\x00'}]}, 0x30}], 0x1}, 0x0) (async) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f00000004c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x4}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="580000004b8004023655fdbaded39d65000b4824ca940417a3cd3639e431e8e2125f6c00940f6a0325010ebc0000000000000080001328baf0fffeffe809005300fff5dd02000000000000000c10003d5bcf6916b4114b321d3792c395da89991a8be619c7ce1ecf8b6e3501aeb67cdb99f356f9518492f0df275f9f6dd0e185ac9b0b8902c883e0b63cf78a6f36e67cab227f62b6d35dcd058a8957d1bbf401e51d4302cbc17c3201e7b12fa4daac244b96d479183b429bbe400236", 0xbc}], 0x1) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r9, 0x3b84, &(0x7f0000000100)={0x20, r10, 0x0, 0x0, &(0x7f0000000140)}) (async) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000140)={0x18, r10, 0x8, 0x6d99}) 2m7.41589211s ago: executing program 3 (id=1206): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000880)={0x0, 0xc, 0x3, 0x7, 0x8, 0xfffffffc}, &(0x7f00000008c0)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00b16c", @ANYRESHEX=r2, @ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRESHEX=r2]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00b16c", @ANYRESHEX=r2, @ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRESHEX=r2]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x10010618, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r2, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000088c0)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x30, 0x0, 0x0, [{0x6, 0xe4b, 0x7, 0x94c, ':,/,-(&'}]}, 0x0, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x2c) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000080)={0x12, 0x0, 0x0, "fcbde6470c5da89eae786a6b5d4510d5beac663b9997ccd88f25250f16ea2c71"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119edbbebbb6, 0x20010, r0, 0x52fbf000) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000000000)={[{@stats}]}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000100)={0x98f905, 0x9}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_open_dev$media(&(0x7f00000007c0), 0x2, 0x0) (async) r9 = syz_open_dev$media(&(0x7f00000007c0), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r9, 0xc0487c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000c00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r9, 0xc0487c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000c00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r9, 0xc0347c03, &(0x7f0000000e80)={{}, {0x80000000, 0x0, 0x0, [0x3, 0x80]}}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000021000/0x2000)=nil}) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000140)={0x9}) (async) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000140)={0x9}) 2m5.546467224s ago: executing program 3 (id=1213): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000080)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x1, @random="72458a4fb7eb"}, 0x0, {0x2, 0x4e20, @multicast1}, 'erspan0\x00'}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000100), 0x4) 2m5.372354s ago: executing program 32 (id=1213): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000080)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x1, @random="72458a4fb7eb"}, 0x0, {0x2, 0x4e20, @multicast1}, 'erspan0\x00'}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000100), 0x4) 1m26.65658817s ago: executing program 1 (id=1686): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) (async) sendto$inet(r1, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) (async, rerun: 32) sendto$inet(r1, &(0x7f00000001c0), 0xfffffffffffffe58, 0x2000c094, 0x0, 0xffffffe6) (async, rerun: 32) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7ffff000, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="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", 0xfdae}], 0x1) 1m26.610407358s ago: executing program 1 (id=1689): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, 0xffffffffffffffff, 0x2000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) statx(r2, 0x0, 0x1000, 0x6000, 0x0) 1m25.688213779s ago: executing program 1 (id=1703): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$caif_stream(0x25, 0x1, 0x4) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) sendmmsg$inet(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) setsockopt(r0, 0xc, 0x0, &(0x7f0000000140)="531bea8df534cd4d3875a516778eb4e1d8be80aec3177e47cbac43b5b79a93495f1f8fa30e022f1d1091ed458b08b50ef4619235b275b5a08a9c44ca588208b209f3857f0e1b32bcdebb7a543565cd8705b32f2aa5856fc278ae4bc66e62d1fd05e8f8c694b0ca76d4cac6301b44d97bb4fb030d120331addb83fb3d4aec0c82bc02671c24cafee07820ede87d", 0x8d) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000)=0x35, 0x4) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f00000006c0)=0x7, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0xd0009411, &(0x7f0000001180)={{r8, 0x602b, 0xbf, 0x6, 0x0, 0x0, 0x8, 0x8, 0xb, 0x3, 0x6, 0x8, 0x3, 0x5, 0x7}}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x207f, 0xc, 0x5, 0x1}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x20010, r1, 0xffffb000) splice(r6, &(0x7f0000000040)=0x484, r9, &(0x7f0000000080)=0x6, 0x9, 0x1) socket$netlink(0x10, 0x3, 0x12) syz_open_dev$tty20(0xc, 0x4, 0x1) 1m24.836615218s ago: executing program 1 (id=1711): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1b) (async, rerun: 64) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) (async) open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x200000, 0x27) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) (async) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, 0x0, &(0x7f00000008c0)) (async) ioctl$TCFLSH(r0, 0x540b, 0x2) (async) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 1m24.746103737s ago: executing program 1 (id=1714): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x5708e000) set_mempolicy(0x4000, &(0x7f0000000080)=0x5, 0x400) 1m24.118686697s ago: executing program 1 (id=1719): getdents64(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000040)='./file0/file0\x00', 0xa6) r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24000000, 0xfffffffffffffffd, 0x0) mount(&(0x7f0000001400)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) 1m23.61090964s ago: executing program 33 (id=1719): getdents64(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000040)='./file0/file0\x00', 0xa6) r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24000000, 0xfffffffffffffffd, 0x0) mount(&(0x7f0000001400)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) 6.462351093s ago: executing program 2 (id=2280): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80d81) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000340)={{0x7d}, 'port0\x00', 0x0, 0x140043}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x3, &(0x7f0000000580)=[0x138d, 0x8004, 0x1, 0x4, 0x9, 0x1ed, 0x2, 0x2, 0xbb, 0xc58f, 0x2060, 0xfed, 0xfffffffa, 0x1ac, 0xfffffff8], 0x0, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000551000/0x400000)=nil) 6.445148758s ago: executing program 2 (id=2281): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket(0xa, 0x2, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x81, 0x17}}}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9c3bfa0ad15a2b815201f94e5262f38e"}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) socket(0x10, 0x803, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009b1c3d107b061a33314a01020e4203010902120001000500000904a10000c2160200"], 0x0) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6(0xa, 0x80000, 0x161) sendto$inet6(r6, 0x0, 0x0, 0x40000, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r8 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r9], &(0x7f0000000240)=[0x2], &(0x7f0000000200), &(0x7f0000000280)=[0x7fffffff]}) set_tid_address(0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x1, 0x0, 0x5, &(0x7f0000000040)={0xfe, "9989c68556dd9d63a9a0cb7da9cb879ac40f981015593121eec7061ac272a7cb2d"}}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000480)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x4, 0x0, 0x0, 0xe, 0xc6, 0x2}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2a00a9, &(0x7f00000003c0)=ANY=[@ANYBLOB="6e722805168636b56e6f6465733d382c10"]) mlock(&(0x7f00002d6000/0x2000)=nil, 0x2000) 3.422157478s ago: executing program 2 (id=2308): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x68, 0x0, 0x3, 0x6, 0x0, @remote, @remote}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x1, 0x0, 0x8}}}}, 0x36) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x110, r5, 0x100000000) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r6, 0x5708e000) 3.320265252s ago: executing program 2 (id=2309): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004081}, 0x40) write$UHID_CREATE2(r3, &(0x7f0000000080)=ANY=[], 0x1df) (async) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000000)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "28ce30ec8d08598948224ad54af2c11d875397bdb22d0000b420a1a93c5291ecc6f19e01177d3d458dd49928610000002000", "b6000000551265406c7f3004000000ef00"}}) (async) pwrite64(r1, 0x0, 0x0, 0x8) (async) recvmsg$kcm(r3, &(0x7f0000000400)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000440)=""/27, 0x1b}, 0x10021) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff}, 0x80) r5 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000280)="8e41d7f909db12c940370800000000000043f7b8d39a182c1110b900103545b85cd042291b82a5369d9b4a315396aa71b63cc04bcb867b27a7078e482f31", 0x65, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) keyctl$chown(0xf, r5, 0x0, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(r6, &(0x7f0000000200)=[{{&(0x7f0000000600)=@abs={0x0, 0x0, 0x4e33}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x24000010}}], 0x1, 0x4000c) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2711, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0xc80, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x8000000000000000) (async) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r10}) 3.248312794s ago: executing program 2 (id=2310): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/address_bits', 0x0, 0x84) read$FUSE(r4, &(0x7f000001d980)={0x2020}, 0x1b9) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x1, 0x1, 0x2, {0xa, 0x4e24, 0x9, @remote}}}, 0x3a) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x2, @none, 0x87, 0x2}, 0xe) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="a4dd45adb84e0cd983425e495179abf37837630045ee1105c4814aef235919c3fbed2528"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000140)={0x7, &(0x7f0000000200)=[{@fixed}, {}, {}, {@fixed}, {}, {@fixed}, {@fixed}]}) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r7) sendmsg$NFC_CMD_FW_DOWNLOAD(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000ffdbbc2515000000080014007881217d08000100", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x94) read$msr(r0, &(0x7f0000000640)=""/33, 0x21) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write$tun(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000) 1.676563744s ago: executing program 0 (id=2324): pipe(&(0x7f0000000040)={0xffffffffffffffff}) writev(r0, &(0x7f0000001080)=[{&(0x7f0000000080)="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", 0x1000}], 0x1) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x10, r1, 0xd07ff000) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000000)=0x1) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x177) openat$uhid(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) io_setup(0x5, &(0x7f0000000e80)=0x0) syz_io_uring_setup(0x4, &(0x7f0000000580), &(0x7f0000000080), 0x0) io_pgetevents(r2, 0x403, 0x80000f0, &(0x7f0000000600)=[{}, {}], 0x0, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f0000000080)="8c", 0x1}]) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000040)={0x99b, 0x8, 0xc051, 0x3, 0x2, 0xff}, 0xc) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d04, 0x0, 0x8}]}) r9 = getpid() ptrace$poke(0x5, r9, &(0x7f00000010c0), 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.645607232s ago: executing program 0 (id=2325): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x1ce) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) ftruncate(r2, 0x1) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x7}, 0x4) setsockopt$sock_int(r3, 0x1, 0x2c, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x407, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x8, 0x8001, 0x31324d59, 0x2, 0x86, 0x4, 0x2, 0xdd4, 0x1, 0x3, 0x1, 0x2}}) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, 0x0, 0x4c) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 1.247891689s ago: executing program 5 (id=2331): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fadvise64(r0, 0x100, 0x1ff, 0x1) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 1.244775692s ago: executing program 5 (id=2332): r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x80, 0x120) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x2, 0x6, 0x3, 0x0, 0x7}) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), 0x4) r1 = memfd_create(&(0x7f00000000c0)='.log\x00', 0x9864eb84261ad81c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000100)) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000140)={0x9, "0c63b527189d4fe8e7ec77f975ea0416d1bf343beab8359e0441d58e1c66df8e", 0x730, 0x4, 0x25, 0x4, 0x4}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000200)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8000, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000280)={@desc={0x1, 0x0, @desc3}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000300)={0x0, 0x10, 0x0, [0x8ad, 0x8, 0x604d, 0xb, 0x3168], [0x2, 0x7, 0xffffffffffffff2c, 0x1, 0x6, 0x900000, 0x8, 0xfffffffffffffffa, 0xff, 0x819a, 0x3, 0x3, 0xfff, 0x9, 0x8000000000000001, 0x5, 0x2, 0x3, 0xd28, 0xffff, 0x5, 0x800, 0x2, 0x2, 0x5, 0x401, 0x1000, 0x2, 0x101, 0x2, 0x1, 0x7, 0x5, 0xffffffffffffff01, 0x2d, 0x10, 0xffffffffffff65cb, 0x7, 0x5, 0x4, 0x3ff, 0x4, 0xfffffffffffffff2, 0x972, 0x4, 0x9, 0x6, 0x7, 0x119f, 0x6a341cd0, 0xf23, 0x6, 0x8, 0x3, 0xda, 0x2000000000, 0x9, 0x0, 0x39, 0x1e86152a, 0x8, 0x0, 0xbc19, 0x7, 0x4, 0x9, 0x4, 0x5, 0x400000000000000, 0x5, 0x9, 0x1, 0x6, 0xfffffffffffffff5, 0x3f163b5b, 0x3, 0x5, 0xffffffffffffffff, 0x8000000000000000, 0x9, 0x4, 0x2, 0x7, 0x401, 0x3f0, 0x7, 0x64f, 0x5, 0xc, 0x0, 0x100, 0x4, 0x9, 0x7fffffff, 0x1, 0x5, 0x100000000, 0x2, 0x8, 0x9, 0x0, 0x7, 0x1, 0x1, 0x5c4, 0x10000000000000, 0x400, 0x3, 0x8, 0x0, 0x2, 0x400, 0x3, 0xc97, 0x1, 0x0, 0x5, 0x2, 0x0, 0x8ed, 0x9c74]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000740)={r3, 0x86a2, 0x0, [0x80000001, 0x6fe7, 0x275, 0xfff, 0x4], [0x5, 0x8, 0xf5, 0x8, 0xffffffffffffffff, 0x4, 0x1413, 0xc, 0x9, 0x80000000, 0x8000, 0xfffffffffffffffd, 0x10, 0x9, 0x9, 0xfffffffffffffffd, 0xffffffff, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x4, 0x80000000, 0x8, 0x5, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x7fffffffffffffff, 0xc87, 0x8, 0x2, 0xfffffffffffffffa, 0x400, 0x5, 0x7, 0xffffffffffffa07c, 0x40, 0x4, 0x4, 0x9, 0x8000, 0x100000001, 0x1, 0x6, 0x1000000000000000, 0x9, 0x4, 0x2, 0x401, 0x5, 0x7, 0x400, 0x0, 0x5, 0xa, 0x8, 0x5, 0x1, 0x100000001, 0x0, 0xfda7, 0x81, 0xb, 0xe, 0x7fff, 0x6, 0x4, 0x6, 0x3ff, 0x2, 0x1ff, 0xe, 0x6, 0x3, 0xfffffffffffffff9, 0x0, 0x0, 0x6, 0x10000, 0xcca1, 0x7, 0x200, 0x1, 0x10, 0xb66b, 0x0, 0x9, 0xba80, 0x2, 0x6, 0x8, 0x6000000000000000, 0x1865eb6f, 0x2, 0x1, 0x8000000000000001, 0x5, 0x44, 0x10, 0x40000000, 0x1, 0x7fff, 0x8, 0x3ff, 0x6, 0x8, 0x8, 0xf56, 0x200, 0x8, 0x4, 0x8000000000000001, 0xf, 0x1, 0x10001, 0x0, 0x2, 0x0, 0x9]}) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f0000000f80)={0x5, &(0x7f0000000ec0)=[{0xfffffff9, 0x8d, &(0x7f0000000b80)="f0c591588cb827e6bf31defcb0fc70202a7c3f7c6435bc2205030dc15a509b0a97d4d0b9e3320743170e3c840b01e9220a151c1580c519e5cc01f455fc4583d7ee8918ca289e9a21ec1b1cb75d96c64ae97c76b692c3f1f6c53dde3426f18b8600660cbc83094fc2d9c124220e880e892798a6439ee85a5e0494d9c2e793bc074a481e2181c4f29353b410fdfb"}, {0x3, 0x9f, &(0x7f0000000c40)="def28e6ea1985c1ff4322f3bd8a2ddbf6cf0a49583de7e3453febca0876d77b3e4a067cad63f23230a4d9ecab315c61e469defed49158f2b0e6f2df130c327cbcd858f18667c760972ff67f0549ea7793799a5e2c660ea00c5bdf8dcea2e999bad475f905aa7f23d2880adb53cf012e58b069f39bc05f4564bf7bd4837a80fd03917a10bff8193e0dd243259da57afe1097bbcbbb9abd93f93aea62f5b5afe"}, {0x4, 0x74, &(0x7f0000000d00)="5201721ed8689768b02a21c07c118489d553f23d81accb2833458f6e637baa364cf4bbac77457ea137c016a455502a6b48f8f814f8a46a98c8ba63bc7c270fe29ef6edf23986bfafb306d7e52bd5232c4b13352c82ef44f331f6b0b99211bcd67898645d4921f7a4b976de6b3b67766a5f07078b"}, {0x6, 0xe5, &(0x7f0000000d80)="cbe59f89095df101c2099b4d984c562afd501309fddc421f6bcc48aa74b6cb66d7792b95a0f9f5bedc0e80d172b4593b587078ad2a45e4f9faf33beb065ca21dcef5b50c271ea25539daf03f27b568f96014218c5e8fbb11d2b938d0d661860c286a26465b9dc91f191c168c0042a048d58e73632708de5b8009a46b2e8f0ea6e11a0aa904173093a64cd6990ee0c29c1facc82d29c03de248a73b4262868650625dac290aa5987a4b91687fb8f8a74557b70f1a4e5a1bf21de86c5f66f054f9e13703b987ad49807da1492804389b3c71ca280fd879dca4720717f140e4a9a9fc766c6cbb", 0x0, 0x1}, {0xfffffffa, 0x3c, &(0x7f0000000e80)="7f2e2e14289a8c6d8f1615662b99de36a3fde45c5119c6a75da2d32fe8a72bdeb5f3555d4f5e9548aaa955be79abd2b11fabfe1815461394bef5451a", 0x1, 0x1}]}) r4 = memfd_secret(0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000fc0)=""/66) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000001040)={0x0, 0x1, 0xf0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000001080)={0x0, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000010c0)=[@in6={0xa, 0x4e24, 0x7, @mcast2, 0x8}, @in6={0xa, 0x4e24, 0x6, @mcast2, 0x6}, @in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x6}, @in={0x2, 0x4e20, @local}], 0x64) ioctl$int_in(r1, 0x5421, &(0x7f0000001140)=0x80f) mknodat(r2, &(0x7f0000001180)='./file0/file0\x00', 0x4, 0x3) fanotify_mark(r0, 0x20, 0x2, r4, &(0x7f00000011c0)='./file0\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000001200), 0x200000, 0x0) remap_file_pages(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x9, 0x20000) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000001240)={0x80000001, 0x7, 0xd74, 0xff, 0x8, "d552224debf98f5225535c70f856fb575b145e"}) syz_usb_connect(0x6, 0xe9d, &(0x7f0000001280)={{0x12, 0x1, 0x200, 0x5e, 0x4, 0x2, 0x8, 0x5c6, 0x9033, 0x1a00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe8b, 0x4, 0x6, 0x3, 0x10, 0x1e, [{{0x9, 0x4, 0x6, 0x4, 0x5, 0xe2, 0xa1, 0x94, 0xf9, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "dd91ddee"}, {0x5, 0x24, 0x0, 0x3a16}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x1, 0x6057, 0x3}, {0x6, 0x24, 0x1a, 0x2, 0x8}}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "8c"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0x64, 0x9}, {0x6, 0x24, 0x1a, 0x5, 0x11}}], [{{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x3, 0x40, 0x7f, [@generic={0x75, 0xd, "5275cbf8bab96e441bc7eb9905545c6e5c251b0b0c57fa2d6866d5509f401ebae8cc87787d29ddf0454fc1f09d7b6c268b000498c5f445118941e0580cc90031d7414056dfb0ba9b061a4e1475032dc57e54080f9db5714681fd4b9f8bc9338ad91005bd2a8a148bd794bf9dbd92dfb114d763"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0xf8, 0x6, 0x5, [@generic={0xaa, 0xc, "e5dc29d9ba711cdb4e91a5497865e57c09cf8f0748c3c0926d3dccc70fbd3b93c2518616eedd481b43cc62082e3dc10a06dd22ceab28095c32847423401922e7ebd5a79f068e37bdf5272b2f46ccac8a65d73174cc423f33a44fe20d093b63a34dbefebb4fd6ff0d6e66b75328c9fd22466000c550f86df31572f95699824c452a47702d2fa55596a07a43769aa8e7c279699b383a5f05959bbd4be0f8efbd6172ce0a41f091d0af"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf, 0x3}]}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x7f, 0x8, 0xe, [@generic={0xba, 0x1, "6006a12bac7ae2d0504b3d89a3d7547d128ec5eb03d134e4281bcf3e8afd687172d27295a85ffa04ff591036851d5d7b6aa3004b56223fc72598812be3f29a4eb336f48761f5e15afdcd14c23e65219e0d0d04b2be1cdf94cefdfeb9ab52afd7e43b079508069a3a205cd6d786f362d0f4ee5c57d2144159ceeb5d9a499b8e62174ca70d901329a2788c9a805fa8aeb7effb40c22b688b13ecce4721c6079fecac3d0750a1f651d759cec045c1cf307e6e1f417969decf1d"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x9, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xaa, 0x8}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x7, 0x8, 0x5, [@generic={0xdd, 0x11, "75c36ede4f0c0ff6c5a7cc9e5bc70a2fca7ee0fb4fcde2c20b406eca2f0e50f387671309b9be0706bf77af508c4224beb499b84b6b12e7349fb0236e86f11ecf08e6030e6bdcf82f2f2dfbd83ff9cda8cd73ad63d3ff1864c280c6a45ef11e946acd2381676e409c58bbf36a003d06e91e0a46ac5776f4fc84e2d00e7d0f7ae8305afe28d64c7d0fd967a9bb06260d26d0b027d3f7489347ad36ad509312f1462b29b3df0b0c730865040c0309c6e7a95447ab3c0c26013f3cee7288b121d5309c4b83353c73184b47bf94e985bd28fb5e91ba307b19c4d6c502bc"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x3}]}}]}}, {{0x9, 0x4, 0x8e, 0x7, 0xc, 0x55, 0xc8, 0x55, 0x10, [], [{{0x9, 0x5, 0x6, 0x1, 0x20, 0x1, 0x7, 0x6}}, {{0x9, 0x5, 0x2, 0x10, 0x50, 0x5, 0x4, 0xf8}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x0, 0xb, 0xa}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0xf, 0x6, 0x2, [@generic={0xf8, 0x23, "3f52555797a7f3680db3c3f30406a9d4bdd2bf28da6e2205448d5f34ee2925d2929c5b8f0b335d0c17f01357a4ffa1653c61d7957cf94ef9b0bf9d4fe1d330934e8a3cc3d714ec1788c6153cae2682e00492b799ca7cbd100986e96e62a4ae3264cf69ed134651b034e0cc3003eee472f91c49ed4a7eec087a55de13012319e4fa17ef30ee981fdc0cd22ca07cdacc1372072bb942152d605ef8628acdb796fcf73044c2f481621fe4a09b5468a0d978e74630151dbbb2d681ebe63d4d12c598dfec02426b2d8c84b67f4a23a7876d0d0969683c863b427a8a0e6ad49cccf6525f8555ed6289155ecb461899118820f6f44661164262"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x200, 0x4, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf9, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x8001}]}}, {{0x9, 0x5, 0xd, 0x8, 0x400, 0x6, 