last executing test programs: 29m50.875492213s ago: executing program 32 (id=117): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) close(0x3) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x80086601, &(0x7f0000000280)={'lo\x00', @link_local={0x2, 0x80, 0xc2, 0xc}}) dup(r0) setns(r0, 0x2000000) mount(&(0x7f0000000040)=@rnullb, &(0x7f00000002c0)='./cgroup/file0\x00', &(0x7f0000000240)='selinuxfs\x00', 0x808080, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 26m16.244159467s ago: executing program 33 (id=1123): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f000061d000/0x4000)=nil, 0x4000, 0xf) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x1010, r0, 0x3814e000) (async, rerun: 64) r1 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) (async, rerun: 64) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) (rerun: 64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 22m53.686102887s ago: executing program 34 (id=2656): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0xec02, 0x0, 0x0) capset(&(0x7f0000000040)={0x19971634}, &(0x7f0000000080)={0xd, 0xfffffffd, 0x1, 0x0, 0x80000000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, 0x0}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x11) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0585605, &(0x7f0000000080)={0x0, 0x1, @stop_pts=0x3}) read(r4, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x46, &(0x7f0000000280)={0xfffffffffffffe62, 0x0}, 0x10) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x20000, 0x154) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r0, 0x402, 0x80000024) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040960502050000000000010902240001004fc02d3c2957000005090400fe02030000000001220500090581"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="002280ddb2d626fd4cae64"], 0x0}, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f00000000c0), 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 20m5.207942574s ago: executing program 35 (id=3769): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e25, 0x7, @remote, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='wlan0\x00', 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f6, &(0x7f0000000900)={'sit0\x00', @random="3f00230c1100"}) write(r0, 0x0, 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='gfs2\x00', 0x200000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xeffffdff, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8b, 0x0, '\x00', 0xff}, {}, {}, {}, {0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7}]}}) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000080)={0x8, 0xd, 0x8001, 0x39, 0x7fff}) 19m22.520235133s ago: executing program 36 (id=3972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001ff6a000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 15m58.93653581s ago: executing program 7 (id=5383): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x2a, &(0x7f0000000040)=""/250, &(0x7f0000000140)=0xfa) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000000040)=[{{&(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x4000040) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0xd}, 0x60) r3 = dup(r0) write$rfkill(r3, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) write$cgroup_subtree(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="2d645d7669636573202b7033860ded1fc0b17b7beeb1897aee4a696465745f7072696f200000000000e9810007d53997ce5fd9ec0000000000000000"], 0x22) bind$nfc_llcp(r3, &(0x7f0000000240)={0x27, r4, 0x0, 0x1, 0x0, 0x57, "eaab356c36bb3973fde9e5b2bccee4002a573cf083b9f5f81a4d6695c7ced6088b60a35d58df5f4820edb0f3df668adf2dc1793343a96b5820918bc980d234", 0xb}, 0x60) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000300)={0x9, 0xfffffed4}) r5 = dup(0xffffffffffffffff) fallocate(r5, 0x10, 0x0, 0x200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000050000000000000f00000008000300", @ANYRES32=r8, @ANYBLOB="0500330002000000080034"], 0x2c}}, 0x0) socket$kcm(0x2, 0x3, 0x84) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket(0x11, 0x4, 0x20000) r11 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x400003fc, 0x0, 0x2}, 0x10) close_range(r9, 0xffffffffffffffff, 0x0) socket(0x10, 0x6, 0x0) 15m58.72012909s ago: executing program 7 (id=5384): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0003020010000203"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ef84f70c2432ac2}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) r2 = fanotify_init(0x4, 0x101801) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x20000000) read$FUSE(r2, 0x0, 0x0) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0xfffe, 0x1000007, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r1, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) syz_usb_control_io$hid(r0, 0x0, 0x0) 15m55.380100121s ago: executing program 7 (id=5398): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x3, 0x0, 0xfffffffffffffffa, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x40, 0x0, 0x9}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r1, &(0x7f0000001200)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x79e7, @local, 0x2}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f}}], 0x1, 0x4000000) 15m55.248696891s ago: executing program 7 (id=5399): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000f5ff00000300000a2c000000030a030000000000000000000200000a0c00024000000000000000010900010073797a30"], 0x54}}, 0x4000) 15m55.022620146s ago: executing program 7 (id=5401): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r0, 0x6f000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000240)="66ba4000ec360f01c8420f01cfc7442400ff7f0000c74424020a000000c7442406000000000f011c24b9800000c00f3235000100000f30f342da47960f0966ba4200ed660f38800c89460f01c4", 0x4d}], 0x1, 0xc, &(0x7f0000000100)=[@cstype0={0x4, 0xc}], 0x1) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x71) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000040000002e00000008000300b96bb07796b43bacbca7c9a420a3d6f84601f76aee3ae7e6356b4cd518050000004ed01061ffdef7aa6acd4d7db22b4ddfa9750e8734325b32668678b78420ceacd2d0ab8dcf", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000600980005000000"], 0x30}}, 0x0) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='affs\x00', 0x208083, 0x0) writev(r1, &(0x7f0000000a00)=[{&(0x7f0000000300)="15099ad89d5d2f6e1c7f537ff92ca49b30ef1a755cd3595a57353abb42a37986ac3189b5ec5ff9bc9280bf968805db4d621ff795b34fb36d939bf38b91031c6a22e49e06057f8f323f6ca5a2fef9a7cf3b1984464cbd1cc4067289177ba7accc5ccdcd639d2c9f56dd2bfce75f5352c0f4520f11d860e38f1fabb3ee9d52d74ea4eaf3eb585214fd5a7a8956c231b4dc041d4b8119af3f82266a3a7bf4a6881d51f1e06848ecad6971a30fd027d7d7f307ad408946c20f68", 0xb8}, {&(0x7f00000003c0)="25bf2de1289d8efdac77b7bc8c2a8cf955b6aacbb90dd727e598e030541f3ddcaac7ed40101742f1ddebff3d9e1621b5758f7643e98635e1f9a4ab8dccf84d1f7446a902f0d6e01aae1b2e311b1cfd037650683f53c07de9cd356afb3af4a92ea8eec137b490395a054f66eda413a0d532fb55d0d86d23d6a573c17789cda5e1db", 0x81}, {&(0x7f0000000480)="520632b00d2973bd161e14aedbfe1d5a371811b8949c3b71ff4449ea209e2c92eb411f2eff90dad883799334d998f26413f4c62b74b4f51e40d9ff7c72c49a007282a1ca0f34f6cde25313decd92ed8f8f4e2a1eb23c2fb526748b5297c2a2aec8ff4b8e226d46c25cb3328563d37572e6de523f2784c1226fe4259df4377e82982a7a5828b2a9ef034b1fb8c3fc84bde3f91c9777e661fbe8ea633d3154dc89d1f2bfcfa822e9bab5e8a4e5588ec977da684259a1a9144066182e00de937ed376b1fc4d161c6fc40de6db32725668c1d4012a44e4536b9a72562665334533f46b0db69ce663a25ee5b5e7283c8783507e", 0xf1}, {&(0x7f0000000580)="06569355a606e1a986551a767dc627f06864ebd18dc2a204527add7ac9e57ce3f6f7658d8913cefa4650b8d57040b3ea56f1ccaa8e7e98c9e44d43c7c3da5c948bd3e9342fb9b44f767c127910457e7b17d4aeb1b1c1989504779fe7639179377d5fe864607d469e6fd0ae58b273ed302432cc62f5921a2e50916a72eae18492dae0890ac9ce3c4a000a7f42ceb3acb5dc532417009ae00cfc47893f77eb3a8c318895380eaeff0e5615d4d362cded08efc9fb5e566273baff6308b98dee3e41e957626be01f221fdaff16e7c9cb49aaa28e577eb20927ff27b66b71da24f28693d82cd86c926801f19f38905e62ffd7bc9c", 0xf2}, {&(0x7f0000000680)="fe507b1bdd11ec0142349c34c794f67d229191f029c79468c1ede4de0694326cc8bb5639fc9804fcb3a7209413f2b7c9dae2164bfb7dcd51a9ff2bfe242980aa8717444baf900b95ed2a8020c0ec079f37ac40b8a684f757fc3462e4f1c08d48cf8ee74bcc4ceae7341b23efd94c377f57a3740d1769f1ed96428760f11cff82742b219d8d2be671c32c81cd60a3cba63f7d3acd7c2355b309108422b4b80d835d0216e2f36f933694de206ad27265f1ff1653d09748fcc118b54ac12855788c218ccca0", 0xc4}, {&(0x7f0000000780)="218ceca0451f7f21d2e2b50b7da211d1b9d97c60ae2f19be1f13a486f34f71fcc51b0a702f63b0c662d7a71b36a638039c557d1a383cc72f238b4b2bfe765d1b8a7bf976be1d98f8e2283c82d0f866e2dfc112dcbe1e8149df2108ea1fbaa1a1fdaa1b", 0x63}, {&(0x7f0000000800)="46fa4b9ac89aeab7d00fb5f900bd3d04d8009ea50d556cb3bd51ce7ceee47e6abf9bd7d0ec4a8a7fa4fc184b8a11e4c21ed2bc8660e8c83bf703f45fef3bb9774767932978153c6542cab10f248487dbaad9fa215bf5efea9232d66a79387ec67ea613516f727255629b2724ae82729a0a324a3f0862881044e630109d9c570be9e7c738ac7993f46d7fd8b510f6f5188323278a951bcb6f7eac8e3b5033aaa98cb5f5d2c0fc9d4f9d57d60ebd10d2118274b4ed10059ce714fbb33e6b5740383ae38d5c5da59072913fb071d1e7c4537ab06142e3a463bfe5b0eed6e2aea2ce75d5dd2299a241d249bfe97783e93fb97bee", 0xf2}, {&(0x7f0000000900)="3be5d9b1f4d11d03fc33208962690141e3ea36a16a6d4655bd1de670f9047299ef505629ab34a87f949669dc449306a7fff5a4441bb4ce54aa808e62849a284c08289b6ca63f4ce8bed878b99cf54e1751128fcf5fc4e144cd414daab32f4f80b211d5693f7d5830b9987a9274b4dd37a6f16cb8e4dcd695775da846282e2a95bb220360f88951a5ce425fa1a96af67fc0080c089be36572818d189931b6551ff846e0df55b3f4d800d04150027acbfea33335616c42d0c2b124c6a90e2921f45d89c8350e1b03908b7076dd28b33128dd81c03dc804c4c28d0cf846bd4090723f99", 0xe2}], 0x8) 15m54.814013811s ago: executing program 7 (id=5404): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0xf4010000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 15m39.72653967s ago: executing program 37 (id=5404): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0xf4010000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 13m42.854267738s ago: executing program 8 (id=6076): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80040, 