last executing test programs: 7m8.139817289s ago: executing program 3 (id=734): write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x1, &(0x7f0000001080)=0xfff, 0xfff) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x85, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x8010, 0xffffffffffffffff, 0xffffc000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e2c882420"], 0x7) socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x5708e000) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) (async) set_mempolicy(0x1, &(0x7f0000001080)=0xfff, 0xfff) (async) syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async) socket$inet6(0xa, 0x805, 0x0) (async) getsockopt$bt_hci(r0, 0x84, 0x85, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x8010, 0xffffffffffffffff, 0xffffc000) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) (async) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) socket$inet6(0xa, 0x80002, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) (async) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e2c882420"], 0x7) (async) socket(0x10, 0x803, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x5708e000) (async) 7m7.948464223s ago: executing program 3 (id=735): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0x20e) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$packet(0x11, 0x0, 0x300) mlock(&(0x7f0000604000/0x4000)=nil, 0x4000) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, r2, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x8a, 0x5b, "0035219de90606fa375251b26ce5e0c4c9967c828e71978d21622252693723cba7b101bb6b5542dc123fccc07cb14b22f520aaec430edfb33ad1b8560c4cbc5e6f9d836cce35074191e7c37bfbb339797eb611aec975cb5c39127b56940f7fdceeed6fb2d03138bbd19de66a659287c3ab28213e58fd56631547a150b0a0c67b80a3afb6fe57"}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xd3}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x80}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}]}, 0xd0}, 0x1, 0x0, 0x0, 0x88c0}, 0x801) ioctl$BLKRRPART(r0, 0x125f, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') (async) chmod(&(0x7f0000000100)='./file0\x00', 0x20e) (async) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) (async) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$packet(0x11, 0x0, 0x300) (async) mlock(&(0x7f0000604000/0x4000)=nil, 0x4000) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, r2, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x8a, 0x5b, "0035219de90606fa375251b26ce5e0c4c9967c828e71978d21622252693723cba7b101bb6b5542dc123fccc07cb14b22f520aaec430edfb33ad1b8560c4cbc5e6f9d836cce35074191e7c37bfbb339797eb611aec975cb5c39127b56940f7fdceeed6fb2d03138bbd19de66a659287c3ab28213e58fd56631547a150b0a0c67b80a3afb6fe57"}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xd3}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x80}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}]}, 0xd0}, 0x1, 0x0, 0x0, 0x88c0}, 0x801) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) 7m7.818625065s ago: executing program 3 (id=736): creat(&(0x7f0000000140)='./file0\x00', 0x71) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xfff) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={[&(0x7f0000000080)='/dev/rnullb0\x00', &(0x7f00000000c0)='/dev/rnullb0\x00', &(0x7f0000000100)='hfsplus\x00', &(0x7f00000001c0)='/dev/rnullb0\x00', &(0x7f0000000200)='/dev/rnullb0\x00', &(0x7f0000000240)='\x00']}, &(0x7f0000000300)={[&(0x7f00000002c0)='.{3.\x00']}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x8, &(0x7f0000000340)=[{0x1, 0x9, 0x0, 0xffffffff}, {0x7ff, 0x7a, 0x9, 0xf4f}, {0x1000, 0xb6, 0xa6, 0x3}, {0x1, 0x4, 0x7, 0x8}, {0x8, 0x98, 0x8, 0x8000}, {0x8, 0x80, 0xc, 0x7fff}, {0x100, 0x6, 0x7, 0x6}, {0x9, 0x8, 0x0, 0x15b0}]}) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) 7m7.779007401s ago: executing program 3 (id=737): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x800) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f0000000440)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f00000001c0)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x18, 0x6a, 0x0, 0xb, 0x73, 0x0, @rand_addr=0x64010101, @broadcast}, "16b9f077"}}, 0x26) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r0, 0xebe3b000) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x5) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = syz_usb_connect(0x2, 0x234, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x1f, 0x23, 0x42, 0x20, 0x7f45, 0x4b5d, 0x92d5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x222, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x10, 0xf3, 0xa, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x5, 0x4, 0x400, 0x9, 0x6, 0xe9, [@generic={0x47, 0x30, "ee53417d8950c979e9290f4002d1aa69a1871e3f4fcec406bd31d573d13e15938127ce0df0ff41257dd39a2e7d03b7119000c2445ba282f6218e3a7304a3c23ac837700950"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x47d}]}}, {{0x9, 0x5, 0xb, 0x3, 0x3ff, 0x7, 0x1, 0xc}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x2, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfa, 0xffff}]}}, {{0x9, 0x5, 0x3, 0x8, 0x8, 0x1, 0x6, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xbd, 0x10}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x5}]}}, {{0x9, 0x5, 0x8, 0x7, 0x20, 0x8e, 0x5, 0x2a, [@generic={0x33, 0x21, "3c4480e093280def3e3a16cb03801e41b24df68ce5e610f3472f444e099e829404399fe1b86034c0a87c75d6e318e938f2"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x2b5}]}}, {{0x9, 0x5, 0x7, 0x8, 0x400, 0x2, 0x41, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0xfc, 0x6}, @generic={0xd7, 0x10, "35b258524b012758305eebe5ef394773830a7777ac691eafaf4f67f0d604db7181e5de65bec65ec674040cec5a62930c5927653c8fc937365d1a8aec1544f2a935c51f34c7102fec23a0ffd4fb8db1e8218c6cf79eb04f24ec325ed5e63aa0c734da7563d815d84068063eb31c24d184b273baa735d091d47dfbdb98205a4eec19d2574f35a9b8bcf4d66f25fa674bca010a399d0b953ebed7b3eb843e4e72a6e1513c37ea01569c1a1ce83f952e99b23d6672b4e7d00ba2b149f846eebf0c28293bc3b01a97bfc704cc2c26649613f28a161886ed"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x40, 0x6, 0x9, 0xf}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x4, 0x6, 0x5, [@generic={0x2d, 0x11, "2b1c040abbed4b545062875f36a74c876cff7fec1a881ab2456919fceabefbbcb504a0dc8b2601002abebc"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0xf, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x6}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x10, 0x2, 0x3d, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x7f}]}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="20060a0001aa182d2bbd6fc424c7bc00"/27], 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000300)=0x30, 0x1) 7m7.147312777s ago: executing program 3 (id=748): syz_init_net_socket$ax25(0x3, 0x5, 0x3) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f00007bd000/0x4000)=nil, 0x4000, 0x2000001, 0x1010, r0, 0x4b286000) fadvise64(r0, 0x94, 0x6e, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r1 = signalfd(r0, &(0x7f0000000000)={[0x401]}, 0x8) openat$cgroup_type(r1, &(0x7f0000000040), 0x2, 0x0) 7m6.932232628s ago: executing program 3 (id=749): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4a58c000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, 0x0, 0x0, 0x18, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregset(0x4211, r3, 0x200, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003040)={'wlan0\x00'}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000000)={0x1, 0x100, 0x9b02}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x10) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7m6.778019466s ago: executing program 32 (id=749): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4a58c000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, 0x0, 0x0, 0x18, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregset(0x4211, r3, 0x200, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003040)={'wlan0\x00'}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000000)={0x1, 0x100, 0x9b02}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x10) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m7.982648995s ago: executing program 2 (id=2995): futex_waitv(&(0x7f0000001740)=[{0xf, &(0x7f0000001380)=0xfffffffffffeffff, 0x6}], 0x1, 0x0, 0x0, 0x1) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) ptrace(0x11, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000080)={{r0}, "72ce900d55f6fa0b4ffcd0ae0be230fcba8cd8019c8d67ffb1a2b4a1e25f458718523f96c9208ef2cb9e126a74c641a97366b1533a357d306cc034ffc457a85d94a1667d67b9ab0f56366ac4d039eb83ce113a226a161eceb6b2059ce3c0be9c870074645c01bbf2eda20d7012c520357a720da961ed380c9fec9209f865c0e6e601951fb3a563c38637b0412d38ab846c9bac496d4e49e8cc12be15baf0b8fbb6c627a94d5c51bed530cdbcefbdb68e6e599eb4189568d75ea0125f0fcd1caadba3ebf79af141d7b099df9fd002d18e5bf6bb66dfda0369d31b36dddae8024a1569e0615d025e9d8a002df2237f9c2bee7e216c5b0d41aa067efd8f79c9b59c6173174147a3302bb6cc5da6fd9bed784ba09020cf70b695a56b2b2b81e6e11b14086264f54126798a51befe1171f627601bf826ecdbd35d6226cf662a539257d0a4a1b5cda9d5dd0cc1a240e172125543d0c6863821e30f17f37e9c4553e38fe5773edee3960e15dcd43d158dcda05bcbae98eb0be46d38e69d00882f7d15d6c58cdaf810025cc708f8bc437975ad612b7c19be755d61d9ee2ac1e9ebf9e2cb462b4bc25dfcc7cc250e7f105c3d69babffa6a5a6e2f3a73e28b37239c8984442a6a0c9a525b5e27094604f1c9c77cf321aa493e960b94af0ce1e0e9aab84206f268dc92a87dc0f86f9a3ed6fbb49a5de9e1bfe7574240c4372f0f81f9ace74310fc8ef314eba48b9584c6056dc995943a46fa5c59914bd920690a87ed979f669d82b83080f0fd47c8f9c0e62784b0abc9a02f4bf03482beef6a3aa771dee5c7b574cd9829abe196b9ff0d97887f8ef70eb27339f21e3618d46fe5b307ca748524d3dd1b7d332c330be7a28a7f75509d1bbe78db6b4a96bfb791752075d255b9ad0a44610b99d739d7f807744f7127893c76e0142e8e32c9883cf7819a21d3420391fa8077206db81059ef9123d67db1dd804db5d87bca7e7e2baa63d11bd9f0ba345fc75c2a212715f0fb49e8bdbeffb637146e878b68fd139b4ffc578aad63f5b7cafce3f9cf1ae6bc230d22563dafa19eb149e0f1658d0a2daff8c6b4af5024118a0d44a80015f505ecfe3fb03a569caeb0a6887cc3022ca7e4d5d38a747037253d944e9a68fb730009db8abe25fa5c59e9980a8459d063fed69acf29cfc515a9018d4d4fd10dbe1d5d5e260d09d345d6e028a66b56e714b68f87603e1bef6b25f4badd2249ede53216e34ef443bf26b5f3ad8c33c9d29f36132470619064a67d226d1d92c32011768f87916cfab5d5a631313ddff73a5fa75f32c8e1c8f72dde2badbd036b3f8b2a7cd9f3ad771612c91832a15b2f84ac8ef634e5066663281c5e314ce690a752bc4138307176a59f531f6aacca6307c516782bc7fe93848b912f2470e45270f6d0dfc97204ecd8df0e753f5a44d3be45a7a60f07042184daed600e45a8bd8a9c8a3d0c362f6e6f4a8e6cf93c7e1be2a02c288987c4f464c0a9490302e6a4cc493099ae9c507e951b8163d4a0e34a75dd53e9b394cdc4176339eb9115cb7cc96aa1d4d14f6987b8a6d49158cf8e14083dce9f560a0e5119cfd3c9f5144af6eb6cdbbcfd51f6d2563665814d4c29fc6a57efba037aee5be041dee5739d897b91cb5f1d3aa9200d5a05d5c913a29f50b38b4c1d01657633af2aa23f5bdd1e76b0396d3ee8b156d9d7aaa0181eccf31c40af70dd83a467339beaf0e59566ce8f3b6c4f1876aa36a48121a1f7ca7ce2a64838c8ddb60b862b24afe4b52a0383033b00cc8bc79cee87d0fa6ba55db3a3addbacee517aea4646ef6ad98fed5fc7fde4183439cae685b6ff0428a2398a10263cb546ed0f270f2028a3a956c8245ea631d29c76114746c3ab9cd417d18e6be4b868982df0384ab3734de57e46ce70fe303201610b09d27c66b51582cb837a5887f71a9a9b85ffb9abca31e1d501d0a4090d2accde064564edc8807a5272d74d229351b19087c5660a7b74f9d0e8b5256f6a60cb44c2a0e9b8392b77f0f8f75ade90a1faec6478e622030663176373ad0fd1e8aa440e6e4978860acae5c634068b67c9f49f26cd4644fc9e5bf54015e10173c5542c78e7265950de9e72c92fa02e727f7389d73a9b4aff440f145c4002b7bec84f6e22063b00cae116f20afabe62e25fff53a965e6b5ae251962611fe2380629c74428615d59b9820c30498f4ba9720e681fd14ce8de1c635aee201bb779f9f67f1d819db4bf7cc313029287656b484bc83e0fdbca4f3cccf987b5e1dbda8847619ff525229281c324d88ba12f43d8d81069102b5657531624c8744005f4113426d0cbf36e043a362b1e541db2453636b354a2faaa259711837c3916a396522dff4de0055b818bdf489ab4322a02c254145f1287b74cf124bc8dbb74c1c48065734956ec308df7945f33a5777beadd703eb5526088194b50ffde30bc20736624c64695f9237caa7eeca71f3d8038f12dc9cf1bd4c7683835523cfb44c16c8d8fba1caae494a020c857b1b4adf38e04dcc9b4e555b565a2093cf31180abf7d02147b1aa833c9056c644e5567e6092a9e4ad6cac5bfd474a9f1773ffd8cab7f88b85125575ce0980132dd6d0c664f041d6ad8ba4acc164a431ee178695c36638d312642d97abc5bbe12aac2b63bc88c8dac14ce63c148c6c10b184a08986477712a3f7eec62b5b80f64faed89b7dba3bfe444ee0ec1c12ad90ff4f7cfa4f85e2ad47fb9b66a647faaee212e71dce0b2f7f1e38979378a9660926160bb2635c04245f1e318eed6c6174f03f0813fcb8df1a01f9480f97fbbfd96960034a818914aa4e45fab74e509ac5a271b67ddeb3c417b44d0bfb049ff1a44ed45c44acea99bc728b6f048c0194b0264a335523520e887c1e94910798a683e0ba2462bcc576ae20d8232ece3c706dee0228180b12c0c5c06e7ef0c8382fb1bc85fb387fd357fe102653d3b54d25e811e1a3a0063c376c155c4df0bfce4e8f288a16d37e23b89044cf91dfac8c45ba24f81144f8a6c53827bcca134c5aebd4448ccc0e9cc2b2901fe9ae4396ce0f7941fa13ec32f956e0327444d7a547bedae570ca901476b1bb1cc5eb95ac98d5c19391d7e26697d0aaeb57d666b5e213f33698f3c3f85753911f135dba26fa6c8be2b2b83af63c35148d704987e64183863c65800d080ded06ebccecb713d231eaf7bd7eb68fb8c0c8fef140a5dde5621d42db885a1431e1c3659452677d8f7e393e030686476f3ead1c851226507e26503de1bff51aa3b881d2d20bc51efe2c06b78532a04c9935b5637338ab48198c704c1fbf488b7136860b5668a26d72b61b58dcc27c70710120cd2cfb1b3cee8377240d25650c94ccf188c041e291df97a540dd370a6183ff8245292546454f9582ae3678bd3cc8c70de9d23f07a4a2212fba9b0a2ca046a660fdcb45ac8be06d27ec40d2dea42b85dbf288ea12e1265becb1b6372e81554c5e46c071adfa50cac4d819279a489e6be30f18ee822b70c43ea061fcaf4cc13115de05507247920a1d10833b3e826d4ed80c7c3775e36638d2341500fdc8440b3154ccb809c9c163303974b8cd3c726508c49a57e6ecd793442f29f9566544b0fffbfd28cb10e499a5504ab669e34b939ecb4d140093b2f3179046f5bbadfabeb97a1be2a3c0ddd79667bbd0b429614484fa5d2b86fce2df2fe2029d9dfb4f88ebd417526c415f1605efb5206e660a2d74ab3c30881dd09fa9c2586349b71a1c49101d51487a37637760653ff4d0d831205b6858f383b5bc8484d64f84cffd8e887c68c2073fd353ddb4b5d489fff744b787519efbf9b1c97f088fe0d81adb989a384079aae02fb58477c88ab6513ae6912ed79f1e39400aeebcea5e20400ed7939fd92b3adc164509ca6c709872fe5150fe8d49e640560b4c17236f6e37d84e814d5053dcbca1411d43ffa615737aff27f63f6264a29f82f6c211561e650d1c505f9a000dc800cbc9dd23edf1aeb9d5d01359b74ec57c6f7c570884aca61960210e15d5fa4216382f7c1153fdc89a00a98567d2f675f2c7cf54e571606cea2942763a02086c5e00210b6a5cb1cfdd13ee7f267ecffbc0985509f63c68dea5b74af9be6381064321dd8b814d7eec6f9cee1c1be36f47a73e1bfd93058c8d058d94949314a10c0f2508a3431edaf5068499dee40b307af6eeacb9763145fa011812e3826ddbea7d28ed8c2ef5ed6ce7cd215a79220a8a77d4f661afd3eb3951bc2bbb531ee56dcec2b82535a79ae8081cc065dfe0cfddfd45ffa5d49910df195f4f1c4439d4c6ae7df88cea02149abcb4400938623402188ef3d47a2d276ac0d845e868ed5cb56c635a10eaab9fbdd0f02b694e1d2b7d8d3e6b2bd9d339b2dfceb4d663ccffe1d09a80ff9347071af4f26c9e458ab9617ae96d457d0e1c42d4cc54763e709cb7d82201430cb3aed2d1f2eddcce20efdfffa2304b04c1c2f67fdc0feba7f28eb49565e99fbf601fb4714482980dbef634f95bb223803cfb78aa281709febea44d1f3da5d6cd472fedd18a88f2bf1a1084ec3f070b40e11a2a7ef158b031504d8f90fcde61dae5984f2875c44e140a8aab8927ea46f077ac088830dd3eabc29d42edee355ba1a3a3c46a7117941446a19a2953468e74b976977690982928e620a231dbf9b4795e990823d0e6a0bb4032858f2e86886dc21cf03257ec8082e24363b89c05bb5e307f615151061c8886269cbf5b20446e0aecae946390059489f941c29609d89b7245380430cd411f490c56ed1cb2a46e017edf687640bdf122465aa3982c6ceb92829641fcc294d8a3123c39cee5129a2b18bbee225188dddbe9efaac97f5338f66f7bcb50ef68a3f6b70b2411bdf2246c0639149353976e08000d6d29d7c3777e05967954ae7edbf4339615ee928b482db419171400c2f5c7866e840d4a7268f2b0f73d6c717f2f004c0d28e605d49d43c33e06726f82b29511cecd67b26c936e631ca4774cf8221b0a458009ecc8602e31a851ff06aba8b553b1c032f78aad4faf7d1c106e7c3558601791dd9570e6be599a2036b4690d962ab0ae7dbab47d5b2f04bd53b166a38d6cbb38aefdb48e4a69d11e7d0d5a3a6df3f55e788055eb09f3f4ca55c86fe66466f786c13bde71ac515e97544c127af410bbd4e6a99ca6839b3b93a97f782026255ee9966ca69a13fd436e86e42a8235587fa094decfbe39e8e8ac1a8b9fa50859762e16f5592672a94f4a80265234a2d887a5a41050392b86fb2b81319921276a7bf7da6f54d293c0d962cecbedef78ac0cb916319f3ef600850b05f1cfe3e4a78611b4594e332ae830d34c581971bdb4e1731286c434bdf73582880b7d40a9c90b297f8a33a88fe60e45bc804bb7c668298225dfb910901b0333d9f1c5c6b8393ff0c83d376bc7792e6e74c19fcd82e8f1136f3f6f557f0d8210e485c8739842b4d799c3aa2b2a63b8349a925d2841cf5aaa6d0a9f57310ed343351121a0dc071c49a507f50f62a06984627ff056060797d28076b53d0ab4752f7ef40752ad799fe95a6e165fc373ce92802a025a6389defbee51cbd71a754e9575a36cb0a8d218dac0d84dd9abe77c4c3d2020289f4a1b0d37ef91cb6cabae7f17c1469c41f8c5a458487f52b80bef716b3f23bc68810d1423475be6552902d62463a49002b4e5db9e29cbca56b2eea85d8eceaacdd4525090089144a3a6b480c3b5fb0f29c9d9f33104ab303bf60cc9d620798541b63634014202b2ae256063f43a5c3feb5c7e1715b027e7c4a93317"}) 1m7.738062843s ago: executing program 2 (id=2996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$pvfs2(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x8000, &(0x7f0000000240)=ANY=[@ANYBLOB="61636c2c5300a7c87bb4223842b7fa999ee883c07ffd80159fe75ba2a71d04bb82248effae54503ba2b9a8223aadd9562b5269d7e39cc36763a7eb23aa3c5b0a9935343cbf58bce96570bb961af1ca365823ece74fa7089fb17007d77caf48560fe6281961cf1a59720de02495013032ab3dd8ff879de56587614053778dcb73db"]) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) open_by_handle_at(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="0c00000051000000ff07000000000900050059e5938b73adcfc8bce7222e9e3cd93c0000"], 0x218400) r3 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2b) r5 = syz_pidfd_open(r3, 0x0) process_mrelease(r5, 0x700000000000000) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r6, 0x2000) ioctl$KVM_CAP_XEN_HVM(r4, 0x4068aea3, &(0x7f00000000c0)={0x26, 0x0, 0x41}) 1m6.785123987s ago: executing program 2 (id=3005): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000280)=[{r2}], 0x1, 0x0, 0x0, 0x2d) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x4, &(0x7f0000000080)={0x34, 0x1, 0x100}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140c, 0x300, 0x9, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008080}, 0x800) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) open(0x0, 0x10b942, 0x1) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x42, @vifc_lcl_addr=@loopback, @remote}, 0x10) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000700)="00120b", 0x3, 0x4090, 0x0, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000340)='\x00', 0x28}], 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m6.707642075s ago: executing program 2 (id=3007): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff6000/0x2000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000000, 0x200000005c831, 0xffffffffffffffff, 0x7efcf000) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000080)={0x3, 0x100, 0x2, 0x5, 0x480, 0x464}) r2 = creat(&(0x7f0000001380)='./file0\x00', 0x4) ioctl$KVM_NMI(r2, 0xae9a) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) 1m3.932518294s ago: executing program 2 (id=3026): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r0, 0x6f000) r1 = socket$caif_seqpacket(0x25, 0x5, 0x4) connect$caif(r1, &(0x7f0000000000)=@dgm={0x25, 0x100, 0x4}, 0x18) ioprio_set$pid(0x1, 0x0, 0x2000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) 1m3.878903555s ago: executing program 2 (id=3028): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) ioctl$COMEDI_INSNLIST(r1, 0x8010640b, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x4000000, 0x92, 0x0, 0x0, 0x4}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x1c, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}]}, 0x1c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r0, 0xebe3b000) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) r3 = fsmount(0xffffffffffffffff, 0x1, 0x2) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x100cc9d, @dev={0xfe, 0x80, '\x00', 0x12}, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x401) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r6, 0x8b2c, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x72fc}) fsmount(0xffffffffffffffff, 0x1, 