0xc, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfd, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xf3, 0x1ff}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0xa3, 0xdc}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x6, 0x80, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9}]}}, {{0x9, 0x5, 0xc, 0x8, 0x200, 0xc6, 0x2, 0xc, [@generic={0x72, 0x21, "e72d6a847c783fee469b0ebe8dedefc142b2955f9ef6e480abcb7fcb977e44c486bfc790760a05a5ca61afda8e2f82ebbdcac3b5450db33cc65754ef49b769326a40ff3fac9c852df1294888a4e77ed3e2ce2c399c4b69784cbc10fd39e2c725346966d39611291710646ba50259750b"}, @uac_iso={0x7, 0x25, 0x1, 0x100, 0x2, 0x6}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x4, 0xff, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x6}, @generic={0xe0, 0x22, "991479a69944d9d8d41350c339a9aa3ffd265ca036997682a60582657843d1a9423e3c72a987ae65bfee5d32a82c5313b49011d63ee8ce091372e2b547998bf34435fd332e7b2e8d5d3b5e8c84459e1591ec3e543a73eee5b4c62a881699ccf7c28c8e3904f4e4f4e44709c0294b11b017554da6b6bcd6d72047081de3407f97a2ff890fa268fd0b8c6e832f06acdb6bb8f0a68e0dfa00665f1d61f2d9a30057e878c1078248a3c781874f40c2e64f455176fc8dea378f0ab935311e292178f993dad6594df29b3125e8d70384c2f70113dcc59ce5eeb2077d52a7695ad8"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0xe6, 0xb5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xfe, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x40, 0x8, 0x8}]}}, {{0x9, 0x5, 0x1, 0x2, 0x7bf, 0x6, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x7}]}}]}}, {{0x9, 0x4, 0x4, 0x3, 0x9, 0xff, 0xff, 0xff, 0x8, [], [{{0x9, 0x5, 0xa, 0x10, 0x20, 0x10, 0x0, 0xbf}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x6, 0x9f, 0x9, [@generic={0xf, 0xd, "c41e604194b08397e1f8b750fa"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xb8, 0x101}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x7f, 0x0, 0x7, [@generic={0xaf, 0x21, "9b69228f457b713e07a4bd587f9e40982e5aecbbf425dc4b6f5c40bba97ed13500c3b890a2ba64afc0a31fa610358381a5a3eeb7686f1c45b2b42c2a15a850977aedbce83654487d1fb29106a5906f1ed95fe4c4abccd31823f2b9b3c378838ccef0f46796c5d1a30fd79e6ff30446fe3a1406b7d45156533407937bba10e2a5658bb0cd2fe7777ec6b460c934eb5a37fd98cd9ee0d901ba48e58c9e8043c5a07fbae0099a19f257ece6ab0c60"}, @generic={0x2, 0x31}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x2, 0x4c, 0x62, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0xffc0}, @generic={0x63, 0x0, "0c2abfdbf8ea5595615593f156a876c506cfa1538cf646b37d1086b76dcbb643dfc30faba52258c063a493b60038982fd8ec32345f80d592f7a99e4271701c814664c0e707400b380b153d2ef1c09dd3875cadd790947f47d25fb4bed3d29c9b5e"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0x8, 0xd, 0x3}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x5, 0x0, 0x0, [@generic={0x89, 0xe, "784fa6b71110831fbec5f19911104fb584a72132c63da09bafdae72f5e89c839ddc0d4ffe1a1957e89f9357d0f1bc5b7eae5b3c214e48f912c5abadbf2b5c61c553c2ae7d69fa3601dc5572d9206a4ac7b3a20358696d95d6c69e1d2039193b27486dada192c036a17f2ee5bd16feb20b4321b4e900e0512bb25e26fd4a01c6cf0e0dbd3229882"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x7, 0x3, 0x6d, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x9}]}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x1, 0x1, 0x9, [@generic={0xe4, 0xf, "82674f600d613883c527d3214c141f383beb30614bfd2afdfda92cafa806d6e22946007c02e5d88988fcacd8e2037be32433a2dd7accac81ab2bda7a899a660c8eed6559013f7056f73fa17f6e8ee38ce5de9211b8bea1949af2d60c5508ceb43c95a672398e6098a5701461c4f2feeb6b96663be3c533ed369603976b81e1ecf716bd172226d12621617d60dcaa1308be15609793a551f67f53475633312e66e474331e5a57fe9dfbbbc5c77021245a21cdbfdd0f8f19795e1839cf66b70702aa250f149ca6766935cd21d988f35bb31c0e476bc4d5abd7ab54ea84cbf41dbe41be"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x8, 0x6d, 0xc, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe4, 0x7}]}}]}}, {{0x9, 0x4, 0x9c, 0x3, 0x10, 0xe6, 0x2e, 0x2e, 0x6, [@hid_hid={0x9, 0x21, 0x5aeb, 0x6, 0x1, {0x22, 0xbff}}], [{{0x9, 0x5, 0xc, 0x2, 0x10, 0x2, 0x7, 0xf}}, {{0x9, 0x5, 0x9, 0x1, 0x40, 0x5, 0x6f, 0xf4, [@generic={0xef, 0x24, "4c0efad07239ba5eca1e2ccb80333745481f6088220fbb2898fe0799ddd5e8176b3731b033e483cc46cefcb5fc466d8c8154081c8134f4062d48860ab1a8538c7bad16817db255d5e66e065d500a6949f56b13de5625a3e2eed94ac96f3162fda3fc3c72ce55c314913ab2e7a5d72eb67edb3ce79cf851cef7d76dc1f27489a60a1a646a1b1739183dc784d82297e1d1da7a43d831aaaf66813b7629d74a5a3c6d9ca166035dd36644dbfbe52650d77447f959bde73f8604410c238bcd511631138953c61086bbb04bc6748a4e29b75dce581089bb2aa95088e131543f8abf37bba494ba04d134cc0fef2fddca"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x21, 0x4, 0x5, [@generic={0x71, 0x24, "49bbd2b276b49d82fec109454ddfb9f073f9da11bd76c7b78564619a1d463e0eabd8b11fc1c810b124610d6ebbe80127742b15718902a842c3eff9443f09eb31ecc278466fb040407dd54140153d57808b6eab49d80690d9049761ec9503881e04799c4e7869cbd3a79b4a7a4b2924"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0xf5, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0x1, 0x2}, @generic={0x5d, 0x21, "4445ff947f22850060269283b6cd0e75f2251dd750463d945d008a1dc95846d7c22e2f2f11c2307fb8ec19a9cd3d2ac068d753ba23d08e829566653f1f4fc110040117aaa3cbb88da48c7d3afe979ff30d4e2b0a108b1b88195254"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x9, 0xff, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x2}, @generic={0x6, 0x7, "55fa2bbc"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x200, 0x4, 0x80}}, {{0x9, 0x5, 0xe, 0x2, 0x5cf, 0x3, 0x3, 0x5c}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x0, 0xff, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0x1}]}}, {{0x9, 0x5, 0x9, 0x2, 0x8, 0x8, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xfffb}, @generic={0xd2, 0xc, "4f3ed4c2b558394278567163dd88ee01bd93a53343444d5bb5a9046bf2015231f85beed6110d4473ab3a9f29e2dffc5bcd1a6a70e82da1f556b9d4b1c7eaed2c50f32d9c67956b2113a79eb5fe6fac679e507920768da354314cfa6fbb254f31ccb824f24239917d13bc1a9801d46e48e3f6d4fbdccb5279ea001fa5545f2dcab81618ef32bbfc3d5b08da97318dcb8f70529fd883a8eda9a97c3334ee1ae23f73a4a422bd5c51c0b099683a4afb03397de0f15c80b51467fde84cadf19f4efe935dc1273fddd166d2ced159b7d8db0a"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x400, 0x4, 0x3, 0xb}}, {{0x9, 0x5, 0xc, 0x8, 0x40, 0x81, 0x3, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x29a2}, @generic={0x6a, 0x21, "31a10d60ce321514b4e62e99e3360eb05f8ae13a9f1e37acf3b0f43b66fb6b7956dcb72b9f3f7ee4120b91b40984f8f1b7519a3073ec6716909a5adcdda3b9f9f8ae3eec8b13d87ec8ae0e032da0f9ae894e573f5bacc3aad3a2ab93563397cde38e990ad0bfe72e"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x8, 0x6, 0x7}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x41, 0x8, 0x41, [@generic={0x5, 0x9, "17772f"}, @generic={0xe7, 0x23, "02c5441b7005ec46ff80a28cd49dda20b12d5949923177ba8febe181eaf47487ae0e37bf122d98702a01bc9c3150641980adff1f51a6fb25a53c77be45dda13c7c1fc3901cdca023e1ba6931435a6341bd17dea3e78a6e8a9f9198d1c207a607675f71f2d58d0896d1cfc7c27a5935b3da1f0e62d390e635294aadc9d9f36858994bd1d283c2326ec13ab87577fa44e949f61e49fe755b0446947c078699f5537c5856fcfb061fbe05c8d7df67e49cb69f4a6cf8145815f4b653320c3107794b2cea84f13574d14d52952b8f186c14dbea9b02f4c87c297145ba4a08eaf25513b13ebe138c"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0xf, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0xfe3}, @generic={0x34, 0xf, "728942731b0ccf5effefffff43f8d216530a2c6eb5e16a3f2b2f5395a8e49c0216e814c7f53c1f0dc03a62bc06bfe27b3ab2"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x3, 0xe, 0x1}}, {{0x9, 0x5, 0x0, 0x14, 0x40, 0x6, 0x2, 0x7, [@generic={0x3e, 0xb, "b83a02b34a8b6c10b0ec4e58e8fee68fc76e7df03f68a4a5080809301c4f9d8688e33176cb2a02d5488062015c1a2380d0bdaf0b5e87690b5917834e"}]}}]}}]}}]}}, &(0x7f0000002540)={0xa, &(0x7f0000002140)={0xa, 0x6, 0x201, 0xb, 0x4, 0x81, 0x40, 0x8}, 0x15b, &(0x7f0000002180)={0x5, 0xf, 0x15b, 0x2, [@generic={0xbc, 0x10, 0x4, "9ee8fdb5416dabdbe533f02e9e72e02b3965c6afa30842733da854ea80eccde9121a9a55849056a25efcd7f267ce97a86e178c39589012ad80623ca94cb61814d3b074321a01775384f6cbc145e300e4f6ba705832c3452e0cb6ff967e35c9bda632ddf86fcc6171f5ccf04c607119984b3f4ee0152a83b7ad18baec9541c012e8e36f61bc8c51b26ab1b4a62af762f6bfa261243c60fa1946bd1e1fab793fc47a489cfea13c348c3d3154dde62891eee17c7c489eadc507b6"}, @generic={0x9a, 0x10, 0x2, "07a52aa886de675d5e18ca2ae49df7361ded56384d9cb114cd1d6595f50f66ba88222fbcfb8743904cdf770c16cf85e86105b33a3627776b41e37d869a2858f655f6b0eff62a263e440f276f6cf91ab64f27bbc9ce86f2666e212249190b60afa19f31336cfc2224e659852939934f0d8b5b66cdaa5e5bc436214b70d9190f7867bff7a0305e685a77fb25862486b928714193e9e448bd"}]}, 0x4, [{0x4, &(0x7f0000002300)=@lang_id={0x4, 0x3, 0x444}}, {0xd5, &(0x7f0000002340)=@string={0xd5, 0x3, "b731b3452e4fafd2add23ff52b5c1448379afbb4069eb18d4e775a2e5f417b6eedd665e574b3d79c67cff4c059c1b4dea89955b8924b74adb299666d58e115123bd3fc851720a021980406f2f5739818b9170c5b4012d4801add36531dff018beeb636fc0739a59b1f8038431c3c204af1ec66f08a6ab74d257a9cd8fae96878c349fd89ff6cb51c4b25bd7ee3aac78bd361038f4dc1692e15939fb3b65e2d2fb6107ea8d96c9dfda0076ae50801b37d1afa5042aa8c676d2c714f9aaeb68b79515a234f48f424af4e131ef338726585606209"}}, {0x4, &(0x7f0000002440)=@lang_id={0x4, 0x3, 0x812}}, {0xb3, &(0x7f0000002480)=@string={0xb3, 0x3, "d55b1873c84ca9162da307b4f4846a2762eda59dfd5dbd38dd7d2b4ac624a22627820194c02ef0226b0d7531e4a6a91dc26a48faa4f0ed83392fbe7abb520fc6b199d88e3d5ab0dd90195be61fc846ec7bd3ff0083e647b15c245280e4c770cef4cfdf1fecdaaf5d0dba90b37d5d27c83a48d58002083c16b61f5761c1ac25d26c07e51a880227315e35f2337582926cdf17b6726ee314c1263adde09321278b9eddd7439fd0a13f11e14487715c7a5c0e"}}]}) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f00000025c0), 0x4) link(&(0x7f0000002600)='./file0/file0\x00', &(0x7f0000002640)='./file0/file0\x00') setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000002680)={0x0, 0xf, 0x20}, 0xc) 734.040978ms ago: executing program 5 (id=2333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x8c66) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x141000, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffffc, 0x0, 0x1, r3, 0x1}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r3, 0x1}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x1, 0x1, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000001640)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) ioctl$KVM_RUN(r6, 0xae80, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x6c, r8, 0x401, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x4c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1ab501e14bd78d9642565a0eab23a0bf"}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44010}, 0x4000000) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000440)={"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"}) 677.431435ms ago: executing program 5 (id=2334): ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f00000000c0)) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r0, &(0x7f0000000240)={0x1000000, 0x0, 0x2, 0xffff, 0x3, "82b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fdf700"/48}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000214000129bd7000fbdbdf2508004400", @ANYRES32=r1, @ANYBLOB="08000100010000000900020073797a300000000008000100020000000500540001000000050054000000000008004400", @ANYRES32, @ANYBLOB='\t\x00'], 0x58}, 0x1, 0x0, 0x0, 0x22040044}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x1) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f00000000c0)) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) (async) write$nbd(r0, &(0x7f0000000240)={0x1000000, 0x0, 0x2, 0xffff, 0x3, "82b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fdf700"/48}, 0x40) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x10) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000214000129bd7000fbdbdf2508004400", @ANYRES32=r1, @ANYBLOB="08000100010000000900020073797a300000000008000100020000000500540001000000050054000000000008004400", @ANYRES32, @ANYBLOB='\t\x00'], 0x58}, 0x1, 0x0, 0x0, 0x22040044}, 0x40) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x1) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) (async) 496.831817ms ago: executing program 5 (id=2336): getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r0, 0x381}, &(0x7f00000000c0)=0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000140)=0x8, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) connect$tipc(r2, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x2}}, 0x10) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000240)={0x0, 0x6}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x7d6}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[{0x7, 0x3, 0xec, 0x2}, {0x8, 0x6, 0xdd, 0x8}, {0x8, 0xa, 0x4, 0x1000000}]}) connect$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x2}}, 0x10) write$uinput_user_dev(r6, &(0x7f0000000380)={'syz1\x00', {0x3, 0x869, 0x4e6f, 0x8}, 0x45, [0x8, 0x400, 0x51, 0x3, 0x4, 0xe, 0x8, 0x4, 0xffff, 0x7fff, 0x2, 0x6, 0x7dbd8e1f, 0x101, 0x5, 0x100, 0x1, 0x3ff, 0x2, 0xdc, 0x2, 0x2c67, 0x6, 0x0, 0x4, 0x0, 0x7, 0x0, 0x9, 0x200, 0x0, 0x4, 0x8, 0x7, 0xfffffffe, 0x10001, 0x6, 0x10000, 0x4cc6bd58, 0x1, 0x0, 0x6, 0xc0ff, 0x8, 0xfff, 0x3770a517, 0x6, 0xb, 0x7, 0x3, 0x2, 0x9, 0x2, 0x3, 0x6, 0x200, 0x2, 0x5, 0x100, 0x6, 0x192, 0x7d72, 0x7], [0x9, 0x6, 0xfff, 0x1, 0x4, 0x8, 0x10000, 0xcc5, 0x0, 0x10000, 0x10001, 0x10, 0xfffffe01, 0x4, 0x6, 0x5, 0x7116, 0xe9, 0x3, 0x9, 0xfffffffe, 0x1, 0x1, 0x10000, 0x0, 0x5, 0x1, 0x49ce, 0x9, 0x1, 0x3, 0x8, 0xff, 0x9, 0x8, 0x5, 0x400, 0x5, 0x101, 0x3, 0x9, 0x7, 0x3, 0x5, 0x401, 0x4, 0xd173, 0x5, 0x101, 0x4e37, 0x8000, 0x8, 0x4, 0x7, 0xd6, 0x7f, 0x3, 0x2, 0x0, 0xff, 0x6, 0x3c29, 0x0, 0x20000], [0x6578f9fa, 0x5, 0xcd10, 0x6, 0x9, 0x1, 0x5, 0x1, 0x4, 0x1, 0x6, 0x3ff, 0x9d, 0x4, 0xfc5, 0x6, 0x8000, 0x2, 0x9, 0xe153, 0x7fffffff, 0x1000, 0x80000000, 0x0, 0x7, 0x1, 0x4, 0x2, 0xffffffc0, 0xb5, 0xc, 0x9, 0xd, 0x8, 0x6, 0xa, 0xe08, 0x958, 0x5, 0xb5, 0xc, 0x9, 0x4, 0x4, 0x200, 0xed84, 0x7, 0x788, 0x4, 0x0, 0x20000000, 0x6, 0x12c, 0x9, 0xfffffffb, 0xae, 0xe23, 0x9f, 0xc0, 0x5, 0x0, 0x38, 0x0, 0xe9f7], [0xe, 0x1fe0, 0xa9, 0x8, 0x3, 0x133869e4, 0x2, 0x1, 0xc, 0xffffffff, 0x8, 0x4e, 0x4, 0x3, 0x7, 0xffff, 0x800, 0x0, 0x2b, 0xb26e, 0x8, 0x10000, 0x6, 0x1ff, 0x1, 0x31a, 0x3, 0x7, 0x80, 0x27b22be0, 0x1, 0x2, 0x101, 0x25, 0x2, 0x5, 0x7, 0x7f, 0x9, 0x68ef, 0x504e, 0x7fff, 0x9, 0xfffffff2, 0x6, 0x3, 0x24, 0x3, 0x80, 0x6, 0x80000000, 0x4, 0x7, 0x0, 0x9, 0x4, 0x9, 0x38da, 0x9043, 0xe, 0x7, 0x2, 0xad, 0x6]}, 0x45c) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, r4, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x1c}}}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x8}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4a}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x58}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000940), 0x8) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000980)={{0x1, 0x1, 0x18, r1, {r6}}, './file1\x00'}) read$FUSE(r6, &(0x7f00000009c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000002a00)={0x50, 0x0, r10, {0x7, 0x2b, 0x5, 0x40801000, 0x8, 0x3, 0x1, 0x4, 0x0, 0x0, 0x10, 0x8}}, 0x50) ioctl$KVM_GET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea3) connect$vsock_stream(r8, &(0x7f0000002a80)={0x28, 0x0, 0x2710, @host}, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000002b00), r6) sendmsg$TIPC_CMD_DISABLE_BEARER(r9, &(0x7f0000002bc0)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x34, r11, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20040080) r12 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r12, 0x10f, 0x82, &(0x7f0000002c00)=0x5, 0x4) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000002c40)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_DESTROY$stdev(r8, 0x3b80, &(0x7f0000002cc0)={0x8, r13}) syz_genetlink_get_family_id$ipvs(&(0x7f0000002d00), r3) ioctl$AUTOFS_IOC_EXPIRE(r9, 0x810c9365, &(0x7f0000002d40)={{0x401, 0x2}, 0x100, './file0\x00'}) ioctl$KVM_SET_TSC_KHZ_cpu(r6, 0xaea2, 0x1) 483.255177ms ago: executing program 4 (id=2337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000000a5c000000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c0002800800034000000001080001400000000208000240000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000000000000000008000000", @ANYRES8=r0, @ANYRES8=r1], 0x2c}], 0x1, 0x0, 0x0, 0x40084}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) (async) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000182, 0x0, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x60140, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044000}, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f00000001c0)={0x0, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x80000000}, @llc={0x1a, 0x18, 0x1, 0x7, 0x0, 0x7, @random="859b63dccd83"}, 0x7fff, 0x0, 0x0, 0x0, 0x5, 0x0, 0xcae, 0x1, 0xbb}) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) fadvise64(r6, 0x94, 0x6e, 0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r6, 0x2000) 445.160904ms ago: executing program 5 (id=2338): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000100)={r1}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0x8004500f, &(0x7f00000001c0)) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101342, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) syz_emit_vhci(&(0x7f0000001180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x0, 0xc9, "6c04ed9b336cfd67"}}}, 0xe) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) tee(r1, r1, 0x1, 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001180)={0x0, 0x1000, "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"}, &(0x7f0000000140)=0x1008) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000180)={r5, 0x5, 0x30}, 0xc) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r6, 0x80e85411, &(0x7f00000022c0)) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 392.240518ms ago: executing program 4 (id=2339): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4a58c000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x206f01a, 0x0, 0x0, 0x0, 0x1}}, 0x50) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0x76) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfd000/0x400000)=nil) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mmap$fb(&(0x7f00003d0000/0x3000)=nil, 0x3000, 0x8, 0x110, r1, 0x1d000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00000f9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000abb000/0x2000)=nil) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 391.832545ms ago: executing program 0 (id=2340): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) (async) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x9, 0x0, 0x9}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) (async) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x8, @loopback, 0x5, 0x3}, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r0, {0x81}}, './file0\x00'}) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81d080900000000000000a118001500060014000040a8002b000e00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9bbc7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace6f177ccbec4c2ee5a7cef4260027836b0d17a54ef5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f00feffff16ac9609f4fb00000000000000000000000000000000000000000000000000e19bdee3c4ead119f9ae2aa728e2fd1b", 0xd8}], 0x1}, 0x4004) (async) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001100)={0x2, {0x2, 0x3, 0x0, 0x0, 0x11}}) (async) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) (async) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8e, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x4000022, 0x3, 0x7f, 0x6, 0x40, 0x39cc191a, 0x5f, 0x9, 0x5, 0x7, 0xffffff01, 0xa6, 0x3, 0x1, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe660, 0x4, 0x7, 0x104, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3c, 0x8f, 0x4000006, 0x10000008, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x4, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x1007ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2, 0x6c9, 0x9, 0x6, 0x3, 0x1, 0x4, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x1, 0x8000, 0x400c, 0x400, 0x5, 0x800, 0x5, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x7, 0xe24, 0x4, 0x9, 0x0, 0x800, 0x6, 0xb, 0x8000, 0x0, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x4, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800f38, 0x5, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x101, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x444, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x1, 0xb, 0x3, 0x938, 0x6, 0x6, 0x0, 0x7, 0xce7, 0x1f7, 0x2, 0xf58, 0x5, 0x80000001, 0x101, 0x10000, 0x3ff, 0x7ffe, 0x8, 0x200a620, 0x4, 0x5, 0x1, 0x2, 0x800014c, 0x60a7, 0xe, 0x6, 0x1, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x2, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x10001, 0x8, 0x7ff, 0x2, 0x3, 0x4, 0x4, 0x100005, 0xdd81, 0x1, 0x40200, 0xffbf2441, 0xfff]}, 0x45c) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r7, 0x5402, 0x0) (async) sendmmsg$inet6(r2, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="24000000000000002900000032000000ff0500"/31, @ANYRES32=0x0, @ANYBLOB="0000000018"], 0x40, 0x7ffffff7}}], 0x1, 0x4880) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r8, 0x2000) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) 337.99895ms ago: executing program 0 (id=2341): mount(&(0x7f0000000080)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x248046, 0x0) 303.989987ms ago: executing program 4 (id=2342): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4040, 0xd) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4040, 0xd) syz_open_procfs$userns(0x0, &(0x7f00000000c0)) (async) r0 = syz_open_procfs$userns(0x0, &(0x7f00000000c0)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000001380)={{'\x00', 0x1}, {0x9}, 0x1a0, 0x0, 