0x99) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0xc92480, 0x2, 0xfffc, 0xd, 0x5, 0x0, 0x0, 0x10, 0x5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000004c0)={&(0x7f0000000140)={0x50, 0xffffffffffffffda, 0xfffffffffffffffd, {0x7, 0x29, 0x1, 0x800, 0xbe2, 0x1ff, 0x8, 0x12c00, 0x0, 0x0, 0x20, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) 13m41.830404523s ago: executing program 8 (id=6077): mkdir(0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100002, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='ufs\x00', 0x200000, 0x0) mount(0x0, &(0x7f0000001440)='./file1\x00', 0x0, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000001c0)=@nullb, 0x0, &(0x7f00000000c0)='./cgroup\x00') 13m38.671641728s ago: executing program 8 (id=6085): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff8105000000efff0058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 13m37.089575193s ago: executing program 8 (id=6091): socket(0x10, 0x3, 0x0) r0 = syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x427}}]}) syz_usb_disconnect(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c0020000", @ANYRES16=r3, @ANYBLOB="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"], 0x2c0}, 0x1, 0x0, 0x0, 0x8000}, 0x1) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r4, 0x2000) 13m36.799989058s ago: executing program 0 (id=6093): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000000c0)=0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdir(&(0x7f0000000180)='./file1\x00', 0x8) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x64) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000200)='./file0\x00', 0x0) chdir(0x0) openat(0xffffffffffffff9c, 0x0, 0x103442, 0x58) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) unlink(&(0x7f0000000280)='./file1\x00') 13m36.270463636s ago: executing program 0 (id=6094): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(0x0) mount$fuse(0x0, 0x0, 0x0, 0x100002, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r0 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r0, 0x0) r1 = getpgid(r0) setpgid(0x0, r1) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='ufs\x00', 0x200000, 0x0) mount(0x0, &(0x7f0000001440)='./file1\x00', 0x0, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000001c0)=@nullb, 0x0, &(0x7f00000000c0)='./cgroup\x00') 13m34.959674204s ago: executing program 0 (id=6096): r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x8, '\x00', @p_u8=0x0}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x440200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r2, 0x0, 0x0, 0x20000840, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@mcast2, @in6=@empty}}, {{@in6=@mcast1}}}, &(0x7f0000000240)=0xe8) 13m34.661760772s ago: executing program 1 (id=6097): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd01000000f5001400000060"], 0xfdef) 13m34.000720813s ago: executing program 9 (id=6099): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_RUN(r2, 0xae80, 0xbe91210000000000) 13m33.38706138s ago: executing program 1 (id=6100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x20}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) 13m33.064059636s ago: executing program 9 (id=6101): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf04004000000000e0ff1200000008000300", @ANYRES32=r2, @ANYBLOB="0400130006001200000000000600b500850100000a000600080211000001"], 0x64}, 0x1, 0x0, 0x0, 0x400}, 0x0) 13m33.041518455s ago: executing program 1 (id=6102): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x1, r1, 0x0, 0x5}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r1, 0x0, 0xfffffffffffffffd, 0x2000000000000004}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r1, 0x0, &(0x7f00003bd000/0x3000)=nil, 0x3000, 0x80}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x0, 0x1, [0x6]}, 0xa) r3 = accept$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @bcast}, [@remote, @default, @remote, @bcast, @null, @rose, @default, @default]}, &(0x7f0000000040)=0x48) getsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000180)=0x4, &(0x7f00000001c0)=0x4) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYRESHEX=r1, @ANYRES8=r1, @ANYRES16, @ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYRES8=r3, @ANYRESDEC=r0, @ANYRES16=r2], 0x1d) r4 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000340)={0xc4, 0x7, 0x800, 0x4, "12b6f7311a15ef3ac1214631fcc7fd816897fd4b801cf08e20f5ec64477077e889d2c498e815d99086b4c7a2894001490d5d37d1ed038a609d91db8dad28812422ba386cddaa2eee185650890f2eeb699c0e9b921ae329be6ce37bccb127f8a4ff90f1daaf2b7da8b780420aa43e5dd823864eb837ea3912c40e7f1c0e52b6957fa139ea3aa5e286c22e12094e14e4929a6ea0d6fad30045f4ff05b536c7bde1fbba552265f0a8ad76af2a6f"}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x7, r4, 0x0, 0x1, 0x0, 0x6, 0x1dfd1d, 0xa7530}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f00000004c0)={0x48, 0x6, r1, 0x0, r5}) 13m32.95065391s ago: executing program 0 (id=6103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006180)="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", 0x2000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x81, 0x9, 0x5c, 0x0, 0x0, 0x14000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r2, 0xae80, 0x10400000000000) 13m32.632009237s ago: executing program 9 (id=6104): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(0x0) mount$fuse(0x0, 0x0, 0x0, 0x100002, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r0 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r0, 0x0) r1 = getpgid(r0) setpgid(0x0, r1) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='ufs\x00', 0x200000, 0x0) mount(0x0, &(0x7f0000001440)='./file1\x00', 0x0, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000001c0)=@nullb, 0x0, &(0x7f00000000c0)='./cgroup\x00') 13m32.591515046s ago: executing program 1 (id=6105): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x10, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x171, 0x2, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000400)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8, 0x700}) 13m32.194308383s ago: executing program 1 (id=6106): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='THAWED\x00', 0x7) mkdirat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x1ff) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000180)={{0xe, 0x8}, 'port1\x00', 0x13, 0x20000, 0x6, 0x800, 0x1fae, 0x4, 0xfffffeff, 0x0, 0x4, 0xf0}) sendfile(r4, r4, 0x0, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r8, &(0x7f0000000b00)=[{&(0x7f0000000d00)=""/197, 0xc5}, {&(0x7f0000000500)=""/113, 0x71}], 0x2, 0x33, 0x0) ioctl$KVM_GET_XCRS(r8, 0x8188aea6, &(0x7f0000000380)={0x9, 0x5, [{0xff}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x7}, {0x1ff, 0x0, 0x9}, {0x821, 0x0, 0x9}, {0x5cd0000, 0x0, 0x4}, {0x8}, {0x991a, 0x0, 0xfffffffffffffffb}, {0x1, 0x0, 0x8}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 13m30.5281165s ago: executing program 0 (id=6107): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x7, 0xfe, 0xe5, 0x0, 0x6, 0xd9, 0x40, 0x1, 0xfb, 0x8, 0xe, 0xfc, 0x0, 0x2, 0x1, 0x1}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x2006e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0xfffffffffffffffc, 0x8000000000000004, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13m30.107744327s ago: executing program 9 (id=6108): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x1800, &(0x7f0000000280)={0x100004, 0x8a, 0x100000, {r1}}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x1000, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x28000054) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}], 0x1}, 0x4}], 0x2, 0x60, 0x0) getsockopt$sock_int(r4, 0x1, 0x4, 0x0, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0}) r5 = dup3(r2, r0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r9, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000240)=[r9], &(0x7f0000000200), &(0x7f00000000c0)=[r11], &(0x7f0000000340), 0x0, 0x300}) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r12, 0x0) ftruncate(r2, 0x2a) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1600, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000a40)="82"}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r10, 0x1ff, 0x2, 0x7, 0x1, [], [0x4, 0x2, 0x9, 0x4], [0xfffffffb, 0x183, 0x400, 0x5], [0x1000, 0xfffffffffffffff8, 0x3, 0x4b]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1, 0xa}) 13m30.070065032s ago: executing program 8 (id=6109): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80040, 0x99) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0xc92480, 0x2, 0xfffc, 0xd, 0x5, 0x0, 0x0, 0x10, 0x5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000004c0)={&(0x7f0000000140)={0x50, 0xffffffffffffffda, 0xfffffffffffffffd, {0x7, 0x29, 0x1, 0x800, 0xbe2, 0x1ff, 0x8, 0x12c00, 0x0, 0x0, 0x20, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) 13m29.851975524s ago: executing program 1 (id=6110): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000002900000037000000f50200000000000005020005ff7f000000000000060002000502000104010900b870"], 0xe8}, 0x4824) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r3 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x110, r3, 0xdc39c000) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x3000008, 0x2010, r1, 0x689af000) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, &(0x7f0000000140)) read(r1, &(0x7f00000001c0)=""/159, 0xfffffeb5) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmsg$inet6(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000002900000037000000f50200000000000005020005ff7f000000000000060002000502000104010900b870"], 0xe8}, 0x4824) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) bind$can_raw(r2, &(0x7f0000000000), 0x10) (async) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x110, r3, 0xdc39c000) (async) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x3000008, 0x2010, r1, 0x689af000) (async) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, &(0x7f0000000140)) (async) read(r1, &(0x7f00000001c0)=""/159, 0xfffffeb5) (async) 13m29.171157462s ago: executing program 0 (id=6111): r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x8, '\x00', @p_u8=0x0}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x440200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r2, 0x0, 0x0, 0x20000840, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) 13m29.002325835s ago: executing program 9 (id=6112): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) r1 = dup(r0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0xfffffff9, 0xa, 0x2, 0x5, 0x0, 0x4, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x1f, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0xa3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adeb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x4, 0x401, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) 13m28.237185841s ago: executing program 8 (id=6113): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x4, 0x1, 0xfffffffc, 0x8, 0x1, "fba230c3584674b25d6a42b0af816c65bf8f97", 0x74fb, 0xf}) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) (async) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mount(&(0x7f0000000280)=@rnullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='selinuxfs\x00', 0xa4004, &(0x7f0000000340)='/dev/rnullb0\x00') (async) mount(&(0x7f0000000280)=@rnullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='selinuxfs\x00', 0xa4004, &(0x7f0000000340)='/dev/rnullb0\x00') getsockname(r0, &(0x7f00000001c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000240)=0x80) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000380)={0x9, 0xfff7, 0x2, 0x1, 0x7, "48a5077eb0593e4f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000380)={0x9, 0xfff7, 0x2, 0x1, 0x7, "48a5077eb0593e4f"}) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) fstat(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000080)=@sg0, r3, &(0x7f0000000140)='./file0\x00') 13m27.99187669s ago: executing program 9 (id=6114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x7c, r2, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100000001) dup3(r4, r5, 0x80000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_COPY(r6, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_CONTROL(r4, 0x40086414, &(0x7f00000000c0)={0x2, 0x2a4}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt(r9, 0x84, 0x80, &(0x7f0000000040)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) ioprio_set$pid(0x0, r8, 0x2000) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r7, r7, 0x0, 0x7ffff000) 13m14.1872525s ago: executing program 38 (id=6110): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000002900000037000000f50200000000000005020005ff7f000000000000060002000502000104010900b870"], 0xe8}, 0x4824) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r3 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x110, r3, 0xdc39c000) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x3000008, 0x2010, r1, 0x689af000) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, &(0x7f0000000140)) read(r1, &(0x7f00000001c0)=""/159, 0xfffffeb5) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmsg$inet6(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000002900000037000000f50200000000000005020005ff7f000000000000060002000502000104010900b870"], 0xe8}, 0x4824) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) bind$can_raw(r2, &(0x7f0000000000), 0x10) (async) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x110, r3, 0xdc39c000) (async) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x3000008, 0x2010, r1, 0x689af000) (async) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, &(0x7f0000000140)) (async) read(r1, &(0x7f00000001c0)=""/159, 0xfffffeb5) (async) 13m11.389765955s ago: executing program 39 (id=6111): r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x8, '\x00', @p_u8=0x0}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x440200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r2, 0x0, 0x0, 0x20000840, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) 13m11.112901668s ago: executing program 40 (id=6113): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x4, 0x1, 0xfffffffc, 0x8, 0x1, "fba230c3584674b25d6a42b0af816c65bf8f97", 0x74fb, 0xf}) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) (async) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mount(&(0x7f0000000280)=@rnullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='selinuxfs\x00', 0xa4004, &(0x7f0000000340)='/dev/rnullb0\x00') (async) mount(&(0x7f0000000280)=@rnullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='selinuxfs\x00', 0xa4004, &(0x7f0000000340)='/dev/rnullb0\x00') getsockname(r0, &(0x7f00000001c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000240)=0x80) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000380)={0x9, 0xfff7, 0x2, 0x1, 0x7, "48a5077eb0593e4f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000380)={0x9, 0xfff7, 0x2, 0x1, 0x7, "48a5077eb0593e4f"}) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) fstat(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000080)=@sg0, r3, &(0x7f0000000140)='./file0\x00') 13m10.749590793s ago: executing program 41 (id=6114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x7c, r2, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100000001) dup3(r4, r5, 0x80000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_COPY(r6, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_CONTROL(r4, 0x40086414, &(0x7f00000000c0)={0x2, 0x2a4}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt(r9, 0x84, 0x80, &(0x7f0000000040)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) ioprio_set$pid(0x0, r8, 0x2000) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r7, r7, 0x0, 0x7ffff000) 4m4.614386504s ago: executing program 2 (id=9500): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x2000000, 0x11, 0x0, 0x0, 0x41, 0x5d, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/208, 0xd0, 0x1, 0x2b}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 4m4.296014328s ago: executing program 2 (id=9502): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x2031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r2, 0x4e, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x28a02, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x4000013) ioctl$FIONREAD(r3, 0x80047456, &(0x7f0000000340)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x10, r0, 0x2000) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1082400, &(0x7f0000000240)={[{@redirect_dir_on}, {@nfs_export_off}, {@verity_off}, {@uuid_on}, {@index_on}], [{@context={'context', 0x3d, 'staff_u'}}, {@audit}]}) 4m3.345242686s ago: executing program 2 (id=9511): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500c00108005400000060ec970001983a00fc000018c6ba35000000020000000700ff02000000000000000000000000000100"], 0xfdef) 4m3.019257563s ago: executing program 2 (id=9514): r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0x20002078) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) ioperm(0x1, 0x3, 0x163f) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x201, &(0x7f00000001c0)={0x0}) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f00000000c0)=@nullb, 0xee00, &(0x7f0000000100)={0xfffffffffffff000, 0x8001}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00000000c0)="00fbff008600000000003271a5bf00", 0x20) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x64}, 0x1, 0x0, 0x0, 0x40050}, 0x4000000) ioperm(0x4, 0x8, 0x2536) getsockopt$inet_tcp_buf(r3, 0x6, 0x21, 0x0, &(0x7f0000000100)) ptrace$setregs(0xf, r2, 0x80, &(0x7f00000011c0)="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") mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x13000, 0x7, &(0x7f0000000000/0x13000)=nil) prctl$PR_GET_TIMERSLACK(0x1e) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xe) 4m2.685710868s ago: executing program 2 (id=9518): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20a00, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020085}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x900) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r6) r9 = socket$pppl2tp(0x18, 0x1, 0x1) request_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0xfffffffffffffff8) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000060e000700000014000800000000000000000000000000000000000c0016008000000000000000"], 0x34}}, 0x0) read(r5, &(0x7f0000000080)=""/245, 0xf5) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) map_shadow_stack(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)={0x20, r11, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4804}, 0x20000804) syz_usb_control_io$hid(r3, &(0x7f0000000540)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x19, {[@global=@item_4={0x3, 0x1, 0x8, "03132010"}, @local=@item_4={0x3, 0x2, 0x3, "6cb4f3c4"}, @global=@item_012={0x2, 0x1, 0xb, "7004"}, @main=@item_012={0x1, 0x0, 0xc, "d9"}, @main=@item_012={0x2, 0x0, 0x0, "0100"}, @local=@item_4={0x3, 0x2, 0x1, "70050101"}, @local=@item_012={0x1, 0x2, 0x0, "aa"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000480), 0xffffffffffffffff, 0x121043) syz_usb_control_io(r3, &(0x7f0000000880)={0x2c, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0xf, 0x5d, {0x5, 0xf, 0x5d, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x60, 0xff, 0x0, 0x1, 0x6}, @generic={0x4d, 0x10, 0x1, "02447d08334bea7b1d94d35f8620b1a756e793ca3a663e4917f621b68f2e0b08b094da0a25f2d4c19ef1c368e16c11bd31d59bbe0dfcc0fb33291a7f013e709db7e6fea962557c49564b"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write(r3, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 4m2.273661181s ago: executing program 2 (id=9525): creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) socketpair(0x22, 0x2, 0x21, &(0x7f0000000000)) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0) 4m1.942656059s ago: executing program 42 (id=9525): creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) socketpair(0x22, 0x2, 0x21, &(0x7f0000000000)) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0) 21.538766623s ago: executing program 5 (id=11129): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20a00, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020085}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x900) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$pppl2tp(0x18, 