0x4) madvise(&(0x7f00004ef000/0x12000)=nil, 0x12000, 0x75) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$incfs(r3, &(0x7f0000000100)='.log\x00', 0x20000, 0x111) r7 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000000)={0x20000000}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r10, &(0x7f0000000040)={0x40000006}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 48.673872341s ago: executing program 33 (id=3028): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) ioctl$COMEDI_INSNLIST(r1, 0x8010640b, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x4000000, 0x92, 0x0, 0x0, 0x4}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x1c, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}]}, 0x1c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r0, 0xebe3b000) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) r3 = fsmount(0xffffffffffffffff, 0x1, 0x2) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x100cc9d, @dev={0xfe, 0x80, '\x00', 0x12}, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x401) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r6, 0x8b2c, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x72fc}) fsmount(0xffffffffffffffff, 0x1, 0x4) madvise(&(0x7f00004ef000/0x12000)=nil, 0x12000, 0x75) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$incfs(r3, &(0x7f0000000100)='.log\x00', 0x20000, 0x111) r7 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000000)={0x20000000}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r10, &(0x7f0000000040)={0x40000006}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.252638233s ago: executing program 0 (id=3515): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x7fff, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r4, 0x5708e000) 4.0120113s ago: executing program 1 (id=3547): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x8, 0x10400) 3.961032104s ago: executing program 1 (id=3548): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20000, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000080)={0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x2c39000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x2c39000) socket$qrtr(0x2a, 0x2, 0x0) (async) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) 3.856428211s ago: executing program 1 (id=3550): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x140c, 0x10, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x880}, 0x40400) ioprio_set$pid(0x1, 0x0, 0x2007) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="c385848fe49f441ae26922ffb25b462e9d8eabaaadbe6ddb845fc1fe26e6db4f636992e88e67bca6", @ANYBLOB="010026bd7000ffdbdf"], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x24000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sync_file_range(r6, 0x9, 0x10000, 0x3) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x240008c8) syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r5) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r5) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x174, r7, 0x800, 0x70bd26, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x174}, 0x1, 0x0, 0x0, 0x200000d1}, 0x4000005) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) (async) sendfile(r1, r1, 0x0, 0x7ffff000) r8 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101290000090509"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0x2, 0x5c, {0x5c, 0x20, "0b232d5ad758c7d25878ede31603968fbfe58c514f8502c869bb273c375e4d3dc9c750554990bc84ff11e0c8dbd67a0df673b1c385d04f338020e709ad2e5ade99924061f479a884f46709925682ad02878fd09bed0e6282e1e1"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x0, 0xf, 0xb1, "22a0a3b3fdd90cbeafe94612c3949b474fe38a4dac7f45344bfceb22f86c264a6d19e076d4195a6768a089955816eaa6fcb150dedb6c85a66df3308cafd7fb32d59f72911530f2be622e171320c28f46d7d308219869b94731ebac84e171b281f5bbf2f50d431d1f924eaa70f2a2b19d73a5f10cdb6c8c33caf1242989b1bab7c5954fd3f605d83527f08b5d17de81026f6c0ee3b8a4bf3aaeb56d5bb28eb4cbe0790446b96587d84795ebdb8520030b74"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x68}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xf9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x3a, 0x5, 0x1000, 0x40, 0x1000, 0x8001, 0xd48, 0x2, 0xfff1, 0x1, 0x4, 0x7fff}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x6}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}}) (async) syz_usb_control_io$cdc_ncm(r8, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0x2, 0x5c, {0x5c, 0x20, "0b232d5ad758c7d25878ede31603968fbfe58c514f8502c869bb273c375e4d3dc9c750554990bc84ff11e0c8dbd67a0df673b1c385d04f338020e709ad2e5ade99924061f479a884f46709925682ad02878fd09bed0e6282e1e1"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x0, 0xf, 0xb1, "22a0a3b3fdd90cbeafe94612c3949b474fe38a4dac7f45344bfceb22f86c264a6d19e076d4195a6768a089955816eaa6fcb150dedb6c85a66df3308cafd7fb32d59f72911530f2be622e171320c28f46d7d308219869b94731ebac84e171b281f5bbf2f50d431d1f924eaa70f2a2b19d73a5f10cdb6c8c33caf1242989b1bab7c5954fd3f605d83527f08b5d17de81026f6c0ee3b8a4bf3aaeb56d5bb28eb4cbe0790446b96587d84795ebdb8520030b74"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x68}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xf9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x3a, 0x5, 0x1000, 0x40, 0x1000, 0x8001, 0xd48, 0x2, 0xfff1, 0x1, 0x4, 0x7fff}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x6}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}}) 1.74904747s ago: executing program 5 (id=3565): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000744000/0x1000)=nil, 0x1000, 0x2000008, 0x28011, r0, 0xb49bc000) socket$inet_tcp(0x2, 0x1, 0x0) 1.72044785s ago: executing program 5 (id=3566): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKCLOSEZONE(r0, 0x40101287, &(0x7f0000000000)={0x4, 0xca}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000) 1.576625383s ago: executing program 0 (id=3568): mmap(&(0x7f0000799000/0x2000)=nil, 0x2000, 0x300000d, 0x8010, 0xffffffffffffffff, 0x6a3c6000) (async) r0 = socket$kcm(0x2, 0x3, 0x2) getsockopt(r0, 0x1, 0x4a, 0x0, &(0x7f00000003c0)) (async) set_mempolicy(0x0, &(0x7f0000000000)=0x2, 0x6) 1.571566537s ago: executing program 0 (id=3570): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xd83b9000) (async) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0xc0011022, 0x0, 0x6}]}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) syz_usb_connect(0x2, 0x35, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004aaf36207205a2580a2701020301090223000100000000090401"], 0x0) (async) pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.517860524s ago: executing program 5 (id=3571): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000000)=0x4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @local}, 0x1c) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f00000c6000/0x2000)=nil, 0x2000, 0x1) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x10000}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl(r2, 0xfffff000, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 1.515773842s ago: executing program 4 (id=3572): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) (async, rerun: 32) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) (async) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r6, 0x0, 0x0) (async, rerun: 32) getdents64(r6, 0x0, 0x20000) (rerun: 32) syz_fuse_handle_req(r3, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e1100d6704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6ccb0e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f41c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111ff6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab43fa6104d5a99aa36b73ac3622ccae12252457cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd4132290b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc408a1258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a16d470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="50010000000000000000000000000000060000000000000002000000000000000600000000000000060000000000000005000000ffffffff090000000000000003000000000000000e010000000000000400000000000000000000000000000008000000000000000001000003000000040000000020000005000000", @ANYRESDEC=0x0, @ANYRES32=r5, @ANYBLOB="03000000070000000000000004"], 0x0, 0x0, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @cmp={{0x8}, @val={0xffffffffffffff78, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "f07f563cf5"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x5708e000) (rerun: 32) 1.408512914s ago: executing program 4 (id=3573): getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x84, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r2}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00400511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04", 0x4c}], 0x1}, 0x4008000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r4, 0x5708e000) 1.034085645s ago: executing program 5 (id=3574): mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x231, 0x7, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}}, 0x20000000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) acct(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/100, 0x64}, {&(0x7f0000000340)=""/140, 0x8c}], 0x2}, 0x0) 927.372149ms ago: executing program 0 (id=3575): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x30, 0x1, 0x70bd29, 0x25dfdbfa, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0x3fad7e17a27f2d2d, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r5 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x40400) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f0000000080)={0x9, 0x101, 0x3, {0x8f, 0x9, 0x7f, 0x2}}) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x60, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc84, 0x10}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x209}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4dd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x22c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r3, 0xb97534d5fe9704cf, 0x0, 0xfffffffc, {{0x12}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x2c}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) syz_open_dev$sg(&(0x7f0000000000), 0x802, 0x448140) dup(0xffffffffffffffff) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000007"], 0x1c}}, 0x804) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) statx(r7, 0x0, 0x1000, 0x10, 0x0) 848.266231ms ago: executing program 4 (id=3576): r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x693}) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x693}) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xa}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x8000, 0x2]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000880}, 0x8000) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='hfsplus\x00', 0x800008, &(0x7f0000000280)=',\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) creat(&(0x7f0000000400)='./file0\x00', 0x40) (async) r4 = creat(&(0x7f0000000400)='./file0\x00', 0x40) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000740)={0x7, 0x8, {0x0}, {0xee00}, 0x800, 0x4}) mount$9p_unix(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x280000, &(0x7f0000000780)={'trans=unix,', {[{@noxattr}, {@dfltuid={'dfltuid', 0x3d, r6}}, {@noxattr}, {@debug={'debug', 0x3d, 0xffffffffffff39eb}}, {@version_9p2000}, {@cache_loose}, {@cachetag={'cachetag', 0x3d, '\x00'}}, {@access_user}, {@loose}, {@noxattr}]}}) read$msr(r3, &(0x7f0000000840)=""/100, 0x64) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r7, 0x8008f511, &(0x7f0000000900)) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r7, 0x8008f511, &(0x7f0000000900)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000980)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x48, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5b}, @val={0x8}, @val={0xc, 0x99, {0x5, 0x55}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000b00)={0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000ac0)}) ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f0000000b40)={0x8, r9}) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000b80)={0x3, 0x3}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000bc0)={0x0, 0x4, 0x5}, 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_TIOCOUTQ(r10, 0x5411, &(0x7f0000000c00)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000c40)) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000c80), 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r10, {0x101, 0x8}}, './file0/file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r10, {0x101, 0x8}}, './file0/file0\x00'}) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000d00)={0x0, 0x9}, &(0x7f0000000d40)=0x8) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000d00)={0x0, 0x9}, &(0x7f0000000d40)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000d80)=r11, 0x4) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000e00)={0x48}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000e00)={0x48}) 847.555421ms ago: executing program 4 (id=3577): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) flock(0xffffffffffffffff, 0x2) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00005e8000/0xf000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = fsopen(&(0x7f0000000000)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x5) fchdir(r5) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0x20002078) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000180)=@x86={0x9e, 0x5, 0x6, 0x0, 0x7b, 0x7, 0x4, 0x6, 0x4, 0x5, 0x1, 0x0, 0x0, 0x6, 0xb, 0xe, 0x4, 0xb, 0x6, '\x00', 0x3, 0x24}) r7 = syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r7, &(0x7f00000009c0)={0x14, 0x0, 0x0}, &(0x7f0000000b80)={0x34, &(0x7f0000000a00)={0x40, 0x24, 0x3, "df2485"}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x2a) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, 0x0) syz_usb_control_io$uac1(r7, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x20, 0x22, 0xb9, {0xb9, 0x21, "35b298486f5a49b128d0f47a97ed9711189f25b3523629aceed6d9bd8ac9bb387f0f1f5dce8829d283a634891b82659ac3aa029c213b7b08dd99dc3a2fce81860b41843a70854862f7a1cfcfd739604f706628f998a38232453b1fce0cd4b96005daa35c04959f7da966d3e2d4a036a4fbd0cb0cafa1e1be559578373adcdc60b7af6b0feac0e524ba574e8f70229b62ea1f5a2c16354a64a90ece7dd4a8c4585d1eec868f220e3de94607c31c3a176b11ad3dc3f4b91c"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0xf, 0x59, "7bc93010037086d8cefb6c5c7b99366d43fb2e1879311e78e3d6b8a0d27e308f515f78ff38be138b0749b6200f31e7a2286be98ac022a0f8cf4b2f4115efa14b0b3e63cca5d79cd48d103a8d5810946e84052f55622da01b64"}, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x82, 0x1, "b7"}, 0x0, 0x0, 0x0}) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r8, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @raw_data=[0x4, 0x499e, 0x7, 0xcb, 0x7, 0x55, 0x40, 0x9, 0x200, 0x9, 0x8001, 0x5, 0x4, 0x40, 0x3, 0x7ff, 0x334f, 0x4, 0xff, 0x4, 0xc6, 0x35e, 0x47b, 0x8000, 0x400, 0x9, 0x89d9, 0x7fff, 0xd, 0x9, 0x3]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x57789000) syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r9, 0x8912, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000000)={'gre0\x00', @ifru_ivalue=0x8}}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 837.703167ms ago: executing program 1 (id=3578): r0 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x882, 0x40) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f00000003c0)) vmsplice(r3, &(0x7f0000000a00)=[{&(0x7f0000000c80)="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", 0x381}, {&(0x7f00000008c0)="03", 0x1}], 0x2, 0x8) ioctl$PPPIOCGIDLE(r3, 0x8010743f, &(0x7f0000000340)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 291.588159ms ago: executing program 4 (id=3582): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000280)=""/24, 0x18}], 0x1}, 0x9}], 0x1, 0x400000a0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)="c049", 0x2}], 0x1, 0x0, 0x0, 0x4000004}, 0xc0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x10, 0x40, 0xe, 0x3, {{0x2b, 0x4, 0x3, 0x6, 0xac, 0x64, 0x0, 0x5, 0x4, 0x0, @loopback, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x1c, 0xf6, 0x3, 0x1, [{@remote, 0xfff}, {@private=0xa010100, 0x1}, {@rand_addr=0x64010100, 0x9}]}, @timestamp_prespec={0x44, 0x1c, 0xd8, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x401}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x825e}]}, @timestamp_addr={0x44, 0x34, 0x95, 0x1, 0x1, [{@multicast1, 0x70}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x6}, {@remote, 0x6}, {@multicast2, 0x10001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@local, 0x6d6d}]}, @rr={0x7, 0x1f, 0x18, [@private=0xa010102, @remote, @rand_addr=0x64010100, @private=0xa010100, @empty, @dev={0xac, 0x14, 0x14, 0x38}, @broadcast]}, @noop, @generic={0x44, 0xa, "14b15c66bbcb7d9d"}, @noop]}}}}}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000180)=r4) ioctl$SG_BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, r7, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$TUNSETTXFILTER(r3, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e210c371303ed6a33f2ff8689b3f20e"]) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_CAP(r8, 0xc010640c, &(0x7f0000000040)={0x7}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) 121.264348ms ago: executing program 5 (id=3583): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 44.457935ms ago: executing program 5 (id=3584): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4f}]}]}, 0x30}}, 0x80) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000001280)={{r0}}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r5, 0x0, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r10, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000200)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000040)={r12}) close_range(r4, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 32.78126ms ago: executing program 0 (id=3585): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8200, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a0b040000000000000000020000005c000480580001800a0001006d617463680000004800028008000240000000001c0003004cb43801b2486e8f58c2052fade1bc2c62cdeb7521cf85f60e0001007374617469737469630000000e000100636f6e6e62797465730000000900010073797a30000000000900020073797a32"], 0xb0}}, 0x0) (async) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x80) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r3, 0x0, 0x0, 0xc000, &(0x7f0000000000)={0xa, 0x4e23, 0xffff, @mcast2}, 0x1c) (async) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x300000a, 0x22052, r0, 0x5708e000) 0s ago: executing program 0 (id=3586): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x181003) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x1, 0x0, 0x1, 0x61d}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x4f27, 0x629, 0x2, 0x401, 0x2, 0xcc7, 0xfff, 0x5c952399, 0xd, 0x3ff, 0x2, 0x1, 0x1, 0x1, 0x9, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x80000000, 0x20001e56, 0xb, 0xe69, 0x3c, 0x8, 0x106, 0x8000000, 0x2]}) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) kernel console output (not intermixed with test programs): 0x510 [ 501.622434][T13149] swap_cluster_readahead+0x4cf/0x5f0 [ 501.622455][T13149] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 501.622477][T13149] ? rcu_is_watching+0x15/0xb0 [ 501.622493][T13149] ? filemap_get_entry+0xad/0x2f0 [ 501.622512][T13149] ? get_vma_policy+0x27c/0x3c0 [ 501.622536][T13149] swapin_readahead+0x17d/0xb50 [ 501.622555][T13149] ? __pfx_filemap_get_entry+0x10/0x10 [ 501.622575][T13149] ? get_swap_device_info+0x1c/0x2b0 [ 501.622593][T13149] ? rcu_is_watching+0x15/0xb0 [ 501.622611][T13149] ? __pfx_swapin_readahead+0x10/0x10 [ 501.622631][T13149] ? __filemap_get_folio+0x9a6/0xaf0 [ 501.622661][T13149] ? swap_cache_get_folio+0xae/0x3b0 [ 501.622681][T13149] do_swap_page+0x525/0x5ac0 [ 501.622702][T13149] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 501.622727][T13149] ? ___pte_offset_map+0x29/0x250 [ 501.622748][T13149] ? lock_acquire+0x5f/0x360 [ 501.622764][T13149] ? do_swap_page+0x184/0x5ac0 [ 501.622784][T13149] ? __pfx_do_swap_page+0x10/0x10 [ 501.622805][T13149] ? __pfx_default_wake_function+0x10/0x10 [ 501.622822][T13149] ? ___pte_offset_map+0x45/0x250 [ 501.622842][T13149] ? ___pte_offset_map+0x1cf/0x250 [ 501.622864][T13149] ? pte_offset_map_rw_nolock+0xea/0x160 [ 501.622887][T13149] __handle_mm_fault+0xe55/0x5400 [ 501.622912][T13149] ? __pfx___handle_mm_fault+0x10/0x10 [ 501.622935][T13149] ? rcu_is_watching+0x15/0xb0 [ 501.622954][T13149] ? lock_vma_under_rcu+0x3cb/0x450 [ 501.622969][T13149] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 501.622984][T13149] handle_mm_fault+0x40a/0x8e0 [ 501.623007][T13149] do_user_addr_fault+0xa81/0x1390 [ 501.623026][T13149] ? rcu_is_watching+0x15/0xb0 [ 501.623042][T13149] ? trace_page_fault_user+0x84/0x1e0 [ 501.623058][T13149] exc_page_fault+0x82/0x100 [ 501.623077][T13149] asm_exc_page_fault+0x26/0x30 [ 501.623097][T13149] RIP: 0033:0x7f78e93c14a8 [ 501.623115][T13149] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 501.623129][T13149] RSP: 002b:00007ffcb1b011d0 EFLAGS: 00010293 [ 501.623146][T13149] RAX: 0000000000000000 RBX: 00000000000001fb RCX: 00007f78e93c14a5 [ 501.623159][T13149] RDX: 00007ffcb1b01210 RSI: 0000000000000000 RDI: 0000000000000000 [ 501.623170][T13149] RBP: 00007ffcb1b0127c R08: 0000000000000000 R09: 0000000000000000 [ 501.623182][T13149] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 501.623193][T13149] R13: 00000000000927c0 R14: 0000000000079ff6 R15: 00007ffcb1b012d0 [ 501.623212][T13149] [ 502.049734][T13149] memory: usage 307200kB, limit 307200kB, failcnt 65358 [ 502.056797][T13149] memory+swap: usage 307708kB, limit 9007199254740988kB, failcnt 0 [ 502.065142][T13149] kmem: usage 2440kB, limit 9007199254740988kB, failcnt 0 [ 502.072296][T13149] Memory cgroup stats for /syz2: [ 502.072430][T13149] cache 312061952 [ 502.081379][T13149] rss 0 [ 502.084360][T13149] rss_huge 0 [ 502.087765][T13149] shmem 312061952 [ 502.091512][T13149] mapped_file 0 [ 502.096371][T13149] dirty 0 [ 502.099360][T13149] writeback 0 [ 502.102719][T13149] workingset_refault_anon 1973 [ 502.108731][T13149] workingset_refault_file 14107 [ 502.113837][T13149] swap 520192 [ 502.117168][T13149] swapcached 12288 [ 502.120930][T13149] pgpgin 1256789 [ 502.125032][T13149] pgpgout 1187242 [ 502.128718][T13149] pgfault 374702 [ 502.132297][T13149] pgmajfault 25650 [ 502.136856][T13149] inactive_anon 0 [ 502.140549][T13149] active_anon 25153536 [ 502.144913][T13149] inactive_file 0 [ 502.148612][T13149] active_file 0 [ 502.152309][T13149] unevictable 286920704 [ 502.171852][T13149] hierarchical_memory_limit 314572800 [ 502.177569][T13149] hierarchical_memsw_limit 9223372036854771712 [ 502.183978][T13149] total_cache 312061952 [ 502.188134][T13149] total_rss 0 [ 502.191410][T13149] total_rss_huge 0 [ 502.195631][T13149] total_shmem 312061952 [ 502.199835][T13149] total_mapped_file 0 [ 502.206482][T13149] total_dirty 0 [ 502.209974][T13149] total_writeback 0 [ 502.209986][T13149] total_workingset_refault_anon 1973 [ 502.209994][T13149] total_workingset_refault_file 14107 [ 502.226073][T13149] total_swap 520192 [ 502.229904][T13149] total_swapcached 12288 [ 502.236577][T13149] total_pgpgin 1256789 [ 502.240671][T13149] total_pgpgout 1187242 [ 502.244980][T13149] total_pgfault 374702 [ 502.249108][T13149] total_pgmajfault 25650 [ 502.253445][T13149] total_inactive_anon 0 [ 502.261038][T13149] total_active_anon 25153536 [ 502.266590][T13149] total_inactive_file 0 [ 502.270833][T13149] total_active_file 0 [ 502.274871][T13149] total_unevictable 286920704 [ 502.279556][T13149] anon_cost 0 [ 502.283216][T13149] file_cost 0 [ 502.286827][T13149] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2939,pid=15986,uid=0 [ 502.291662][T16135] /dev/rnullb0: Can't open blockdev [ 502.301817][T13149] Memory cgroup out of memory: Killed process 15986 (syz.2.2939) total-vm:102028kB, anon-rss:1016kB, file-rss:23592kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 502.347900][T16140] /dev/rnullb0: Can't open blockdev [ 502.383379][T16143] /dev/rnullb0: Can't open blockdev [ 502.537163][T16158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.553324][T16158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.620112][T16165] hugetlbfs: Bad value 't' for mount option 'nr_inodes' [ 502.620112][T16165] [ 503.112320][ T5869] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 503.112379][ T5869] Bluetooth: hci3: Malformed LE Event: 0x02 [ 503.486852][T16187] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2976'. [ 503.498477][T16186] validate_nla: 1 callbacks suppressed [ 503.498490][T16186] netlink: 'syz.0.2976': attribute type 29 has an invalid length. [ 503.636229][T16195] /dev/rnullb0: Can't open blockdev [ 503.645198][T16197] QAT: failed to copy from user cfg_data. [ 503.651819][T16193] vivid-000: ================= START STATUS ================= [ 503.657629][T16199] comedi: valid board names for 8255 driver are: [ 503.667263][T16199] 8255 [ 503.670059][T16199] comedi: valid board names for vmk80xx driver are: [ 503.676581][T16195] 9p: Unknown parameter 'fsuuid' [ 503.677465][T16199] vmk80xx [ 503.684946][T16199] comedi: valid board names for usbduxsigma driver are: [ 503.685323][T16193] vivid-000: Test Pattern: [ 503.692230][T16199] usbduxsigma [ 503.701158][T16199] comedi: valid board names for usbduxfast driver are: [ 503.708295][T16193] 75% Colorbar [ 503.711808][T16193] vivid-000: Fill Percentage of Frame: 100 [ 503.732109][T16193] vivid-000: Horizontal Movement: No Movement [ 503.740270][T16193] vivid-000: Vertical Movement: No Movement [ 503.754587][T16193] vivid-000: OSD Text Mode: All [ 503.759478][T16193] vivid-000: Show Border: false [ 503.762294][T16199] usbduxfast [ 503.776969][T16199] comedi: valid board names for usbdux driver are: [ 503.790837][T16193] vivid-000: Show Square: false [ 503.803139][T16193] vivid-000: Sensor Flipped Horizontally: true [ 503.806091][T16199] usbdux [ 503.809327][T16193] vivid-000: Sensor Flipped Vertically: true [ 503.809346][T16193] vivid-000: Insert SAV Code in Image: true [ 503.809363][T16193] vivid-000: Insert EAV Code in Image: false [ 503.819962][T16199] comedi: valid board names for ni6501 driver are: [ 503.864637][T16193] [ 503.867062][T16193] vivid-000: Insert Video Guard Band: false [ 503.872758][T16199] ni6501 [ 503.879998][T16193] vivid-000: Reduced Framerate: false [ 503.886557][T16199] comedi: valid board names for dt9812 driver are: [ 503.900458][T16193] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 503.905484][T16199] dt9812 [ 503.911868][T16204] /dev/rnullb0: Can't open blockdev [ 503.915107][T16193] vivid-000: S-Video 000-0 Is Connected To: None [ 503.928758][T16199] comedi: valid board names for ni_labpc_cs driver are: [ 503.943412][T16193] vivid-000: Enable Capture Cropping: true grabbed [ 503.949502][T16199] ni_labpc_cs [ 503.959609][T16199] comedi: valid board names for ni_daq_700 driver are: [ 503.960198][T16193] vivid-000: Enable Capture Composing: [ 503.977670][T16199] ni_daq_700 [ 503.981939][T16193] true grabbed [ 503.989932][T16193] vivid-000: Enable Capture Scaler: true grabbed [ 503.991799][T16199] comedi: valid board names for labpc_pci driver are: [ 504.014190][T16193] vivid-000: Timestamp Source: End of Frame [ 504.017230][T16199] labpc_pci [ 504.020119][T16193] vivid-000: Colorspace: sRGB [ 504.020141][T16193] vivid-000: Transfer Function: Default [ 504.045857][T16199] comedi: valid board names for adl_pci9118 driver are: [ 504.053716][T16193] [ 504.060824][T16193] vivid-000: Y'CbCr Encoding: Default [ 504.077354][T16193] vivid-000: HSV Encoding: Hue 0-179 [ 504.078245][T16199] pci9118dg [ 504.085990][T16193] vivid-000: Quantization: Default [ 504.086016][T16193] vivid-000: Apply Alpha To Red Only: false [ 504.086032][T16193] vivid-000: Standard Aspect Ratio: 4x3 [ 504.086047][T16193] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 504.086068][T16193] vivid-000: DV Timings: [ 504.097366][T16206] /dev/rnullb0: Can't open blockdev [ 504.123312][T16199] pci9118hg [ 504.126529][T16199] pci9118hr [ 504.139919][T16199] comedi: valid board names for 8255_pci driver are: [ 504.148233][T16193] 4096x2160p60 inactive [ 504.152476][T16193] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 504.172696][T16199] 8255_pci [ 504.176192][T16193] vivid-000: Maximum EDID Blocks: 2 [ 504.181433][T16193] vivid-000: Limited RGB Range (16-235): false [ 504.187787][T16199] comedi: valid board names for s526 driver are: [ 504.197893][T16199] s526 [ 504.200876][T16199] comedi: valid board names for multiq3 driver are: [ 504.204617][T16193] vivid-000: Rx RGB Quantization Range: Automatic [ 504.223410][T16199] multiq3 [ 504.227660][T16199] comedi: valid board names for pcmuio driver are: [ 504.241523][T16193] vivid-000: Power Present: 0x00000001 [ 504.244580][T16199] pcmuio48 [ 504.255037][T16199] pcmuio96 [ 504.259003][T16193] tpg source WxH: 320x180 (Y'CbCr) [ 504.273146][T16199] comedi: valid board names for pcmmio driver are: [ 504.277180][T16193] tpg field: 1 [ 504.289918][T16199] pcmmio [ 504.292885][T16199] comedi: valid board names for pcmda12 driver are: [ 504.295937][T16193] tpg crop: (0,0)/320x180 [ 504.320810][T16199] pcmda12 [ 504.322461][T16193] tpg compose: (0,0)/320x180 [ 504.333910][T16193] tpg colorspace: 8 [ 504.336553][T16199] comedi: valid board names for pcmad driver are: [ 504.345359][T16193] tpg transfer function: 0/2 [ 504.352836][ T32] oom_reaper: reaped process 15986 (syz.2.2939), now anon-rss:0kB, file-rss:22412kB, shmem-rss:0kB [ 504.356852][T16193] tpg Y'CbCr encoding: 0/1 [ 504.379490][T16193] tpg quantization: 0/2 [ 504.383093][T16199] pcmad12 [ 504.391169][T16193] tpg RGB range: 0/2 [ 504.393077][T16199] pcmad16 [ 504.402383][T16199] comedi: valid board names for ni_labpc driver are: [ 504.403938][T16193] vivid-000: ================== END STATUS ================== [ 504.441886][T16199] lab-pc-1200 [ 504.445832][T16199] lab-pc-1200ai [ 504.450130][T16199] lab-pc+ [ 504.460230][T16199] comedi: valid board names for atmio16 driver are: [ 504.467138][T16199] atmio16 [ 504.470186][T16199] atmio16d [ 504.477518][T16199] comedi: valid board names for ni_at_ao driver are: [ 504.487311][T16199] at-ao-6 [ 504.490465][T16199] at-ao-10 [ 504.494298][T16199] comedi: valid board names for ni_at_a2150 driver are: [ 504.596725][T16199] ni_at_a2150 [ 504.600226][T16199] comedi: valid board names for adq12b driver are: [ 504.605508][T16226] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2985'. [ 504.607191][T16199] adq12b [ 504.618948][T16199] comedi: valid board names for mpc624 driver are: [ 504.625554][T16199] mpc624 [ 504.628510][T16199] comedi: valid board names for c6xdigio driver are: [ 504.635351][T16199] c6xdigio [ 504.638514][T16199] comedi: valid board names for aio_iiro_16 driver are: [ 504.645802][T16199] aio_iiro_16 [ 504.646211][T16225] /dev/rnullb0: Can't open blockdev [ 504.649196][T16199] comedi: valid board names for aio_aio12_8 driver are: [ 504.662270][T16199] aio_aio12_8 [ 504.664639][T16226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.665896][T16199] aio_ai12_8 [ 504.677788][T16199] aio_ao12_4 [ 504.681093][T16199] comedi: valid board names for fl512 driver are: [ 504.699561][T16226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.734182][T16199] fl512 [ 504.737093][T16199] comedi: valid board names for dmm32at driver are: [ 504.761975][T16199] dmm32at [ 504.765703][T16233] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2987'. [ 504.766426][T16199] comedi: valid board names for dt282x driver are: [ 504.782913][T16199] dt2821 [ 504.788954][T16199] dt2821-f [ 504.792122][T16199] dt2821-g [ 504.797193][T16199] dt2823 [ 504.800198][T16199] dt2824-pgh [ 504.803741][T16199] dt2824-pgl [ 504.807155][T16199] dt2825 [ 504.810178][T16199] dt2827 [ 504.817010][T16199] dt2828 [ 504.820137][T16199] dt2829 [ 504.830062][T16199] dt21-ez [ 504.831596][T16233] /dev/rnullb0: Can't open blockdev [ 504.835043][T16199] dt23-ez [ 504.841519][T16199] dt24-ez [ 504.844866][T16199] dt24-ez-pgl [ 504.848320][T16199] comedi: valid board names for dt2817 driver are: [ 504.882176][T16199] dt2817 [ 504.890699][T16199] comedi: valid board names for dt2815 driver are: [ 504.907132][T16199] dt2815 [ 504.910175][T16199] comedi: valid board names for dt2814 driver are: [ 504.932722][T16199] dt2814 [ 504.937999][T16199] comedi: valid board names for dt2811 driver are: [ 504.950400][T16199] dt2811-pgh [ 504.955385][T16199] dt2811-pgl [ 504.966424][T16199] comedi: valid board names for dt2801 driver are: [ 504.975561][T16199] dt2801 [ 504.978541][T16199] comedi: valid board names for das6402 driver are: [ 504.987708][T16199] das6402-12 [ 504.991196][T16199] das6402-16 [ 505.012649][T16199] comedi: valid board names for das1800 driver are: [ 505.019793][T16199] das-1701st [ 505.025480][T16199] das-1701st-da [ 505.046322][T16199] das-1702st [ 505.049646][T16199] das-1702st-da [ 505.060066][T16199] das-1702hr [ 505.067482][T16199] das-1702hr-da [ 505.071385][T16199] das-1701ao [ 505.075344][T16199] das-1702ao [ 505.078796][T16199] das-1801st [ 505.082466][T16199] das-1801st-da [ 505.089244][T16199] das-1802st [ 505.096352][T16199] das-1802st-da [ 505.099918][T16199] das-1802hr [ 505.113032][T16199] das-1802hr-da [ 505.116610][T16199] das-1801hc [ 505.119972][T16199] das-1802hc [ 505.123768][T16199] das-1801ao [ 505.127065][T16199] das-1802ao [ 505.130669][T16199] comedi: valid board names for das800 driver are: [ 505.137870][T16199] das-800 [ 505.140961][T16199] cio-das800 [ 505.144493][T16199] das-801 [ 505.147569][T16199] cio-das801 [ 505.150887][T16199] das-802 [ 505.154246][T16199] cio-das802 [ 505.157531][T16199] cio-das802/16 [ 505.161143][T16199] comedi: valid board names for isa-das08 driver are: [ 505.168635][T16199] isa-das08 [ 505.188732][T16199] das08-pgm [ 505.191955][T16199] das08-pgh [ 505.200788][T16199] das08-pgl [ 505.204109][T16199] das08-aoh [ 505.207363][T16199] das08-aol [ 505.210663][T16199] das08-aom [ 505.214045][T16199] das08/jr-ao [ 505.217667][T16199] das08jr-16-ao [ 505.221985][T16199] pc104-das08 [ 505.227179][T16199] das08jr/16 [ 505.230510][T16199] comedi: valid board names for das16m1 driver are: [ 505.237793][T16199] das16m1 [ 505.240824][T16199] comedi: valid board names for dac02 driver are: [ 505.247479][T16199] dac02 [ 505.250507][T16199] comedi: valid board names for rti802 driver are: [ 505.257571][T16199] rti802 [ 505.265331][T16199] comedi: valid board names for rti800 driver are: [ 505.272884][T16199] rti800 [ 505.278908][T16199] rti815 [ 505.282297][T16199] comedi: valid board names for pcm3724 driver are: [ 505.290257][T16199] pcm3724 [ 505.320127][T16199] comedi: valid board names for pcl818 driver are: [ 505.329049][T16199] pcl818l [ 505.332191][T16199] pcl818h [ 505.335702][T16199] pcl818hd [ 505.352616][T16199] pcl818hg [ 505.356183][T16199] pcl818 [ 505.359363][T16199] pcl718 [ 505.362687][T16199] pcm3718 [ 505.373347][T16199] comedi: valid board names for pcl816 driver are: [ 505.403283][T16199] pcl816 [ 505.406308][T16199] pcl814b [ 505.409442][T16199] comedi: valid board names for pcl812 driver are: [ 505.417186][T16199] pcl812 [ 505.432761][T16199] pcl812pg [ 505.436260][T16199] acl8112pg [ 505.439475][T16199] acl8112dg [ 505.442680][T16199] acl8112hg [ 505.446351][T16199] a821pgl [ 505.462600][T16199] a821pglnda [ 505.466231][T16199] a821pgh [ 505.469278][T16199] a822pgl [ 505.472818][T16199] a822pgh [ 505.476427][T16199] a823pgl [ 505.492077][T16199] a823pgh [ 505.495199][T16199] pcl813 [ 505.498324][T16199] pcl813b [ 505.501380][T16199] acl8113 [ 505.504963][T16199] iso813 [ 505.507927][T16199] acl8216 [ 505.510956][T16199] a826pg [ 505.514321][T16199] comedi: valid board names for pcl730 driver are: [ 505.520841][T16199] pcl730 [ 505.524131][T16199] iso730 [ 505.527085][T16199] acl7130 [ 505.530117][T16199] pcm3730 [ 505.534947][T16199] pcl725 [ 505.551995][T16199] p8r8dio [ 505.567547][T16199] acl7225b [ 505.570708][T16199] p16r16dio [ 505.578104][T16199] pcl733 [ 505.582842][T16199] pcl734 [ 505.587488][T16199] opmm-1616-xt [ 505.603608][T16199] pearl-mm-p [ 505.606950][T16199] ir104-pbf [ 505.610156][T16199] comedi: valid board names for pcl726 driver are: [ 505.617220][T16199] pcl726 [ 505.620213][T16199] pcl727 [ 505.636349][T16199] pcl728 [ 505.643260][T16199] acl6126 [ 505.646327][T16199] acl6128 [ 505.649367][T16199] comedi: valid board names for pcl724 driver are: [ 505.673013][T16199] pcl724 [ 505.676048][T16199] pcl722 [ 505.679451][T16199] pcl731 [ 505.682405][T16199] acl7122 [ 505.692506][T16275] pvfs2: Unknown parameter 'S' [ 505.730101][T16199] acl7124 [ 505.733197][T16199] pet48dio [ 505.736750][T16199] pcmio48 [ 505.739905][T16199] onyx-mm-dio [ 505.744813][T16199] comedi: valid board names for pcl711 driver are: [ 505.751482][T16199] pcl711 [ 505.754527][T16199] pcl711b [ 505.757547][T16199] acl8112hg [ 505.760733][T16199] acl8112dg [ 505.764146][T16199] comedi: valid board names for amplc_pc263 driver are: [ 505.771079][T16199] pc263 [ 505.775260][T16199] comedi: valid board names for amplc_pc236 driver are: [ 505.782316][T16199] pc36at [ 505.786797][T16199] comedi: valid board names for amplc_dio200 driver are: [ 505.812965][T16199] pc212e [ 505.816001][T16199] pc214e [ 505.818942][T16199] pc215e [ 505.821882][T16199] pc218e [ 505.832992][T16199] pc272e [ 505.835962][T16199] comedi: valid board names for comedi_parport driver are: [ 505.853117][T16199] comedi_parport [ 505.863102][T16199] comedi: valid board names for comedi_test driver are: [ 505.867821][T16280] /dev/rnullb0: Can't open blockdev [ 505.873114][T16199] comedi_test [ 505.878729][T16199] comedi: valid board names for comedi_bond driver are: [ 505.902979][T16199] comedi_bond [ 505.995876][T16286] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 506.163081][T16296] input: syz1 as /devices/virtual/input/input34 [ 506.218562][ T5869] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 506.853183][ T952] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 507.019936][ T952] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 507.043616][ T952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 507.067500][ T952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 507.086663][ T952] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 507.101376][ T952] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 507.112568][ T952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.122561][ T952] usb 3-1: config 0 descriptor?? [ 507.538884][ T952] plantronics 0003:047F:FFFF.001B: ignoring exceeding usage max [ 507.594473][ T952] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 507.678974][ T5869] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 507.808986][T16375] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 507.869690][T16375] Error validating options; rc = [-22] [ 508.399973][ T5869] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 508.492553][T16390] /dev/rnullb0: Can't open blockdev [ 508.532228][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 508.541445][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 508.554522][ C1] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 508.563723][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 508.571601][ C1] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 508.580771][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 508.588673][ C1] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 508.597847][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 508.605742][ C1] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 508.614914][ C1] Buffer I/O