0x0, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)="eab4dd6d3b310d563428d55dbd9abfb0e87e43de3164e28b37a6b9f4996beae11561def845f35d3069a745b7c0baa12beee19488413a8f29a4abbc61fc8e3d5bba9ced3069cb67bb3a9fe47be6f379accf7081a6fa84f1202adb2d993ddacb36465db86a5aa51ed2a7d577fcbf0e01f42b5a2ba5", 0x74, 0x0, &(0x7f0000000300)={0x2, 0x46, {0x1, 0xc, 0x0, "", 0x39, "f749eaf484a380d732dd6f5902043979b7b71c7fe148ae518b1e16a6733fe25a678d56eb62cc8bc4ead298e1c5cf987e3a3df7cc2b17a52893"}, 0x1000, "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"}, 0x1052}) setns(r0, 0x20000000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) (async) pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x60001) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000100)={0x5, &(0x7f0000000040)=[{}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000180)={r4, 0x2}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000200)={r4, 0x3}) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='hpfs\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) 301.065681ms ago: executing program 0 (id=2343): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0xb00}, 0x8) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) 196.126833ms ago: executing program 0 (id=2344): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x9, 0x0, &(0x7f0000000100)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r1, 0xa4717000) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f0000000040)={@null, @default}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) getsockopt$llc_int(r0, 0x10c, 0x9, 0x0, &(0x7f0000000100)) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r1, 0xa4717000) (async) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f0000000040)={@null, @default}) (async) 192.815302ms ago: executing program 4 (id=2345): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fadvise64(r0, 0x7, 0x5, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x4) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x0, 0x22052, r0, 0xa471a000) 111.672967ms ago: executing program 4 (id=2346): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async) fanotify_init(0x4, 0x8003) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$isdn(0x22, 0x3, 0x2) ioctl$IMCTRLREQ(r2, 0x80044945, &(0x7f0000000040)={0x4003, 0x3, 0x6}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x7f}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0xa, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xffffffff, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8020, 0x3ff, 0x3, 0xd, 0x3, 0xba52, 0x4000800, 0x2, 0x200, 0xffffffff, 0x400008, 0xe, 0x4, 0x1, 0xde, 0x8, 0x4, 0x1, 0x199f, 0x8, 0x8000002, 0x9, 0xe, 0x4, 0x6, 0x4001000, 0x7, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x8001, 0x72c, 0x1c32, 0x1, 0x8, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x7ff, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0xc, 0x0, 0x2, 0x401, 0xd, 0x3, 0x379, 0x8, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x2c2, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x6, 0x4, 0xb, 0x10, 0x5, 0xd, 0xe88, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x11, 0x1000, 0x4, 0x4, 0xf, 0x9, 0xfffffffe, 0x5, 0x80, 0x3, 0x9, 0x47, 0x2, 0x80000003, 0x4, 0x7, 0x0, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x2, 0x1010001, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x4, 0x3, 0x88, 0x2, 0x6, 0x0, 0x50, 0x2, 0x75f, 0xb, 0x402, 0x800, 0x4, 0x5, 0x80, 0x7, 0x3fa6, 0x4, 0xffffffff, 0x5, 0x1e0, 0x4, 0x5, 0x4, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0xb, 0x1, 0x800, 0xa80a, 0x65f413f9, 0x104, 0x8, 0x8a8, 0x1000, 0x40, 0x7, 0x0, 0x4, 0x4, 0x18, 0x0, 0x6, 0x7fff, 0x2, 0xffffffff, 0x401, 0x1, 0x200, 0x7, 0x6, 0x0, 0x7, 0xe, 0x2, 0xe, 0xf, 0xfffffff9, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) (async) ioctl$UI_DEV_SETUP(r5, 0x405c5503, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x60, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x8020, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x60}}, 0x0) (async) munmap(&(0x7f0000012000/0x4000)=nil, 0x4000) write(r0, &(0x7f0000000400)="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", 0x1f000) 89.202986ms ago: executing program 2 (id=2347): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000080)=0x2) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) (async) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000080)=0x2) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) (async) 0s ago: executing program 4 (id=2348): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x6, 0x24, &(0x7f0000000080)=ANY=[], 0x0) ioctl$EVIOCRMFF(r3, 0x550c, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0e3}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) (async) syz_usb_disconnect(r3) (async) syz_usb_connect(0x6, 0x24, &(0x7f0000000080)=ANY=[], 0x0) (async) ioctl$EVIOCRMFF(r3, 0x550c, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) (async) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0e3}], 0x1) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) (async) kernel console output (not intermixed with test programs): ue for 'gid' [ 253.215052][ T5925] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 253.355035][ T5925] usb 5-1: device descriptor read/64, error -71 [ 253.465250][ T5925] usb usb5-port1: attempt power cycle [ 253.514926][ T981] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 253.543076][T12004] /dev/rnullb0: Can't open blockdev [ 253.690322][ T981] usb 1-1: unable to get BOS descriptor or descriptor too short [ 253.715612][ T981] usb 1-1: not running at top speed; connect to a high speed hub [ 253.727260][ T981] usb 1-1: config 4 has an invalid interface number: 32 but max is 0 [ 253.735482][ T981] usb 1-1: config 4 has no interface number 0 [ 253.748956][ T981] usb 1-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50 [ 253.758451][ T981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.766693][ T981] usb 1-1: Product: syz [ 253.771104][ T981] usb 1-1: Manufacturer: syz [ 253.775797][ T981] usb 1-1: SerialNumber: syz [ 253.804943][ T5925] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 253.835955][ T5925] usb 5-1: device descriptor read/8, error -71 [ 253.935084][ T5926] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 254.075182][ T5925] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 254.105508][ T5925] usb 5-1: device descriptor read/8, error -71 [ 254.105697][ T5926] usb 6-1: Using ep0 maxpacket: 32 [ 254.120614][ T5926] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 254.132236][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.141408][ T5926] usb 6-1: Product: syz [ 254.146874][ T5926] usb 6-1: Manufacturer: syz [ 254.151484][ T5926] usb 6-1: SerialNumber: syz [ 254.159931][ T5926] usb 6-1: config 0 descriptor?? [ 254.215203][ T5925] usb usb5-port1: unable to enumerate USB device [ 254.236737][T11728] syz.2.1725 (11728) used greatest stack depth: 17928 bytes left [ 254.258170][T12016] /dev/rnullb0: Can't open blockdev [ 254.290389][T12018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.300148][T12018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.311030][T12018] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1788'. [ 254.322897][T12018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.331890][T12018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.400231][T12025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.410161][T12025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.595965][ T5926] airspy 6-1:0.0: Board ID: 00 [ 254.600872][ T5926] airspy 6-1:0.0: Firmware version: [ 255.004092][ T5926] airspy 6-1:0.0: usb_control_msg() failed -71 request 0e [ 255.012362][ T5926] airspy 6-1:0.0: Registered as swradio24 [ 255.018404][ T5926] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 255.033908][ T5926] usb 6-1: USB disconnect, device number 6 [ 255.134457][T12028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.143257][T12028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.153847][T12028] /dev/rnullb0: Can't open blockdev [ 255.712685][T12052] /dev/rnullb0: Can't open blockdev [ 255.837801][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.844182][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.033308][T12064] /dev/rnullb0: Can't open blockdev [ 256.287538][T12083] I/O error, dev loop5, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 256.308607][ T981] usb 1-1: Found UVC 0.02 device syz (17dc:0202) [ 256.315975][ T981] usb 1-1: No valid video chain found. [ 256.321953][T12083] qnx4: unable to read the superblock [ 256.339941][T12083] I/O error, dev loop5, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 256.341396][ T981] usb 1-1: USB disconnect, device number 77 [ 256.356342][T12083] qnx4: unable to read the superblock [ 256.442190][T12090] dvmrp0: entered allmulticast mode [ 256.725069][ T981] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 256.875005][ T981] usb 1-1: Using ep0 maxpacket: 8 [ 256.881658][ T981] usb 1-1: config 4 has an invalid interface number: 115 but max is 0 [ 256.891714][ T981] usb 1-1: config 4 has no interface number 0 [ 256.898157][ T981] usb 1-1: config 4 interface 115 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 256.910495][ T5943] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 256.918226][ T981] usb 1-1: config 4 interface 115 altsetting 1 bulk endpoint 0xC has invalid maxpacket 0 [ 256.928623][ T981] usb 1-1: config 4 interface 115 has no altsetting 0 [ 256.937399][ T981] usb 1-1: New USB device found, idVendor=07c0, idProduct=1500, bcdDevice=a5.e3 [ 256.946590][ T981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.954559][ T981] usb 1-1: Product: syz [ 256.958784][ T981] usb 1-1: Manufacturer: syz [ 256.963401][ T981] usb 1-1: SerialNumber: syz [ 257.086197][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 257.097119][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 257.107248][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 257.118371][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 257.130649][ T5943] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 257.139797][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.147898][ T5943] usb 5-1: Product: syz [ 257.152080][ T5943] usb 5-1: Manufacturer: syz [ 257.156743][ T5943] usb 5-1: SerialNumber: syz [ 257.162496][ T5943] usb 5-1: config 0 descriptor?? [ 257.174742][ T981] iowarrior 1-1:4.115: no interrupt-in endpoint found [ 257.184049][ T981] usb 1-1: USB disconnect, device number 78 [ 257.370038][ T5943] adutux 5-1:0.0: Could not retrieve serial number [ 257.384988][ T5943] adutux 5-1:0.0: probe with driver adutux failed with error -5 [ 257.519312][T12156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.529652][T12156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.595871][ T5943] usb 5-1: USB disconnect, device number 25 [ 257.642672][T12164] netlink: 'syz.5.1820': attribute type 4 has an invalid length. [ 258.015030][ T5912] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 258.161386][T12183] /dev/rnullb0: Can't open blockdev [ 258.177904][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 258.188506][ T5912] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.200241][ T5912] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 258.212472][ T5912] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 258.223108][ T5912] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 258.240026][ T5912] usb 1-1: config 0 interface 0 has no altsetting 0 [ 258.251607][ T5912] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 258.265508][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.267556][T12188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.283238][ T5912] usb 1-1: Product: syz [ 258.285615][T12188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.293356][ T5912] usb 1-1: Manufacturer: syz [ 258.297428][T12188] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1830'. [ 258.303458][ T5912] usb 1-1: SerialNumber: syz [ 258.319085][T12188] /dev/rnullb0: Can't open blockdev [ 258.325471][ T5912] usb 1-1: config 0 descriptor?? [ 258.328052][T12190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.348546][T12190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.417711][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 258.587196][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.597675][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 258.617922][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 258.634298][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 258.646526][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 258.657228][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 258.673171][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb [ 258.688317][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.695084][T12196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.705485][ T24] usb 5-1: config 0 descriptor?? [ 258.712185][T12196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.722555][ T24] appledisplay 5-1:0.0: Submitting URB failed [ 258.724915][T12196] /dev/rnullb0: Can't open blockdev [ 258.730252][ T24] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -5 [ 258.758217][T12176] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.767598][T12176] hpfs: hpfs_map_sector(): read error [ 258.774749][ T24] usb 1-1: USB disconnect, device number 79 [ 258.969065][ T5912] usb 5-1: USB disconnect, device number 26 [ 259.273667][T12198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.285967][T12198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.331398][T12200] /dev/rnullb0: Can't open blockdev [ 259.462251][T12208] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1837'. [ 259.765115][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.913211][T12228] overlayfs: missing 'lowerdir' [ 259.920731][ T5864] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 259.960417][ T5943] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 259.997723][ T5943] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 260.089219][T12243] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1846'. [ 260.291807][T12251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.301290][T12251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.356803][T12237] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 260.363804][T12237] /dev/rnullb0: Can't open blockdev [ 260.470606][T12259] fuse: Bad value for 'user_id' [ 260.477795][T12259] fuse: Bad value for 'user_id' [ 260.595291][T12275] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 260.748213][T12287] /dev/rnullb0: Can't open blockdev [ 260.854200][T12293] program syz.0.1862 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.885228][ T5926] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 260.965107][ T5912] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 260.995631][T12298] /dev/rnullb0: Can't open blockdev [ 261.035102][ T5926] usb 6-1: device descriptor read/64, error -71 [ 261.156301][ T5912] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 261.166251][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.176649][ T5912] usb 5-1: config 0 descriptor?? [ 261.185741][ T5912] cp210x 5-1:0.0: cp210x converter detected [ 261.294965][ T5926] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 261.315022][ T10] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 261.384283][ T5912] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 261.392840][ T5912] cp210x 5-1:0.0: querying part number failed [ 261.405117][ T5912] usb 5-1: cp210x converter now attached to ttyUSB0 [ 261.425367][ T5926] usb 6-1: device descriptor read/64, error -71 [ 261.480226][ T10] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 261.488642][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.499989][ T10] usb 1-1: config 0 has no interface number 0 [ 261.506767][ T10] usb 1-1: config 0 interface 6 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 261.518809][ T10] usb 1-1: config 0 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 261.533937][ T10] usb 1-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 261.535260][ T5926] usb usb6-port1: attempt power cycle [ 261.545636][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.557957][ T10] usb 1-1: Product: syz [ 261.562198][ T10] usb 1-1: Manufacturer: syz [ 261.567219][ T10] usb 1-1: SerialNumber: syz [ 261.573384][ T10] usb 1-1: config 0 descriptor?? [ 261.590912][ T10] vmk80xx 1-1:0.6: driver 'vmk80xx' failed to auto-configure device. [ 261.793724][ T10] usb 1-1: USB disconnect, device number 80 [ 261.905575][ T5926] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 261.928026][ T5926] usb 6-1: device descriptor read/8, error -71 [ 262.164938][ T5926] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 262.185403][ T5926] usb 6-1: device descriptor read/8, error -71 [ 262.296852][ T5926] usb usb6-port1: unable to enumerate USB device [ 262.339844][ T10] Process accounting resumed [ 262.585060][ T10] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 262.744867][ T9973] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 262.755901][ T9973] CPU: 1 UID: 0 PID: 9973 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 262.755926][ T9973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 262.755937][ T9973] Call Trace: [ 262.755944][ T9973] [ 262.755951][ T9973] dump_stack_lvl+0x189/0x250 [ 262.755980][ T9973] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.756002][ T9973] ? __pfx__printk+0x10/0x10 [ 262.756025][ T9973] ? rcu_is_watching+0x15/0xb0 [ 262.756046][ T9973] dump_header+0xd3/0x480 [ 262.756063][ T9973] oom_kill_process+0x387/0x920 [ 262.756083][ T9973] out_of_memory+0xf09/0x12a0 [ 262.756103][ T9973] ? mem_cgroup_iter+0x3b/0x460 [ 262.756122][ T9973] ? __pfx_out_of_memory+0x10/0x10 [ 262.756143][ T9973] mem_cgroup_out_of_memory+0x145/0x240 [ 262.756167][ T9973] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 262.756188][ T9973] ? _raw_spin_unlock+0x28/0x50 [ 262.756207][ T9973] ? memcg1_oom_prepare+0x37f/0x450 [ 262.756228][ T9973] try_charge_memcg+0xdff/0x1290 [ 262.756249][ T9973] ? rcu_is_watching+0x15/0xb0 [ 262.756272][ T9973] ? __pfx_try_charge_memcg+0x10/0x10 [ 262.756292][ T9973] ? rcu_irq_exit_check_preempt+0x201/0x210 [ 262.756310][ T9973] ? xa_load+0x60/0x210 [ 262.756330][ T9973] ? rcu_is_watching+0x15/0xb0 [ 262.756347][ T9973] ? rcu_is_watching+0x15/0xb0 [ 262.756364][ T9973] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 262.756387][ T9973] charge_memcg+0x9f/0x180 [ 262.756408][ T9973] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 262.756425][ T9973] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 262.756447][ T9973] __read_swap_cache_async+0x28c/0x510 [ 262.756471][ T9973] swap_cluster_readahead+0x4cf/0x5f0 [ 262.756492][ T9973] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 262.756513][ T9973] ? rcu_is_watching+0x15/0xb0 [ 262.756529][ T9973] ? filemap_get_entry+0xad/0x2f0 [ 262.756547][ T9973] ? get_vma_policy+0x27c/0x3c0 [ 262.756570][ T9973] swapin_readahead+0x17d/0xb50 [ 262.756588][ T9973] ? __pfx_filemap_get_entry+0x10/0x10 [ 262.756608][ T9973] ? get_swap_device_info+0x1c/0x2b0 [ 262.756626][ T9973] ? rcu_is_watching+0x15/0xb0 [ 262.756642][ T9973] ? __pfx_swapin_readahead+0x10/0x10 [ 262.756662][ T9973] ? __filemap_get_folio+0x9a6/0xaf0 [ 262.756682][ T9973] ? swap_cache_get_folio+0xae/0x3b0 [ 262.756702][ T9973] do_swap_page+0x525/0x5ac0 [ 262.756723][ T9973] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 262.756747][ T9973] ? ___pte_offset_map+0x29/0x250 [ 262.756768][ T9973] ? lock_acquire+0x5f/0x360 [ 262.756782][ T9973] ? do_swap_page+0x184/0x5ac0 [ 262.756801][ T9973] ? __pfx_do_swap_page+0x10/0x10 [ 262.756821][ T9973] ? __pfx_default_wake_function+0x10/0x10 [ 262.756837][ T9973] ? ___pte_offset_map+0x45/0x250 [ 262.756857][ T9973] ? ___pte_offset_map+0x1cf/0x250 [ 262.756882][ T9973] ? pte_offset_map_rw_nolock+0xea/0x160 [ 262.756903][ T9973] __handle_mm_fault+0xe55/0x5400 [ 262.756930][ T9973] ? __pfx___handle_mm_fault+0x10/0x10 [ 262.756951][ T9973] ? rcu_is_watching+0x15/0xb0 [ 262.756972][ T9973] ? lock_vma_under_rcu+0x3cb/0x450 [ 262.756989][ T9973] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 262.757006][ T9973] handle_mm_fault+0x40a/0x8e0 [ 262.757052][ T9973] do_user_addr_fault+0xa81/0x1390 [ 262.757072][ T9973] ? rcu_is_watching+0x15/0xb0 [ 262.757089][ T9973] ? trace_page_fault_user+0x84/0x1e0 [ 262.757106][ T9973] exc_page_fault+0x82/0x100 [ 262.757126][ T9973] asm_exc_page_fault+0x26/0x30 [ 262.757143][ T9973] RIP: 0033:0x7f1277fc14a8 [ 262.757157][ T9973] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 262.757177][ T9973] RSP: 002b:00007fffbef9a400 EFLAGS: 00010293 [ 262.757193][ T9973] RAX: 0000000000000000 RBX: 00000000000001a6 RCX: 00007f1277fc14a5 [ 262.757205][ T9973] RDX: 00007fffbef9a440 RSI: 0000000000000000 RDI: 0000000000000000 [ 262.757216][ T9973] RBP: 00007fffbef9a4ac R08: 0000000000000000 R09: 0000000000000000 [ 262.757227][ T9973] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 262.757237][ T9973] R13: 00000000000927c0 R14: 000000000003fde4 R15: 00007fffbef9a500 [ 262.757256][ T9973] [ 262.757314][ T9973] memory: usage 307200kB, limit 307200kB, failcnt 6599 [ 262.768668][ T10] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 262.782582][ T9973] memory+swap: usage 308040kB, limit 9007199254740988kB, failcnt 0 [ 262.797238][ T10] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 262.799062][ T9973] kmem: usage 3616kB, limit 9007199254740988kB, failcnt 0 [ 262.803422][ T10] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 262.809062][ T9973] Memory cgroup stats for [ 262.815054][ T10] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 262.817855][ T9973] /syz4 [ 262.822312][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 262.847267][ T9973] : [ 262.849978][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.856983][ T9973] cache 310841344 [ 263.263662][ T9973] rss 0 [ 263.266576][ T9973] rss_huge 0 [ 263.269776][ T9973] shmem 310841344 [ 263.273403][ T9973] mapped_file 0 [ 263.276961][ T9973] dirty 0 [ 263.279917][ T9973] writeback 0 [ 263.283200][ T9973] workingset_refault_anon 108 [ 263.288007][ T9973] workingset_refault_file 13 [ 263.293175][ T9973] swap 860160 [ 263.296594][ T9973] swapcached 28672 [ 263.300320][ T9973] pgpgin 317445 [ 263.303769][ T9973] pgpgout 242571 [ 263.307501][ T9973] pgfault 83647 [ 263.311011][ T9973] pgmajfault 3423 [ 263.314633][ T9973] inactive_anon 0 [ 263.318305][ T9973] active_anon 59326464 [ 263.328667][ T9973] inactive_file 0 [ 263.337010][ T9973] active_file 0 [ 263.340535][ T9973] unevictable 251543552 [ 263.369655][ T9973] hierarchical_memory_limit 314572800 [ 263.375134][ T9973] hierarchical_memsw_limit 9223372036854771712 [ 263.381298][ T9973] total_cache 310841344 [ 263.386657][ T9973] total_rss 0 [ 263.389963][ T9973] total_rss_huge 0 [ 263.394267][ T9973] total_shmem 310841344 [ 263.400163][ T9973] total_mapped_file 0 [ 263.404190][ T9973] total_dirty 0 [ 263.407706][ T9973] total_writeback 0 [ 263.411598][ T9973] total_workingset_refault_anon 108 [ 263.416839][ T9973] total_workingset_refault_file 13 [ 263.422719][ T9973] total_swap 860160 [ 263.426810][ T9973] total_swapcached 28672 [ 263.431107][ T9973] total_pgpgin 317445 [ 263.435215][ T9973] total_pgpgout 242571 [ 263.439363][ T9973] total_pgfault 83647 [ 263.443334][ T9973] total_pgmajfault 3423 [ 263.461334][ T9973] total_inactive_anon 0 [ 263.465601][ T9973] total_active_anon 59326464 [ 263.470714][ T9973] total_inactive_file 0 [ 263.500077][ T9973] total_active_file 0 [ 263.508313][ T9973] total_unevictable 251543552 [ 263.517472][ T9973] anon_cost 0 [ 263.522658][ T9973] file_cost 0 [ 263.528804][ T9973] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1858,pid=12281,uid=0 [ 263.551159][ T9973] Memory cgroup out of memory: Killed process 12281 (syz.4.1858) total-vm:102140kB, anon-rss:1144kB, file-rss:23464kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 263.598563][ T981] usb 5-1: USB disconnect, device number 27 [ 263.611168][ T981] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 263.637621][ T981] cp210x 5-1:0.0: device disconnected [ 263.967404][ T10] ath6kl: Failed to submit usb control message: -71 [ 263.994388][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 264.007058][ T10] ath6kl: Unable to send get target info: -71 [ 264.023821][ T10] ath6kl: Failed to init ath6kl core: -71 [ 264.034443][ T10] ath6kl_usb 1-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 264.072515][ T10] usb 1-1: USB disconnect, device number 81 [ 264.285845][T12319] ./file0: Can't lookup blockdev [ 264.491213][T12322] /dev/rnullb0: Can't open blockdev [ 264.609763][T12302] Process accounting resumed [ 264.643094][T12324] mkiss: ax0: crc mode is auto. [ 264.669826][T12324] /dev/rnullb0: Can't open blockdev [ 264.790509][T12332] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 264.815172][T12332] /dev/rnullb0: Can't open blockdev [ 264.865534][T12336] /dev/rnullb0: Can't open blockdev [ 264.947204][T12341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.957680][T12341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.958034][T12343] /dev/rnullb0: Can't open blockdev [ 265.324979][ T10] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 265.505019][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 265.513062][ T10] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 265.531724][ T10] usb 1-1: config 0 has no interface number 0 [ 265.543883][ T10] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 265.586030][ T5926] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 265.586039][ T10] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 265.587906][ T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 265.633375][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.644865][ T10] usb 1-1: Product: syz [ 265.649050][ T10] usb 1-1: Manufacturer: syz [ 265.663965][ T10] usb 1-1: SerialNumber: syz [ 265.676458][ T10] usb 1-1: config 0 descriptor?? [ 265.814925][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.834978][ T5864] Bluetooth: hci2: command 0x0405 tx timeout [ 265.841157][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.866384][ T5926] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 265.880501][ T5926] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 265.885533][ T10] radio-si470x 1-1:0.35: this is not a si470x device. [ 265.891491][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.926065][ T5926] usb 6-1: config 0 descriptor?? [ 266.087277][T12347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.097377][T12347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.126331][ T10] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 266.149730][ T10] usb 1-1: USB disconnect, device number 82 [ 266.173607][ T5926] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 266.295390][T12359] /dev/rnullb0: Can't open blockdev [ 266.713639][T12366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.745218][ T5943] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 266.765701][T12366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.800123][T12366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.907148][ T5943] usb 5-1: unable to get BOS descriptor or descriptor too short [ 266.915487][ T5943] usb 5-1: not running at top speed; connect to a high speed hub [ 266.926135][ T5943] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 266.935574][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.943724][ T5943] usb 5-1: Product: syz [ 266.958082][ T5943] usb 5-1: Manufacturer: syz [ 266.962792][ T5943] usb 5-1: SerialNumber: syz [ 267.387189][ T5943] kalmia 5-1:106.0: probe with driver kalmia failed with error -22 [ 267.418136][ T5943] usb 5-1: USB disconnect, device number 28 [ 267.548445][T12377] /dev/rnullb0: Can't open blockdev [ 267.776579][ T10] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 267.925190][ T10] usb 1-1: device descriptor read/64, error -71 [ 267.990298][T12385] input: syz0 as /devices/virtual/input/input27 [ 268.075012][ T5926] usb 6-1: reset high-speed USB device number 11 using dummy_hcd [ 268.175114][ T10] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 268.226004][ T5926] usb 6-1: device firmware changed [ 268.235478][ T5912] usb 6-1: USB disconnect, device number 11 [ 268.240688][T12395] /dev/rnullb0: Can't open blockdev [ 268.305250][ T10] usb 1-1: device descriptor read/64, error -71 [ 268.356075][T12399] /dev/rnullb0: Can't open blockdev [ 268.385249][ T5912] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 268.415524][ T10] usb usb1-port1: attempt power cycle [ 268.502566][T12405] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 268.510225][T12405] /dev/rnullb0: Can't open blockdev [ 268.559882][ T5912] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 268.575671][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.583694][ T5912] usb 6-1: Product: syz [ 268.604870][ T5912] usb 6-1: Manufacturer: syz [ 268.609544][ T5912] usb 6-1: SerialNumber: syz [ 268.627559][ T5912] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 268.650000][ T5926] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 268.754991][ T10] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 268.797932][ T10] usb 1-1: device descriptor read/8, error -71 [ 269.045097][ T10] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 269.068165][ T10] usb 1-1: device descriptor read/8, error -71 [ 269.175288][ T10] usb usb1-port1: unable to enumerate USB device [ 269.245192][ T30] audit: type=1326 audit(33043.202:6475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12414 comm="syz.2.1902" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0cb238ebe9 code=0x0 [ 269.267975][T12382] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 269.275373][T12382] /dev/rnullb0: Can't open blockdev [ 269.395121][ T5912] usb 6-1: USB disconnect, device number 12 [ 269.554969][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 269.675050][ T5926] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 269.682103][ T5926] ath9k_htc: Failed to initialize the device [ 269.688847][ T5912] usb 6-1: ath9k_htc: USB layer deinitialized [ 269.704938][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 269.711657][ T10] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.723339][ T10] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.733197][ T10] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.746489][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 269.753203][ T10] usb 5-1: New USB device found, idVendor=04b3, idProduct=3109, bcdDevice= 0.00 [ 269.762711][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.772057][ T10] usb 5-1: config 0 descriptor?? [ 269.923887][T12423] /dev/rnullb0: Can't open blockdev [ 270.079780][T12432] binder: 12431:12432 ioctl c0502100 200000000580 returned -22 [ 270.090852][T12432] /dev/rnullb0: Can't open blockdev [ 270.182795][T12442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.183514][ T10] lenovo 0003:04B3:3109.000E: item fetching failed at offset 5/9 [ 270.194413][T12442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.201325][ T10] lenovo 0003:04B3:3109.000E: hid_parse failed [ 270.213100][T12442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.215546][ T10] lenovo 0003:04B3:3109.000E: probe with driver lenovo failed with error -22 [ 270.231676][T12442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.244752][T12442] /dev/rnullb0: Can't open blockdev [ 270.364932][ T981] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 270.387136][T12418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.396113][T12418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.407879][ T5912] usb 5-1: USB disconnect, device number 29 [ 270.509857][T12444] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1914'. [ 270.520158][ T981] usb 6-1: Using ep0 maxpacket: 8 [ 270.529650][ T981] usb 6-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 270.539395][ T981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.550069][ T981] usb 6-1: Product: syz [ 270.554358][ T981] usb 6-1: Manufacturer: syz [ 270.559719][ T981] usb 6-1: SerialNumber: syz [ 270.576394][ T981] usb 6-1: config 0 descriptor?? [ 270.588950][ T981] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 270.789689][ T981] gspca_vc032x: reg_r err -71 [ 270.798490][T12463] binder: 12462:12463 unknown command 0 [ 270.804258][T12468] binder: 12462:12468 ioctl c0306201 200000000040 returned -22 [ 270.804655][ T981] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 270.820153][T12463] binder: 12462:12463 ioctl c0306201 200000000080 returned -22 [ 270.831737][ T981] usb 6-1: USB disconnect, device number 13 [ 270.858490][T12471] /dev/rnullb0: Can't open blockdev [ 270.983917][T12489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.994208][T12489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.003734][T12489] /dev/rnullb0: Can't open blockdev [ 271.012388][T12489] trusted_key: encrypted_key: key user:syz not found [ 271.015986][T12489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.033369][T12489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.136227][ T5943] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 271.302366][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.322377][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1792, setting to 1024 [ 271.346351][ T5943] usb 1-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 271.359129][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.380732][ T5943] usb 1-1: config 0 descriptor?? [ 271.389499][T12478] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 271.685082][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 271.725078][T12524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.749532][T12524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.805356][ T5943] hid_mf 0003:0079:1846.000F: item fetching failed at offset 6/7 [ 271.824551][ T5943] hid_mf 0003:0079:1846.000F: HID parse failed. [ 271.842512][ T5943] hid_mf 0003:0079:1846.000F: probe with driver hid_mf failed with error -22 [ 271.852101][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 271.866257][ T10] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 271.877901][ T10] usb 5-1: config 0 has an invalid descriptor of length 140, skipping remainder of the config [ 271.889551][ T10] usb 5-1: config 0 has no interface number 0 [ 271.898068][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 271.909006][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.917272][ T10] usb 5-1: Product: syz [ 271.921676][ T10] usb 5-1: Manufacturer: syz [ 271.927137][ T10] usb 5-1: SerialNumber: syz [ 271.933453][ T10] usb 5-1: config 0 descriptor?? [ 272.068803][T12535] C: renamed from team_slave_0 (while UP) [ 272.075156][T12535] netlink: 'syz.0.1920': attribute type 1 has an invalid length. [ 272.075175][T12535] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1920'. [ 272.084773][T12535] overlayfs: failed to resolve './file1/file0': -2 [ 272.144361][ T10] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 272.144394][ T10] usb 5-1: No valid video chain found. [ 272.148305][ T10] usb 5-1: USB disconnect, device number 30 [ 272.305578][ T5912] usb 1-1: USB disconnect, device number 87 [ 272.485488][ T5943] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 272.614993][ T5943] usb 6-1: device descriptor read/64, error -71 [ 272.859473][T12564] /dev/rnullb0: Can't open blockdev [ 272.865028][ T5943] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 272.886139][T12561] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 272.908166][T12565] /dev/rnullb0: Can't open blockdev [ 273.025106][ T5943] usb 6-1: device descriptor read/64, error -71 [ 273.051235][T12576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1942'. [ 273.136469][ T43] usb 1-1: new low-speed USB device number 88 using dummy_hcd [ 273.147195][ T5943] usb usb6-port1: attempt power cycle [ 273.270817][T12586] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1946'. [ 273.281548][T12585] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1946'. [ 273.296238][ T43] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 273.314903][ T43] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 273.323029][ T43] usb 1-1: config 0 has no interface number 0 [ 273.341699][ T43] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 273.354989][ T43] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 273.364072][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.392924][ T43] usb 1-1: config 0 descriptor?? [ 273.497896][ T5943] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 273.525383][ T5943] usb 6-1: device descriptor read/8, error -71 [ 273.762081][T12602] /dev/rnullb0: Can't open blockdev [ 273.775132][ T5943] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 273.794497][ T5925] usb 1-1: USB disconnect, device number 88 [ 273.809893][ T5943] usb 6-1: device descriptor read/8, error -71 [ 273.828986][T12606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.839613][T12606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.925736][ T5943] usb usb6-port1: unable to enumerate USB device [ 273.944968][ T981] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 274.096485][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.107748][ T981] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 274.116875][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.126010][ T981] usb 5-1: config 0 descriptor?? [ 274.281838][T12613] /dev/rnullb0: Can't open blockdev [ 274.287943][T12614] /dev/rnullb0: Can't open blockdev [ 274.336949][ T981] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 274.368022][ T981] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0010/input/input28 [ 274.493399][ T981] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 274.536670][T12596] /dev/rnullb0: Can't open blockdev [ 274.758818][ T5926] usb 5-1: USB disconnect, device number 31 [ 274.882208][T12641] /dev/rnullb0: Can't open blockdev [ 274.900570][T12641] /dev/rnullb0: Can't open blockdev [ 274.906372][T12641] /dev/rnullb0: Can't open blockdev [ 274.912085][T12641] /dev/rnullb0: Can't open blockdev [ 274.925505][T12641] /dev/rnullb0: Can't open blockdev [ 274.931990][T12641] /dev/rnullb0: Can't open blockdev [ 274.946324][T12641] /dev/rnullb0: Can't open blockdev [ 274.952050][T12641] /dev/rnullb0: Can't open blockdev [ 274.960765][T12641] /dev/rnullb0: Can't open blockdev [ 274.989145][T12641] /dev/rnullb0: Can't open blockdev [ 275.005190][T12641] /dev/rnullb0: Can't open blockdev [ 275.010920][T12641] /dev/rnullb0: Can't open blockdev [ 275.019889][T12641] /dev/rnullb0: Can't open blockdev [ 275.025951][T12641] /dev/rnullb0: Can't open blockdev [ 275.031674][T12641] /dev/rnullb0: Can't open blockdev [ 275.039341][T12641] /dev/rnullb0: Can't open blockdev [ 275.045721][T12641] /dev/rnullb0: Can't open blockdev [ 275.051435][T12641] /dev/rnullb0: Can't open blockdev [ 275.057630][T12641] /dev/rnullb0: Can't open blockdev [ 275.063760][T12641] /dev/rnullb0: Can't open blockdev [ 275.075351][T12641] /dev/rnullb0: Can't open blockdev [ 275.081040][T12641] /dev/rnullb0: Can't open blockdev [ 275.086990][T12641] /dev/rnullb0: Can't open blockdev [ 275.092675][T12641] /dev/rnullb0: Can't open blockdev [ 275.098754][T12641] /dev/rnullb0: Can't open blockdev [ 275.104471][T12641] /dev/rnullb0: Can't open blockdev [ 275.117000][T12641] /dev/rnullb0: Can't open blockdev [ 275.122817][T12641] /dev/rnullb0: Can't open blockdev [ 275.129689][T12641] /dev/rnullb0: Can't open blockdev [ 275.136205][T12641] /dev/rnullb0: Can't open blockdev [ 275.142009][T12641] /dev/rnullb0: Can't open blockdev [ 275.147909][T12641] /dev/rnullb0: Can't open blockdev [ 275.153632][T12641] /dev/rnullb0: Can't open blockdev [ 275.163895][T12641] /dev/rnullb0: Can't open blockdev [ 275.171628][T12641] /dev/rnullb0: Can't open blockdev [ 275.179183][T12641] /dev/rnullb0: Can't open blockdev [ 275.185120][T12641] /dev/rnullb0: Can't open blockdev [ 275.190833][T12641] /dev/rnullb0: Can't open blockdev [ 275.205769][T12641] /dev/rnullb0: Can't open blockdev [ 275.211551][T12641] /dev/rnullb0: Can't open blockdev [ 275.217568][T12641] /dev/rnullb0: Can't open blockdev [ 275.223387][T12641] /dev/rnullb0: Can't open blockdev [ 275.230292][T12641] /dev/rnullb0: Can't open blockdev [ 275.236301][T12641] /dev/rnullb0: Can't open blockdev [ 275.242039][T12641] /dev/rnullb0: Can't open blockdev [ 275.253654][T12641] /dev/rnullb0: Can't open blockdev [ 275.275029][T12641] /dev/rnullb0: Can't open blockdev [ 275.280772][T12641] /dev/rnullb0: Can't open blockdev [ 275.295457][T12641] /dev/rnullb0: Can't open blockdev [ 275.301216][T12641] /dev/rnullb0: Can't open blockdev [ 275.307081][T12641] /dev/rnullb0: Can't open blockdev [ 275.323704][T12641] /dev/rnullb0: Can't open blockdev [ 275.372797][T12646] netlink: 'syz.5.1960': attribute type 21 has an invalid length. [ 275.373028][T12641] /dev/rnullb0: Can't open blockdev [ 275.387445][T12641] /dev/rnullb0: Can't open blockdev [ 275.393997][T12641] /dev/rnullb0: Can't open blockdev [ 275.400427][T12641] /dev/rnullb0: Can't open blockdev [ 275.406257][T12641] /dev/rnullb0: Can't open blockdev [ 275.407719][T12646] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1960'. [ 275.411972][T12641] /dev/rnullb0: Can't open blockdev [ 275.439625][T12641] /dev/rnullb0: Can't open blockdev [ 275.479150][T12641] /dev/rnullb0: Can't open blockdev [ 275.495420][T12641] /dev/rnullb0: Can't open blockdev [ 275.512232][T12641] /dev/rnullb0: Can't open blockdev [ 275.522793][T12641] /dev/rnullb0: Can't open blockdev [ 275.529586][T12641] /dev/rnullb0: Can't open blockdev [ 275.548060][T12641] /dev/rnullb0: Can't open blockdev [ 276.835922][T12669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.865112][T12669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.888068][T12669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.906418][T12669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.554995][T12683] tipc: Enabling not permitted [ 277.560514][T12683] tipc: Enabling of bearer rejected, failed to enable media [ 277.568866][ T981] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 277.734963][ T981] usb 6-1: Using ep0 maxpacket: 32 [ 277.744045][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.756713][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.778226][ T981] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 277.796935][ T981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.807241][ T981] usb 6-1: config 0 descriptor?? [ 278.216531][ T981] koneplus 0003:1E7D:2D51.0011: unknown main item tag 0x0 [ 278.224998][ T981] koneplus 0003:1E7D:2D51.0011: unknown main item tag 0x0 [ 278.237349][ T981] koneplus 0003:1E7D:2D51.0011: unknown main item tag 0x0 [ 278.249516][ T981] koneplus 0003:1E7D:2D51.0011: unknown main item tag 0x0 [ 278.264941][ T981] koneplus 0003:1E7D:2D51.0011: unknown main item tag 0x0 [ 278.282846][ T981] koneplus 0003:1E7D:2D51.