0x1, 0x1) request_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0xfffffffffffffff8) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000060e000700000014000800000000000000000000000000000000000c0016008000000000000000"], 0x34}}, 0x0) read(r5, &(0x7f0000000080)=""/245, 0xf5) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) map_shadow_stack(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)={0x20, r9, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4804}, 0x20000804) syz_usb_control_io$hid(r3, &(0x7f0000000540)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x19, {[@global=@item_4={0x3, 0x1, 0x8, "03132010"}, @local=@item_4={0x3, 0x2, 0x3, "6cb4f3c4"}, @global=@item_012={0x2, 0x1, 0xb, "7004"}, @main=@item_012={0x1, 0x0, 0xc, "d9"}, @main=@item_012={0x2, 0x0, 0x0, "0100"}, @local=@item_4={0x3, 0x2, 0x1, "70050101"}, @local=@item_012={0x1, 0x2, 0x0, "aa"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000480), 0xffffffffffffffff, 0x121043) syz_usb_control_io(r3, &(0x7f0000000880)={0x2c, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0xf, 0x5d, {0x5, 0xf, 0x5d, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x60, 0xff, 0x0, 0x1, 0x6}, @generic={0x4d, 0x10, 0x1, "02447d08334bea7b1d94d35f8620b1a756e793ca3a663e4917f621b68f2e0b08b094da0a25f2d4c19ef1c368e16c11bd31d59bbe0dfcc0fb33291a7f013e709db7e6fea962557c49564b"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write(r3, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 18.428752896s ago: executing program 5 (id=11156): write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0x20, 0x2, 0x7}, 0x10000}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000080)=0x7ff) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000000c0), 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) mount$cgroup(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@favordynmods}, {@clone_children}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@clone_children}, {@xattr}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@hash}, {@smackfshat={'smackfshat', 0x3d, '%'}}]}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000240)) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RREMOVE(r3, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) setxattr$trusted_overlay_origin(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f00000003c0)=@x86={0x4, 0x1, 0x6, 0x0, 0x1, 0x0, 0xfa, 0x9a, 0x9, 0x3, 0x8, 0x2, 0x0, 0x8, 0xfff, 0x5, 0x30, 0x10, 0x2, '\x00', 0x8, 0x9}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, 0x1407, 0x20, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000500)=0x6, 0x4) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000540)='A{-\x00', &(0x7f0000000580)='./file0\x00', r0) mkdir(&(0x7f00000005c0)='./file0\x00', 0x8a) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = accept4$vsock_stream(r1, &(0x7f0000000600)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x80800) writev(r5, &(0x7f0000000800)=[{&(0x7f0000000640)="9aaa356ba8f68cffa512031c109f2b261dd2", 0x12}, {&(0x7f0000000680)="fa46281827ff8c2b3e16bf0ae5f98fe3d14289e6d90ad9f3281f557e955b5d423c3d50aa63f98a74a2dbd7619d5d37d8219dd1b97e91ae785b867772a7f967d1f08ee5fe40dc403db2b8", 0x4a}, {&(0x7f0000000700)="97a348a2f2a26d60dfc4b5474c922b6491d00e712fc69cbd29efd478a1e55fc52513f8f5a83444d97836898f09d37f8f80b58a06d78319af98e0541f0482d640173a413246525222575b1004f725b29f8c482b9956fa49d0bb2ed4398fc71292b50b2e9a2f1e7febbc8de95544404d15ef0b343cd22e8b05c3169975fd4e831b987ada777bfc986e157e49bcdc29ec05c885468c373715e42318b63074a697884314d24aa499ce476218418c9bf6a5beaec2f9cce8f201eb9350e1453343ca2247a0bca1a9eb8a7c28aac475acaafa20406d94863ac4b7564b1e7638690c9bd5", 0xe0}], 0x3) setxattr(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)=@random={'user.', 'cgroup\x00'}, &(0x7f00000008c0)='\x00', 0x1, 0x2) r6 = getuid() setxattr$security_capability(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940), &(0x7f0000000980)=@v3={0x3000000, [{0xffff, 0x7}, {0x5, 0x6}], r6}, 0x18, 0x2) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000009c0)={0xfffffff7}, 0x4) lsetxattr$trusted_overlay_origin(&(0x7f0000000a00)='./file1\x00', &(0x7f0000000a40), &(0x7f0000000a80), 0x2, 0x3) r7 = fsmount(r1, 0x1, 0x2) preadv2(r7, &(0x7f0000000c80)=[{&(0x7f0000000ac0)=""/22, 0x16}, {&(0x7f0000000b00)=""/18, 0x12}, {&(0x7f0000000b40)=""/22, 0x16}, {&(0x7f0000000b80)=""/121, 0x79}, {&(0x7f0000000c00)=""/127, 0x7f}], 0x5, 0x0, 0x7, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000d40)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000d00)={0xffffffffffffffff}, 0x8c4e775ef72dc650, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000d80)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x42f4, @mcast2, 0x80000000}, r8}}, 0x30) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000dc0)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e00)={{0x1, 0x1, 0x18, r7, {0x4}}, './file1\x00'}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f0000000e40)={0x1, 0x7, 0x7}) write$P9_RVERSION(r9, &(0x7f0000000e80)={0x15, 0x65, 0xffff, 0x36, 0x8, '9P2000.L'}, 0x15) 4.114034904s ago: executing program 3 (id=11213): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x2, {0x3, 0x0, 0x0, 0x2}}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x240) ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f00000004c0)=0x10) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) 3.846314668s ago: executing program 3 (id=11214): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x7c5, 0x1, 0x2, 0xd59f80, 0x1, 0x5, 0xb, 0xb, 0x5, 0x720, 0xe62, 0x2800, 0x5, 0xd, 0x13, {0xffffffff, 0x7}, 0x3, 0xec}}) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)=0x5) 3.659863532s ago: executing program 3 (id=11215): creat(&(0x7f0000001380)='./file0\x00', 0x4) creat(&(0x7f0000001380)='./file0\x00', 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x80000000000000a, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000010000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES32=r0], 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 3.549169531s ago: executing program 3 (id=11216): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x5319) creat(&(0x7f0000000140)='./file0\x00', 0x71) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r2 = dup(r1) write$sequencer(r2, &(0x7f0000002140)=ANY=[], 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) timerfd_create(0x7, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000340), 0x8) r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001380)=ANY=[@ANYBLOB="a005000036"], 0x5a0}], 0x1, 0x0, 0x0, 0x4000}, 0x8000) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) 3.172020199s ago: executing program 6 (id=11217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000001000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f7879000014000280080001400000000208000340000000100900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x40880) 3.064089329s ago: executing program 4 (id=11218): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480003005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.900247616s ago: executing program 6 (id=11219): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x20040000) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x20040000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)=@overlay={0xb, 0x1, 0x4, 0x2000, 0x9, {r4, r5/1000+10000}, {0x4, 0xe, 0x0, 0x3, 0x1, 0x2, "849f9629"}, 0x7, 0x3, {}, 0x1}) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x4, 0x3, 0x3f00}) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(0xffffffffffffffff, 0x54a6) (async) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(0xffffffffffffffff, 0x54a6) 2.714991843s ago: executing program 4 (id=11220): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x1, 0x101603) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2.651977152s ago: executing program 6 (id=11221): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x500, 0x4) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r1, 0xf648e000) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_usb_connect(0x3, 0x46, &(0x7f0000000600)=ANY=[@ANYBLOB="120100ffffffff10"], 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='dctcp\x00', 0x6) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)="350ee6", 0x3}], 0x1) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000)=0x400001, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000500)='oom_adj\x00') r5 = dup(r3) (async, rerun: 64) pread64(r4, 0x0, 0x0, 0x76) (rerun: 64) r6 = epoll_create1(0x0) (async) syz_clone3(&(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) ioctl$FS_IOC_SETFLAGS(r6, 0x80088a02, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5) (async, rerun: 32) ioctl$sock_netdev_private(r8, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") (async, rerun: 32) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYRESHEX=r3], 0x33fe0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.435059609s ago: executing program 4 (id=11222): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x14720000, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/18, 0x12, 0x2, 0x21}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2.405166338s ago: executing program 3 (id=11223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001fa00)=ANY=[@ANYBLOB="140000001000010000000000020000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a300000000014000000020a5b"], 0x88}}, 0x0) 2.320142154s ago: executing program 6 (id=11224): creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f00000000c0)='gfs2meta\x00', 0x8000, 0x0) 2.185539s ago: executing program 3 (id=11225): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20a00, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020085}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x900) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r6) r8 = socket$pppl2tp(0x18, 0x1, 0x1) request_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0xfffffffffffffff8) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000060e000700000014000800000000000000000000000000000000000c0016008000000000000000"], 