error on dev loop6, logical block 4, async page read [ 508.622782][ C1] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 508.631955][ C1] Buffer I/O error on dev loop6, logical block 5, async page read [ 508.639849][ C1] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 508.649030][ C1] Buffer I/O error on dev loop6, logical block 6, async page read [ 508.658998][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 508.668216][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 508.676096][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 508.685247][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 508.693117][ C0] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 508.702247][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 508.716071][ T5235] ldm_validate_partition_table(): Disk read failed. [ 508.728862][ T5235] Dev loop6: unable to read RDB block 0 [ 508.739407][T16397] /dev/rnullb0: Can't open blockdev [ 508.759884][ T5235] loop6: unable to read partition table [ 508.765956][ T5235] loop6: partition table beyond EOD, truncated [ 508.793700][T16402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.987017][T16406] bond0: Error: Cannot enslave bond to itself. [ 508.997019][T16407] binder: 16404:16407 ioctl 5409 7e returned -22 [ 509.008986][T16406] comedi comedi3: mpc624: I/O port conflict (0x4f24,16) [ 509.423745][T16423] No control pipe specified [ 509.552088][ T9705] usb 3-1: USB disconnect, device number 115 [ 509.683161][T16442] netlink: 'syz.1.3031': attribute type 4 has an invalid length. [ 509.899772][T16452] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3033'. [ 510.657250][T16479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.695996][T16479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.736858][T16479] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3039'. [ 510.820040][ T5869] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 510.824099][T16484] /dev/rnullb0: Can't open blockdev [ 511.407256][T16490] netlink: 'syz.1.3042': attribute type 2 has an invalid length. [ 511.417224][T16488] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3041'. [ 511.443590][T16490] netlink: 'syz.1.3042': attribute type 2 has an invalid length. [ 511.705988][T16502] /dev/rnullb0: Can't open blockdev [ 511.776053][T16505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.818688][T16505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.926016][T16514] /dev/rnullb0: Can't open blockdev [ 512.294885][T16529] /dev/rnullb0: Can't open blockdev [ 512.984258][T16549] /dev/rnullb0: Can't open blockdev [ 513.465347][T16550] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 513.525634][T16568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.534396][T16568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.340437][T16591] /dev/rnullb0: Can't open blockdev [ 514.664142][T16616] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3065'. [ 514.755568][T16623] /dev/rnullb0: Can't open blockdev [ 514.820176][T16605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3063'. [ 514.994630][T16639] wlan1 speed is unknown, defaulting to 1000 [ 515.013793][T16639] wlan1 speed is unknown, defaulting to 1000 [ 515.042324][T16639] wlan1 speed is unknown, defaulting to 1000 [ 515.312500][T16639] infiniband syz0: set down [ 515.312549][ T9705] wlan1 speed is unknown, defaulting to 1000 [ 515.324530][T16639] infiniband syz0: added wlan1 [ 515.324944][T16639] syz0: rxe_create_cq: returned err = -12 [ 515.324984][T16639] infiniband syz0: Couldn't create ib_mad CQ [ 515.325060][T16639] infiniband syz0: Couldn't open port 1 [ 515.356898][T16639] RDS/IB: syz0: added [ 515.356934][T16639] smc: adding ib device syz0 with port count 1 [ 515.356950][T16639] smc: ib device syz0 port 1 has pnetid [ 515.357464][T16639] wlan1 speed is unknown, defaulting to 1000 [ 515.367075][ T9705] wlan1 speed is unknown, defaulting to 1000 [ 515.437237][T16672] netlink: 'syz.1.3071': attribute type 1 has an invalid length. [ 515.437258][T16672] netlink: 'syz.1.3071': attribute type 101 has an invalid length. [ 515.437271][T16672] netlink: 808 bytes leftover after parsing attributes in process `syz.1.3071'. [ 515.645355][T16639] wlan1 speed is unknown, defaulting to 1000 [ 515.878546][T16681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.935140][T16681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.958944][T16681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.003309][T16681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.044765][T16639] wlan1 speed is unknown, defaulting to 1000 [ 516.063105][T16681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.124776][T16681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.223560][T16699] /dev/rnullb0: Can't open blockdev [ 516.310632][T16639] wlan1 speed is unknown, defaulting to 1000 [ 516.571765][T16639] wlan1 speed is unknown, defaulting to 1000 [ 516.829513][T16639] wlan1 speed is unknown, defaulting to 1000 [ 517.589067][T16738] /dev/rnullb0: Can't open blockdev [ 517.683072][T16741] netlink: 37 bytes leftover after parsing attributes in process `syz.4.3077'. [ 517.918100][T16751] netlink: 'syz.4.3079': attribute type 3 has an invalid length. [ 517.948605][T16751] netlink: 'syz.4.3079': attribute type 1 has an invalid length. [ 517.968150][T16751] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3079'. [ 517.994784][T16755] ubi0: attaching mtd0 [ 518.005094][T16751] NCSI netlink: No device for ifindex 33022 [ 518.022832][T16755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.045349][T16755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.074829][T16751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.094086][T16751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.813818][ T5869] Bluetooth: hci1: command 0x0405 tx timeout [ 518.871472][T16777] /dev/rnullb0: Can't open blockdev [ 518.885551][T16777] /dev/rnullb0: Can't open blockdev [ 518.914726][T16777] /dev/rnullb0: Can't open blockdev [ 518.937334][T16777] /dev/rnullb0: Can't open blockdev [ 518.956949][T16777] /dev/rnullb0: Can't open blockdev [ 518.963514][T16777] /dev/rnullb0: Can't open blockdev [ 518.969317][T16777] /dev/rnullb0: Can't open blockdev [ 518.989620][T16777] /dev/rnullb0: Can't open blockdev [ 519.005710][T16777] /dev/rnullb0: Can't open blockdev [ 519.011470][T16777] /dev/rnullb0: Can't open blockdev [ 519.061580][T16777] /dev/rnullb0: Can't open blockdev [ 519.071677][T16777] /dev/rnullb0: Can't open blockdev [ 519.083691][T16777] /dev/rnullb0: Can't open blockdev [ 519.091914][T16777] /dev/rnullb0: Can't open blockdev [ 519.107156][T16777] /dev/rnullb0: Can't open blockdev [ 519.119432][T16777] /dev/rnullb0: Can't open blockdev [ 519.133811][T16777] /dev/rnullb0: Can't open blockdev [ 519.150085][T16777] /dev/rnullb0: Can't open blockdev [ 519.163611][T16777] /dev/rnullb0: Can't open blockdev [ 519.170336][T16777] /dev/rnullb0: Can't open blockdev [ 519.183642][T16777] /dev/rnullb0: Can't open blockdev [ 519.194334][T16777] /dev/rnullb0: Can't open blockdev [ 519.210363][T16777] /dev/rnullb0: Can't open blockdev [ 519.216331][T16777] /dev/rnullb0: Can't open blockdev [ 519.232288][T16777] /dev/rnullb0: Can't open blockdev [ 519.250039][T16777] /dev/rnullb0: Can't open blockdev [ 519.260121][T16777] /dev/rnullb0: Can't open blockdev [ 519.273630][T16777] /dev/rnullb0: Can't open blockdev [ 519.283820][T16777] /dev/rnullb0: Can't open blockdev [ 519.299805][T16777] /dev/rnullb0: Can't open blockdev [ 519.309934][T16777] /dev/rnullb0: Can't open blockdev [ 519.321407][T16777] /dev/rnullb0: Can't open blockdev [ 519.338405][T16777] /dev/rnullb0: Can't open blockdev [ 519.348991][T16777] /dev/rnullb0: Can't open blockdev [ 519.363676][T16777] /dev/rnullb0: Can't open blockdev [ 519.379626][T16777] /dev/rnullb0: Can't open blockdev [ 519.388101][T16777] /dev/rnullb0: Can't open blockdev [ 519.403783][T16777] /dev/rnullb0: Can't open blockdev [ 519.409584][T16777] /dev/rnullb0: Can't open blockdev [ 519.443485][T16777] /dev/rnullb0: Can't open blockdev [ 519.449256][T16777] /dev/rnullb0: Can't open blockdev [ 519.472863][T16777] /dev/rnullb0: Can't open blockdev [ 519.488074][T16777] /dev/rnullb0: Can't open blockdev [ 519.503568][T16777] /dev/rnullb0: Can't open blockdev [ 519.509298][T16777] /dev/rnullb0: Can't open blockdev [ 519.533585][T16777] /dev/rnullb0: Can't open blockdev [ 519.539310][T16777] /dev/rnullb0: Can't open blockdev [ 519.653914][T16777] /dev/rnullb0: Can't open blockdev [ 519.671136][T16777] /dev/rnullb0: Can't open blockdev [ 520.046790][T16803] MTD: Couldn't look up './cgroup': -15 [ 520.076037][T16800] mkiss: ax0: crc mode is auto. [ 520.119039][T16803] ./cgroup: Can't lookup blockdev [ 520.316262][T16818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.369248][T16818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.405333][T16823] /dev/rnullb0: Can't open blockdev [ 522.852816][T16860] /dev/rnullb0: Can't open blockdev [ 523.063613][T16874] netlink: 14428 bytes leftover after parsing attributes in process `syz.4.3104'. [ 523.104380][T16874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.119746][T16874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.128810][T16874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.334719][T16893] /dev/rnullb0: Can't open blockdev [ 523.384415][T16895] /dev/rnullb0: Can't open blockdev [ 523.444663][T16902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.473337][T16902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.673065][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 523.682882][T16909] netlink: 'syz.4.3112': attribute type 4 has an invalid length. [ 523.803936][ T9] usb 2-1: device descriptor read/64, error -71 [ 524.063146][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 524.193020][ T9] usb 2-1: device descriptor read/64, error -71 [ 524.313445][ T9] usb usb2-port1: attempt power cycle [ 524.606855][T16941] /dev/rnullb0: Can't open blockdev [ 524.659708][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 524.706529][ T9] usb 2-1: device descriptor read/8, error -71 [ 524.850387][T16948] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3123'. [ 524.951957][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 524.959754][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 524.968023][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 524.979207][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 524.989564][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 524.997551][ T9] usb 2-1: device descriptor read/8, error -71 [ 525.004307][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 525.113561][ T9] usb usb2-port1: unable to enumerate USB device [ 525.126502][T16955] wlan1 speed is unknown, defaulting to 1000 [ 525.260390][T12606] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.354394][T12606] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.420502][T12606] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.468168][T16955] chnl_net:caif_netlink_parms(): no params data found [ 525.530245][T12606] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.618749][T17112] sctp: [Deprecated]: syz.4.3127 (pid 17112) Use of int in max_burst socket option deprecated. [ 525.618749][T17112] Use struct sctp_assoc_value instead [ 525.650017][T16955] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.658471][T16955] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.670849][T16955] bridge_slave_0: entered allmulticast mode [ 525.681378][T16955] bridge_slave_0: entered promiscuous mode [ 525.693954][T16955] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.702446][T16955] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.714780][T16955] bridge_slave_1: entered allmulticast mode [ 525.722010][T16955] bridge_slave_1: entered promiscuous mode [ 525.815537][T16955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.830216][T16955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.862103][T17183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.863814][T17193] /dev/rnullb0: Can't open blockdev [ 525.873392][T17183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.904467][T16955] team0: Port device team_slave_0 added [ 525.911357][T12606] bridge_slave_1: left allmulticast mode [ 525.917316][T12606] bridge_slave_1: left promiscuous mode [ 525.924065][T12606] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.932496][T12606] bridge_slave_0: left allmulticast mode [ 525.938442][T12606] bridge_slave_0: left promiscuous mode [ 525.944529][T12606] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.047679][T12606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.058142][T12606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.068137][T12606] bond0 (unregistering): Released all slaves [ 526.079267][T16955] team0: Port device team_slave_1 added [ 526.111697][T16955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.119136][T16955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.145390][T16955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.158184][T16955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.165457][T16955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.191730][T16955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.240163][T16955] hsr_slave_0: entered promiscuous mode [ 526.246542][T16955] hsr_slave_1: entered promiscuous mode [ 526.252518][T16955] debugfs: 'hsr0' already exists in 'hsr' [ 526.258699][T16955] Cannot create hsr debugfs directory [ 526.537639][T17349] /dev/rnullb0: Can't open blockdev [ 526.585172][T17349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.596172][T16955] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 526.628126][T17349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.637295][T12606] hsr_slave_0: left promiscuous mode [ 526.656088][T12606] hsr_slave_1: left promiscuous mode [ 526.665259][T12606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.681526][T12606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.715377][T12606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.732356][T12606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.762900][T12606] veth1_macvtap: left promiscuous mode [ 526.770373][T12606] veth0_macvtap: left promiscuous mode [ 526.778884][T12606] veth1_vlan: left promiscuous mode [ 526.789565][T12606] veth0_vlan: left promiscuous mode [ 526.864485][T17383] /dev/rnullb0: Can't open blockdev [ 526.880546][T17383] /dev/rnullb0: Can't open blockdev [ 526.888781][T17383] /dev/rnullb0: Can't open blockdev [ 526.895475][T17383] /dev/rnullb0: Can't open blockdev [ 526.901304][T17383] /dev/rnullb0: Can't open blockdev [ 526.909876][T17383] /dev/rnullb0: Can't open blockdev [ 526.921365][T17383] /dev/rnullb0: Can't open blockdev [ 526.931329][T17383] /dev/rnullb0: Can't open blockdev [ 526.938022][T17383] /dev/rnullb0: Can't open blockdev [ 526.946520][T17383] /dev/rnullb0: Can't open blockdev [ 526.952297][T17383] /dev/rnullb0: Can't open blockdev [ 526.958205][T17383] /dev/rnullb0: Can't open blockdev [ 526.964047][T17383] /dev/rnullb0: Can't open blockdev [ 526.969735][T17383] /dev/rnullb0: Can't open blockdev [ 526.979933][T17383] /dev/rnullb0: Can't open blockdev [ 526.985994][T17383] /dev/rnullb0: Can't open blockdev [ 526.991730][T17383] /dev/rnullb0: Can't open blockdev [ 526.997492][T17383] /dev/rnullb0: Can't open blockdev [ 527.004237][T17383] /dev/rnullb0: Can't open blockdev [ 527.009942][T17383] /dev/rnullb0: Can't open blockdev [ 527.015751][T17383] /dev/rnullb0: Can't open blockdev [ 527.021429][T17383] /dev/rnullb0: Can't open blockdev [ 527.027509][T17383] /dev/rnullb0: Can't open blockdev [ 527.034889][T17383] /dev/rnullb0: Can't open blockdev [ 527.040629][T17383] /dev/rnullb0: Can't open blockdev [ 527.046779][T17383] /dev/rnullb0: Can't open blockdev [ 527.052467][T17383] /dev/rnullb0: Can't open blockdev [ 527.057947][ T5186] Bluetooth: hci2: command tx timeout [ 527.058896][T12606] team0 (unregistering): Port device team_slave_1 removed [ 527.065994][T17383] /dev/rnullb0: Can't open blockdev [ 527.076702][T17383] /dev/rnullb0: Can't open blockdev [ 527.082466][T17383] /dev/rnullb0: Can't open blockdev [ 527.088578][T17383] /dev/rnullb0: Can't open blockdev [ 527.094977][T17383] /dev/rnullb0: Can't open blockdev [ 527.100675][T17383] /dev/rnullb0: Can't open blockdev [ 527.100747][T12606] team0 (unregistering): Port device team_slave_0 removed [ 527.106374][T17383] /dev/rnullb0: Can't open blockdev [ 527.119151][T17383] /dev/rnullb0: Can't open blockdev [ 527.125033][T17383] /dev/rnullb0: Can't open blockdev [ 527.130728][T17383] /dev/rnullb0: Can't open blockdev [ 527.136449][T17383] /dev/rnullb0: Can't open blockdev [ 527.142622][T17383] /dev/rnullb0: Can't open blockdev [ 527.148340][T17383] /dev/rnullb0: Can't open blockdev [ 527.154644][T17383] /dev/rnullb0: Can't open blockdev [ 527.160302][T17383] /dev/rnullb0: Can't open blockdev [ 527.166462][T17383] /dev/rnullb0: Can't open blockdev [ 527.172163][T17383] /dev/rnullb0: Can't open blockdev [ 527.178183][T17383] /dev/rnullb0: Can't open blockdev [ 527.183907][T17383] /dev/rnullb0: Can't open blockdev [ 527.189633][T17383] /dev/rnullb0: Can't open blockdev [ 527.199826][T17383] /dev/rnullb0: Can't open blockdev [ 527.205776][T17383] /dev/rnullb0: Can't open blockdev [ 527.212150][T17383] /dev/rnullb0: Can't open blockdev [ 527.218989][T17383] /dev/rnullb0: Can't open blockdev [ 527.239103][T17385] /dev/rnullb0: Can't open blockdev [ 527.241283][T17383] /dev/rnullb0: Can't open blockdev [ 527.250273][T17383] /dev/rnullb0: Can't open blockdev [ 527.256713][T17383] /dev/rnullb0: Can't open blockdev [ 527.262425][T17383] /dev/rnullb0: Can't open blockdev [ 527.270044][T17383] /dev/rnullb0: Can't open blockdev [ 527.277487][T17383] /dev/rnullb0: Can't open blockdev [ 527.286827][T17383] /dev/rnullb0: Can't open blockdev [ 527.292606][T17383] /dev/rnullb0: Can't open blockdev [ 527.298863][T16955] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 527.305850][T17387] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 527.311701][T17383] /dev/rnullb0: Can't open blockdev [ 527.327901][T17383] /dev/rnullb0: Can't open blockdev [ 527.331447][T16955] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 527.351169][T17383] /dev/rnullb0: Can't open blockdev [ 527.380775][T16955] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 527.381122][T17383] /dev/rnullb0: Can't open blockdev [ 527.405933][T17383] /dev/rnullb0: Can't open blockdev [ 527.419670][T17383] /dev/rnullb0: Can't open blockdev [ 527.571452][T16955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.588320][T17413] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3142'. [ 527.619465][T16955] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.653471][T17413] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3142'. [ 527.654782][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.669679][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.759210][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.766387][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.826261][T17435] program syz.4.3145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 527.866046][T17422] team_slave_0: entered allmulticast mode [ 527.901940][T17441] team_slave_0: entered promiscuous mode [ 528.092537][T17460] /dev/rnullb0: Can't open blockdev [ 528.134317][T17460] netlink: 'syz.0.3148': attribute type 10 has an invalid length. [ 528.164331][T17460] netlink: 'syz.0.3148': attribute type 10 has an invalid length. [ 528.192377][T17460] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 528.205522][T17463] syzkaller1: left promiscuous mode [ 528.210827][T17463] syzkaller1: left allmulticast mode [ 528.219333][T17460] siw: device registration error -23 [ 528.235737][T16955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.361822][T17474] syzkaller1: entered promiscuous mode [ 528.369547][T17474] syzkaller1: entered allmulticast mode [ 528.405186][T17478] /dev/rnullb0: Can't open blockdev [ 528.481584][T17475] block nbd4: shutting down sockets [ 528.668673][T16955] veth0_vlan: entered promiscuous mode [ 528.686203][T16955] veth1_vlan: entered promiscuous mode [ 528.765160][T16955] veth0_macvtap: entered promiscuous mode [ 528.804215][T16955] veth1_macvtap: entered promiscuous mode [ 528.841903][T16955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.896881][T16955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.930439][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.963827][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.988202][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.014974][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.129026][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.134568][ T5186] Bluetooth: hci2: command tx timeout [ 529.156046][T17551] /dev/rnullb0: Can't open blockdev [ 529.159505][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.287441][T12599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.316846][T12599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.588298][T17586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3163'. [ 529.628662][T17586] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3163'. [ 529.959910][T17602] sp0: Synchronizing with TNC [ 530.081652][ T9705] usb 5-1: USB disconnect, device number 45 [ 530.325787][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 530.333534][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 530.341173][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 530.351283][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 530.361408][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 530.396135][T17632] wlan1 speed is unknown, defaulting to 1000 [ 530.472232][T17648] /dev/rnullb0: Can't open blockdev [ 530.495561][T17641] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 530.677687][T14010] bond0: (slave syz_tun): Releasing backup interface [ 530.825327][T17705] FAULT_INJECTION: forcing a failure. [ 530.825327][T17705] name failslab, interval 1, probability 0, space 0, times 0 [ 530.844376][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.881302][T17705] CPU: 0 UID: 0 PID: 17705 Comm: syz.5.3174 Not tainted syzkaller #0 PREEMPT(full) [ 530.881327][T17705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 530.881337][T17705] Call Trace: [ 530.881344][T17705] [ 530.881351][T17705] dump_stack_lvl+0x189/0x250 [ 530.881378][T17705] ? __pfx____ratelimit+0x10/0x10 [ 530.881397][T17705] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.881416][T17705] ? __pfx__printk+0x10/0x10 [ 530.881447][T17705] ? __pfx___might_resched+0x10/0x10 [ 530.881466][T17705] ? lock_acquire+0x5f/0x360 [ 530.881483][T17705] should_fail_ex+0x414/0x560 [ 530.881506][T17705] should_failslab+0xa8/0x100 [ 530.881522][T17705] __kmalloc_noprof+0xcb/0x4b0 [ 530.881543][T17705] ? kfree+0x4d/0x440 [ 530.881561][T17705] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 530.881585][T17705] tomoyo_realpath_from_path+0xe3/0x5d0 [ 530.881605][T17705] ? tomoyo_domain+0xd9/0x130 [ 530.881625][T17705] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 530.881640][T17705] tomoyo_path_number_perm+0x1e8/0x5a0 [ 530.881656][T17705] ? lock_release+0x4b/0x3e0 [ 530.881669][T17705] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 530.881686][T17705] ? rcu_is_watching+0x15/0xb0 [ 530.881704][T17705] ? lock_release+0x4b/0x3e0 [ 530.881718][T17705] ? vfs_write+0x956/0xb30 [ 530.881735][T17705] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 530.881765][T17705] ? __fget_files+0x3a0/0x420 [ 530.881780][T17705] ? __fget_files+0x2a/0x420 [ 530.881797][T17705] security_file_ioctl+0xcb/0x2d0 [ 530.881814][T17705] __se_sys_ioctl+0x47/0x170 [ 530.881837][T17705] do_syscall_64+0xfa/0xfa0 [ 530.881855][T17705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.881868][T17705] ? clear_bhb_loop+0x60/0xb0 [ 530.881884][T17705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.881901][T17705] RIP: 0033:0x7f726e58ebe9 [ 530.881915][T17705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.881929][T17705] RSP: 002b:00007f726f393038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 530.881947][T17705] RAX: ffffffffffffffda RBX: 00007f726e7c6090 RCX: 00007f726e58ebe9 [ 530.881959][T17705] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 530.881969][T17705] RBP: 00007f726f393090 R08: 0000000000000000 R09: 0000000000000000 [ 530.881981][T17705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.881991][T17705] R13: 00007f726e7c6128 R14: 00007f726e7c6090 R15: 00007ffce2084e78 [ 530.882008][T17705] [ 530.882017][T17705] ERROR: Out of memory at tomoyo_realpath_from_path. [ 531.146253][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.209942][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.220769][ T5869] Bluetooth: hci2: command tx timeout [ 531.232790][T17632] chnl_net:caif_netlink_parms(): no params data found [ 531.310141][T17825] overlayfs: cannot append lower layer [ 531.320422][T17833] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 531.320647][T17834] overlayfs: cannot append lower layer [ 531.344426][T17833] /dev/rnullb0: Can't open blockdev [ 531.370419][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.395686][T17632] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.405232][T17632] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.412474][T17632] bridge_slave_0: entered allmulticast mode [ 531.420933][T17632] bridge_slave_0: entered promiscuous mode [ 531.431039][T17632] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.442371][T17856] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3179'. [ 531.451377][T17632] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.451608][T17632] bridge_slave_1: entered allmulticast mode [ 531.458677][ T5915] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 531.479120][T17856] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3179'. [ 531.483993][T17632] bridge_slave_1: entered promiscuous mode [ 531.566190][T17632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.577582][T17632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.624587][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.640413][ T5915] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 531.665937][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.677746][T17632] team0: Port device team_slave_0 added [ 531.687638][ T5915] usb 2-1: Product: syz [ 531.691839][ T5915] usb 2-1: Manufacturer: syz [ 531.701470][ T5915] usb 2-1: SerialNumber: syz [ 531.708115][ T5915] usb 2-1: config 0 descriptor?? [ 531.716777][ T5915] yurex 2-1:0.0: Could not find endpoints [ 531.730201][T17632] team0: Port device team_slave_1 added [ 531.785030][T17632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.799577][T17632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.825549][ C1] vkms_vblank_simulate: vblank timer overrun [ 531.836085][T17632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.870589][T17632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.883928][T17632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.909877][ C1] vkms_vblank_simulate: vblank timer overrun [ 531.928163][T17960] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 531.929897][T17632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.945524][T17960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.970671][T17960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.982492][ T12] bridge_slave_1: left allmulticast mode [ 531.990990][ T12] bridge_slave_1: left promiscuous mode [ 531.999114][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.005645][T17983] /dev/rnullb0: Can't open blockdev [ 532.022288][ T12] bridge_slave_0: left allmulticast mode [ 532.033406][ T12] bridge_slave_0: left promiscuous mode [ 532.040351][ T5915] usb 2-1: USB disconnect, device number 17 [ 532.040638][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.057930][ T9705] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 532.117890][ T12] team0: Port device geneve0 removed [ 532.165988][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.178091][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.188162][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 532.197202][ T12] bond0 (unregistering): Released all slaves [ 532.219067][T17632] hsr_slave_0: entered promiscuous mode [ 532.223717][ T9705] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 532.225469][T17632] hsr_slave_1: entered promiscuous mode [ 532.236751][ T9705] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 532.245998][T17632] debugfs: 'hsr0' already exists in 'hsr' [ 532.260725][T17632] Cannot create hsr debugfs directory [ 532.262443][ T9705] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 532.278512][ T9705] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 532.288239][ T9705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.309685][T17931] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 532.413477][ T5869] Bluetooth: hci0: command tx timeout [ 532.737049][T17632] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 532.779726][T17632] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 532.811764][T17632] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 532.852126][T17632] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 532.895179][T18134] FAULT_INJECTION: forcing a failure. [ 532.895179][T18134] name failslab, interval 1, probability 0, space 0, times 0 [ 532.928184][T18134] CPU: 1 UID: 0 PID: 18134 Comm: syz.1.3187 Not tainted syzkaller #0 PREEMPT(full) [ 532.928207][T18134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 532.928218][T18134] Call Trace: [ 532.928225][T18134] [ 532.928232][T18134] dump_stack_lvl+0x189/0x250 [ 532.928257][T18134] ? __pfx____ratelimit+0x10/0x10 [ 532.928282][T18134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.928300][T18134] ? __pfx__printk+0x10/0x10 [ 532.928321][T18134] ? __pfx___might_resched+0x10/0x10 [ 532.928338][T18134] ? lock_acquire+0x5f/0x360 [ 532.928353][T18134] should_fail_ex+0x414/0x560 [ 532.928377][T18134] should_failslab+0xa8/0x100 [ 532.928393][T18134] __kmalloc_noprof+0xcb/0x4b0 [ 532.928413][T18134] ? tomoyo_encode+0x28b/0x550 [ 532.928434][T18134] tomoyo_encode+0x28b/0x550 [ 532.928455][T18134] tomoyo_realpath_from_path+0x58d/0x5d0 [ 532.928476][T18134] ? tomoyo_domain+0xd9/0x130 [ 532.928497][T18134] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 532.928514][T18134] tomoyo_path_number_perm+0x1e8/0x5a0 [ 532.928531][T18134] ? lock_release+0x4b/0x3e0 [ 532.928546][T18134] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 532.928563][T18134] ? rcu_is_watching+0x15/0xb0 [ 532.928581][T18134] ? lock_release+0x4b/0x3e0 [ 532.928593][T18134] ? vfs_write+0x956/0xb30 [ 532.928610][T18134] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 532.928641][T18134] ? __fget_files+0x3a0/0x420 [ 532.928660][T18134] ? __fget_files+0x2a/0x420 [ 532.928679][T18134] security_file_ioctl+0xcb/0x2d0 [ 532.928695][T18134] __se_sys_ioctl+0x47/0x170 [ 532.928717][T18134] do_syscall_64+0xfa/0xfa0 [ 532.928737][T18134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.928754][T18134] ? clear_bhb_loop+0x60/0xb0 [ 532.928771][T18134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.928788][T18134] RIP: 0033:0x7f82f458ebe9 [ 532.928805][T18134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.928820][T18134] RSP: 002b:00007f82f27f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 532.928838][T18134] RAX: ffffffffffffffda RBX: 00007f82f47c6090 RCX: 00007f82f458ebe9 [ 532.928849][T18134] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 532.928858][T18134] RBP: 00007f82f27f6090 R08: 0000000000000000 R09: 0000000000000000 [ 532.928868][T18134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.928877][T18134] R13: 00007f82f47c6128 R14: 00007f82f47c6090 R15: 00007ffd286df298 [ 532.928894][T18134] [ 532.928909][T18134] ERROR: Out of memory at tomoyo_realpath_from_path. [ 533.005967][T17632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.193592][ T9705] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 533.202032][ T9705] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input35 [ 533.231327][T17632] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.259536][T12606] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.266681][T12606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.294036][ T9705] usb 6-1: USB disconnect, device number 2 [ 533.294083][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 533.297778][T12606] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.308193][T12606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.331273][ T5869] Bluetooth: hci2: command tx timeout [ 533.545906][T18174] tmpfs: Unknown parameter 'usrquomit' [ 533.689556][T17632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.858818][ T12] tipc: Disabling bearer [ 533.858924][ T12] tipc: Left network mode [ 533.878877][ T4602] smc: removing ib device syz0 [ 533.928675][T18191] binder: 18189:18191 ioctl c0306201 200000000e00 returned -14 [ 534.128529][T17632] veth0_vlan: entered promiscuous mode [ 534.147068][T17632] veth1_vlan: entered promiscuous mode [ 534.208079][T17632] veth0_macvtap: entered promiscuous mode [ 534.227077][T17632] veth1_macvtap: entered promiscuous mode [ 534.252572][T17632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.313178][ T5915] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 534.313647][T17632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.349613][T12608] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.371157][T12608] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.400328][T12608] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.448156][T12608] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.476737][ T5915] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 534.492338][ T5915] usb 6-1: string descriptor 0 read error: -22 [ 534.498801][ T5869] Bluetooth: hci0: command tx timeout [ 534.511344][ T5915] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 534.536664][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.695760][T18224] FAULT_INJECTION: forcing a failure. [ 534.695760][T18224] name failslab, interval 1, probability 0, space 0, times 0 [ 534.714198][T12606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.727870][T12606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.743267][T18224] CPU: 1 UID: 0 PID: 18224 Comm: syz.0.3196 Not tainted syzkaller #0 PREEMPT(full) [ 534.743293][T18224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 534.743304][T18224] Call Trace: [ 534.743312][T18224] [ 534.743319][T18224] dump_stack_lvl+0x189/0x250 [ 534.743346][T18224] ? __pfx____ratelimit+0x10/0x10 [ 534.743367][T18224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 534.743390][T18224] ? __pfx__printk+0x10/0x10 [ 534.743412][T18224] ? __pfx___might_resched+0x10/0x10 [ 534.743430][T18224] ? lock_acquire+0x5f/0x360 [ 534.743448][T18224] should_fail_ex+0x414/0x560 [ 534.743470][T18224] should_failslab+0xa8/0x100 [ 534.743488][T18224] __kmalloc_cache_noprof+0x70/0x3a0 [ 534.743512][T18224] ? vhost_task_create+0xf6/0x290 [ 534.743532][T18224] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 534.743556][T18224] vhost_task_create+0xf6/0x290 [ 534.743574][T18224] ? arch_stack_walk+0xfc/0x150 [ 534.743594][T18224] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 534.743617][T18224] ? __pfx_vhost_task_create+0x10/0x10 [ 534.743639][T18224] ? __pfx_vhost_task_fn+0x10/0x10 [ 534.743663][T18224] ? kasan_save_track+0x4f/0x80 [ 534.743686][T18224] kvm_mmu_post_init_vm+0x14c/0x300 [ 534.743704][T18224] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 534.743724][T18224] ? __mutex_trylock_common+0x153/0x260 [ 534.743745][T18224] ? __pfx___mutex_trylock_common+0x10/0x10 [ 534.743764][T18224] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 534.743783][T18224] ? rcu_is_watching+0x15/0xb0 [ 534.743801][T18224] ? trace_contention_end+0x39/0x120 [ 534.743820][T18224] ? __mutex_lock+0x335/0x1350 [ 534.743845][T18224] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 534.743866][T18224] ? rcu_is_watching+0x15/0xb0 [ 534.743882][T18224] ? lock_release+0x4b/0x3e0 [ 534.743898][T18224] ? get_task_pid+0x22/0x310 [ 534.743920][T18224] kvm_vcpu_ioctl+0x95c/0xe90 [ 534.743939][T18224] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 534.743955][T18224] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 534.743985][T18224] ? __fget_files+0x3a0/0x420 [ 534.744004][T18224] ? __fget_files+0x2a/0x420 [ 534.744023][T18224] ? bpf_lsm_file_ioctl+0x9/0x20 [ 534.744044][T18224] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 534.744060][T18224] __se_sys_ioctl+0xf9/0x170 [ 534.744082][T18224] do_syscall_64+0xfa/0xfa0 [ 534.744103][T18224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.744120][T18224] ? clear_bhb_loop+0x60/0xb0 [ 534.744138][T18224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.744160][T18224] RIP: 0033:0x7f29ff78ebe9 [ 534.744176][T18224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.744191][T18224] RSP: 002b:00007f2a005c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 534.744211][T18224] RAX: ffffffffffffffda RBX: 00007f29ff9c6090 RCX: 00007f29ff78ebe9 [ 534.744225][T18224] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 534.744236][T18224] RBP: 00007f2a005c6090 R08: 0000000000000000 R09: 0000000000000000 [ 534.744248][T18224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.744259][T18224] R13: 00007f29ff9c6128 R14: 00007f29ff9c6090 R15: 00007ffe77160f68 [ 534.744278][T18224] [ 534.929810][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.932402][ C1] vkms_vblank_simulate: vblank timer overrun [ 534.956294][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.213682][ T30] audit: type=1326 audit(2000000197.389:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18200 comm="syz.5.3194" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f726e58ebe9 code=0x0 [ 535.379731][ T12] hsr_slave_0: left promiscuous mode [ 535.390558][ T12] hsr_slave_1: left promiscuous mode [ 535.397480][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.405151][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.413529][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.421084][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.437757][ T12] veth1_macvtap: left promiscuous mode [ 535.445454][T18250] /dev/rnullb0: Can't open blockdev [ 535.452275][ T12] veth0_macvtap: left promiscuous mode [ 535.458491][ T12] veth1_vlan: left promiscuous mode [ 535.473647][ T12] veth0_vlan: left promiscuous mode [ 535.699656][ T12] team0 (unregistering): Port device team_slave_1 removed [ 535.716571][ T12] team0 (unregistering): Port device team_slave_0 removed [ 535.825746][T18249] wlan1 speed is unknown, defaulting to 1000 [ 535.832308][T18249] wlan1 speed is unknown, defaulting to 1000 [ 535.858259][T18249] wlan1 speed is unknown, defaulting to 1000 [ 536.042022][T18249] infiniband syz0: set active [ 536.047205][ T952] wlan1 speed is unknown, defaulting to 1000 [ 536.064485][T18249] infiniband syz0: added wlan1 [ 536.074176][T18266] /dev/rnullb0: Can't open blockdev [ 536.098562][T18249] RDS/IB: syz0: added [ 536.102613][T18249] smc: adding ib device syz0 with port count 1 [ 536.129746][T18249] smc: ib device syz0 port 1 has pnetid [ 536.143694][T18249] wlan1 speed is unknown, defaulting to 1000 [ 536.151136][ T9] wlan1 speed is unknown, defaulting to 1000 [ 536.289001][T18249] wlan1 speed is unknown, defaulting to 1000 [ 536.344779][T18281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.384941][T18281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.441084][T18249] wlan1 