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 278.705731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 278.714355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 278.723172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 278.731693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 278.795081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 279.562989][T12710] Invalid ELF header magic: != ELF [ 279.835151][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 280.734974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 280.753651][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 280.914962][ T981] koneplus 0003:1E7D:2D51.0011: couldn't init struct koneplus_device [ 280.955148][ T981] koneplus 0003:1E7D:2D51.0011: couldn't install mouse [ 280.971414][ T981] koneplus 0003:1E7D:2D51.0011: probe with driver koneplus failed with error -71 [ 280.990302][T12722] /dev/rnullb0: Can't open blockdev [ 280.997410][ T981] usb 6-1: USB disconnect, device number 18 [ 281.015788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 281.138366][T12727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.140161][T12729] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1986'. [ 281.215220][T12727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.267867][ T9973] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 281.286825][ T9973] CPU: 0 UID: 0 PID: 9973 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 281.286851][ T9973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.286861][ T9973] Call Trace: [ 281.286868][ T9973] [ 281.286874][ T9973] dump_stack_lvl+0x189/0x250 [ 281.286902][ T9973] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.286924][ T9973] ? __pfx__printk+0x10/0x10 [ 281.286947][ T9973] ? rcu_is_watching+0x15/0xb0 [ 281.286966][ T9973] dump_header+0xd3/0x480 [ 281.286982][ T9973] oom_kill_process+0x387/0x920 [ 281.287002][ T9973] out_of_memory+0xf09/0x12a0 [ 281.287022][ T9973] ? mem_cgroup_iter+0x3b/0x460 [ 281.287041][ T9973] ? __pfx_out_of_memory+0x10/0x10 [ 281.287060][ T9973] mem_cgroup_out_of_memory+0x145/0x240 [ 281.287078][ T9973] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 281.287099][ T9973] ? _raw_spin_unlock+0x28/0x50 [ 281.287118][ T9973] ? memcg1_oom_prepare+0x37f/0x450 [ 281.287139][ T9973] try_charge_memcg+0xdff/0x1290 [ 281.287160][ T9973] ? rcu_is_watching+0x15/0xb0 [ 281.287183][ T9973] ? __pfx_try_charge_memcg+0x10/0x10 [ 281.287203][ T9973] ? rcu_irq_exit_check_preempt+0x201/0x210 [ 281.287220][ T9973] ? xa_load+0x60/0x210 [ 281.287240][ T9973] ? rcu_is_watching+0x15/0xb0 [ 281.287257][ T9973] ? rcu_is_watching+0x15/0xb0 [ 281.287273][ T9973] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 281.287296][ T9973] charge_memcg+0x9f/0x180 [ 281.287316][ T9973] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 281.287337][ T9973] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 281.287359][ T9973] __read_swap_cache_async+0x28c/0x510 [ 281.287394][ T9973] swap_cluster_readahead+0x305/0x5f0 [ 281.287422][ T9973] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 281.287442][ T9973] ? rcu_is_watching+0x15/0xb0 [ 281.287458][ T9973] ? filemap_get_entry+0xad/0x2f0 [ 281.287476][ T9973] ? get_vma_policy+0x27c/0x3c0 [ 281.287498][ T9973] swapin_readahead+0x17d/0xb50 [ 281.287516][ T9973] ? __pfx_filemap_get_entry+0x10/0x10 [ 281.287535][ T9973] ? get_swap_device_info+0x1c/0x2b0 [ 281.287552][ T9973] ? rcu_is_watching+0x15/0xb0 [ 281.287568][ T9973] ? __pfx_swapin_readahead+0x10/0x10 [ 281.287587][ T9973] ? __filemap_get_folio+0x9a6/0xaf0 [ 281.287608][ T9973] ? swap_cache_get_folio+0xae/0x3b0 [ 281.287626][ T9973] do_swap_page+0x525/0x5ac0 [ 281.287646][ T9973] ? kasan_save_track+0x4f/0x80 [ 281.287664][ T9973] ? kasan_save_track+0x3e/0x80 [ 281.287682][ T9973] ? __kasan_slab_alloc+0x6c/0x80 [ 281.287702][ T9973] ? init_file+0x93/0x2f0 [ 281.287720][ T9973] ? alloc_empty_file+0x6e/0x1d0 [ 281.287739][ T9973] ? __sys_socket+0x13d/0x1b0 [ 281.287757][ T9973] ? __x64_sys_socket+0x7a/0x90 [ 281.287773][ T9973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.287791][ T9973] ? ___pte_offset_map+0x29/0x250 [ 281.287810][ T9973] ? lock_acquire+0x5f/0x360 [ 281.287825][ T9973] ? do_swap_page+0x184/0x5ac0 [ 281.287844][ T9973] ? __pfx_do_swap_page+0x10/0x10 [ 281.287864][ T9973] ? __pfx_default_wake_function+0x10/0x10 [ 281.287879][ T9973] ? ___pte_offset_map+0x45/0x250 [ 281.287899][ T9973] ? ___pte_offset_map+0x1cf/0x250 [ 281.287934][ T9973] ? pte_offset_map_rw_nolock+0xea/0x160 [ 281.287956][ T9973] __handle_mm_fault+0xe55/0x5400 [ 281.287982][ T9973] ? __pfx___handle_mm_fault+0x10/0x10 [ 281.288002][ T9973] ? rcu_is_watching+0x15/0xb0 [ 281.288022][ T9973] ? lock_vma_under_rcu+0x3cb/0x450 [ 281.288039][ T9973] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 281.288055][ T9973] handle_mm_fault+0x40a/0x8e0 [ 281.288079][ T9973] do_user_addr_fault+0xa81/0x1390 [ 281.288099][ T9973] ? rcu_is_watching+0x15/0xb0 [ 281.288115][ T9973] ? trace_page_fault_user+0x84/0x1e0 [ 281.288131][ T9973] exc_page_fault+0x82/0x100 [ 281.288152][ T9973] asm_exc_page_fault+0x26/0x30 [ 281.288167][ T9973] RIP: 0033:0x7f1277e506ba [ 281.288183][ T9973] Code: 41 54 ba 06 00 00 00 be 01 00 00 00 bf 02 00 00 00 55 53 48 81 ec 90 06 00 00 e8 51 04 14 00 83 f8 ff 0f 84 88 01 00 00 89 c3 <8b> 05 68 1f 34 00 85 c0 0f 84 4b 01 00 00 48 8b 35 31 1f 34 00 48 [ 281.288196][ T9973] RSP: 002b:00007fffbef99dc0 EFLAGS: 00010213 [ 281.288211][ T9973] RAX: 0000000000000003 RBX: 0000000000000003 RCX: 00007f1277f90b07 [ 281.288223][ T9973] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 281.288233][ T9973] RBP: 00007fffbef9a4ac R08: 0000000000000000 R09: 00007fffbef9a1b7 [ 281.288244][ T9973] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000000000a5 [ 281.288254][ T9973] R13: 000055558d8c5590 R14: 0000000000043728 R15: 00007fffbef9a500 [ 281.288272][ T9973] [ 281.288279][ T9973] memory: usage 307200kB, limit 307200kB, failcnt 28452 [ 281.740975][ T9973] memory+swap: usage 351976kB, limit 9007199254740988kB, failcnt 0 [ 281.750695][ T9973] kmem: usage 4984kB, limit 9007199254740988kB, failcnt 0 [ 281.758114][ T9973] Memory cgroup stats for /syz0: [ 281.758242][ T9973] cache 309370880 [ 281.767072][ T9973] rss 53248 [ 281.770185][ T9973] rss_huge 0 [ 281.773373][ T9973] shmem 309182464 [ 281.777894][ T9973] mapped_file 8192 [ 281.781885][ T9973] dirty 0 [ 281.785140][ T9973] writeback 0 [ 281.788430][ T9973] workingset_refault_anon 176 [ 281.793108][ T9973] workingset_refault_file 2394 [ 281.829096][ T9973] swap 45858816 [ 281.832592][ T9973] swapcached 57344 [ 281.847127][ T9973] pgpgin 618499 [ 281.850712][ T9973] pgpgout 544991 [ 281.854252][ T9973] pgfault 164902 [ 281.871231][ T9973] pgmajfault 11800 [ 281.880317][ T9973] inactive_anon 260706304 [ 281.890665][ T9973] active_anon 48304128 [ 281.894760][ T9973] inactive_file 40960 [ 281.907050][ T9973] active_file 0 [ 281.914296][ T9973] unevictable 0 [ 281.932846][ T9973] hierarchical_memory_limit 314572800 [ 281.942269][ T9973] hierarchical_memsw_limit 9223372036854771712 [ 281.954997][ T9973] total_cache 309370880 [ 281.962697][ T9973] total_rss 53248 [ 281.971282][ T9973] total_rss_huge 0 [ 281.979597][ T9973] total_shmem 309182464 [ 281.984046][ T9973] total_mapped_file 8192 [ 281.998865][ T9973] total_dirty 0 [ 282.006648][ T9973] total_writeback 0 [ 282.010479][ T9973] total_workingset_refault_anon 176 [ 282.024885][ T9973] total_workingset_refault_file 2394 [ 282.030325][ T9973] total_swap 45858816 [ 282.034349][ T9973] total_swapcached 57344 [ 282.054973][ T9973] total_pgpgin 618499 [ 282.059009][ T9973] total_pgpgout 544991 [ 282.063247][ T9973] total_pgfault 164902 [ 282.075294][ T9973] total_pgmajfault 11800 [ 282.079563][ T9973] total_inactive_anon 260706304 [ 282.084452][ T9973] total_active_anon 48304128 [ 282.097767][ T9973] total_inactive_file 40960 [ 282.103219][ T9973] total_active_file 0 [ 282.111696][ T9973] total_unevictable 0 [ 282.118490][ T9973] anon_cost 0 [ 282.121791][ T9973] file_cost 0 [ 282.132702][ T9973] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1955,pid=12636,uid=0 [ 282.156873][ T9973] Memory cgroup out of memory: Killed process 12636 (syz.0.1955) total-vm:98316kB, anon-rss:1024kB, file-rss:54016kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 282.202999][T12737] /dev/rnullb0: Can't open blockdev [ 282.534898][ T981] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 282.591210][T12757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.591653][T12631] syz.0.1955 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 282.606667][T12757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.625910][T12757] /dev/rnullb0: Can't open blockdev [ 282.691252][T12631] CPU: 1 UID: 0 PID: 12631 Comm: syz.0.1955 Not tainted syzkaller #0 PREEMPT(full) [ 282.691275][T12631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 282.691284][T12631] Call Trace: [ 282.691298][T12631] [ 282.691306][T12631] dump_stack_lvl+0x189/0x250 [ 282.691334][T12631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.691356][T12631] ? __pfx__printk+0x10/0x10 [ 282.691380][T12631] ? rcu_is_watching+0x15/0xb0 [ 282.691399][T12631] dump_header+0xd3/0x480 [ 282.691415][T12631] oom_kill_process+0x387/0x920 [ 282.691435][T12631] out_of_memory+0xf09/0x12a0 [ 282.691454][T12631] ? mem_cgroup_iter+0x3b/0x460 [ 282.691472][T12631] ? __pfx_out_of_memory+0x10/0x10 [ 282.691492][T12631] mem_cgroup_out_of_memory+0x145/0x240 [ 282.691510][T12631] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 282.691531][T12631] ? _raw_spin_unlock+0x28/0x50 [ 282.691548][T12631] ? memcg1_oom_prepare+0x37f/0x450 [ 282.691570][T12631] try_charge_memcg+0xdff/0x1290 [ 282.691597][T12631] ? __pfx_try_charge_memcg+0x10/0x10 [ 282.691619][T12631] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 282.691637][T12631] ? rcu_is_watching+0x15/0xb0 [ 282.691652][T12631] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 282.691670][T12631] ? lock_release+0x4b/0x3e0 [ 282.691684][T12631] ? percpu_ref_tryget+0x15/0x180 [ 282.691697][T12631] ? percpu_ref_tryget+0x15/0x180 [ 282.691714][T12631] charge_memcg+0x9f/0x180 [ 282.691734][T12631] __mem_cgroup_charge+0x25/0x80 [ 282.691754][T12631] filemap_add_folio+0x49/0x270 [ 282.691771][T12631] __filemap_get_folio+0x4f6/0xaf0 [ 282.691793][T12631] filemap_fault+0x94c/0x12b0 [ 282.691817][T12631] ? __pfx_filemap_fault+0x10/0x10 [ 282.691836][T12631] ? __pfx_filemap_map_pages+0x10/0x10 [ 282.691853][T12631] ? rcu_is_watching+0x15/0xb0 [ 282.691870][T12631] ? __handle_mm_fault+0x2789/0x5400 [ 282.691891][T12631] ? rcu_is_watching+0x15/0xb0 [ 282.691906][T12631] ? __handle_mm_fault+0x2789/0x5400 [ 282.691928][T12631] __do_fault+0x138/0x390 [ 282.691945][T12631] __handle_mm_fault+0x35e3/0x5400 [ 282.691971][T12631] ? __pfx___handle_mm_fault+0x10/0x10 [ 282.691992][T12631] ? rcu_is_watching+0x15/0xb0 [ 282.692012][T12631] ? follow_page_pte+0x7e2/0x13e0 [ 282.692036][T12631] handle_mm_fault+0x40a/0x8e0 [ 282.692060][T12631] __get_user_pages+0x1699/0x2ce0 [ 282.692094][T12631] get_dump_page+0x1ac/0x3f0 [ 282.692114][T12631] ? __pfx_get_dump_page+0x10/0x10 [ 282.692133][T12631] ? dump_user_range+0x19e/0xc90 [ 282.692151][T12631] ? down_read_killable+0x1d1/0x350 [ 282.692165][T12631] ? iov_iter_bvec+0xb8/0x180 [ 282.692183][T12631] dump_user_range+0x1de/0xc90 [ 282.692204][T12631] ? __pfx_dump_user_range+0x10/0x10 [ 282.692220][T12631] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 282.692241][T12631] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 282.692260][T12631] ? __kasan_kmalloc+0x93/0xb0 [ 282.692282][T12631] ? dump_emit+0xa6/0xe0 [ 282.692304][T12631] ? elf_core_dump+0x2d04/0x3990 [ 282.692323][T12631] elf_core_dump+0x3380/0x3990 [ 282.692348][T12631] ? __pfx_elf_core_dump+0x10/0x10 [ 282.692367][T12631] ? kasan_save_track+0x4f/0x80 [ 282.692386][T12631] ? kasan_save_track+0x3e/0x80 [ 282.692405][T12631] ? __kasan_kmalloc+0x93/0xb0 [ 282.692424][T12631] ? __kvmalloc_node_noprof+0x2f2/0x5b0 [ 282.692446][T12631] ? coredump_write+0x345/0x1900 [ 282.692462][T12631] ? vfs_coredump+0x1db5/0x2a60 [ 282.692478][T12631] ? get_signal+0x1109/0x1340 [ 282.692493][T12631] ? arch_do_signal_or_restart+0x9a/0x750 [ 282.692508][T12631] ? irqentry_exit_to_user_mode+0x81/0x120 [ 282.692529][T12631] ? exc_page_fault+0xab/0x100 [ 282.692545][T12631] ? asm_exc_page_fault+0x26/0x30 [ 282.692561][T12631] ? mas_ascend+0x2f4/0x830 [ 282.692594][T12631] ? vfs_coredump+0x1db5/0x2a60 [ 282.692609][T12631] ? rcu_is_watching+0x15/0xb0 [ 282.692626][T12631] ? 0xffffffffff600000 [ 282.692641][T12631] ? up_write+0x1c4/0x420 [ 282.692661][T12631] coredump_write+0x116e/0x1900 [ 282.692684][T12631] ? __pfx_coredump_write+0x10/0x10 [ 282.692704][T12631] ? do_raw_spin_unlock+0x122/0x240 [ 282.692725][T12631] ? unshare_files+0xfd/0x140 [ 282.692746][T12631] vfs_coredump+0x1db5/0x2a60 [ 282.692768][T12631] ? __pfx_vfs_coredump+0x10/0x10 [ 282.692785][T12631] ? unwind_next_frame+0xa5/0x2390 [ 282.692802][T12631] ? rcu_is_watching+0x15/0xb0 [ 282.692820][T12631] ? is_bpf_text_address+0x26/0x2b0 [ 282.692835][T12631] ? rcu_is_watching+0x15/0xb0 [ 282.692852][T12631] ? rcu_is_watching+0x15/0xb0 [ 282.692868][T12631] ? lock_release+0x4b/0x3e0 [ 282.692882][T12631] ? lock_release+0x4b/0x3e0 [ 282.692897][T12631] ? unwind_next_frame+0xa5/0x2390 [ 282.692915][T12631] ? rcu_is_watching+0x15/0xb0 [ 282.692932][T12631] ? unwind_next_frame+0xa5/0x2390 [ 282.692950][T12631] ? unwind_next_frame+0xa5/0x2390 [ 282.692968][T12631] ? rcu_is_watching+0x15/0xb0 [ 282.692985][T12631] ? is_bpf_text_address+0x26/0x2b0 [ 282.693000][T12631] ? rcu_is_watching+0x15/0xb0 [ 282.693017][T12631] ? rcu_is_watching+0x15/0xb0 [ 282.693033][T12631] ? lock_release+0x4b/0x3e0 [ 282.693047][T12631] ? lock_release+0x4b/0x3e0 [ 282.693063][T12631] ? is_bpf_text_address+0x292/0x2b0 [ 282.693078][T12631] ? is_bpf_text_address+0x26/0x2b0 [ 282.693094][T12631] ? kernel_text_address+0xa5/0xe0 [ 282.693115][T12631] ? __kernel_text_address+0xd/0x40 [ 282.693136][T12631] ? unwind_get_return_address+0x4d/0x90 [ 282.693154][T12631] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 282.693174][T12631] ? arch_stack_walk+0xfc/0x150 [ 282.693199][T12631] ? stack_trace_save+0x9c/0xe0 [ 282.693218][T12631] ? stack_depot_save_flags+0x40/0x860 [ 282.693239][T12631] ? percpu_ref_get_many+0x19/0x140 [ 282.693256][T12631] ? kasan_save_track+0x4f/0x80 [ 282.693275][T12631] ? kasan_save_track+0x3e/0x80 [ 282.693304][T12631] ? __kasan_save_free_info+0x46/0x50 [ 282.693321][T12631] ? __kasan_slab_free+0x5b/0x80 [ 282.693340][T12631] ? kmem_cache_free+0x18f/0x400 [ 282.693360][T12631] ? get_signal+0xa4c/0x1340 [ 282.693374][T12631] ? arch_do_signal_or_restart+0x9a/0x750 [ 282.693389][T12631] ? irqentry_exit_to_user_mode+0x81/0x120 [ 282.693408][T12631] ? exc_page_fault+0xab/0x100 [ 282.693425][T12631] ? asm_exc_page_fault+0x26/0x30 [ 282.693455][T12631] ? rcu_is_watching+0x15/0xb0 [ 282.693473][T12631] ? rcu_is_watching+0x15/0xb0 [ 282.693491][T12631] get_signal+0x1109/0x1340 [ 282.693514][T12631] arch_do_signal_or_restart+0x9a/0x750 [ 282.693533][T12631] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 282.693548][T12631] ? __bad_area_nosemaphore+0x3fb/0x780 [ 282.693567][T12631] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 282.693584][T12631] ? rcu_is_watching+0x15/0xb0 [ 282.693602][T12631] irqentry_exit_to_user_mode+0x81/0x120 [ 282.693622][T12631] exc_page_fault+0xab/0x100 [ 282.693641][T12631] asm_exc_page_fault+0x26/0x30 [ 282.693655][T12631] RIP: 0033:0x7f313c58ebf1 [ 282.693669][T12631] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 282.693682][T12631] RSP: 002b:fffffffffffffff0 EFLAGS: 00010217 [ 282.693697][T12631] RAX: 0000000000000000 RBX: 00007f313c7c6090 RCX: 00007f313c58ebe9 [ 282.693709][T12631] RDX: 0000000000000000 RSI: fffffffffffffff0 RDI: 0000000020042400 [ 282.693720][T12631] RBP: 00007f313c611e19 R08: 0000000000000000 R09: 0000000000000000 [ 282.693730][T12631] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 282.693739][T12631] R13: 00007f313c7c6128 R14: 00007f313c7c6090 R15: 00007ffed5d5cec8 [ 282.693757][T12631] [ 282.693878][T12631] memory: usage 307132kB, limit 307200kB, failcnt 29964 [ 282.694963][ T981] usb 5-1: Using ep0 maxpacket: 8 [ 282.714385][T12631] memory+swap: usage 352032kB, limit 9007199254740988kB, failcnt 0 [ 282.766875][ T981] usb 5-1: config 5 has an invalid interface number: 151 but max is 0 [ 282.845647][T12764] /dev/rnullb0: Can't open blockdev [ 282.855494][ T981] usb 5-1: config 5 has no interface number 0 [ 282.907355][T12631] kmem: usage 4920kB, limit 9007199254740988kB, failcnt 0 [ 282.989585][ T981] usb 5-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=1e.b5 [ 282.993615][T12631] Memory cgroup stats for [ 282.998482][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.006243][T12631] /syz0 [ 283.008812][ T981] usb 5-1: Product: syz [ 283.015939][T12631] : [ 283.024909][ T981] usb 5-1: Manufacturer: syz [ 283.028793][T12631] cache 284340224 [ 283.044303][ T981] usb 5-1: SerialNumber: syz [ 283.085817][T12767] binder: 12766:12767 ioctl c0306201 200000000640 returned -22 [ 283.163278][T12631] rss 163840 [ 283.269461][T12636] syz.0.1955 (12636) used greatest stack depth: 17232 bytes left [ 283.277813][T12631] rss_huge 0 [ 283.283147][T12767] /dev/rnullb0: Can't open blockdev [ 283.408966][T12631] shmem 283975680 [ 283.556763][ T5926] usb 5-1: USB disconnect, device number 32 [ 283.773006][T12631] mapped_file 4096 [ 283.777080][T12631] dirty 4096 [ 283.780288][T12631] writeback 0 [ 283.783651][T12631] workingset_refault_anon 180 [ 283.794800][T12783] o2cb: This node has not been configured. [ 283.802490][T12783] o2cb: Cluster check failed. Fix errors before retrying. [ 283.809988][T12783] (syz.2.2004,12783,1):user_dlm_register:674 ERROR: status = -22 [ 283.819583][T12783] (syz.2.2004,12783,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 283.843290][T12631] workingset_refault_file 3177 [ 283.849727][T12631] swap 42176512 [ 283.853226][T12631] swapcached 57344 [ 283.857373][T12631] pgpgin 620277 [ 283.860832][T12631] pgpgout 552822 [ 283.864364][T12631] pgfault 165020 [ 283.875734][T12631] pgmajfault 11838 [ 283.880172][T12631] inactive_anon 7327744 [ 283.888488][T12631] active_anon 276434944 [ 283.893421][T12631] inactive_file 0 [ 283.906484][T12631] active_file 364544 [ 283.918662][T12631] unevictable 0 [ 283.927643][T12631] hierarchical_memory_limit 314572800 [ 283.966808][T12631] hierarchical_memsw_limit 9223372036854771712 [ 283.974916][ T981] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 283.994720][T12631] total_cache 284340224 [ 284.015982][T12631] total_rss 163840 [ 284.019820][T12631] total_rss_huge 0 [ 284.023538][T12631] total_shmem 283975680 [ 284.048486][T12631] total_mapped_file 4096 [ 284.052766][T12631] total_dirty 4096 [ 284.114905][ T981] usb 1-1: device descriptor read/64, error -71 [ 284.121734][T12631] total_writeback 0 [ 284.136884][T12631] total_workingset_refault_anon 180 [ 284.160396][T12631] total_workingset_refault_file 3177 [ 284.181297][T12793] ceph: Path missing in source [ 284.186608][T12800] ceph: Path missing in source [ 284.197990][T12631] total_swap 42176512 [ 284.206759][T12631] total_swapcached 57344 [ 284.216608][T12631] total_pgpgin 620277 [ 284.226182][T12631] total_pgpgout 552822 [ 284.234699][T12631] total_pgfault 165020 [ 284.258681][T12631] total_pgmajfault 11838 [ 284.267368][T12631] total_inactive_anon 7327744 [ 284.277581][T12631] total_active_anon 276434944 [ 284.297825][T12631] total_inactive_file 0 [ 284.305358][T12806] /dev/rnullb0: Can't open blockdev [ 284.324066][T12631] total_active_file 364544 [ 284.339514][T12631] total_unevictable 0 [ 284.347912][T12631] anon_cost 0 [ 284.355062][T12631] file_cost 0 [ 284.361689][T12631] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1955,pid=12631,uid=0 [ 284.410286][T12631] Memory cgroup out of memory: Killed process 12631 (syz.0.1955) total-vm:98316kB, anon-rss:1024kB, file-rss:54016kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 284.480566][T12810] comedi comedi1: comedi_config --init_data is deprecated [ 285.198828][T12835] netlink: 'syz.2.2023': attribute type 11 has an invalid length. [ 285.216677][T12835] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2023'. [ 285.384952][ T5926] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 285.451540][T12847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.460293][T12847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.513120][T12848] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4234274794 (67748396704 ns) > initial count (26801589552 ns). Using initial count to start timer. [ 285.555873][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 285.562284][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.574197][ T5926] usb 5-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 285.584552][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.605407][ T5926] usb 5-1: config 0 descriptor?? [ 285.757682][T12631] syz.0.1955 (12631) used greatest stack depth: 16688 bytes left [ 285.806237][ T5912] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 285.969278][ T5912] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.980538][ T5912] usb 6-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.994969][ T5943] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 285.998783][ T5912] usb 6-1: config 1 interface 0 has no altsetting 0 [ 286.021317][ T5926] kye 0003:0458:501A.0012: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 286.049760][ T5912] usb 6-1: string descriptor 0 read error: -22 [ 286.057172][ T5912] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 286.069599][ T5926] kye 0003:0458:501A.0012: unknown main item tag 0x0 [ 286.076836][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.085740][ T5926] kye 0003:0458:501A.0012: unknown main item tag 0x0 [ 286.092545][ T5926] kye 0003:0458:501A.0012: unknown main item tag 0x0 [ 286.102955][ T5926] kye 0003:0458:501A.0012: unknown main item tag 0x0 [ 286.113736][ T5926] kye 0003:0458:501A.0012: unknown main item tag 0x0 [ 286.122694][ T5926] kye 0003:0458:501A.0012: unknown main item tag 0x0 [ 286.130745][ T5926] kye 0003:0458:501A.0012: unknown main item tag 0x0 [ 286.144466][ T5926] kye 0003:0458:501A.0012: hidraw0: USB HID v0.00 Device [HID 0458:501a] on usb-dummy_hcd.4-1/input0 [ 286.155050][ T5943] usb 1-1: Using ep0 maxpacket: 16 [ 286.156853][ T5926] kye 0003:0458:501A.0012: tablet-enabling feature report not found [ 