0x34}}, 0x0) read(r5, &(0x7f0000000080)=""/245, 0xf5) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) map_shadow_stack(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)={0x20, r10, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4804}, 0x20000804) syz_usb_control_io$hid(r3, &(0x7f0000000540)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x19, {[@global=@item_4={0x3, 0x1, 0x8, "03132010"}, @local=@item_4={0x3, 0x2, 0x3, "6cb4f3c4"}, @global=@item_012={0x2, 0x1, 0xb, "7004"}, @main=@item_012={0x1, 0x0, 0xc, "d9"}, @main=@item_012={0x2, 0x0, 0x0, "0100"}, @local=@item_4={0x3, 0x2, 0x1, "70050101"}, @local=@item_012={0x1, 0x2, 0x0, "aa"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000480), 0xffffffffffffffff, 0x121043) syz_usb_control_io(r3, &(0x7f0000000880)={0x2c, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0xf, 0x5d, {0x5, 0xf, 0x5d, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x60, 0xff, 0x0, 0x1, 0x6}, @generic={0x4d, 0x10, 0x1, "02447d08334bea7b1d94d35f8620b1a756e793ca3a663e4917f621b68f2e0b08b094da0a25f2d4c19ef1c368e16c11bd31d59bbe0dfcc0fb33291a7f013e709db7e6fea962557c49564b"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write(r3, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 2.181921194s ago: executing program 4 (id=11226): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="240000001e005f02941d00fffffffff802000000dd00000000000000080008000d000000", 0x24) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0x4e20}}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x58, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x35}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x7c5, 0x1, 0x2800, 0xd59f80, 0x1, 0x5, 0xb, 0xb, 0x5, 0x720, 0xe62, 0x7, 0x5, 0xd, 0x13, {0xffffffff, 0x7}, 0x3, 0xec}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r6, 0x1, 0x0, 0x100000, {{}, {}, {0x0, 0x19, {0x1, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x68, r6, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x7, @link='syz1\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x40) 2.060074328s ago: executing program 6 (id=11227): socket$netlink(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) socket(0x10, 0x803, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "0e3ad5de"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x9, 0x4, 0x0, 0xffffffff, 0x8}, 0x0, &(0x7f0000000080)={0x7fc, 0x2, 0x4000000000800000, 0xfffffffffffffffc, 0x0, 0xc3ad, 0x8000000}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.949401619s ago: executing program 4 (id=11228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31030000000000000000090000000800", @ANYRES8=r0, @ANYBLOB="08000300", @ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0) pwritev(r2, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000001080)="2b97", 0x2}], 0x3, 0x0, 0xfffffffe) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31030000000000000000090000000800", @ANYRES8=r0, @ANYBLOB="08000300", @ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0) (async) pwritev(r2, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000001080)="2b97", 0x2}], 0x3, 0x0, 0xfffffffe) (async) 1.779212586s ago: executing program 4 (id=11229): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {0x30000}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0x4d613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 1.369674181s ago: executing program 5 (id=11158): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x9, 0x0, &(0x7f0000000040)) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000022c0)='user\x00', &(0x7f0000002300)={'syz', 0x1}, &(0x7f0000002340)='\\\x00', 0x0) request_key(&(0x7f00000022c0)='user\x00', &(0x7f0000002300)={'syz', 0x1}, 0x0, 0x0) 1.157076586s ago: executing program 5 (id=11231): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dc55) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4300, 0x2}, 0x18, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='.\x02\x00', 0x4) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='.\x02\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0) pwritev(r2, &(0x7f0000001280)=[{0x0}, {&(0x7f0000001080)='+', 0x1}], 0x2, 0x0, 0xfffffffe) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) read$FUSE(r1, &(0x7f0000002a00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$overlay(0x0, &(0x7f0000000080)='.\x02/file0\x00', &(0x7f0000000100), 0x800010, &(0x7f0000000240)={[{@redirect_dir_on}, {@verity_off}], [{@subj_type={'subj_type', 0x3d, '%'}}, {@permit_directio}, {@euid_eq={'euid', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/mISDNtimer\x00'}}, {@obj_type}, {@subj_user={'subj_user', 0x3d, '&^,}($#)'}}]}) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f00000000c0)=0x32) read(r5, &(0x7f00000019c0)=""/4107, 0x100b) close_range(r3, 0xffffffffffffffff, 0x0) 724.401917ms ago: executing program 5 (id=11232): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000400000000002100000008000300", @ANYRES32=r4, @ANYBLOB="10007d80", @ANYRES32=r2, @ANYRESDEC=r1], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) 324.72864ms ago: executing program 5 (id=11233): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_test\x00', [0x4f27, 0x5, 0x10000, 0x2f, 0x66, 0xcc7, 0x0, 0x80007, 0xa, 0x100, 0x2, 0x1, 0x1db, 0x1, 0x2, 0x80000101, 0x5, 0x1a449, 0x3, 0x40020003, 0x2089, 0x2, 0xd27, 0x20001e5c, 0x7fff, 0xe69, 0x3c, 0x1, 0x6, 0x0, 0x1000000]}) (fail_nth: 5) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="0005d30000003b516daeba332f8ffbd823f4196deadd0ff8ec7c22d4e69658fd063f01f5e9a5b664201cf798782731149be25fe16e7fcb21d6ddb6e8f49bb2cd613449017d0f71778ed7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 6 (id=11234): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) tkill(r1, 0x13) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @loopback}}, 0x14) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) gettid() (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) tkill(r1, 0x13) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @loopback}}, 0x14) (async) kernel console output (not intermixed with test programs): 89.694541][ T981] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.710108][ T981] usb 7-1: config 0 descriptor?? [ 1789.763141][T32291] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1789.922315][T32291] usb 4-1: too many configurations: 13, using maximum allowed: 8 [ 1789.935626][T32291] usb 4-1: config 0 has no interfaces? [ 1789.944242][T32291] usb 4-1: config 0 has no interfaces? [ 1789.953519][T32291] usb 4-1: config 0 has no interfaces? [ 1789.962611][T32291] usb 4-1: config 0 has no interfaces? [ 1789.969980][T32291] usb 4-1: config 0 has no interfaces? [ 1789.977859][T32291] usb 4-1: config 0 has no interfaces? [ 1789.986050][T32291] usb 4-1: config 0 has no interfaces? [ 1789.998089][T32291] usb 4-1: config 0 has no interfaces? [ 1790.009662][T32291] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1790.019527][T32291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.028531][T32291] usb 4-1: Product: syz [ 1790.033346][T32291] usb 4-1: Manufacturer: syz [ 1790.038060][T32291] usb 4-1: SerialNumber: syz [ 1790.050761][T32291] usb 4-1: config 0 descriptor?? [ 1790.152458][ T981] keytouch 0003:0926:3333.0087: fixing up Keytouch IEC report descriptor [ 1790.175852][ T981] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0087/input/input217 [ 1790.273817][ T3096] usb 4-1: USB disconnect, device number 6 [ 1790.309540][ T981] keytouch 0003:0926:3333.0087: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 1790.821999][T25332] block nbd0: Possible stuck request ffff8880257de000: control (read@0,1024B). Runtime 240 seconds [ 1790.833351][T25332] block nbd0: Possible stuck request ffff8880257de1c0: control (read@1024,1024B). Runtime 240 seconds [ 1790.846081][T25332] block nbd0: Possible stuck request ffff8880257de380: control (read@2048,1024B). Runtime 240 seconds [ 1790.857201][T25332] block nbd0: Possible stuck request ffff8880257de540: control (read@3072,1024B). Runtime 240 seconds [ 1790.940021][ T10] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 1791.094374][ T10] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1791.103042][ T10] usb 4-1: config 0 has no interface number 0 [ 1791.109247][ T10] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1791.122881][ T10] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 1791.150095][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1791.159328][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.168311][ T10] usb 4-1: Product: syz [ 1791.173047][ T10] usb 4-1: Manufacturer: syz [ 1791.177887][ T10] usb 4-1: SerialNumber: syz [ 1791.187041][ T10] usb 4-1: config 0 descriptor?? [ 1791.194587][ T6568] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1791.209251][ T10] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 1791.370108][T24739] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1791.377088][T16491] Bluetooth: hci5: command 0x1003 tx timeout [ 1791.420340][T18204] usb 4-1: USB disconnect, device number 7 [ 1791.449138][T18204] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 1791.902473][ T6580] netlink: 'syz.5.10478': attribute type 4 has an invalid length. [ 1791.917533][ T6580] netlink: 'syz.5.10478': attribute type 4 has an invalid length. [ 1792.105332][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.222046][T32291] usb 7-1: USB disconnect, device number 90 [ 1792.428745][ T6589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1792.515787][ T6592] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1792.614264][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10485'. [ 1793.221284][T18204] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1793.382972][T18204] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1793.404906][T18204] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1793.426875][T18204] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.472633][T18204] usb 4-1: config 0 descriptor?? [ 1793.568957][ T6628] __vm_enough_memory: pid: 6628, comm: syz.6.10499, bytes: 4503599627366400 not enough memory for the allocation [ 1793.828244][ T6638] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1793.906139][T18204] keytouch 0003:0926:3333.0088: fixing up Keytouch IEC report descriptor [ 1793.918837][T18204] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0088/input/input218 [ 1794.030318][T18204] keytouch 0003:0926:3333.0088: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1794.392649][ T6641] /dev/rnullb0: Can't open blockdev [ 1794.490458][ T6645] netlink: 'syz.6.10505': attribute type 4 has an invalid length. [ 1794.504987][ T6645] netlink: 152 bytes leftover after parsing attributes in process `syz.6.10505'. [ 1794.559632][ T6645] wlan1: mtu less than device minimum [ 1794.679620][ T6652] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10508'. [ 1794.690738][ T6652] netlink: 'syz.5.10508': attribute type 10 has an invalid length. [ 1794.705296][ T6654] loop1: detected capacity change from 0 to 7 [ 1794.714324][T25270] loop1: [POWERTEC] [ 1794.726191][ T6654] loop1: [POWERTEC] [ 1795.826672][ T6671] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1795.827424][ T6674] /dev/rnullb0: Can't open blockdev [ 1796.020191][ T5915] usb 4-1: USB disconnect, device number 8 [ 1796.170097][ T6683] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10519'. [ 1796.362565][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10522'. [ 1797.170544][ T30] audit: type=1800 audit(2000000624.692:284): pid=6716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10532" name="bus" dev="overlay" ino=3108 res=0 errno=0 [ 1797.280563][ T10] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1797.330037][T32291] usb 6-1: new low-speed USB device number 109 using dummy_hcd [ 1797.368269][ T6720] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1797.455118][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1797.468187][ T10] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1797.477455][T32291] usb 6-1: device descriptor read/64, error -71 [ 1797.483778][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.497267][ T10] usb 7-1: config 0 descriptor?? [ 1797.751659][T32291] usb 6-1: new low-speed USB device number 110 using dummy_hcd [ 1797.910194][T32291] usb 6-1: device descriptor read/64, error -71 [ 1797.931356][ T10] keytouch 0003:0926:3333.0089: fixing up Keytouch IEC report descriptor [ 1797.969574][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0089/input/input219 [ 1798.060400][T32291] usb usb6-port1: attempt power cycle [ 1798.121454][ T10] keytouch 0003:0926:3333.0089: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 1798.450122][T32291] usb 6-1: new low-speed USB device number 111 using dummy_hcd [ 1798.474634][T32291] usb 6-1: device descriptor read/8, error -71 [ 1798.560382][T18204] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1798.720162][T18204] usb 4-1: Using ep0 maxpacket: 16 [ 1798.729137][T18204] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1798.740108][T32291] usb 6-1: new low-speed USB device number 112 using dummy_hcd [ 1798.752739][T18204] usb 4-1: config 9 has an invalid interface number: 111 but max is 2 [ 1798.762137][T18204] usb 4-1: config 9 has an invalid interface number: 79 but max is 2 [ 1798.770464][T18204] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1798.781154][T32291] usb 6-1: device descriptor read/8, error -71 [ 1798.782008][T18204] usb 4-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 1798.798427][T18204] usb 4-1: config 9 has no interface number 0 [ 1798.814926][T18204] usb 4-1: config 9 has no interface number 1 [ 1798.821269][T18204] usb 4-1: config 9 interface 111 altsetting 16 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1798.832680][T18204] usb 4-1: config 9 interface 111 altsetting 16 endpoint 0x6 has invalid maxpacket 9887, setting to 1024 [ 1798.844031][T18204] usb 4-1: config 9 interface 111 altsetting 16 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1798.857533][T18204] usb 4-1: config 9 interface 111 altsetting 16 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1798.867938][T18204] usb 4-1: config 9 interface 111 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 1798.879078][T18204] usb 4-1: config 9 interface 79 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1798.890807][T18204] usb 4-1: config 9 interface 79 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1798.902725][T32291] usb usb6-port1: unable to enumerate USB device [ 1798.902829][T18204] usb 4-1: config 9 interface 79 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 1798.922731][T18204] usb 4-1: config 9 interface 79 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 1798.938661][T18204] usb 4-1: config 9 interface 79 altsetting 4 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1798.950649][T18204] usb 4-1: config 9 interface 79 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 1798.962949][T18204] usb 4-1: config 9 interface 79 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 1798.973894][T18204] usb 4-1: config 9 interface 79 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 1798.984707][T18204] usb 4-1: config 9 interface 79 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 1798.995718][T18204] usb 4-1: config 9 interface 79 altsetting 4 bulk endpoint 0x8C has invalid maxpacket 64 [ 1799.006467][T18204] usb 4-1: config 9 interface 79 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 1799.017218][T18204] usb 4-1: config 9 interface 79 altsetting 4 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1799.028305][T18204] usb 4-1: config 9 interface 79 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 1799.039376][T18204] usb 4-1: config 9 interface 79 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 1799.051157][T18204] usb 4-1: config 9 interface 79 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 1799.063988][T18204] usb 4-1: config 9 interface 79 altsetting 4 has 15 endpoint descriptors, different from the interface descriptor's value: 16 [ 1799.077383][T18204] usb 4-1: config 9 interface 111 has no altsetting 0 [ 1799.084402][T18204] usb 4-1: config 9 interface 79 has no altsetting 0 [ 1799.101815][T18204] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a6f, bcdDevice=7a.05 [ 1799.111827][T18204] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.120759][T18204] usb 4-1: Product: syz [ 1799.124966][T18204] usb 4-1: Manufacturer: syz [ 1799.129600][T18204] usb 4-1: SerialNumber: syz [ 1799.138562][T18204] usb 4-1: Interface #111 referenced by multiple IADs [ 1799.147116][ T6727] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1799.538467][T18204] usb 4-1: USB disconnect, device number 9 [ 1799.999652][ T5915] usb 7-1: USB disconnect, device number 91 [ 1800.469506][ T6747] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1800.964532][ T6763] netlink: 'syz.5.10548': attribute type 1 has an invalid length. [ 1800.974981][ T6764] netlink: 'syz.5.10548': attribute type 1 has an invalid length. [ 1801.080129][T18204] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 1801.241994][T18204] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1801.253557][T18204] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1801.270001][ T5893] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1801.294592][T18204] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1801.308833][T18204] usb 7-1: config 0 descriptor?? [ 1801.426836][ T5893] usb 6-1: device descriptor read/64, error -71 [ 1801.680107][ T5893] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1801.750610][T18204] keytouch 0003:0926:3333.008A: fixing up Keytouch IEC report descriptor [ 1801.802987][T18204] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.008A/input/input220 [ 1801.840578][ T5893] usb 6-1: device descriptor read/64, error -71 [ 1801.848878][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10555'. [ 1801.951253][ T5893] usb usb6-port1: attempt power cycle [ 1801.983410][T18204] keytouch 0003:0926:3333.008A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 1801.983883][ T6790] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10556'. [ 1802.276707][ T6794] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1802.340264][ T5893] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1802.362214][ T5893] usb 6-1: device descriptor read/8, error -71 [ 1802.600364][ T5893] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1802.621865][ T5893] usb 6-1: device descriptor read/8, error -71 [ 1802.741022][ T5893] usb usb6-port1: unable to enumerate USB device [ 1803.442126][ T6807] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1803.448622][ T6807] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1803.522072][ T6807] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1803.547996][ T6807] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1803.723785][ T30] audit: type=1800 audit(2000000631.252:285): pid=6812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10563" name="bus" dev="overlay" ino=3197 res=0 errno=0 [ 1803.819664][T18416] usb 7-1: USB disconnect, device number 92 [ 1804.297633][ T6826] /dev/rnullb0: Can't open blockdev [ 1804.551138][ T6828] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1804.932896][ T6833] overlayfs: statfs failed on './file0' [ 1805.300934][T18416] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 1805.449959][T18416] usb 7-1: device descriptor read/64, error -71 [ 1805.460124][T24739] Bluetooth: hci2: command 0x0c1a tx timeout [ 1805.460133][T16491] Bluetooth: hci3: command 0x0405 tx timeout [ 1805.536332][T16491] Bluetooth: hci1: command 0x0406 tx timeout [ 1805.640527][T18204] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1805.662604][ T6843] /dev/rnullb0: Can't open blockdev [ 1805.730208][T18416] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 1805.821436][T18204] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1805.843100][T18204] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1805.869910][T18204] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1805.905521][T18416] usb 7-1: device descriptor