speed is unknown, defaulting to 1000 [ 536.525814][T18249] wlan1 speed is unknown, defaulting to 1000 [ 536.574354][ T5869] Bluetooth: hci0: command tx timeout [ 536.587544][T18299] /dev/rnullb0: Can't open blockdev [ 536.680577][T18249] wlan1 speed is unknown, defaulting to 1000 [ 536.792034][T18249] wlan1 speed is unknown, defaulting to 1000 [ 537.030687][T18321] sctp: [Deprecated]: syz.0.3210 (pid 18321) Use of int in maxseg socket option. [ 537.030687][T18321] Use struct sctp_assoc_value instead [ 537.047796][T18322] /dev/rnullb0: Can't open blockdev [ 537.091701][T18326] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3212'. [ 537.118427][ T952] usb 6-1: USB disconnect, device number 3 [ 537.171169][T18344] /dev/rnullb0: Can't open blockdev [ 537.344117][T18353] FAULT_INJECTION: forcing a failure. [ 537.344117][T18353] name failslab, interval 1, probability 0, space 0, times 0 [ 537.378256][T18353] CPU: 0 UID: 0 PID: 18353 Comm: syz.1.3216 Not tainted syzkaller #0 PREEMPT(full) [ 537.378281][T18353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 537.378293][T18353] Call Trace: [ 537.378300][T18353] [ 537.378308][T18353] dump_stack_lvl+0x189/0x250 [ 537.378336][T18353] ? __pfx____ratelimit+0x10/0x10 [ 537.378356][T18353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.378378][T18353] ? __pfx__printk+0x10/0x10 [ 537.378400][T18353] ? fs_reclaim_acquire+0x7d/0x100 [ 537.378417][T18353] ? rcu_is_watching+0x15/0xb0 [ 537.378435][T18353] ? __pfx___might_resched+0x10/0x10 [ 537.378453][T18353] ? lock_acquire+0x5f/0x360 [ 537.378470][T18353] should_fail_ex+0x414/0x560 [ 537.378493][T18353] should_failslab+0xa8/0x100 [ 537.378510][T18353] __kmalloc_cache_node_noprof+0x73/0x3a0 [ 537.378533][T18353] ? __get_vm_area_node+0x13f/0x300 [ 537.378555][T18353] ? rcu_is_watching+0x15/0xb0 [ 537.378574][T18353] __get_vm_area_node+0x13f/0x300 [ 537.378597][T18353] __vmalloc_node_range_noprof+0x301/0x12f0 [ 537.378614][T18353] ? copy_process+0x54b/0x3c00 [ 537.378631][T18353] ? rcu_is_watching+0x15/0xb0 [ 537.378650][T18353] ? percpu_ref_get_many+0x19/0x140 [ 537.378669][T18353] ? percpu_ref_get_many+0x19/0x140 [ 537.378689][T18353] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 537.378706][T18353] ? memcpy_and_pad+0x48/0x80 [ 537.378729][T18353] __vmalloc_node_noprof+0xc2/0x110 [ 537.378744][T18353] ? copy_process+0x54b/0x3c00 [ 537.378762][T18353] ? copy_process+0x54b/0x3c00 [ 537.378780][T18353] dup_task_struct+0x3e7/0x860 [ 537.378800][T18353] copy_process+0x54b/0x3c00 [ 537.378829][T18353] ? __pfx_copy_process+0x10/0x10 [ 537.378874][T18353] ? __raw_spin_lock_init+0x45/0x100 [ 537.378896][T18353] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 537.378923][T18353] vhost_task_create+0x1c4/0x290 [ 537.378944][T18353] ? arch_stack_walk+0xfc/0x150 [ 537.378964][T18353] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 537.378986][T18353] ? __pfx_vhost_task_create+0x10/0x10 [ 537.379009][T18353] ? __pfx_vhost_task_fn+0x10/0x10 [ 537.379033][T18353] ? kasan_save_track+0x4f/0x80 [ 537.379055][T18353] kvm_mmu_post_init_vm+0x14c/0x300 [ 537.379072][T18353] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 537.379093][T18353] ? __mutex_trylock_common+0x153/0x260 [ 537.379114][T18353] ? __pfx___mutex_trylock_common+0x10/0x10 [ 537.379133][T18353] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 537.379151][T18353] ? rcu_is_watching+0x15/0xb0 [ 537.379168][T18353] ? trace_contention_end+0x39/0x120 [ 537.379187][T18353] ? __mutex_lock+0x335/0x1350 [ 537.379213][T18353] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 537.379233][T18353] ? rcu_is_watching+0x15/0xb0 [ 537.379250][T18353] ? lock_release+0x4b/0x3e0 [ 537.379265][T18353] ? get_task_pid+0x22/0x310 [ 537.379287][T18353] kvm_vcpu_ioctl+0x95c/0xe90 [ 537.379306][T18353] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 537.379322][T18353] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 537.379352][T18353] ? __fget_files+0x3a0/0x420 [ 537.379370][T18353] ? __fget_files+0x2a/0x420 [ 537.379390][T18353] ? bpf_lsm_file_ioctl+0x9/0x20 [ 537.379410][T18353] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 537.379426][T18353] __se_sys_ioctl+0xf9/0x170 [ 537.379448][T18353] do_syscall_64+0xfa/0xfa0 [ 537.379469][T18353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.379486][T18353] ? clear_bhb_loop+0x60/0xb0 [ 537.379504][T18353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.379520][T18353] RIP: 0033:0x7f82f458ebe9 [ 537.379535][T18353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.379549][T18353] RSP: 002b:00007f82f27f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 537.379568][T18353] RAX: ffffffffffffffda RBX: 00007f82f47c6090 RCX: 00007f82f458ebe9 [ 537.379581][T18353] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 537.379592][T18353] RBP: 00007f82f27f6090 R08: 0000000000000000 R09: 0000000000000000 [ 537.379603][T18353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.379614][T18353] R13: 00007f82f47c6128 R14: 00007f82f47c6090 R15: 00007ffd286df298 [ 537.379634][T18353] [ 537.379643][T18353] syz.1.3216: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 537.700563][T18367] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 537.710988][T18353] ,cpuset= [ 537.780243][T18367] /dev/rnullb0: Can't open blockdev [ 537.803644][T18353] /,mems_allowed=0-1 [ 537.847210][T18353] CPU: 0 UID: 0 PID: 18353 Comm: syz.1.3216 Not tainted syzkaller #0 PREEMPT(full) [ 537.847234][T18353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 537.847245][T18353] Call Trace: [ 537.847253][T18353] [ 537.847261][T18353] dump_stack_lvl+0x189/0x250 [ 537.847288][T18353] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 537.847310][T18353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.847329][T18353] ? __pfx__printk+0x10/0x10 [ 537.847347][T18353] ? lock_release+0x4b/0x3e0 [ 537.847361][T18353] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 537.847382][T18353] warn_alloc+0x214/0x310 [ 537.847399][T18353] ? __pfx_warn_alloc+0x10/0x10 [ 537.847415][T18353] ? __get_vm_area_node+0x13f/0x300 [ 537.847436][T18353] ? __get_vm_area_node+0x2b5/0x300 [ 537.847457][T18353] __vmalloc_node_range_noprof+0x326/0x12f0 [ 537.847474][T18353] ? rcu_is_watching+0x15/0xb0 [ 537.847491][T18353] ? percpu_ref_get_many+0x19/0x140 [ 537.847506][T18353] ? percpu_ref_get_many+0x19/0x140 [ 537.847527][T18353] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 537.847544][T18353] ? memcpy_and_pad+0x48/0x80 [ 537.847567][T18353] __vmalloc_node_noprof+0xc2/0x110 [ 537.847583][T18353] ? copy_process+0x54b/0x3c00 [ 537.847601][T18353] ? copy_process+0x54b/0x3c00 [ 537.847620][T18353] dup_task_struct+0x3e7/0x860 [ 537.847640][T18353] copy_process+0x54b/0x3c00 [ 537.847670][T18353] ? __pfx_copy_process+0x10/0x10 [ 537.847689][T18353] ? __raw_spin_lock_init+0x45/0x100 [ 537.847712][T18353] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 537.847734][T18353] vhost_task_create+0x1c4/0x290 [ 537.847752][T18353] ? arch_stack_walk+0xfc/0x150 [ 537.847772][T18353] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 537.847796][T18353] ? __pfx_vhost_task_create+0x10/0x10 [ 537.847824][T18353] ? __pfx_vhost_task_fn+0x10/0x10 [ 537.847849][T18353] ? kasan_save_track+0x4f/0x80 [ 537.847871][T18353] kvm_mmu_post_init_vm+0x14c/0x300 [ 537.847888][T18353] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 537.847908][T18353] ? __mutex_trylock_common+0x153/0x260 [ 537.847928][T18353] ? __pfx___mutex_trylock_common+0x10/0x10 [ 537.847947][T18353] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 537.847965][T18353] ? rcu_is_watching+0x15/0xb0 [ 537.847983][T18353] ? trace_contention_end+0x39/0x120 [ 537.848001][T18353] ? __mutex_lock+0x335/0x1350 [ 537.848027][T18353] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 537.848047][T18353] ? rcu_is_watching+0x15/0xb0 [ 537.848063][T18353] ? lock_release+0x4b/0x3e0 [ 537.848078][T18353] ? get_task_pid+0x22/0x310 [ 537.848101][T18353] kvm_vcpu_ioctl+0x95c/0xe90 [ 537.848122][T18353] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 537.848138][T18353] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 537.848168][T18353] ? __fget_files+0x3a0/0x420 [ 537.848187][T18353] ? __fget_files+0x2a/0x420 [ 537.848206][T18353] ? bpf_lsm_file_ioctl+0x9/0x20 [ 537.848228][T18353] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 537.848247][T18353] __se_sys_ioctl+0xf9/0x170 [ 537.848270][T18353] do_syscall_64+0xfa/0xfa0 [ 537.848291][T18353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.848308][T18353] ? clear_bhb_loop+0x60/0xb0 [ 537.848326][T18353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.848343][T18353] RIP: 0033:0x7f82f458ebe9 [ 537.848358][T18353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.848373][T18353] RSP: 002b:00007f82f27f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 537.848392][T18353] RAX: ffffffffffffffda RBX: 00007f82f47c6090 RCX: 00007f82f458ebe9 [ 537.848405][T18353] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 537.848416][T18353] RBP: 00007f82f27f6090 R08: 0000000000000000 R09: 0000000000000000 [ 537.848428][T18353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.848438][T18353] R13: 00007f82f47c6128 R14: 00007f82f47c6090 R15: 00007ffd286df298 [ 537.848458][T18353] [ 538.236065][T18353] Mem-Info: [ 538.239212][T18353] active_anon:5703 inactive_anon:1 isolated_anon:0 [ 538.239212][T18353] active_file:32956 inactive_file:8371 isolated_file:0 [ 538.239212][T18353] unevictable:792 dirty:54 writeback:0 [ 538.239212][T18353] slab_reclaimable:12923 slab_unreclaimable:101644 [ 538.239212][T18353] mapped:24710 shmem:1358 pagetables:1618 [ 538.239212][T18353] sec_pagetables:0 bounce:0 [ 538.239212][T18353] kernel_misc_reclaimable:0 [ 538.239212][T18353] free:1313916 free_pcp:29546 free_cma:0 [ 538.284700][T18353] Node 0 active_anon:22712kB inactive_anon:4kB active_file:129040kB inactive_file:33352kB unevictable:1632kB isolated(anon):0kB isolated(file):0kB mapped:98840kB dirty:212kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12372kB pagetables:6324kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 538.318386][T18353] Node 1 active_anon:0kB inactive_anon:0kB active_file:2784kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 538.348551][ T952] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 538.356673][T18353] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 538.386097][T18353] lowmem_reserve[]: 0 2495 2496 2496 2496 [ 538.391873][T18353] Node 0 DMA32 free:1362864kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22468kB inactive_anon:4kB active_file:129028kB inactive_file:32560kB unevictable:1632kB writepending:208kB present:3129332kB managed:2555588kB mlocked:96kB bounce:0kB free_pcp:84196kB local_pcp:36336kB free_cma:0kB [ 538.425566][T18353] lowmem_reserve[]: 0 0 1 1 1 [ 538.430296][T18353] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:244kB inactive_anon:0kB active_file:12kB inactive_file:792kB unevictable:0kB writepending:4kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:20kB free_cma:0kB [ 538.459761][T18353] lowmem_reserve[]: 0 0 0 0 0 [ 538.464679][T18353] Node 1 Normal free:3877440kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:2784kB inactive_file:132kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:34484kB local_pcp:22836kB free_cma:0kB [ 538.496493][T18353] lowmem_reserve[]: 0 0 0 0 0 [ 538.501241][T18353] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 538.514303][T18353] Node 0 DMA32: 124*4kB (ME) 316*8kB (UME) 2732*16kB (UME) 2728*32kB (UME) 1966*64kB (UME) 702*128kB (UME) 236*256kB (UME) 133*512kB (UME) 42*1024kB (UME) 15*2048kB (UME) 198*4096kB (UM) = 1362960kB [ 538.533900][T18353] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 538.545457][T18353] Node 1 Normal: 12*4kB (UME) 34*8kB (UE) 18*16kB (UME) 59*32kB (UME) 28*64kB (UME) 5*128kB (UE) 5*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UME) 943*4096kB (UM) = 3877440kB [ 538.563486][T18353] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 538.573293][T18353] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 538.582610][T18353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 538.592240][T18353] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 538.601687][T18353] 42701 total pagecache pages [ 538.606772][T18353] 20 pages in swap cache [ 538.611027][T18353] Free swap = 123940kB [ 538.615239][T18353] Total swap = 124996kB [ 538.619396][T18353] 2097051 pages RAM [ 538.624580][T18353] 0 pages HighMem/MovableOnly [ 538.629258][T18353] 426256 pages reserved [ 538.633854][T18353] 0 pages cma reserved [ 538.653029][ T5869] Bluetooth: hci0: command tx timeout [ 538.823671][T18407] netlink: 4416 bytes leftover after parsing attributes in process `syz.5.3228'. [ 539.093304][ T43] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 539.263264][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 539.269962][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.287858][T18436] /dev/rnullb0: Can't open blockdev [ 539.291361][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.310904][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 539.338979][ T43] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 539.348380][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.364865][ T43] usb 2-1: config 0 descriptor?? [ 539.401662][T18443] comedi comedi3: rti802: I/O port conflict (0x4f27,4) [ 539.411475][T18443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3236'. [ 539.611051][T18460] /dev/rnullb0: Can't open blockdev [ 539.784338][ T43] hid_parser_main: 24 callbacks suppressed [ 539.784360][ T43] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 539.824615][ T43] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 539.852888][ T43] HID 045e:07da: Invalid code 65791 type 1 [ 539.881780][ T43] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.001C/input/input36 [ 539.924917][ T43] microsoft 0003:045E:07DA.001C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 540.200362][ T43] usb 2-1: USB disconnect, device number 18 [ 540.431228][T18515] /dev/rnullb0: Can't open blockdev [ 540.593438][ T1211] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 540.743031][ T1211] usb 6-1: device descriptor read/64, error -71 [ 540.983060][ T1211] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 541.113067][ T1211] usb 6-1: device descriptor read/64, error -71 [ 541.224691][ T1211] usb usb6-port1: attempt power cycle [ 541.563405][ T1211] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 541.593662][ T1211] usb 6-1: device descriptor read/8, error -71 [ 541.843198][ T1211] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 541.892862][ T1211] usb 6-1: device descriptor read/8, error -71 [ 542.008332][T18602] /dev/rnullb0: Can't open blockdev [ 542.014056][ T1211] usb usb6-port1: unable to enumerate USB device [ 542.523381][ T5864] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 542.703095][ T5864] usb 5-1: Using ep0 maxpacket: 32 [ 542.711293][ T5864] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 542.722317][ T5864] usb 5-1: config 0 has no interface number 0 [ 542.749908][ T5864] usb 5-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=1e.94 [ 542.759369][T18641] /dev/rnullb0: Can't open blockdev [ 542.769564][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.780139][ T5864] usb 5-1: Product: syz [ 542.786516][ T5864] usb 5-1: Manufacturer: syz [ 542.791216][ T5864] usb 5-1: SerialNumber: syz [ 542.807005][ T5864] usb 5-1: config 0 descriptor?? [ 542.826381][ T5864] as10x_usb: device has been detected [ 542.838989][ T5864] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 542.878907][ T5864] usb 5-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 543.033303][T18621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.045132][ T5864] as10x_usb: error during firmware upload part1 [ 543.064433][T18621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.072109][ T5864] Registered device PCTV Systems picoStick (74e) [ 543.107022][ T5864] usb 5-1: USB disconnect, device number 47 [ 543.138533][ T5864] Unregistered device PCTV Systems picoStick (74e) [ 543.143322][ T5864] as10x_usb: device has been disconnected [ 543.263321][ T9705] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 543.403879][ T9705] usb 2-1: device descriptor read/64, error -71 [ 543.452300][T18697] /dev/rnullb0: Can't open blockdev [ 543.523032][ T5864] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 543.653004][ T9705] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 543.682405][T18703] cgroup2: Unknown parameter 'pids_ðca·ú4gYeíþl+Éèe$µV‰Iå#8iA×ÒRÀ%BMý§À ÂAÃ' [ 543.694849][ T5864] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 543.709401][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.723831][ T5864] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 543.733416][ T5915] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 543.741340][ T5864] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 543.750046][ T5864] usb 5-1: Manufacturer: syz [ 543.764027][ T5864] usb 5-1: config 0 descriptor?? [ 543.794488][ T9705] usb 2-1: device descriptor read/64, error -71 [ 543.833961][ T5864] rc_core: IR keymap rc-hauppauge not found [ 543.839902][ T5864] Registered IR keymap rc-empty [ 543.848017][ T5864] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 543.867425][ T5864] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input37 [ 543.888589][ T5915] usb 6-1: config 1 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 64, changing to 10 [ 543.900387][ T5915] usb 6-1: config 1 interface 0 has no altsetting 0 [ 543.909227][ T5915] usb 6-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.40 [ 543.913301][ T9705] usb usb2-port1: attempt power cycle [ 543.918858][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.932504][ T5915] usb 6-1: Product: syz [ 543.937170][ T5915] usb 6-1: Manufacturer: ꑶ곮ꉇ [ 543.942578][ T5915] usb 6-1: SerialNumber: syz [ 544.161593][ T5915] usbhid 6-1:1.0: can't add hid device: -71 [ 544.167738][ T5915] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 544.178221][ T5915] usb 6-1: USB disconnect, device number 8 [ 544.275437][ T9705] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 544.303410][ T9705] usb 2-1: device descriptor read/8, error -71 [ 544.380374][T18683] /dev/rnullb0: Can't open blockdev [ 544.388050][ T5915] usb 5-1: USB disconnect, device number 48 [ 544.553177][ T9705] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 544.574268][ T9705] usb 2-1: device descriptor read/8, error -71 [ 544.605953][T18750] /dev/rnullb0: Can't open blockdev [ 544.612669][T18750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.622202][T18750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.693279][ T9705] usb usb2-port1: unable to enumerate USB device [ 544.889940][T18765] /dev/rnullb0: Can't open blockdev [ 545.163037][ T5864] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 545.333007][ T5864] usb 6-1: Using ep0 maxpacket: 32 [ 545.344597][ T5864] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 545.353710][T18785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.357756][T18786] /dev/sg0: Can't lookup blockdev [ 545.362290][T18785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.375362][ T5864] usb 6-1: config 0 has no interface number 0 [ 545.381467][ T5864] usb 6-1: config 0 interface 184 has no altsetting 0 [ 545.390068][ T5864] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 545.399184][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.407341][ T5864] usb 6-1: Product: syz [ 545.411588][ T5864] usb 6-1: Manufacturer: syz [ 545.416254][ T5864] usb 6-1: SerialNumber: syz [ 545.428583][ T5864] usb 6-1: config 0 descriptor?? [ 545.438156][ T5864] smsc75xx v1.0.0 [ 546.052113][T18801] tmpfs: Cannot retroactively limit inodes [ 