286.180274][T12858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.189065][ T5926] kye 0003:0458:501A.0012: tablet enabling failed [ 286.199512][T12858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.214926][ T5943] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 286.224470][T12833] /dev/rnullb0: Can't open blockdev [ 286.258139][ T5943] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 286.264246][ T5926] usb 5-1: USB disconnect, device number 33 [ 286.275991][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.300584][ T5943] usb 1-1: Product: syz [ 286.311537][ T5943] usb 1-1: Manufacturer: syz [ 286.311835][ T24] usb 6-1: USB disconnect, device number 19 [ 286.317672][ T5943] usb 1-1: SerialNumber: syz [ 286.346663][ T5943] usb 1-1: config 0 descriptor?? [ 286.357692][ T5943] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 286.375890][ T5943] usb 1-1: Detected FT232R [ 286.564476][ T5943] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 286.823874][ T5943] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 286.868112][T12862] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 286.897648][T12862] /dev/rnullb0: Can't open blockdev [ 286.993589][T12866] /dev/rnullb0: Can't open blockdev [ 287.023699][T12868] i2c i2c-0: Invalid block write size 34 [ 287.028183][ T5943] usb 1-1: USB disconnect, device number 91 [ 287.040238][ T5943] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 287.058978][ T5943] ftdi_sio 1-1:0.0: device disconnected [ 287.180708][T12879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.198334][T12879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.331030][T12621] syz.0.1955 (12621) used greatest stack depth: 16320 bytes left [ 287.405102][ T5925] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 287.564929][ T5925] usb 6-1: Using ep0 maxpacket: 8 [ 287.578533][ T5925] usb 6-1: config 2 has an invalid interface number: 189 but max is 1 [ 287.594751][ T5925] usb 6-1: config 2 has an invalid interface number: 185 but max is 1 [ 287.614789][ T5925] usb 6-1: config 2 has an invalid interface number: 83 but max is 1 [ 287.630912][ T5925] usb 6-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 287.641568][ T5925] usb 6-1: config 2 has 3 interfaces, different from the descriptor's value: 2 [ 287.650990][ T5925] usb 6-1: config 2 has no interface number 0 [ 287.658528][ T5925] usb 6-1: config 2 has no interface number 1 [ 287.664956][ T5925] usb 6-1: config 2 has no interface number 2 [ 287.671273][ T5925] usb 6-1: config 2 interface 189 altsetting 16 endpoint 0xC has an invalid bInterval 201, changing to 7 [ 287.682834][ T5925] usb 6-1: config 2 interface 189 altsetting 16 endpoint 0x2 has an invalid bInterval 167, changing to 11 [ 287.695816][ T5925] usb 6-1: config 2 interface 185 altsetting 176 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 287.707076][ T5925] usb 6-1: config 2 interface 185 altsetting 176 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 287.720798][ T5925] usb 6-1: too many endpoints for config 2 interface 83 altsetting 197: 104, using maximum allowed: 30 [ 287.732195][ T5925] usb 6-1: config 2 interface 83 altsetting 197 has an invalid descriptor for endpoint zero, skipping [ 287.743408][ T5925] usb 6-1: config 2 interface 83 altsetting 197 endpoint 0xA has invalid wMaxPacketSize 0 [ 287.753569][ T5925] usb 6-1: config 2 interface 83 altsetting 197 bulk endpoint 0xA has invalid maxpacket 0 [ 287.784202][ T5925] usb 6-1: config 2 interface 83 altsetting 197 has a duplicate endpoint with address 0x8, skipping [ 287.797403][ T5925] usb 6-1: config 2 interface 83 altsetting 197 has an invalid descriptor for endpoint zero, skipping [ 287.812513][ T5925] usb 6-1: config 2 interface 83 altsetting 197 has an invalid descriptor for endpoint zero, skipping [ 287.828443][ T5925] usb 6-1: config 2 interface 83 altsetting 197 has a duplicate endpoint with address 0xF, skipping [ 287.840284][ T5925] usb 6-1: config 2 interface 83 altsetting 197 has a duplicate endpoint with address 0x3, skipping [ 287.851293][ T5925] usb 6-1: config 2 interface 83 altsetting 197 has 8 endpoint descriptors, different from the interface descriptor's value: 104 [ 287.864955][ T5926] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 287.874450][ T5925] usb 6-1: config 2 interface 189 has no altsetting 0 [ 287.911909][ T5925] usb 6-1: config 2 interface 185 has no altsetting 0 [ 287.923547][ T5925] usb 6-1: config 2 interface 83 has no altsetting 0 [ 287.940362][ T5925] usb 6-1: New USB device found, idVendor=19d2, idProduct=0254, bcdDevice=6e.24 [ 287.949703][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.951771][T12625] syz.0.1955 (12625) used greatest stack depth: 16240 bytes left [ 287.959429][ T5925] usb 6-1: Product: Ѓ [ 287.970679][ T5925] usb 6-1: Manufacturer: 鄌둚듥拲帤倹扒兼압뵨蒉鯐愀ꆨꍯ㩃뀉攆엤㠧ॢމ穇䳛ꉪᲶ薦Ⱔ뚁䂷杚鄺춐鈤돳邼⺾漚듫怴੏穯渴ς݈ꉬ뎻䃡痕蝡吢୒%酄쬳듍ꧤ맨ꕢꢱヅ [ 287.991775][ T5925] usb 6-1: SerialNumber: syz [ 288.028146][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.038600][ T5926] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 288.054880][ T5926] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 288.064090][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.074783][ T5926] usb 1-1: config 0 descriptor?? [ 288.164912][ T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 288.238689][ T5925] option 6-1:2.189: GSM modem (1-port) converter detected [ 288.261227][ T5925] usb 6-1: USB disconnect, device number 20 [ 288.268918][ T5925] option 6-1:2.189: device disconnected [ 288.296864][T12881] vxcan0: entered promiscuous mode [ 288.304701][ T5943] usb 1-1: USB disconnect, device number 92 [ 288.335919][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 288.342527][ T24] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 288.351134][ T24] usb 5-1: config 0 has no interface number 0 [ 288.362927][ T24] usb 5-1: config 0 interface 184 has no altsetting 0 [ 288.372465][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 288.383748][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.393459][ T24] usb 5-1: Product: syz [ 288.393479][ T24] usb 5-1: Manufacturer: syz [ 288.393492][ T24] usb 5-1: SerialNumber: syz [ 288.399003][ T24] usb 5-1: config 0 descriptor?? [ 288.404751][ T24] smsc75xx v1.0.0 [ 288.711609][T12928] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2053'. [ 289.007417][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 289.022819][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 289.269231][T12952] /dev/rnullb0: Can't open blockdev [ 289.313642][T12954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.326495][T12954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.394641][T12958] ALSA: mixer_oss: invalid OSS volume '^' [ 289.402014][T12958] /dev/rnullb0: Can't open blockdev [ 289.519534][T12964] /dev/rnullb0: Can't open blockdev [ 289.804935][ T5943] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 289.954977][ T5943] usb 1-1: Using ep0 maxpacket: 32 [ 289.963931][ T5943] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 289.974586][ T5943] usb 1-1: config 0 has no interface number 0 [ 289.982108][ T5943] usb 1-1: config 0 interface 12 has no altsetting 0 [ 289.992736][ T5943] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 290.004747][ T5943] usb 1-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 290.015676][ T5943] usb 1-1: Product: syz [ 290.020379][ T5943] usb 1-1: Manufacturer: syz [ 290.026613][ T5943] usb 1-1: SerialNumber: syz [ 290.033433][ T5943] usb 1-1: config 0 descriptor?? [ 290.487020][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 290.497965][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 290.507838][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 290.518662][ T24] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 290.529958][ T24] usb 5-1: USB disconnect, device number 34 [ 290.662799][T12981] /dev/rnullb0: Can't open blockdev [ 290.806776][T12993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.815679][T12993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.099379][T13006] nfs: Bad value for 'source' [ 291.176978][T13015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 291.186452][T13016] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 291.280900][ T5943] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 291.288763][ T5943] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 291.296569][ T5943] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 291.304427][ T5943] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 291.316196][ T5943] usb 1-1: USB disconnect, device number 93 [ 291.449680][T13034] syzkaller1: entered promiscuous mode [ 291.456000][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 291.457241][T13034] syzkaller1: entered allmulticast mode [ 291.604981][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 291.620921][ T24] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 291.637680][ T24] usb 5-1: config 0 has no interface number 0 [ 291.650451][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 291.672029][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 291.681350][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 291.689611][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 291.698793][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 291.707249][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 291.718703][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 291.735727][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 291.751836][ T24] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 291.765848][ T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 291.775721][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.782751][ T5943] usb 3-1: USB disconnect, device number 27 [ 291.800259][ T24] usb 5-1: config 0 descriptor?? [ 291.827315][ T24] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 292.044142][ T5943] usb 5-1: USB disconnect, device number 35 [ 292.050212][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 292.082533][T13036] chnl_net:caif_netlink_parms(): no params data found [ 292.092009][ T5943] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 292.262619][T13018] ldusb: No device or device unplugged -19 [ 292.320678][T13036] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.330062][T13036] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.338043][T13036] bridge_slave_0: entered allmulticast mode [ 292.346838][T13036] bridge_slave_0: entered promiscuous mode [ 292.354567][T13036] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.362280][T13036] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.371926][T13036] bridge_slave_1: entered allmulticast mode [ 292.379757][T13036] bridge_slave_1: entered promiscuous mode [ 292.389197][T13018] netlink: 'syz.4.2083': attribute type 40 has an invalid length. [ 292.419872][T13036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.447777][T13036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.518415][T13036] team0: Port device team_slave_0 added [ 292.538152][T13036] team0: Port device team_slave_1 added [ 292.570797][T13036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.579442][T13036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.607156][T13036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.632229][T13036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.642612][T13036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.670588][T13036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.731504][T13036] hsr_slave_0: entered promiscuous mode [ 292.738871][T13036] hsr_slave_1: entered promiscuous mode [ 292.748484][T13036] debugfs: 'hsr0' already exists in 'hsr' [ 292.754614][T13036] Cannot create hsr debugfs directory [ 292.823069][T13055] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2094'. [ 292.876840][T13036] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.933644][T13036] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.962962][T13036] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.991667][T13060] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2095'. [ 293.017722][T13060] fuse: Bad value for 'group_id' [ 293.025151][T13061] fuse: Bad value for 'group_id' [ 293.032312][T13060] fuse: Bad value for 'group_id' [ 293.039529][T13036] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.043388][T13061] fuse: Bad value for 'group_id' [ 293.124939][ T5912] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 293.173549][T13036] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 293.194626][T13036] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 293.216073][T13036] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 293.237155][T13036] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 293.317346][ T5912] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 293.327199][ T5912] usb 1-1: can't read configurations, error -61 [ 293.449266][T13036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.464990][ T5912] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 293.473707][T13036] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.491596][T12447] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.498749][T12447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.523895][T12453] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.531048][T12453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.596426][T13036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.628147][ T5912] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 293.637651][ T5912] usb 1-1: can't read configurations, error -61 [ 293.650688][ T5912] usb usb1-port1: attempt power cycle [ 293.755635][ T5864] Bluetooth: hci4: command tx timeout [ 293.851036][T13036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.892870][T13096] wlan1 speed is unknown, defaulting to 1000 [ 293.900966][T13096] wlan1 speed is unknown, defaulting to 1000 [ 293.908392][T13096] wlan1 speed is unknown, defaulting to 1000 [ 293.909315][T13036] veth0_vlan: entered promiscuous mode [ 293.946728][T13036] veth1_vlan: entered promiscuous mode [ 293.962952][T13097] /dev/rnullb0: Can't open blockdev [ 293.980303][T13036] veth0_macvtap: entered promiscuous mode [ 293.989120][T13036] veth1_macvtap: entered promiscuous mode [ 294.003684][T13036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.015141][ T5912] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 294.026744][T13036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.052214][T12447] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.068570][T12447] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.081708][ T5912] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 294.092369][ T5912] usb 1-1: can't read configurations, error -61 [ 294.117981][T12447] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.145693][T12447] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.172425][T13096] infiniband syz0: set active [ 294.183867][ T43] wlan1 speed is unknown, defaulting to 1000 [ 294.185342][T13096] infiniband syz0: added wlan1 [ 294.230919][T12447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.239479][ T5912] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 294.261200][T12447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.276763][T13096] RDS/IB: syz0: added [ 294.289741][T13096] smc: adding ib device syz0 with port count 1 [ 294.290490][ T5912] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 294.299864][T13096] smc: ib device syz0 port 1 has pnetid [ 294.309834][ T5912] usb 1-1: can't read configurations, error -61 [ 294.317246][ T5912] usb usb1-port1: unable to enumerate USB device [ 294.325998][T13096] wlan1 speed is unknown, defaulting to 1000 [ 294.332119][ T5912] wlan1 speed is unknown, defaulting to 1000 [ 294.336529][T12452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.356302][T12452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.454049][T13096] wlan1 speed is unknown, defaulting to 1000 [ 294.571615][T13096] wlan1 speed is unknown, defaulting to 1000 [ 294.679613][T13096] wlan1 speed is unknown, defaulting to 1000 [ 294.694910][ T5943] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 294.777670][T13096] wlan1 speed is unknown, defaulting to 1000 [ 294.846201][ T5943] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.864887][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.885546][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.904935][ T5943] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 294.929501][ T5943] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 294.939279][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.949751][ T5943] usb 3-1: config 0 descriptor?? [ 295.358516][T13101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.373579][T13101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.587976][ T5943] usbhid 3-1:0.0: can't add hid device: -71 [ 295.594069][ T5943] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 295.613200][ T5943] usb 3-1: USB disconnect, device number 28 [ 295.835057][ T5864] Bluetooth: hci4: command tx timeout [ 295.858037][T13112] program syz.0.2106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 296.222079][T13118] binder: 13117:13118 ioctl c00c6211 0 returned -14 [ 296.345011][ T5912] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 296.476129][ T5912] usb 1-1: device descriptor read/64, error -71 [ 296.509724][T13120] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 296.715056][ T5912] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 296.855035][ T5912] usb 1-1: device descriptor read/64, error -71 [ 296.966734][ T5912] usb usb1-port1: attempt power cycle [ 297.265168][T13123] /dev/rnullb0: Can't open blockdev [ 297.304950][ T5912] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 297.325316][ T5912] usb 1-1: device descriptor read/8, error -71 [ 297.584891][ T5912] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 297.623118][ T5912] usb 1-1: device descriptor read/8, error -71 [ 297.629622][ T43] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 297.758824][ T5912] usb usb1-port1: unable to enumerate USB device [ 297.915450][ T5874] Bluetooth: hci4: command tx timeout [ 299.097852][T13133] netlink: 'syz.4.2114': attribute type 10 has an invalid length. [ 299.123270][T13133] veth1_vlan: left promiscuous mode [ 299.129918][T13133] macvlan1: entered allmulticast mode [ 299.157620][T13133] veth1_vlan: entered promiscuous mode [ 299.163295][T13133] veth1_vlan: entered allmulticast mode [ 299.175165][T13133] team0: Port device macvlan1 added [ 299.199037][T13136] /dev/rnullb0: Can't open blockdev [ 299.362659][T13145] /dev/rnullb0: Can't open blockdev [ 299.513568][T13155] /dev/rnullb0: Can't open blockdev [ 299.595116][T13126] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 299.604195][ T5874] Bluetooth: hci2: command 0x0405 tx timeout [ 299.995423][ T5874] Bluetooth: hci4: command 0x0419 tx timeout [ 300.367586][T13126] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 300.376193][T13126] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 300.382327][T13126] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 300.392561][T13126] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 300.399610][T13126] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 300.406865][T13126] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 300.413575][T13126] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 300.477760][T13164] /dev/rnullb0: Can't open blockdev [ 300.654980][ T5925] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 300.817202][ T5925] usb 1-1: config 0 has an invalid interface number: 220 but max is 1 [ 300.830009][ T5925] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 300.849888][ T5925] usb 1-1: config 0 has an invalid interface number: 94 but max is 1 [ 300.867626][ T5925] usb 1-1: config 0 has an invalid interface number: 6 but max is 1 [ 300.886036][ T5925] usb 1-1: config 0 has an invalid interface descriptor of length 5, skipping [ 300.904448][ T5925] usb 1-1: config 0 has an invalid descriptor of length 225, skipping remainder of the config [ 300.934856][ T5925] usb 1-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 300.943834][ T5925] usb 1-1: config 0 has no interface number 0 [ 300.956929][ T5925] usb 1-1: config 0 has no interface number 1 [ 300.963029][ T5925] usb 1-1: config 0 has no interface number 2 [ 300.985196][ T5925] usb 1-1: config 0 interface 220 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 301.004160][ T5925] usb 1-1: config 0 interface 220 altsetting 4 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 301.005124][ T43] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 301.025725][ T5925] usb 1-1: config 0 interface 220 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 301.046259][ T5925] usb 1-1: config 0 interface 220 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 301.064871][ T5925] usb 1-1: config 0 interface 94 altsetting 81 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 301.084953][ T5925] usb 1-1: too many endpoints for config 0 interface 6 altsetting 255: 214, using maximum allowed: 30 [ 301.104898][ T5925] usb 1-1: config 0 interface 6 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 214 [ 301.124855][ T5925] usb 1-1: config 0 interface 220 has no altsetting 0 [ 301.131771][ T5925] usb 1-1: config 0 interface 94 has no altsetting 0 [ 301.144905][ T5925] usb 1-1: config 0 interface 6 has no altsetting 0 [ 301.158493][ T5925] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a7b, bcdDevice=de.b2 [ 301.175839][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.183852][ T5925] usb 1-1: Product: syz [ 301.195825][ T5925] usb 1-1: SerialNumber: syz [ 301.198759][ T43] usb 3-1: config 1 has an invalid descriptor of length 170, skipping remainder of the config [ 301.205453][ T5925] usb 1-1: config 