read/64, error -71 [ 1805.909487][T18204] usb 6-1: config 0 descriptor?? [ 1806.041767][T18416] usb usb7-port1: attempt power cycle [ 1806.112639][T24739] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1806.130681][T24739] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1806.143959][T24739] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1806.155284][T24739] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1806.165194][T24739] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1806.357235][T18204] keytouch 0003:0926:3333.008B: fixing up Keytouch IEC report descriptor [ 1806.362334][ T6848] lo speed is unknown, defaulting to 1000 [ 1806.388689][T18204] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.008B/input/input221 [ 1806.398864][ T6848] wg0 speed is unknown, defaulting to 1000 [ 1806.430229][T18416] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 1806.470740][T18416] usb 7-1: device descriptor read/8, error -71 [ 1806.541503][T18204] keytouch 0003:0926:3333.008B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1806.740133][T18416] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 1806.773589][T18416] usb 7-1: device descriptor read/8, error -71 [ 1806.891237][T18416] usb usb7-port1: unable to enumerate USB device [ 1807.025345][ T6848] chnl_net:caif_netlink_parms(): no params data found [ 1807.122881][ T6867] /dev/rnullb0: Can't open blockdev [ 1807.252516][ T6871] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1807.272360][ T6848] bridge0: port 1(bridge_slave_0) entered blocking state [ 1807.279710][ T6848] bridge0: port 1(bridge_slave_0) entered disabled state [ 1807.288480][ T6848] bridge_slave_0: entered allmulticast mode [ 1807.300845][ T6848] bridge_slave_0: entered promiscuous mode [ 1807.321758][ T6848] bridge0: port 2(bridge_slave_1) entered blocking state [ 1807.329306][ T6848] bridge0: port 2(bridge_slave_1) entered disabled state [ 1807.336992][ T6848] bridge_slave_1: entered allmulticast mode [ 1807.347206][ T6848] bridge_slave_1: entered promiscuous mode [ 1807.404461][ T6848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1807.418029][ T6848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1807.539156][ T6848] team0: Port device team_slave_0 added [ 1807.561185][ T6848] team0: Port device team_slave_1 added [ 1807.610494][T16491] Bluetooth: hci1: command 0x0406 tx timeout [ 1807.729191][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1807.752777][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1807.784176][ T6848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1807.799808][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1807.808669][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1807.890208][ T6848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1808.008942][ T6874] input: syz1 as /devices/virtual/input/input222 [ 1808.129408][ T6848] hsr_slave_0: entered promiscuous mode [ 1808.151455][ T6848] hsr_slave_1: entered promiscuous mode [ 1808.158412][ T6848] debugfs: 'hsr0' already exists in 'hsr' [ 1808.195808][ T6848] Cannot create hsr debugfs directory [ 1808.216469][ T6876] netlink: 'syz.6.10584': attribute type 10 has an invalid length. [ 1808.235423][ T6876] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10584'. [ 1808.250492][T16491] Bluetooth: hci5: command tx timeout [ 1808.385575][T18204] usb 6-1: USB disconnect, device number 117 [ 1808.498171][ T6883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1808.754528][ T6848] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.862071][T18204] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1808.863938][ T6848] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.970297][ T6848] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.058668][T18204] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1809.072475][T18204] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1809.094172][ T6848] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.105333][T18204] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1809.127704][T18204] usb 6-1: New USB device found, idVendor=1223, idProduct=0107, bcdDevice= 0.00 [ 1809.139359][T18204] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.161542][T18204] usb 6-1: config 0 descriptor?? [ 1809.566358][ T6848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1809.577308][T18204] hid (null): unknown global tag 0xc [ 1809.598101][T18204] hid (null): usage index exceeded [ 1809.605981][ T6848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1809.613269][T18204] hid (null): usage index exceeded [ 1809.619364][T18204] hid (null): unknown global tag 0xc [ 1809.626872][T18204] hid (null): invalid report_size 1078742164 [ 1809.630625][ T6896] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1809.637505][ T6848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1809.655435][T18204] hid (null): unknown global tag 0xc [ 1809.667279][T18204] hid-generic 0003:1223:0107.008C: unknown global tag 0xc [ 1809.681527][T18204] hid-generic 0003:1223:0107.008C: item 0 1 1 12 parsing failed [ 1809.697821][ T6848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1809.708880][T18204] hid-generic 0003:1223:0107.008C: probe with driver hid-generic failed with error -22 [ 1809.962184][T18415] usb 6-1: USB disconnect, device number 118 [ 1810.103779][ T6848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1810.157458][ T6848] 8021q: adding VLAN 0 to HW filter on device team0 [ 1810.197422][ T1253] bridge0: port 1(bridge_slave_0) entered blocking state [ 1810.204664][ T1253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1810.227336][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1810.234659][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1810.331657][T16491] Bluetooth: hci5: command tx timeout [ 1810.808808][ T6848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1810.876972][ T6848] veth0_vlan: entered promiscuous mode [ 1810.896962][ T6848] veth1_vlan: entered promiscuous mode [ 1810.942117][T18204] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 1810.942807][ T6848] veth0_macvtap: entered promiscuous mode [ 1810.963469][ T6848] veth1_macvtap: entered promiscuous mode [ 1810.989438][T18415] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1811.005647][ T6848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1811.026260][ T6848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1811.049397][ T1253] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.059161][ T1253] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.078309][ T1253] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.092401][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.106170][T18204] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1811.117635][T18204] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1811.134900][T18204] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1811.160240][T18204] usb 7-1: config 0 descriptor?? [ 1811.176738][T18415] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1811.184966][T18204] pwc: Askey VC010 type 2 USB webcam detected. [ 1811.197168][T18415] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1811.218892][T18415] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1811.236810][T18415] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1811.249271][T18415] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1811.269686][T18415] usb 6-1: config 0 descriptor?? [ 1811.333717][T15793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1811.352089][T15793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1811.389594][T18204] pwc: send_video_command error -71 [ 1811.402685][T18204] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1811.412981][T18204] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 1811.436199][T15793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1811.442182][T18204] usb 7-1: USB disconnect, device number 97 [ 1811.457497][T15793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1811.717790][T18415] plantronics 0003:047F:FFFF.008D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1811.890029][T18204] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1811.919428][ T6930] binder: 6929:6930 ioctl c0306201 200000000780 returned -14 [ 1811.999921][T18415] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1812.052421][T18204] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1812.053744][ T6926] usb 6-1: USB disconnect, device number 119 [ 1812.075176][T18204] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1812.085016][T18204] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1812.121917][T18204] usb 7-1: config 0 descriptor?? [ 1812.151050][T18204] pwc: Askey VC010 type 2 USB webcam detected. [ 1812.410039][T16491] Bluetooth: hci5: command tx timeout [ 1812.567877][T18204] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1812.588971][T18204] pwc: recv_control_msg error -32 req 02 val 2700 [ 1812.614676][T18204] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1812.652016][T18204] pwc: recv_control_msg error -32 req 04 val 1000 [ 1812.674699][T18204] pwc: recv_control_msg error -32 req 04 val 1300 [ 1812.711785][T18204] pwc: recv_control_msg error -32 req 04 val 1400 [ 1812.721501][T18204] pwc: recv_control_msg error -32 req 02 val 2000 [ 1812.742318][T18204] pwc: recv_control_msg error -32 req 02 val 2100 [ 1812.760843][T18204] pwc: recv_control_msg error -32 req 04 val 1500 [ 1812.773459][T18204] pwc: recv_control_msg error -32 req 02 val 2500 [ 1812.793064][T18204] pwc: recv_control_msg error -32 req 02 val 2400 [ 1812.816599][T18204] pwc: recv_control_msg error -32 req 02 val 2600 [ 1812.905793][T18204] pwc: recv_control_msg error -71 req 02 val 2900 [ 1812.915718][ T6938] binder: BINDER_SET_CONTEXT_MGR already set [ 1812.922277][T18204] pwc: recv_control_msg error -71 req 02 val 2800 [ 1812.922940][T18204] pwc: recv_control_msg error -71 req 04 val 1100 [ 1812.923389][T18204] pwc: recv_control_msg error -71 req 04 val 1200 [ 1812.944844][T18204] pwc: Registered as video103. [ 1812.979644][T18204] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input224 [ 1813.019574][ T6938] binder: 