546.180383][T18795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.196178][T18795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.370765][ T5864] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 546.392207][ T5864] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 546.405449][ T5864] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 546.417176][ T5864] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 546.427885][ T5864] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 546.433211][ T9705] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 546.438866][ T5864] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 546.455842][ T5864] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 546.472601][ T5864] usb 6-1: USB disconnect, device number 9 [ 546.603070][ T9705] usb 2-1: device descriptor read/64, error -71 [ 546.853242][ T9705] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 546.993661][T18826] comedi comedi3: dt2817: I/O port conflict (0x4,5) [ 547.012849][ T9705] usb 2-1: device descriptor read/64, error -71 [ 547.061223][T18832] /dev/rnullb0: Can't open blockdev [ 547.133625][ T9705] usb usb2-port1: attempt power cycle [ 547.294211][ T1211] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 547.456814][ T1211] usb 6-1: config 0 has an invalid interface number: 46 but max is 0 [ 547.465315][ T1211] usb 6-1: config 0 has no interface number 0 [ 547.473319][ T9705] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 547.483299][ T1211] usb 6-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 547.499486][ T1211] usb 6-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 547.511792][ T1211] usb 6-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 547.522207][ T1211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.530678][ T1211] usb 6-1: Product: syz [ 547.535157][ T9705] usb 2-1: device descriptor read/8, error -71 [ 547.541624][ T1211] usb 6-1: Manufacturer: syz [ 547.546635][ T1211] usb 6-1: SerialNumber: syz [ 547.553473][ T1211] usb 6-1: config 0 descriptor?? [ 547.560870][ T1211] ums-karma 6-1:0.46: USB Mass Storage device detected [ 547.605611][ T1211] ums-karma 6-1:0.46: probe with driver ums-karma failed with error -5 [ 547.765018][T18830] /dev/rnullb0: Can't open blockdev [ 547.771268][ T1211] usb 6-1: USB disconnect, device number 10 [ 547.780557][ T9705] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 547.814905][ T9705] usb 2-1: device descriptor read/8, error -71 [ 547.923261][ T9705] usb usb2-port1: unable to enumerate USB device [ 548.459428][T18877] wlan1 speed is unknown, defaulting to 1000 [ 549.101849][ T5915] IPVS: starting estimator thread 0... [ 549.203040][T18932] IPVS: using max 47 ests per chain, 112800 per kthread [ 549.676403][T18961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.686055][T18961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.731245][T18973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3312'. [ 549.829544][T18983] binder: 18982:18983 unknown command 0 [ 549.839479][T18983] binder: 18982:18983 ioctl c0306201 200000000080 returned -22 [ 549.860069][T18983] binder: 18982:18983 ioctl 4008ae89 2000000002c0 returned -22 [ 549.873120][ T1211] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 549.973054][ T30] audit: type=1800 audit(2000000212.159:51): pid=18981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3314" name="rnullb0" dev="tmpfs" ino=191 res=0 errno=0 [ 550.034443][ T1211] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 550.049588][ T1211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.065282][ T1211] usb 2-1: config 0 descriptor?? [ 550.123355][T18995] MTD: Couldn't look up '/dev/rnullb0': -15 [ 550.131324][T18995] MTD: Couldn't look up '/dev/rnullb0': -15 [ 550.141411][T18995] MTD: Couldn't look up '/dev/rnullb0': -15 [ 550.161157][T18995] MTD: Couldn't look up '/dev/rnullb0': -15 [ 550.169675][T18909] syz.4.3296 (18909) used greatest stack depth: 17168 bytes left [ 550.178818][T18995] MTD: Couldn't look up '/dev/rnullb0': -15 [ 550.185406][T18995] MTD: Couldn't look up '/dev/rnullb0': -15 [ 550.192158][T18995] MTD: Couldn't look up '/dev/rnullb0': -15 [ 550.199573][T18995] MTD: Couldn't look up '/dev/rnullb0': -15 [ 550.274214][T19009] overlayfs: failed to clone lowerpath [ 550.413253][ T5864] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 550.575647][ T5864] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 550.590059][ T5864] usb 6-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 550.705602][ T5864] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 550.723110][ T5864] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 550.742990][ T5864] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 550.756275][ T5864] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 550.773038][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 550.781085][ T5864] usb 6-1: Product: syz [ 550.785763][ T5864] usb 6-1: Manufacturer: syz [ 550.800715][ T5864] cdc_wdm 6-1:1.0: skipping garbage [ 550.813723][ T5864] cdc_wdm 6-1:1.0: skipping garbage [ 550.825393][ T5864] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 550.831330][ T5864] cdc_wdm 6-1:1.0: Unknown control protocol [ 550.902226][T19024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.912115][T19024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.007193][ T5915] usb 6-1: USB disconnect, device number 11 [ 551.181442][ T1211] ath6kl: Failed to submit usb control message: -110 [ 551.193004][ T1211] ath6kl: unable to send the bmi data to the device: -110 [ 551.200248][ T1211] ath6kl: Unable to send get target info: -110 [ 551.219223][ T1211] ath6kl: Failed to init ath6kl core: -110 [ 551.233689][ T1211] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 551.401969][T19042] netlink: 'syz.4.3325': attribute type 83 has an invalid length. [ 551.495318][T19046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3326'. [ 551.506480][T19047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3326'. [ 551.518578][T19052] MTD: Couldn't look up '/dev/rnullb0': -15 [ 551.709052][ T5864] usb 2-1: USB disconnect, device number 27 [ 551.723061][ T9705] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 551.887300][ T9705] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 551.900378][ T9705] usb 6-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 551.920946][ T9705] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 551.952039][ T9705] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 551.982681][ T9705] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 552.006115][ T9705] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 552.015764][ T9705] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 552.025553][ T9705] usb 6-1: Product: syz [ 552.031074][ T9705] usb 6-1: Manufacturer: syz [ 552.043338][ T9705] cdc_wdm 6-1:1.0: skipping garbage [ 552.061515][T19096] /dev/rnullb0: Can't open blockdev [ 552.064473][ T9705] cdc_wdm 6-1:1.0: skipping garbage [ 552.075906][ T9705] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 552.081833][ T9705] cdc_wdm 6-1:1.0: Unknown control protocol [ 552.200660][T19107] /dev/rnullb0: Can't open blockdev [ 552.603877][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.609599][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 552.615374][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.621048][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 552.626922][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.632597][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 552.639069][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.644741][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 552.650789][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.656647][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.662410][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 552.668846][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.674521][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 552.680279][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.686138][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.691952][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.697793][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.703642][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.709463][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.715289][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.721107][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.726930][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.732599][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 552.739476][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.745142][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 552.751377][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.757051][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 552.762866][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.768534][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 552.774311][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.780131][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.785963][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.791784][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.797627][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.803477][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.809301][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.815327][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.820978][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 552.826683][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.832503][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.838340][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.844643][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.850564][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.856394][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.862214][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.868034][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.873865][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.879686][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.885503][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.891312][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.897167][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.903008][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.908826][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 552.914516][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 552.925022][ C1] cdc_wdm 6-1:1.0: Unexpected error -71 [ 552.926755][ T9705] usb 6-1: USB disconnect, device number 12 [ 552.983275][ T5864] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 553.144427][ T5864] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 553.153652][ T5864] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.175161][ T5864] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 553.196205][ T5864] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.220892][ T5864] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 553.235327][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 553.254155][ T5864] usb 2-1: Product: syz [ 553.263018][ T5864] usb 2-1: Manufacturer: syz [ 553.278599][ T5864] cdc_wdm 2-1:1.0: skipping garbage [ 553.291311][ T5864] cdc_wdm 2-1:1.0: skipping garbage [ 553.301995][ T5864] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 553.481152][T19126] /dev/rnullb0: Can't open blockdev [ 553.488967][T19126] fusectl: Unknown parameter 'usrquota_inode_hardlimit' [ 553.616286][ T10] usb 2-1: USB disconnect, device number 28 [ 553.644675][T19152] netlink: 'syz.5.3343': attribute type 12 has an invalid length. [ 553.659988][T19152] netlink: 172 bytes leftover after parsing attributes in process `syz.5.3343'. [ 553.757456][T19156] netlink: 'syz.5.3344': attribute type 10 has an invalid length. [ 553.791021][T19156] batman_adv: batadv0: Adding interface: team0 [ 553.820606][T19156] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.870988][T19156] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 554.047401][ T30] audit: type=1326 audit(2000000216.239:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19165 comm="syz.5.3345" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f726e58ebe9 code=0x0 [ 554.104235][T19168] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3345'. [ 554.451304][T19186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.462705][T19186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.663012][ T9705] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 554.835260][ T9705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 554.853660][ T9705] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 554.877211][ T9705] usb 2-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 554.891972][ T9705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.927851][ T9705] usb 2-1: config 0 descriptor?? [ 554.931159][T19198] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 554.934126][T19178] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 554.940059][T19198] /dev/rnullb0: Can't open blockdev [ 555.042580][T19205] ./cgroup: Can't lookup blockdev [ 555.155130][T19209] Bluetooth: MGMT ver 1.23 [ 555.160882][T19209] kAFS: unparsable volume name [ 555.255700][T19214] /dev/rnullb0: Can't open blockdev [ 555.481940][T19235] Invalid source name [ 555.486137][T19235] UBIFS error (pid: 19235): cannot open "usrquota", error -22 [ 555.585441][T19245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.611023][T19245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.663310][T19252] /dev/rnullb0: Can't open blockdev [ 555.767913][ T9705] usb 2-1: string descriptor 0 read error: -71 [ 555.788169][ T9705] uclogic 0003:5543:0047.001D: failed retrieving string descriptor #200: -71 [ 555.807332][ T9705] uclogic 0003:5543:0047.001D: failed retrieving pen parameters: -71 [ 555.807707][T19261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.832140][T19261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.833049][ T9705] uclogic 0003:5543:0047.001D: failed probing pen v2 parameters: -71 [ 555.850942][ T9705] uclogic 0003:5543:0047.001D: failed probing parameters: -71 [ 555.892166][ T9705] uclogic 0003:5543:0047.001D: probe with driver uclogic failed with error -71 [ 555.946807][ T9705] usb 2-1: USB disconnect, device number 29 [ 556.051072][T19291] fuse: Bad value for 'fd' [ 556.585734][T19302] tipc: Failed to remove unknown binding: 66,1,1/0:528177090/528177092 [ 556.594703][T19302] tipc: Failed to remove unknown binding: 66,1,1/0:528177090/528177092 [ 556.685131][T19309] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3375'. [ 556.826194][T19322] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3381'. [ 556.835767][T19322] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3381'. [ 557.988308][T16955] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 558.029538][T19344] /dev/rnullb0: Can't open blockdev [ 558.054879][T19349] /dev/rnullb0: Can't lookup blockdev [ 558.060566][T16955] CPU: 1 UID: 0 PID: 16955 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 558.060591][T16955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 558.060602][T16955] Call Trace: [ 558.060609][T16955] [ 558.060616][T16955] dump_stack_lvl+0x189/0x250 [ 558.060643][T16955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.060665][T16955] ? __pfx__printk+0x10/0x10 [ 558.060688][T16955] ? rcu_is_watching+0x15/0xb0 [ 558.060709][T16955] dump_header+0xd3/0x480 [ 558.060726][T16955] oom_kill_process+0x387/0x920 [ 558.060746][T16955] out_of_memory+0xf09/0x12a0 [ 558.060765][T16955] ? mem_cgroup_iter+0x3b/0x460 [ 558.060785][T16955] ? __pfx_out_of_memory+0x10/0x10 [ 558.060806][T16955] mem_cgroup_out_of_memory+0x145/0x240 [ 558.060825][T16955] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 558.060847][T16955] ? _raw_spin_unlock+0x28/0x50 [ 558.060865][T16955] ? memcg1_oom_prepare+0x37f/0x450 [ 558.060888][T16955] try_charge_memcg+0xdff/0x1290 [ 558.060910][T16955] ? rcu_is_watching+0x15/0xb0 [ 558.060932][T16955] ? __pfx_try_charge_memcg+0x10/0x10 [ 558.060953][T16955] ? rcu_irq_exit_check_preempt+0x201/0x210 [ 558.060972][T16955] ? xa_load+0x60/0x210 [ 558.060992][T16955] ? rcu_is_watching+0x15/0xb0 [ 558.061009][T16955] ? rcu_is_watching+0x15/0xb0 [ 558.061026][T16955] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 558.061050][T16955] charge_memcg+0x9f/0x180 [ 558.061072][T16955] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 558.061094][T16955] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 558.061118][T16955] __read_swap_cache_async+0x28c/0x510 [ 558.061142][T16955] swap_cluster_readahead+0x4cf/0x5f0 [ 558.061163][T16955] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 558.061185][T16955] ? rcu_is_watching+0x15/0xb0 [ 558.061202][T16955] ? filemap_get_entry+0xad/0x2f0 [ 558.061220][T16955] ? get_vma_policy+0x27c/0x3c0 [ 558.061244][T16955] swapin_readahead+0x17d/0xb50 [ 558.061272][T16955] ? __pfx_filemap_get_entry+0x10/0x10 [ 558.061293][T16955] ? get_swap_device_info+0x1c/0x2b0 [ 558.061311][T16955] ? rcu_is_watching+0x15/0xb0 [ 558.061328][T16955] ? __pfx_swapin_readahead+0x10/0x10 [ 558.061348][T16955] ? __filemap_get_folio+0x9a6/0xaf0 [ 558.061369][T16955] ? swap_cache_get_folio+0xae/0x3b0 [ 558.061390][T16955] do_swap_page+0x525/0x5ac0 [ 558.061412][T16955] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 558.061435][T16955] ? ___pte_offset_map+0x29/0x250 [ 558.061457][T16955] ? lock_acquire+0x5f/0x360 [ 558.061472][T16955] ? do_swap_page+0x184/0x5ac0 [ 558.061492][T16955] ? __pfx_do_swap_page+0x10/0x10 [ 558.061512][T16955] ? __pfx_default_wake_function+0x10/0x10 [ 558.061529][T16955] ? ___pte_offset_map+0x45/0x250 [ 558.061548][T16955] ? ___pte_offset_map+0x1cf/0x250 [ 558.061569][T16955] ? pte_offset_map_rw_nolock+0xea/0x160 [ 558.061592][T16955] __handle_mm_fault+0xe55/0x5400 [ 558.061619][T16955] ? __pfx___handle_mm_fault+0x10/0x10 [ 558.061641][T16955] ? rcu_is_watching+0x15/0xb0 [ 558.061662][T16955] ? lock_vma_under_rcu+0x3cb/0x450 [ 558.061679][T16955] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 558.061696][T16955] handle_mm_fault+0x40a/0x8e0 [ 558.061719][T16955] do_user_addr_fault+0xa81/0x1390 [ 558.061740][T16955] ? rcu_is_watching+0x15/0xb0 [ 558.061756][T16955] ? trace_page_fault_user+0x84/0x1e0 [ 558.061774][T16955] exc_page_fault+0x82/0x100 [ 558.061795][T16955] asm_exc_page_fault+0x26/0x30 [ 558.061809][T16955] RIP: 0033:0x7f726e5c14a8 [ 558.061824][T16955] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 558.061838][T16955] RSP: 002b:00007ffce2085190 EFLAGS: 00010293 [ 558.061853][T16955] RAX: 0000000000000000 RBX: 00000000000000a1 RCX: 00007f726e5c14a5 [ 558.061865][T16955] RDX: 00007ffce20851d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 558.061876][T16955] RBP: 00007ffce208523c R08: 0000000000000000 R09: 0000000000000000 [ 558.061887][T16955] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 558.061898][T16955] R13: 00000000000927c0 R14: 0000000000087967 R15: 00007ffce2085290 [ 558.061916][T16955] [ 558.061924][T16955] memory: usage 307200kB, limit 307200kB, failcnt 2820 [ 558.133447][T19353] /dev/rnullb0: Can't lookup blockdev [ 558.137455][T16955] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 558.316597][T19360] /dev/rnullb0: Can't open blockdev [ 558.318242][T16955] kmem: usage 1516kB, limit 9007199254740988kB, failcnt 0 [ 558.327420][T19361] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3389'. [ 558.345472][T16955] Memory cgroup stats for /syz5: [ 558.507782][T16955] cache 313020416 [ 558.517800][T16955] rss 0 [ 558.520576][T16955] rss_huge 0 [ 558.524695][T16955] shmem 313020416 [ 558.528325][T16955] mapped_file 0 [ 558.531772][T16955] dirty 0 [ 558.537150][T16955] writeback 0 [ 558.540444][T16955] workingset_refault_anon 