0 descriptor?? [ 301.221144][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 301.225747][T13141] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 301.245326][ T43] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 301.256889][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 301.275302][ T43] usb 3-1: SerialNumber: syz [ 301.488546][T13171] serio: Serial port ptm0 [ 301.499693][ T5925] usb 1-1: USB disconnect, device number 102 [ 301.675032][ T5874] Bluetooth: hci2: command 0x0405 tx timeout [ 301.988844][T13176] /dev/rnullb0: Can't open blockdev [ 302.187303][T13187] /dev/rnullb0: Can't open blockdev [ 302.247489][T13191] /dev/sg0: Can't lookup blockdev [ 302.269257][T13195] /dev/rnullb0: Can't open blockdev [ 302.394998][ T5874] Bluetooth: hci0: command 0x0c1a tx timeout [ 302.474977][ T5874] Bluetooth: hci4: command 0x0419 tx timeout [ 302.595496][ T1210] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 302.695349][ T5912] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 302.712402][T13219] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 302.729390][ T30] audit: type=1800 audit(33076.682:6476): pid=13218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2145" name="file0" dev="overlay" ino=1144 res=0 errno=0 [ 302.729492][T13218] evm: overlay not supported [ 302.755568][T13218] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 302.757078][T13219] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 302.762624][T13218] /dev/rnullb0: Can't open blockdev [ 302.775484][ T1210] usb 6-1: Using ep0 maxpacket: 8 [ 302.776766][T13219] /dev/rnullb0: Can't open blockdev [ 302.828496][ T1210] usb 6-1: unable to get BOS descriptor or descriptor too short [ 302.842873][ T1210] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 302.853344][ T1210] usb 6-1: can't read configurations, error -71 [ 302.860012][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 302.866607][ T5912] usb 1-1: too many configurations: 99, using maximum allowed: 8 [ 302.883452][ T5912] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 302.891740][ T5912] usb 1-1: can't read configurations, error -61 [ 303.046120][ T5912] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 303.215031][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 303.223863][ T5912] usb 1-1: too many configurations: 99, using maximum allowed: 8 [ 303.234184][ T5912] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 303.245470][ T5912] usb 1-1: can't read configurations, error -61 [ 303.252295][ T5912] usb usb1-port1: attempt power cycle [ 303.416842][T13229] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2149'. [ 303.428713][T13229] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2149'. [ 303.433682][T13232] /dev/rnullb0: Can't open blockdev [ 303.438219][T13229] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2149'. [ 303.438341][T13229] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2149'. [ 303.438457][T13229] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2149'. [ 303.438569][T13229] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2149'. [ 303.438677][T13229] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2149'. [ 303.438779][T13229] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2149'. [ 303.501352][T13229] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2149'. [ 303.510618][T13229] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2149'. [ 303.540074][ T43] usb 3-1: 0:2 : does not exist [ 303.556466][ T43] usb 3-1: unit 146 not found! [ 303.572364][ T43] usb 3-1: USB disconnect, device number 30 [ 303.585831][T13234] virtio-fs: tag not found [ 303.598951][ T5912] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 303.624241][ T9968] udevd[9968]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 303.661169][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 303.668578][ T5912] usb 1-1: too many configurations: 99, using maximum allowed: 8 [ 303.683530][ T5912] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 303.703631][ T5912] usb 1-1: can't read configurations, error -61 [ 303.845014][ T5912] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 303.895488][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 303.909095][ T5912] usb 1-1: too many configurations: 99, using maximum allowed: 8 [ 303.918361][ T5912] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 303.927192][ T5912] usb 1-1: can't read configurations, error -61 [ 303.933962][ T5912] usb usb1-port1: unable to enumerate USB device [ 303.975047][ T43] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 304.049529][T13246] /dev/rnullb0: Can't open blockdev [ 304.060335][T13246] /dev/rnullb0: Can't open blockdev [ 304.154925][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 304.162147][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.172544][ T43] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 304.182032][ T43] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 304.191218][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.201951][ T43] usb 3-1: config 0 descriptor?? [ 304.424750][ T43] usb 3-1: USB disconnect, device number 31 [ 304.485606][ T5874] Bluetooth: hci0: command 0x0c1a tx timeout [ 304.554965][ T5874] Bluetooth: hci4: command 0x0419 tx timeout [ 304.914156][T11711] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 304.925626][T11711] CPU: 0 UID: 0 PID: 11711 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 304.925649][T11711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 304.925672][T11711] Call Trace: [ 304.925678][T11711] [ 304.925685][T11711] dump_stack_lvl+0x189/0x250 [ 304.925713][T11711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.925733][T11711] ? __pfx__printk+0x10/0x10 [ 304.925757][T11711] ? rcu_is_watching+0x15/0xb0 [ 304.925777][T11711] dump_header+0xd3/0x480 [ 304.925793][T11711] oom_kill_process+0x387/0x920 [ 304.925813][T11711] out_of_memory+0xf09/0x12a0 [ 304.925833][T11711] ? mem_cgroup_iter+0x3b/0x460 [ 304.925852][T11711] ? __pfx_out_of_memory+0x10/0x10 [ 304.925872][T11711] mem_cgroup_out_of_memory+0x145/0x240 [ 304.925891][T11711] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 304.925913][T11711] ? _raw_spin_unlock+0x28/0x50 [ 304.925931][T11711] ? memcg1_oom_prepare+0x37f/0x450 [ 304.925953][T11711] try_charge_memcg+0xdff/0x1290 [ 304.925974][T11711] ? rcu_is_watching+0x15/0xb0 [ 304.925997][T11711] ? __pfx_try_charge_memcg+0x10/0x10 [ 304.926018][T11711] ? rcu_irq_exit_check_preempt+0x201/0x210 [ 304.926035][T11711] ? xa_load+0x60/0x210 [ 304.926055][T11711] ? rcu_is_watching+0x15/0xb0 [ 304.926072][T11711] ? rcu_is_watching+0x15/0xb0 [ 304.926089][T11711] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 304.926111][T11711] charge_memcg+0x9f/0x180 [ 304.926132][T11711] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 304.926153][T11711] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 304.926176][T11711] __read_swap_cache_async+0x28c/0x510 [ 304.926200][T11711] swap_cluster_readahead+0x305/0x5f0 [ 304.926219][T11711] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 304.926239][T11711] ? rcu_is_watching+0x15/0xb0 [ 304.926253][T11711] ? filemap_get_entry+0xad/0x2f0 [ 304.926270][T11711] ? get_vma_policy+0x27c/0x3c0 [ 304.926293][T11711] swapin_readahead+0x17d/0xb50 [ 304.926311][T11711] ? __pfx_filemap_get_entry+0x10/0x10 [ 304.926331][T11711] ? get_swap_device_info+0x1c/0x2b0 [ 304.926355][T11711] ? rcu_is_watching+0x15/0xb0 [ 304.926373][T11711] ? __pfx_swapin_readahead+0x10/0x10 [ 304.926392][T11711] ? __filemap_get_folio+0x9a6/0xaf0 [ 304.926413][T11711] ? swap_cache_get_folio+0xae/0x3b0 [ 304.926432][T11711] do_swap_page+0x525/0x5ac0 [ 304.926454][T11711] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 304.926478][T11711] ? ___pte_offset_map+0x29/0x250 [ 304.926499][T11711] ? lock_acquire+0x5f/0x360 [ 304.926514][T11711] ? do_swap_page+0x184/0x5ac0 [ 304.926533][T11711] ? __pfx_do_swap_page+0x10/0x10 [ 304.926553][T11711] ? __pfx_default_wake_function+0x10/0x10 [ 304.926569][T11711] ? ___pte_offset_map+0x45/0x250 [ 304.926589][T11711] ? ___pte_offset_map+0x1cf/0x250 [ 304.926610][T11711] ? pte_offset_map_rw_nolock+0xea/0x160 [ 304.926632][T11711] __handle_mm_fault+0xe55/0x5400 [ 304.926659][T11711] ? __pfx___handle_mm_fault+0x10/0x10 [ 304.926681][T11711] ? rcu_is_watching+0x15/0xb0 [ 304.926701][T11711] ? lock_vma_under_rcu+0x3cb/0x450 [ 304.926718][T11711] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 304.926736][T11711] handle_mm_fault+0x40a/0x8e0 [ 304.926760][T11711] do_user_addr_fault+0xa81/0x1390 [ 304.926779][T11711] ? rcu_is_watching+0x15/0xb0 [ 304.926796][T11711] ? trace_page_fault_user+0x84/0x1e0 [ 304.926814][T11711] exc_page_fault+0x82/0x100 [ 304.926834][T11711] asm_exc_page_fault+0x26/0x30 [ 304.926850][T11711] RIP: 0033:0x7f3418dc14a8 [ 304.926866][T11711] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 304.926880][T11711] RSP: 002b:00007fffdc2eef50 EFLAGS: 00010293 [ 304.926896][T11711] RAX: 0000000000000000 RBX: 0000000000000105 RCX: 00007f3418dc14a5 [ 304.926907][T11711] RDX: 00007fffdc2eef90 RSI: 0000000000000000 RDI: 0000000000000000 [ 304.926918][T11711] RBP: 00007fffdc2eeffc R08: 0000000000000000 R09: 0000000000000000 [ 304.926929][T11711] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 304.926939][T11711] R13: 00000000000927c0 R14: 000000000004a1f9 R15: 00007fffdc2ef050 [ 304.926958][T11711] [ 304.926964][T11711] memory: usage 307200kB, limit 307200kB, failcnt 22065 [ 305.338172][T11711] memory+swap: usage 307620kB, limit 9007199254740988kB, failcnt 0 [ 305.346214][T11711] kmem: usage 1976kB, limit 9007199254740988kB, failcnt 0 [ 305.353394][T11711] Memory cgroup stats for /syz5: [ 305.353516][T11711] cache 312487936 [ 305.362590][T11711] rss 20480 [ 305.366994][T11711] rss_huge 0 [ 305.370257][T11711] shmem 312487936 [ 305.373943][T11711] mapped_file 0 [ 305.378470][T11711] dirty 0 [ 305.381479][T11711] writeback 0 [ 305.387612][T11711] workingset_refault_anon 1390 [ 305.392485][T11711] workingset_refault_file 348 [ 305.402991][T11711] swap 430080 [ 305.408528][T11711] swapcached 49152 [ 305.412254][T11711] pgpgin 336207 [ 305.451581][T11711] pgpgout 260924 [ 305.473146][T11711] pgfault 44364 [ 305.478311][T11711] pgmajfault 9695 [ 305.482951][T11711] inactive_anon 225648640 [ 305.488675][T11711] active_anon 57344 [ 305.492553][T11711] inactive_file 0 [ 305.499091][T11711] active_file 0 [ 305.502670][T11711] unevictable 86839296 [ 305.544256][T11711] hierarchical_memory_limit 314572800 [ 305.559287][T11711] hierarchical_memsw_limit 9223372036854771712 [ 305.586431][T11711] total_cache 312487936 [ 305.594106][T11711] total_rss 20480 [ 305.610632][T11711] total_rss_huge 0 [ 305.614522][T11711] total_shmem 312487936 [ 305.636945][T11711] total_mapped_file 0 [ 305.642547][T11711] total_dirty 0 [ 305.646376][T13272] netlink: 'syz.0.2162': attribute type 1 has an invalid length. [ 305.651166][T11711] total_writeback 0 [ 305.667538][T11711] total_workingset_refault_anon 1390 [ 305.673730][T13274] /dev/rnullb0: Can't open blockdev [ 305.678829][T11711] total_workingset_refault_file 348 [ 305.689429][T11711] total_swap 430080 [ 305.709375][T11711] total_swapcached 49152 [ 305.729333][T11711] total_pgpgin 336207 [ 305.745561][T11711] total_pgpgout 260924 [ 305.774658][T11711] total_pgfault 44364 [ 305.799197][T11711] total_pgmajfault 9695 [ 305.817994][T11711] total_inactive_anon 225648640 [ 305.838575][T11711] total_active_anon 57344 [ 305.859033][T11711] total_inactive_file 0 [ 305.872359][T11711] total_active_file 0 [ 305.890997][T11711] total_unevictable 86839296 [ 305.901423][T11711] anon_cost 0 [ 305.909143][T11711] file_cost 0 [ 305.916860][T11711] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2152,pid=13235,uid=0 [ 305.952254][T11711] Memory cgroup out of memory: Killed process 13235 (syz.5.2152) total-vm:98432kB, anon-rss:1016kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 306.555456][ T5874] Bluetooth: hci0: command 0x0c1a tx timeout [ 306.634894][ T5874] Bluetooth: hci4: command 0x0419 tx timeout [ 306.909681][T13298] ntfs3(nullb0): Primary boot signature is not NTFS. [ 306.916685][T13298] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 307.344899][ T5925] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 307.365012][ T5912] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 307.504896][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 307.511741][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 307.516367][ T5912] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 307.527484][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 307.544099][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 307.549132][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.557609][ T5925] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=75.9e [ 307.572615][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.577721][ T5912] usb 1-1: config 0 descriptor?? [ 307.581123][ T5925] usb 5-1: Product: syz [ 307.591810][ T5925] usb 5-1: Manufacturer: syz [ 307.596882][ T5925] usb 5-1: SerialNumber: syz [ 307.603040][ T5925] usb 5-1: config 0 descriptor?? [ 307.615033][ T5925] iguanair 5-1:0.0: probe with driver iguanair failed with error -12 [ 307.830075][T13308] /dev/rnullb0: Can't open blockdev [ 307.838479][ T1210] usb 5-1: USB disconnect, device number 36 [ 308.081722][T13334] /dev/rnullb0: Can't open blockdev [ 308.264907][ T1210] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 308.418745][ T1210] usb 6-1: no configurations [ 308.423390][ T1210] usb 6-1: can't read configurations, error -22 [ 308.540287][ T5912] usb 1-1: Cannot set autoneg [ 308.545423][ T5912] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 308.557762][ T1210] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 308.571448][ T5912] usb 1-1: USB disconnect, device number 107 [ 308.736841][ T1210] usb 6-1: no configurations [ 308.741497][ T1210] usb 6-1: can't read configurations, error -22 [ 308.748814][ T1210] usb usb6-port1: attempt power cycle [ 309.096512][ T1210] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 309.118433][ T1210] usb 6-1: no configurations [ 309.124272][ T1210] usb 6-1: can't read configurations, error -22 [ 309.254920][ T1210] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 309.293968][ T1210] usb 6-1: no configurations [ 309.298746][ T1210] usb 6-1: can't read configurations, error -22 [ 309.315891][ T1210] usb usb6-port1: unable to enumerate USB device [ 309.482672][T13360] netlink: 'syz.4.2192': attribute type 62 has an invalid length. [ 309.558088][T13365] /dev/rnullb0: Can't open blockdev [ 309.589964][T13367] netlink: 'syz.4.2194': attribute type 12 has an invalid length. [ 309.599344][T13367] netlink: 'syz.4.2194': attribute type 11 has an invalid length. [ 309.643370][T13370] __nla_validate_parse: 56 callbacks suppressed [ 309.643387][T13370] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2195'. [ 309.662406][T13370] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2195'. [ 309.885454][T13381] /dev/rnullb0: Can't open blockdev [ 309.926634][ T5925] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 310.086577][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.097806][ T5925] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 310.107280][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.116418][ T5925] usb 5-1: config 0 descriptor?? [ 310.155140][ T5912] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 310.308285][ T5912] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 310.316512][ T5912] usb 1-1: config 0 has no interface number 0 [ 310.322684][ T5912] usb 1-1: config 0 interface 11 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 310.324548][ T5925] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 310.333845][ T5912] usb 1-1: config 0 interface 11 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 310.347366][ T5925] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0013/input/input30 [ 310.354119][ T5912] usb 1-1: config 0 interface 11 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 310.376303][ T5912] usb 1-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca [ 310.386381][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.394934][ T5912] usb 1-1: Product: syz [ 310.399190][ T5912] usb 1-1: Manufacturer: syz [ 310.403779][ T5912] usb 1-1: SerialNumber: syz [ 310.410842][ T5912] usb 1-1: config 0 descriptor?? [ 310.417391][T13383] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 310.424713][T13383] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 310.449586][ T5925] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 310.526369][T13371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.539385][T13371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.633134][T13383] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 310.641661][T13383] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 310.651699][ T5912] usb 1-1: No status endpoint found [ 310.877482][ T5912] usb 5-1: USB disconnect, device number 37 [ 311.105826][ T5912] usb 1-1: USB disconnect, device number 108 [ 311.632362][T13441] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2214'. [ 311.906406][T13455] /dev/rnullb0: Can't open blockdev [ 311.981000][T13459] /dev/rnullb0: Can't open blockdev [ 312.367119][T13470] /dev/rnullb0: Can't open blockdev [ 312.520988][T13480] /dev/rnullb0: Can't open blockdev [ 312.604968][ T5925] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 312.745601][ T5925] usb 1-1: device descriptor read/64, error -71 [ 312.984980][ T5925] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 313.075069][ T5926] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 313.115703][ T5925] usb 1-1: device descriptor read/64, error -71 [ 313.226999][ T5925] usb usb1-port1: attempt power cycle [ 313.249523][T13524] /dev/rnullb0: Can't open blockdev [ 313.262430][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.274758][ T5926] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 313.294509][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.313525][ T5926] usb 5-1: config 0 descriptor?? [ 313.566010][ T5925] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 313.586512][ T5925] usb 1-1: device descriptor read/8, error -71 [ 313.723231][ T5926] hid_mf 0003:0079:1846.0014: unknown main item tag 0x1 [ 313.732879][ T5926] hid_mf 0003:0079:1846.0014: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.4-1/input0 [ 313.748429][ T5926] hid_mf 0003:0079:1846.0014: Invalid report, this should never happen! [ 313.758269][ T5926] hid_mf 0003:0079:1846.0014: Force feedback init failed. [ 313.776643][ T10] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 313.825011][ T5925] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 313.845442][ T5925] usb 1-1: device descriptor read/8, error -71 [ 313.936887][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.947094][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 313.956390][ T5925] usb usb1-port1: unable to enumerate USB device [ 313.964741][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 313.973943][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.982015][ T10] usb 6-1: Product: syz [ 313.986634][ T10] usb 6-1: Manufacturer: syz [ 313.991237][ T10] usb 6-1: SerialNumber: syz [ 314.053016][ T5926] usb 5-1: USB disconnect, device number 38 [ 314.262391][ T10] usb 6-1: 0:2 : does not exist [ 314.273251][ T10] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 314.301848][ T10] usb 6-1: USB disconnect, device number 27 [ 314.327535][ T9968] udevd[9968]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.419187][T13561] netlink: 'syz.2.2251': attribute type 19 has an invalid length. [ 314.869323][T13571] /dev/rnullb0: Can't open blockdev [ 314.910684][T13573] netlink: 'syz.5.2255': attribute type 11 has an invalid length. [ 315.065006][ T43] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 315.236404][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.253689][ T43] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 315.271779][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.287930][ T43] usb 5-1: config 0 descriptor?? [ 315.298928][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 315.427688][ T10] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 315.428870][T13584] /dev/rnullb0: Can't open blockdev [ 315.444722][T13584] nfs4: Unknown parameter '/dev/rnullb0' [ 315.574947][ T10] usb 6-1: device descriptor read/64, error -71 [ 315.804169][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 315.812948][ T43] pwc: recv_control_msg error -32 req 02 val 2700 [ 315.819922][ T43] pwc: recv_control_msg error -32 req 02 val 2c00 [ 315.825013][ T10] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 315.829464][ T43] pwc: recv_control_msg error -32 req 04 val 1000 [ 315.842333][ T43] pwc: recv_control_msg error -32 req 04 val 1300 [ 315.849611][ T43] pwc: recv_control_msg error -32 req 04 val 1400 [ 315.857175][ T43] pwc: recv_control_msg error -32 req 02 val 2000 [ 315.876988][ T5912] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 315.882192][T13611] /dev/rnullb0: Can't open blockdev [ 315.885440][ T5912] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 315.897292][ T5912] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 315.904713][ T5912] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 315.912416][ T5912] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 315.920850][ T5912] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 315.965090][ T10] usb 6-1: device descriptor read/64, error -71 [ 315.968992][T13615] syzkaller1: entered promiscuous mode [ 315.972844][T13613] fido_id[13613]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 315.976972][T13615] syzkaller1: entered allmulticast mode [ 315.998075][ T5925] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 