5 [ 558.545066][T16955] workingset_refault_file 0 [ 558.549565][T16955] swap 204800 [ 558.552840][T16955] swapcached 0 [ 558.557954][T16955] pgpgin 102924 [ 558.561414][T16955] pgpgout 26503 [ 558.583307][T16955] pgfault 30121 [ 558.586801][T16955] pgmajfault 21 [ 558.590265][T16955] inactive_anon 0 [ 558.603788][T16955] active_anon 258142208 [ 558.607973][T16955] inactive_file 0 [ 558.611604][T16955] active_file 0 [ 558.615281][T16955] unevictable 54878208 [ 558.619354][T16955] hierarchical_memory_limit 314572800 [ 558.625917][T16955] hierarchical_memsw_limit 9223372036854771712 [ 558.632115][T16955] total_cache 313020416 [ 558.643046][T16955] total_rss 0 [ 558.646363][T16955] total_rss_huge 0 [ 558.650081][T16955] total_shmem 313020416 [ 558.654751][T16955] total_mapped_file 0 [ 558.658732][T16955] total_dirty 0 [ 558.662233][T16955] total_writeback 0 [ 558.669168][T16955] total_workingset_refault_anon 5 [ 558.676440][T16955] total_workingset_refault_file 0 [ 558.688054][T16955] total_swap 204800 [ 558.691884][T16955] total_swapcached 0 [ 558.698513][T16955] total_pgpgin 102924 [ 558.702745][T16955] total_pgpgout 26503 [ 558.708123][T16955] total_pgfault 30121 [ 558.712510][T16955] total_pgmajfault 21 [ 558.718329][T16955] total_inactive_anon 0 [ 558.722595][T16955] total_active_anon 258142208 [ 558.727619][T16955] total_inactive_file 0 [ 558.731808][T16955] total_active_file 0 [ 558.748266][T16955] total_unevictable 54878208 [ 558.753500][T16955] anon_cost 0 [ 558.757291][T16955] file_cost 0 [ 558.760888][T16955] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3357,pid=19224,uid=0 [ 558.787960][T16955] Memory cgroup out of memory: Killed process 19224 (syz.5.3357) total-vm:102024kB, anon-rss:5852kB, file-rss:23464kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 558.978824][T19400] program syz.1.3398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 559.531589][T19436] /dev/rnullb0: Can't open blockdev [ 559.777903][T19451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.790455][T19451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.801862][T19451] /dev/rnullb0: Can't open blockdev [ 559.890607][T19466] /dev/rnullb0: Can't open blockdev [ 559.968388][T19471] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.976944][T19471] /dev/rnullb0: Can't open blockdev [ 560.282088][T19479] No control pipe specified [ 560.337197][T19482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.346736][T19482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.361513][T19482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.371926][T19482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.384511][T19482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.399504][T19482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.399561][T19491] binder: BINDER_SET_CONTEXT_MGR already set [ 560.410925][T19482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.414690][T19491] binder: 19490:19491 ioctl 4018620d 2000000001c0 returned -16 [ 560.426254][T19482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.472455][T19496] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3420'. [ 560.481864][T19496] unsupported nlmsg_type 40 [ 560.571211][T19507] wlan1 speed is unknown, defaulting to 1000 [ 560.638521][T19482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.651337][T19482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.660880][T19483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.664996][T19534] /dev/rnullb0: Can't open blockdev [ 560.679407][T19483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.690896][T19482] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(16) [ 560.697519][T19482] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 560.706454][T19482] vhci_hcd vhci_hcd.0: Device attached [ 560.768605][T19538] vhci_hcd: connection closed [ 560.768836][T12599] vhci_hcd: stop threads [ 560.775565][ T9705] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 560.782268][T12599] vhci_hcd: release socket [ 560.790693][T12599] vhci_hcd: disconnect device [ 560.934413][ T9705] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 560.945591][ T9705] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 560.956907][ T9705] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 560.971283][ T9705] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 560.980745][ T9705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 560.989197][ T9705] usb 2-1: SerialNumber: syz [ 561.198634][T19500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.208989][T19500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.221113][ T9705] rndis_host 2-1:253.0: RNDIS init failed, -71 [ 561.231129][ T9705] rndis_host 2-1:253.0: probe with driver rndis_host failed with error -71 [ 561.249155][ T9705] usb 2-1: USB disconnect, device number 30 [ 561.727588][T19580] /dev/rnullb0: Can't open blockdev [ 561.990786][T19603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3440'. [ 562.142169][T19622] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3445'. [ 562.208958][ T30] audit: type=1326 audit(2000000224.399:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19625 comm="syz.4.3446" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4f9ab8ebe9 code=0x0 [ 562.259984][T19633] /dev/rnullb0: Can't lookup blockdev [ 562.293092][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 562.443011][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 562.451737][ T10] usb 6-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=16.7b [ 562.461825][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.470380][ T10] usb 6-1: Product: syz [ 562.473019][ T5915] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 562.474690][ T10] usb 6-1: Manufacturer: syz [ 562.486854][ T10] usb 6-1: SerialNumber: syz [ 562.492520][ T10] usb 6-1: config 0 descriptor?? [ 562.634377][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 562.645254][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 562.658115][ T5915] usb 2-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 562.667213][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.677117][ T5915] usb 2-1: config 0 descriptor?? [ 562.682685][T19628] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 562.700081][ T10] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 562.711296][ T10] usb 6-1: USB disconnect, device number 14 [ 562.815540][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.822094][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.062061][T19655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.073590][T19655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.483061][ T43] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 563.643552][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 563.650414][ T43] usb 6-1: config 14 has an invalid interface number: 164 but max is 0 [ 563.658934][ T43] usb 6-1: config 14 has no interface number 0 [ 563.665249][ T43] usb 6-1: config 14 interface 164 altsetting 5 endpoint 0xD has invalid maxpacket 560, setting to 64 [ 563.670816][T19692] /dev/rnullb0: Can't open blockdev [ 563.676440][ T43] usb 6-1: config 14 interface 164 has no altsetting 0 [ 563.678481][ T43] usb 6-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=14.aa [ 563.698657][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.706827][ T43] usb 6-1: Product: syz [ 563.711200][ T43] usb 6-1: Manufacturer: syz [ 563.716006][ T43] usb 6-1: SerialNumber: syz [ 563.789497][T19701] tipc: Started in network mode [ 563.794655][T19701] tipc: Node identity ac14140f, cluster identity 4711 [ 563.802138][T19701] tipc: New replicast peer: 255.255.255.255 [ 563.808578][T19701] tipc: Enabled bearer , priority 10 [ 563.815426][T19701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3461'. [ 563.824605][T19701] tipc: Disabling bearer [ 563.952410][ T43] usb 6-1: USB disconnect, device number 15 [ 564.080926][T19720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.091993][T19720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.703082][ T9705] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 564.779186][T19740] binder: 19739:19740 ioctl c0306201 2000000001c0 returned -14 [ 564.874521][ T9705] usb 6-1: Using ep0 maxpacket: 32 [ 564.883851][ T9705] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46 [ 564.897598][ T9705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.907074][ T9705] usb 6-1: config 0 descriptor?? [ 565.000183][T19753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.014026][T19753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.026567][T19754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.038412][T19754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.113272][ T5915] usb 2-1: string descriptor 0 read error: -71 [ 565.134072][ T5915] uclogic 0003:5543:0047.001E: failed retrieving string descriptor #200: -71 [ 565.153002][ T5915] uclogic 0003:5543:0047.001E: failed retrieving pen parameters: -71 [ 565.162407][ T5915] uclogic 0003:5543:0047.001E: failed probing pen v2 parameters: -71 [ 565.172085][ T5915] uclogic 0003:5543:0047.001E: failed probing parameters: -71 [ 565.180366][ T5915] uclogic 0003:5543:0047.001E: probe with driver uclogic failed with error -71 [ 565.200298][ T5915] usb 2-1: USB disconnect, device number 31 [ 565.231408][T19774] /dev/rnullb0: Can't open blockdev [ 565.252689][T19774] netlink: 'syz.1.3476': attribute type 30 has an invalid length. [ 565.307961][T19782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.319337][T19782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.360601][ T9705] usb 6-1: USB disconnect, device number 16 [ 565.604109][T19797] /dev/rnullb0: Can't open blockdev [ 566.158166][T19848] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3493'. [ 566.188460][T19848] /dev/rnullb0: Can't open blockdev [ 566.236265][T19854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3495'. [ 566.256450][T19853] 9p: Unknown parameter 'T{¾æ‡‰1>þ„mf˜«þ¬±D“?¦ö„ñº³F€¿Kž§qú¢¨*E«GEŒ‚sU­4?»‹–™ë '’RßÏ)ãwáMϽä(WËòªˆÓÚØì-äçGú9/àBYpû-× ' [ 566.560733][T19897] /dev/rnullb0: Can't lookup blockdev [ 566.627142][T19910] vcan0: tx drop: invalid sa for name 0x000003fffffffffd [ 566.637268][T19910] MTD: Couldn't look up '/dev/rnullb0': -15 [ 566.673049][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 566.680790][ T9705] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 566.836862][T19918] /dev/rnullb0: Can't open blockdev [ 566.845515][ T9705] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 566.858625][ T9705] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 566.872144][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 566.885248][ T9705] usb 6-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 566.890069][T19921] /dev/rnullb0: Can't open blockdev [ 566.894399][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.894423][ T10] usb 2-1: Product: syz [ 566.894435][ T10] usb 2-1: Manufacturer: syz [ 566.894449][ T10] usb 2-1: SerialNumber: syz [ 566.895985][ T10] usb 2-1: config 0 descriptor?? [ 566.927807][ T9705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.941118][ T9705] usb 6-1: config 0 descriptor?? [ 566.946640][T19879] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 566.948552][ T10] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 567.306502][T19939] /dev/rnullb0: Can't lookup blockdev [ 567.351225][ T10] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input39 [ 567.534154][ T9705] lenovo 0003:17EF:60B5.001F: hidraw0: USB HID v0.00 Device [HID 17ef:60b5] on usb-dummy_hcd.5-1/input0 [ 567.560113][T19874] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 567.584372][T19874] /dev/rnullb0: Can't open blockdev [ 567.601483][ T43] usb 2-1: USB disconnect, device number 32 [ 567.743049][ T5864] usb 6-1: USB disconnect, device number 17 [ 568.377132][T20012] program syz.5.3532 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 568.458628][T20018] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3534'. [ 568.600330][T20027] /dev/rnullb0: Can't open blockdev [ 568.606547][T20030] tmpfs: Bad value for 'mpol' [ 568.752315][T20042] blktrace: Concurrent blktraces are not allowed on rnullb0 [ 568.834832][T20047] netlink: 'syz.4.3542': attribute type 1 has an invalid length. [ 568.863535][T20047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3542'. [ 568.983718][T20053] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3544'. [ 569.011336][T20053] /dev/rnullb0: Can't lookup blockdev [ 569.137300][T20063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3546'. [ 569.148942][ T30] audit: type=1804 audit(2000000231.339:54): pid=20060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3546" name="rnullb0" dev="tmpfs" ino=191 res=1 errno=0 [ 569.224350][ T30] audit: type=1804 audit(2000000231.419:55): pid=20063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3546" name="rnullb0" dev="tmpfs" ino=191 res=1 errno=0 [ 569.250232][T20066] /dev/rnullb0: Can't open blockdev [ 569.353280][T20072] fuse: Unknown parameter '0x0000000000000004' [ 569.613494][ T9705] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 569.683081][ T43] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 569.774491][ T9705] usb 6-1: Using ep0 maxpacket: 8 [ 569.784506][ T9705] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 569.799404][ T9705] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 569.814791][ T9705] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 569.831630][ T9705] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49 [ 569.845787][ T9705] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 569.852870][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 569.856303][ T9705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.866859][ T43] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 569.893038][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.901059][ T43] usb 2-1: Product: syz [ 569.913295][ T43] usb 2-1: Manufacturer: syz [ 569.917921][ T43] usb 2-1: SerialNumber: syz [ 569.929279][ T43] usb 2-1: config 0 descriptor?? [ 570.049552][ T9705] usb 6-1: config 0 descriptor?? [ 570.055533][T20072] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 570.565046][ T9705] usb 6-1: USB disconnect, device number 18 [ 570.572259][ T5869] Bluetooth: hci3: Opcode 0x0c03 failed: -19 [ 570.766797][T20130] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3557'. [ 571.723324][T20176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.741824][T20176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.777641][T20180] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3572'. [ 571.839964][T20186] netlink: 'syz.4.3573': attribute type 29 has an invalid length. [ 571.849786][T20186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3573'. [ 572.243883][T20189] /dev/rnullb0: Can't open blockdev [ 572.351003][T20198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3575'. [ 572.420208][ T10] usb 2-1: USB disconnect, device number 33 [ 572.461824][T20220] rdma_rxe: rxe_newlink: failed to add wlan1 [ 572.471946][T20220] /dev/rnullb0: Can't open blockdev [ 573.233072][ T9705] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 573.318681][T20251] /dev/rnullb0: Can't open blockdev [ 573.343278][T20256] comedi comedi3: pcl818: I/O port conflict (0x4f27,16) [ 573.343369][T20256] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI [ 573.343388][T20256] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 573.343407][T20256] CPU: 1 UID: 0 PID: 20256 Comm: syz.0.3586 Not tainted syzkaller #0 PREEMPT(full) [ 573.343430][T20256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 573.343442][T20256] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 573.343479][T20256] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d9 85 2b f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 b8 85 2b f9 4d 8b 24 24 48 83 c3 [ 573.343496][T20256] RSP: 0018:ffffc9001886f9d8 EFLAGS: 00010206 [ 573.343515][T20256] RAX: 0000000000000005 RBX: ffff888073c48300 RCX: 0000000000080000 [ 573.343529][T20256] RDX: ffffc9001a99c000 RSI: 00000000000007ef RDI: 00000000000007f0 [ 573.343541][T20256] RBP: 0000000000000000 R08: ffff88802ef0c12f R09: 1ffff11005de1825 [ 573.343555][T20256] R10: dffffc0000000000 R11: ffffffff88f8cd30 R12: 0000000000000028 [ 573.343569][T20256] R13: dffffc0000000000 R14: ffff88802ef0c000 R15: dffffc0000000000 [ 573.343584][T20256] FS: 00007f2a005e76c0(0000) GS:ffff8881258c4000(0000) knlGS:0000000000000000 [ 573.343601][T20256] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 573.343614][T20256] CR2: 00007f726f2f56c0 CR3: 000000005036a000 CR4: 00000000003526f0 [ 573.343632][T20256] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 573.343644][T20256] DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 [ 573.343657][T20256] Call Trace: [ 573.343665][T20256] [ 573.343675][T20256] pcl818_detach+0x66/0xd0 [ 573.343698][T20256] comedi_device_detach_locked+0x175/0x750 [ 573.343723][T20256] comedi_device_attach+0x5d4/0x720 [ 573.343745][T20256] comedi_unlocked_ioctl+0x5ff/0x1020 [ 573.343771][T20256] ? rcu_is_watching+0x15/0xb0 [ 573.343792][T20256] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 573.343816][T20256] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 573.343850][T20256] ? do_futex+0x333/0x420 [ 573.343879][T20256] ? __se_sys_futex+0x36f/0x400 [ 573.343903][T20256] ? __fget_files+0x3a0/0x420 [ 573.343923][T20256] ? __fget_files+0x2a/0x420 [ 573.343943][T20256] ? bpf_lsm_file_ioctl+0x9/0x20 [ 573.343966][T20256] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 573.343991][T20256] __se_sys_ioctl+0xf9/0x170 [ 573.344016][T20256] do_syscall_64+0xfa/0xfa0 [ 573.344038][T20256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.344057][T20256] ? clear_bhb_loop+0x60/0xb0 [ 573.344075][T20256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.344094][T20256] RIP: 0033:0x7f29ff78ebe9 [ 573.344110][T20256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.344125][T20256] RSP: 002b:00007f2a005e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 573.344146][T20256] RAX: ffffffffffffffda RBX: 00007f29ff9c5fa0 RCX: 00007f29ff78ebe9 [ 573.344160][T20256] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000004 [ 573.344173][T20256] RBP: 00007f29ff811e19 R08: 0000000000000000 R09: 0000000000000000 [ 573.344186][T20256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.344199][T20256] R13: 00007f29ff9c6038 R14: 00007f29ff9c5fa0 R15: 00007ffe77160f68 [ 573.344217][T20256] [ 573.344233][T20256] Modules linked in: [ 573.344253][T20256] ---[ end trace 0000000000000000 ]--- [ 573.344266][T20256] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 573.344290][T20256] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d9 85 2b f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 b8 85 2b f9 4d 8b 24 24 48 83 c3 [ 573.344307][T20256] RSP: 0018:ffffc9001886f9d8 EFLAGS: 00010206 [ 573.344323][T20256] RAX: 0000000000000005 RBX: ffff888073c48300 RCX: 0000000000080000 [ 573.344337][T20256] RDX: ffffc9001a99c000 RSI: 00000000000007ef RDI: 00000000000007f0 [ 573.344351][T20256] RBP: 0000000000000000 R08: ffff88802ef0c12f R09: 1ffff11005de1825 [ 573.344365][T20256] R10: dffffc0000000000 R11: ffffffff88f8cd30 R12: 0000000000000028 [ 573.344380][T20256] R13: dffffc0000000000 R14: ffff88802ef0c000 R15: dffffc0000000000 [ 573.344396][T20256] FS: 00007f2a005e76c0(0000) GS:ffff8881258c4000(0000) knlGS:0000000000000000 [ 573.344413][T20256] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 573.344426][T20256] CR2: 00007f726f2f56c0 CR3: 000000005036a000 CR4: 00000000003526f0 [ 573.344443][T20256] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 573.344463][T20256] DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 [ 573.344479][T20256] Kernel panic - not syncing: Fatal exception [ 573.344751][T20256] Kernel Offset: disabled