316.066090][ T43] pwc: recv_control_msg error -71 req 04 val 1500 [ 316.072917][ T43] pwc: recv_control_msg error -71 req 02 val 2500 [ 316.080023][ T43] pwc: recv_control_msg error -71 req 02 val 2400 [ 316.087557][ T43] pwc: recv_control_msg error -71 req 02 val 2600 [ 316.094389][ T43] pwc: recv_control_msg error -71 req 02 val 2900 [ 316.102539][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 316.109349][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 316.115888][ T10] usb usb6-port1: attempt power cycle [ 316.121644][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 316.129987][ T43] pwc: Registered as video103. [ 316.136212][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input31 [ 316.146136][T13615] netlink: 'syz.2.2269': attribute type 6 has an invalid length. [ 316.169248][ T43] usb 5-1: USB disconnect, device number 39 [ 316.174926][ T5925] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 316.188243][ T5925] usb 1-1: config 0 has no interface number 0 [ 316.196960][ T5925] usb 1-1: New USB device found, idVendor=045e, idProduct=0723, bcdDevice=6b.bb [ 316.211933][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.221444][ T5925] usb 1-1: Product: syz [ 316.226087][ T5925] usb 1-1: Manufacturer: syz [ 316.230999][ T5925] usb 1-1: SerialNumber: syz [ 316.238485][ T5925] usb 1-1: config 0 descriptor?? [ 316.444766][ T5925] usb 1-1: Found UVC 0.00 device syz (045e:0723) [ 316.451398][ T5925] usb 1-1: No valid video chain found. [ 316.464953][ T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 316.485376][ T10] usb 6-1: device descriptor read/8, error -71 [ 316.617293][T13620] syz0: rxe_newlink: already configured on wlan1 [ 316.628248][T13620] /dev/rnullb0: Can't open blockdev [ 316.675480][T13603] /dev/rnullb0: Can't open blockdev [ 316.681270][T13604] /dev/rnullb0: Can't open blockdev [ 316.687783][ T43] usb 1-1: USB disconnect, device number 113 [ 316.726163][ T10] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 316.756689][ T10] usb 6-1: device descriptor read/8, error -71 [ 316.837654][T13631] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2274'. [ 316.849711][T13631] ufs: You didn't specify the type of your ufs filesystem [ 316.849711][T13631] [ 316.849711][T13631] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 316.849711][T13631] [ 316.849711][T13631] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 316.880397][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.888025][ T10] usb usb6-port1: unable to enumerate USB device [ 316.896468][T13631] ufs: ufs_fill_super(): bad magic number [ 316.914045][T13634] /dev/rnullb0: Can't open blockdev [ 317.271854][T13668] NILFS (loop4): device size too small [ 317.280088][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.286969][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.316213][T13670] /dev/rnullb0: Can't open blockdev [ 317.355466][ T5867] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 317.474850][T13685] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 317.481814][T13685] /dev/rnullb0: Can't open blockdev [ 317.485266][ T10] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 317.497076][T13685] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 317.504124][T13685] /dev/rnullb0: Can't open blockdev [ 317.514903][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 317.525524][ T5867] usb 3-1: too many configurations: 66, using maximum allowed: 8 [ 317.535223][ T5867] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 317.542932][ T5867] usb 3-1: can't read configurations, error -61 [ 317.572137][T13694] netlink: 492 bytes leftover after parsing attributes in process `syz.4.2291'. [ 317.584789][T13694] syz0: rxe_newlink: already configured on wlan1 [ 317.596374][T13694] /dev/rnullb0: Can't open blockdev [ 317.626629][T13697] /dev/rnullb0: Can't open blockdev [ 317.649260][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 317.661088][ T10] usb 1-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 317.670794][ T10] usb 1-1: Product: syz [ 317.675388][ T5867] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 317.685078][ T10] usb 1-1: SerialNumber: syz [ 317.692145][ T10] usb 1-1: config 0 descriptor?? [ 317.750732][T13707] /dev/rnullb0: Can't open blockdev [ 317.836651][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 317.843179][ T5867] usb 3-1: too many configurations: 66, using maximum allowed: 8 [ 317.853367][ T5867] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 317.862914][ T5867] usb 3-1: can't read configurations, error -61 [ 317.870335][ T5867] usb usb3-port1: attempt power cycle [ 318.070275][T13720] Unsupported ieee802154 address type: 0 [ 318.071501][ T10] ldusb 1-1:0.0: Interrupt in endpoint not found [ 318.093106][ T10] usb 1-1: USB disconnect, device number 114 [ 318.118457][T13722] /dev/rnullb0: Can't open blockdev [ 318.214912][ T5867] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 318.237418][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 318.243514][ T5867] usb 3-1: too many configurations: 66, using maximum allowed: 8 [ 318.257148][ T5867] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 318.264957][ T5867] usb 3-1: can't read configurations, error -61 [ 318.280172][T13732] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 318.287327][T13732] /dev/rnullb0: Can't open blockdev [ 318.394951][ T5867] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 318.395172][ T43] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 318.415373][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 318.421000][ T5867] usb 3-1: too many configurations: 66, using maximum allowed: 8 [ 318.430509][ T5867] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 318.438632][ T5867] usb 3-1: can't read configurations, error -61 [ 318.446163][ T5867] usb usb3-port1: unable to enumerate USB device [ 318.464916][ T10] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 318.544914][ T43] usb 5-1: device descriptor read/64, error -71 [ 318.585646][ T5926] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 318.594937][ T10] usb 1-1: device descriptor read/64, error -71 [ 318.736798][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 318.748637][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.758976][ T5926] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 318.768151][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.777370][ T5926] usb 6-1: config 0 descriptor?? [ 318.785138][ T43] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 318.835121][ T10] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 318.925099][ T43] usb 5-1: device descriptor read/64, error -71 [ 318.965443][ T10] usb 1-1: device descriptor read/64, error -71 [ 318.994707][ T5926] usbhid 6-1:0.0: can't add hid device: -71 [ 319.011559][ T5926] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 319.022160][ T5926] usb 6-1: USB disconnect, device number 32 [ 319.036102][ T43] usb usb5-port1: attempt power cycle [ 319.076280][ T10] usb usb1-port1: attempt power cycle [ 319.385011][ T43] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 319.406363][ T43] usb 5-1: device descriptor read/8, error -71 [ 319.415095][ T10] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 319.435570][ T10] usb 1-1: device descriptor read/8, error -71 [ 319.655008][ T43] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 319.676440][ T10] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 319.677620][ T43] usb 5-1: device descriptor read/8, error -71 [ 319.695356][ T10] usb 1-1: device descriptor read/8, error -71 [ 319.795540][ T43] usb usb5-port1: unable to enumerate USB device [ 319.805306][ T10] usb usb1-port1: unable to enumerate USB device [ 320.240047][T13755] loop6: detected capacity change from 0 to 7 [ 320.515023][ T43] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 320.670015][ T43] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 320.679185][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.688221][ T43] usb 3-1: Product: syz [ 320.692930][ T43] usb 3-1: Manufacturer: syz [ 320.697597][ T43] usb 3-1: SerialNumber: syz [ 320.703223][ T43] usb 3-1: config 0 descriptor?? [ 320.710552][ T43] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 321.364452][T13770] hugetlbfs: syz.0.2313 (13770): Using mlock ulimits for SHM_HUGETLB is obsolete [ 321.477528][T13779] /dev/rnullb0: Can't open blockdev [ 321.482524][T13781] overlayfs: missing 'workdir' [ 321.490576][T13781] /dev/rnullb0: Can't open blockdev [ 321.581366][T13796] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 321.824877][ T5925] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 321.977950][ T5925] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 321.987479][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.997527][ T5925] usb 5-1: Product: syz [ 322.001686][ T5925] usb 5-1: Manufacturer: syz [ 322.006537][ T5925] usb 5-1: SerialNumber: syz [ 322.015437][ T5925] r8152-cfgselector 5-1: Unknown version 0x0000 [ 322.021765][ T5925] r8152-cfgselector 5-1: config 0 descriptor?? [ 322.154667][T13812] netlink: 796 bytes leftover after parsing attributes in process `syz.5.2326'. [ 322.164941][ T43] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 322.241219][T13821] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.336768][ T43] usb 1-1: config 0 has no interfaces? [ 322.344195][ T43] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 322.353310][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.361599][ T43] usb 1-1: Product: syz [ 322.365853][ T43] usb 1-1: Manufacturer: syz [ 322.370447][ T43] usb 1-1: SerialNumber: syz [ 322.377198][ T43] usb 1-1: config 0 descriptor?? [ 322.588836][T13810] netlink: 'syz.0.2325': attribute type 21 has an invalid length. [ 322.612265][ T43] usb 1-1: USB disconnect, device number 119 [ 322.831913][T13832] /dev/rnullb0: Can't open blockdev [ 322.956962][ T5925] r8152-cfgselector 5-1: USB disconnect, device number 44 [ 322.999231][T13834] /dev/rnullb0: Can't open blockdev [ 323.087614][T13848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2337'. [ 323.115510][ T5864] Bluetooth: hci4: command 0x0419 tx timeout [ 323.169387][T13857] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2340'. [ 323.270131][T13867] block nbd4: Attempted send on invalid socket [ 323.286895][T13867] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.304977][T13867] hpfs: hpfs_map_sector(): read error [ 323.321084][T13868] /dev/rnullb0: Can't open blockdev [ 323.406237][ T43] usb 3-1: USB disconnect, device number 36 [ 323.474081][T13876] input: syz0 as /devices/virtual/input/input33 [ 323.481446][T13880] /dev/rnullb0: Can't open blockdev [ 323.498832][T13880] /dev/rnullb0: Can't open blockdev [ 323.519118][ C0] ------------[ cut here ]------------ [ 323.524648][ C0] WARNING: ./include/linux/skbuff.h:1165 at nf_send_unreach6+0x828/0xa20, CPU#0: kworker/0:4/5925 [ 323.535312][ C0] Modules linked in: [ 323.539225][ C0] CPU: 0 UID: 0 PID: 5925 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 323.548722][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 323.558842][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 323.564958][ C0] RIP: 0010:nf_send_unreach6+0x828/0xa20 [ 323.570616][ C0] Code: 85 f6 74 0a e8 39 1b 6f f7 e9 c8 fc ff ff e8 2f 1b 6f f7 4c 8b 7c 24 18 e9 34 fa ff ff e8 20 1b 6f f7 eb 9b e8 19 1b 6f f7 90 <0f> 0b 90 e9 c7 fb ff ff 48 85 db 0f 84 81 00 00 00 4c 8d a4 24 20 [ 323.590362][ C0] RSP: 0018:ffffc900000073c0 EFLAGS: 00010246 [ 323.596576][ C0] RAX: ffffffff8a51b3b7 RBX: ffff888087001c80 RCX: ffff8880792abc00 [ 323.604657][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 323.612709][ C0] RBP: ffffc90000007568 R08: ffff88805bb3ecc3 R09: 1ffff1100b767d98 [ 323.620731][ C0] R10: dffffc0000000000 R11: ffffed100b767d99 R12: ffff88804aeea101 [ 323.628749][ C0] R13: dffffc0000000001 R14: 1ffff11010e0039b R15: 0000000000000000 [ 323.636754][ C0] FS: 0000000000000000(0000) GS:ffff8881257c4000(0000) knlGS:0000000000000000 [ 323.645721][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 323.652324][ C0] CR2: 0000000000000000 CR3: 000000000e338000 CR4: 00000000003526f0 [ 323.660422][ C0] Call Trace: [ 323.663710][ C0] [ 323.666591][ C0] ? __pfx_nf_send_unreach6+0x10/0x10 [ 323.671980][ C0] ? ieee80211_rx_handlers+0xb6f3/0xb760 [ 323.677638][ C0] ? __update_load_avg_se+0x751/0xbc0 [ 323.683021][ C0] nft_reject_inet_eval+0x441/0x690 [ 323.688245][ C0] nft_do_chain+0x40c/0x1920 [ 323.692840][ C0] ? unwind_next_frame+0xa5/0x2390 [ 323.697969][ C0] ? rcu_is_watching+0x15/0xb0 [ 323.702737][ C0] ? unwind_next_frame+0xa5/0x2390 [ 323.707883][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 323.712916][ C0] ? ipv6_find_hdr+0xc78/0x1050 [ 323.717803][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 323.723030][ C0] nft_do_chain_inet+0x25d/0x340 [ 323.728011][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 323.733531][ C0] ? NF_HOOK+0x9a/0x3a0 [ 323.737927][ C0] ? rcu_is_watching+0x15/0xb0 [ 323.742739][ C0] ? lock_acquire+0x5f/0x360 [ 323.747351][ C0] ? ip_sabotage_in+0x57/0x270 [ 323.752181][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 323.757689][ C0] nf_hook_slow+0xc5/0x220 [ 323.762140][ C0] NF_HOOK+0x206/0x3a0 [ 323.766278][ C0] ? skb_orphan+0xaf/0xd0 [ 323.770634][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 323.775872][ C0] ? NF_HOOK+0x9a/0x3a0 [ 323.780055][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 323.784639][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 323.789960][ C0] __netif_receive_skb+0xd3/0x380 [ 323.795020][ C0] ? process_backlog+0x2d5/0x14f0 [ 323.800071][ C0] process_backlog+0x60e/0x14f0 [ 323.804976][ C0] ? __pfx_process_backlog+0x10/0x10 [ 323.810273][ C0] ? do_raw_spin_lock+0x121/0x290 [ 323.815324][ C0] __napi_poll+0xc4/0x360 [ 323.819661][ C0] ? rcu_is_watching+0x15/0xb0 [ 323.824428][ C0] net_rx_action+0x707/0xe30 [ 323.829042][ C0] ? rcu_is_watching+0x15/0xb0 [ 323.833827][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 323.838974][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 323.845353][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 323.850570][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 323.855889][ C0] handle_softirqs+0x283/0x870 [ 323.860678][ C0] ? do_softirq+0xec/0x180 [ 323.865132][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 323.870424][ C0] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 323.876368][ C0] do_softirq+0xec/0x180 [ 323.880613][ C0] [ 323.883531][ C0] [ 323.886477][ C0] ? __pfx_do_softirq+0x10/0x10 [ 323.891336][ C0] ? rcu_is_watching+0x15/0xb0 [ 323.896132][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 323.901335][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 323.907159][ C0] ? do_raw_read_unlock+0x3d/0x80 [ 323.912193][ C0] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 323.917943][ C0] wg_packet_tx_worker+0x1c8/0x7c0 [ 323.923056][ C0] ? rcu_is_watching+0x15/0xb0 [ 323.927842][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 323.933659][ C0] process_scheduled_works+0xae1/0x17b0 [ 323.939258][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 323.945276][ C0] worker_thread+0x8a0/0xda0 [ 323.949855][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 323.956206][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 323.962112][ C0] ? __kthread_parkme+0x7b/0x200 [ 323.967190][ C0] kthread+0x711/0x8a0 [ 323.971280][ C0] ? __pfx_worker_thread+0x10/0x10 [ 323.976440][ C0] ? __pfx_kthread+0x10/0x10 [ 323.981062][ C0] ? rcu_is_watching+0x15/0xb0 [ 323.985880][ C0] ? __pfx_kthread+0x10/0x10 [ 323.990478][ C0] ret_from_fork+0x47c/0x820 [ 323.995125][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 324.000266][ C0] ? __switch_to_asm+0x39/0x70 [ 324.005143][ C0] ? __switch_to_asm+0x33/0x70 [ 324.009914][ C0] ? __pfx_kthread+0x10/0x10 [ 324.014493][ C0] ret_from_fork_asm+0x1a/0x30 [ 324.019376][ C0] [ 324.022433][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 324.029716][ C0] CPU: 0 UID: 0 PID: 5925 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 324.039081][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 324.049144][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 324.055225][ C0] Call Trace: [ 324.058500][ C0] [ 324.061330][ C0] dump_stack_lvl+0x99/0x250 [ 324.065934][ C0] ? __asan_memcpy+0x40/0x70 [ 324.070515][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.075816][ C0] ? __pfx__printk+0x10/0x10 [ 324.080444][ C0] vpanic+0x281/0x750 [ 324.084426][ C0] ? __pfx_vpanic+0x10/0x10 [ 324.088911][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 324.094181][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 324.099360][ C0] panic+0xb9/0xc0 [ 324.103092][ C0] ? __pfx_panic+0x10/0x10 [ 324.107581][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 324.112503][ C0] __warn+0x334/0x4c0 [ 324.116482][ C0] ? nf_send_unreach6+0x828/0xa20 [ 324.121516][ C0] ? nf_send_unreach6+0x828/0xa20 [ 324.126527][ C0] report_bug+0x2be/0x4f0 [ 324.130844][ C0] ? nf_send_unreach6+0x828/0xa20 [ 324.135876][ C0] ? nf_send_unreach6+0x828/0xa20 [ 324.140883][ C0] ? nf_send_unreach6+0x82a/0xa20 [ 324.145923][ C0] handle_bug+0x84/0x160 [ 324.150176][ C0] exc_invalid_op+0x1a/0x50 [ 324.154747][ C0] asm_exc_invalid_op+0x1a/0x20 [ 324.159592][ C0] RIP: 0010:nf_send_unreach6+0x828/0xa20 [ 324.165230][ C0] Code: 85 f6 74 0a e8 39 1b 6f f7 e9 c8 fc ff ff e8 2f 1b 6f f7 4c 8b 7c 24 18 e9 34 fa ff ff e8 20 1b 6f f7 eb 9b e8 19 1b 6f f7 90 <0f> 0b 90 e9 c7 fb ff ff 48 85 db 0f 84 81 00 00 00 4c 8d a4 24 20 [ 324.184921][ C0] RSP: 0018:ffffc900000073c0 EFLAGS: 00010246 [ 324.191063][ C0] RAX: ffffffff8a51b3b7 RBX: ffff888087001c80 RCX: ffff8880792abc00 [ 324.199034][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 324.207171][ C0] RBP: ffffc90000007568 R08: ffff88805bb3ecc3 R09: 1ffff1100b767d98 [ 324.215229][ C0] R10: dffffc0000000000 R11: ffffed100b767d99 R12: ffff88804aeea101 [ 324.223219][ C0] R13: dffffc0000000001 R14: 1ffff11010e0039b R15: 0000000000000000 [ 324.231240][ C0] ? nf_send_unreach6+0x827/0xa20 [ 324.236454][ C0] ? __pfx_nf_send_unreach6+0x10/0x10 [ 324.241852][ C0] ? ieee80211_rx_handlers+0xb6f3/0xb760 [ 324.247480][ C0] ? __update_load_avg_se+0x751/0xbc0 [ 324.252859][ C0] nft_reject_inet_eval+0x441/0x690 [ 324.258045][ C0] nft_do_chain+0x40c/0x1920 [ 324.262619][ C0] ? unwind_next_frame+0xa5/0x2390 [ 324.267758][ C0] ? rcu_is_watching+0x15/0xb0 [ 324.272617][ C0] ? unwind_next_frame+0xa5/0x2390 [ 324.277728][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 324.282751][ C0] ? ipv6_find_hdr+0xc78/0x1050 [ 324.287600][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 324.293084][ C0] nft_do_chain_inet+0x25d/0x340 [ 324.298028][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 324.303478][ C0] ? NF_HOOK+0x9a/0x3a0 [ 324.307632][ C0] ? rcu_is_watching+0x15/0xb0 [ 324.312391][ C0] ? lock_acquire+0x5f/0x360 [ 324.316984][ C0] ? ip_sabotage_in+0x57/0x270 [ 324.321742][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 324.327202][ C0] nf_hook_slow+0xc5/0x220 [ 324.331650][ C0] NF_HOOK+0x206/0x3a0 [ 324.335717][ C0] ? skb_orphan+0xaf/0xd0 [ 324.340082][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 324.345266][ C0] ? NF_HOOK+0x9a/0x3a0 [ 324.349449][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 324.354039][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 324.359261][ C0] __netif_receive_skb+0xd3/0x380 [ 324.364297][ C0] ? process_backlog+0x2d5/0x14f0 [ 324.369326][ C0] process_backlog+0x60e/0x14f0 [ 324.374176][ C0] ? __pfx_process_backlog+0x10/0x10 [ 324.379456][ C0] ? do_raw_spin_lock+0x121/0x290 [ 324.384506][ C0] __napi_poll+0xc4/0x360 [ 324.388831][ C0] ? rcu_is_watching+0x15/0xb0 [ 324.393593][ C0] net_rx_action+0x707/0xe30 [ 324.398253][ C0] ? rcu_is_watching+0x15/0xb0 [ 324.403056][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 324.408330][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 324.414564][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 324.419762][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 324.425068][ C0] handle_softirqs+0x283/0x870 [ 324.429845][ C0] ? do_softirq+0xec/0x180 [ 324.434281][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 324.439574][ C0] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 324.445504][ C0] do_softirq+0xec/0x180 [ 324.449760][ C0] [ 324.452683][ C0] [ 324.455611][ C0] ? __pfx_do_softirq+0x10/0x10 [ 324.460456][ C0] ? rcu_is_watching+0x15/0xb0 [ 324.465209][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 324.470428][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 324.476232][ C0] ? do_raw_read_unlock+0x3d/0x80 [ 324.481294][ C0] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 324.487035][ C0] wg_packet_tx_worker+0x1c8/0x7c0 [ 324.492202][ C0] ? rcu_is_watching+0x15/0xb0 [ 324.496964][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 324.502671][ C0] process_scheduled_works+0xae1/0x17b0 [ 324.508215][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 324.514304][ C0] worker_thread+0x8a0/0xda0 [ 324.518936][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 324.525265][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 324.531181][ C0] ? __kthread_parkme+0x7b/0x200 [ 324.536115][ C0] kthread+0x711/0x8a0 [ 324.540262][ C0] ? __pfx_worker_thread+0x10/0x10 [ 324.545364][ C0] ? __pfx_kthread+0x10/0x10 [ 324.549946][ C0] ? rcu_is_watching+0x15/0xb0 [ 324.554766][ C0] ? __pfx_kthread+0x10/0x10 [ 324.559364][ C0] ret_from_fork+0x47c/0x820 [ 324.564126][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 324.569234][ C0] ? __switch_to_asm+0x39/0x70 [ 324.574000][ C0] ? __switch_to_asm+0x33/0x70 [ 324.578747][ C0] ? __pfx_kthread+0x10/0x10 [ 324.583357][ C0] ret_from_fork_asm+0x1a/0x30 [ 324.588116][ C0] [ 324.591385][ C0] Kernel Offset: disabled [ 324.595703][ C0] Rebooting in 86400 seconds..