6937:6938 ioctl 4018620d 200000000040 returned -16 [ 1813.035181][ T6938] binder: 6937:6938 ioctl c0306201 200000000780 returned -14 [ 1813.064603][T18204] usb 7-1: USB disconnect, device number 98 [ 1813.217794][ T6942] /dev/rnullb0: Can't open blockdev [ 1813.345735][ T6949] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1813.666787][ T6960] /dev/rnullb0: Can't open blockdev [ 1814.100976][ T6971] program syz.6.10612 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1814.490463][T16491] Bluetooth: hci5: command tx timeout [ 1814.650896][ T3096] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1814.832024][ T3096] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1814.869042][ T3096] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1814.901693][ T3096] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.905393][ T7007] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10623'. [ 1814.939325][ T3096] usb 6-1: config 0 descriptor?? [ 1815.022716][ T7007] netlink: 'syz.3.10623': attribute type 10 has an invalid length. [ 1815.234539][ T7015] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1815.373116][ T3096] keytouch 0003:0926:3333.008E: fixing up Keytouch IEC report descriptor [ 1815.410846][ T3096] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.008E/input/input225 [ 1815.573684][ T3096] keytouch 0003:0926:3333.008E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1815.828557][ T7034] syzkaller1: entered promiscuous mode [ 1815.834306][ T7034] syzkaller1: entered allmulticast mode [ 1815.868358][ T7034] /dev/rnullb0: Can't open blockdev [ 1815.949681][ T7036] netlink: 52 bytes leftover after parsing attributes in process `syz.6.10631'. [ 1815.987835][ T7039] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10633'. [ 1816.249701][ T7045] Falling back ldisc for ttynull. [ 1816.323612][ T7039] hsr_slave_1 (unregistering): left promiscuous mode [ 1816.562065][ T7056] netlink: 'syz.6.10637': attribute type 4 has an invalid length. [ 1816.588660][ T7056] netlink: 'syz.6.10637': attribute type 4 has an invalid length. [ 1816.910603][ T7058] syz.4.10638: vmalloc error: size 108724224, failed to allocated page array size 212352, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1816.931608][ T7058] CPU: 0 UID: 255 PID: 7058 Comm: syz.4.10638 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1816.931635][ T7058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1816.931646][ T7058] Call Trace: [ 1816.931655][ T7058] [ 1816.931663][ T7058] dump_stack_lvl+0x189/0x250 [ 1816.931698][ T7058] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1816.931723][ T7058] ? __pfx__printk+0x10/0x10 [ 1816.931748][ T7058] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1816.931773][ T7058] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1816.931800][ T7058] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1816.931827][ T7058] warn_alloc+0x214/0x310 [ 1816.931854][ T7058] ? __pfx_warn_alloc+0x10/0x10 [ 1816.931885][ T7058] ? __get_vm_area_node+0x28f/0x300 [ 1816.931912][ T7058] ? vb2_vmalloc_alloc+0xef/0x340 [ 1816.931937][ T7058] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1816.932012][ T7058] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1816.932037][ T7058] ? __kasan_kmalloc+0x93/0xb0 [ 1816.932066][ T7058] vmalloc_user_noprof+0xad/0xf0 [ 1816.932084][ T7058] ? vb2_vmalloc_alloc+0xef/0x340 [ 1816.932104][ T7058] vb2_vmalloc_alloc+0xef/0x340 [ 1816.932124][ T7058] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1816.932145][ T7058] __vb2_queue_alloc+0x9bf/0x15a0 [ 1816.932194][ T7058] vb2_core_reqbufs+0xc31/0x1420 [ 1816.932212][ T7058] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1816.932254][ T7058] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1816.932285][ T7058] ? vb2_verify_memory_type+0x1fc/0x570 [ 1816.932307][ T7058] vb2_ioctl_reqbufs+0x4c0/0x830 [ 1816.932341][ T7058] __video_do_ioctl+0xc98/0xdb0 [ 1816.932374][ T7058] ? __pfx___video_do_ioctl+0x10/0x10 [ 1816.932410][ T7058] video_usercopy+0x871/0x14f0 [ 1816.932442][ T7058] ? __pfx___video_do_ioctl+0x10/0x10 [ 1816.932462][ T7058] ? __pfx_video_usercopy+0x10/0x10 [ 1816.932495][ T7058] ? __fget_files+0x2a/0x420 [ 1816.932521][ T7058] ? __fget_files+0x2a/0x420 [ 1816.932541][ T7058] ? __fget_files+0x3a0/0x420 [ 1816.932566][ T7058] v4l2_ioctl+0x18a/0x1e0 [ 1816.932587][ T7058] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1816.932605][ T7058] __se_sys_ioctl+0xfc/0x170 [ 1816.932627][ T7058] do_syscall_64+0xfa/0x3b0 [ 1816.932645][ T7058] ? lockdep_hardirqs_on+0x9c/0x150 [ 1816.932663][ T7058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1816.932680][ T7058] ? clear_bhb_loop+0x60/0xb0 [ 1816.932702][ T7058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1816.932720][ T7058] RIP: 0033:0x7f1185b8e929 [ 1816.932737][ T7058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1816.932753][ T7058] RSP: 002b:00007f1186993038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1816.932773][ T7058] RAX: ffffffffffffffda RBX: 00007f1185db5fa0 RCX: 00007f1185b8e929 [ 1816.932787][ T7058] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000007 [ 1816.932799][ T7058] RBP: 00007f1185c10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1816.932811][ T7058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1816.932822][ T7058] R13: 0000000000000000 R14: 00007f1185db5fa0 R15: 00007ffe087c0978 [ 1816.932854][ T7058] [ 1816.932863][ T7058] Mem-Info: [ 1817.270817][ T7058] active_anon:9535 inactive_anon:0 isolated_anon:0 [ 1817.270817][ T7058] active_file:9398 inactive_file:62722 isolated_file:0 [ 1817.270817][ T7058] unevictable:2816 dirty:131 writeback:0 [ 1817.270817][ T7058] slab_reclaimable:14037 slab_unreclaimable:130492 [ 1817.270817][ T7058] mapped:31584 shmem:1410 pagetables:1819 [ 1817.270817][ T7058] sec_pagetables:0 bounce:0 [ 1817.270817][ T7058] kernel_misc_reclaimable:0 [ 1817.270817][ T7058] free:1227173 free_pcp:11724 free_cma:0 [ 1817.323151][ T7058] Node 0 active_anon:38168kB inactive_anon:0kB active_file:37592kB inactive_file:250608kB unevictable:9728kB isolated(anon):0kB isolated(file):0kB mapped:126240kB dirty:520kB writeback:0kB shmem:4104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16660kB pagetables:7228kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1817.380810][ T7058] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:280kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:80kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1817.426895][ T6926] usb 6-1: USB disconnect, device number 120 [ 1817.452571][ T7058] Node 0 DMA free:15356kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1817.490560][ T7058] lowmem_reserve[]: 0 2496 2497 2497 2497 [ 1817.496798][ T7058] Node 0 DMA32 free:982988kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38024kB inactive_anon:0kB active_file:37592kB inactive_file:249528kB unevictable:9728kB writepending:516kB present:3129332kB managed:2556404kB mlocked:8192kB bounce:0kB free_pcp:46176kB local_pcp:30360kB free_cma:0kB [ 1817.600393][ T7071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10643'. [ 1817.626602][ T7071] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10643'. [ 1817.628233][ T7058] lowmem_reserve[]: 0 0 1 1 1 [ 1817.648608][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10643'. [ 1817.655202][ T7058] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1080kB unevictable:0kB writepending:4kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1817.701990][ T7073] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1817.714904][ T7058] lowmem_reserve[]: 0 0 0 0 0 [ 1817.719743][ T7058] Node 1 Normal free:3912220kB boost:0kB min:55672kB low:69588kB high:83504kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:280kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:96kB local_pcp:96kB free_cma:0kB [ 1817.785761][ T7058] lowmem_reserve[]: 0 0 0 0 0 [ 1817.797914][ T7058] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 1817.826043][ T7058] Node 0 DMA32: 53*4kB (ME) 1652*8kB (UM) 1345*16kB (UME) 1994*32kB (UM) 2121*64kB (UME) 790*128kB (UM) 289*256kB (UME) 86*512kB (UME) 17*1024kB (UME) 10*2048kB (ME) 120*4096kB (UM) = 983044kB [ 1817.830821][ T7076] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1817.852083][ T7058] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1817.867322][ T7058] Node 1 Normal: 173*4kB (UME) 43*8kB (UME) 45*16kB (UE) 200*32kB (UME) 81*64kB (UME) 36*128kB (UME) 20*256kB (UME) 8*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3912220kB [ 1817.892096][ T7058] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1817.904413][ T7058] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=4 hugepages_size=2048kB [ 1817.914544][ T7058] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1817.926091][ T7058] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1817.936600][ T7058] 73526 total pagecache pages [ 1817.941943][ T7058] 0 pages in swap cache [ 1817.947317][ T7058] Free swap = 124996kB [ 1817.952045][ T7058] Total swap = 124996kB [ 1817.956318][ T7058] 2097051 pages RAM [ 1817.960969][ T7058] 0 pages HighMem/MovableOnly [ 1817.965804][ T7058] 426036 pages reserved [ 1817.970773][ T7058] 0 pages cma reserved [ 1818.169639][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10646'. [ 1818.385237][ T7085] /dev/rnullb0: Can't open blockdev [ 1818.526958][ T7089] PKCS7: Unknown OID: [4] 0.0 [ 1818.546491][ T7089] PKCS7: Only support pkcs7_signedData type [ 1818.567247][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10650'. [ 1818.602501][ T7093] /dev/rnullb0: Can't open blockdev [ 1818.880245][ T6926] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1818.909948][ T3096] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1819.020084][ T6926] usb 4-1: device descriptor read/64, error -71 [ 1819.085305][ T3096] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1819.109684][ T3096] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1819.130152][ T3096] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.147648][ T3096] usb 6-1: config 0 descriptor?? [ 1819.156743][ T7107] FAULT_INJECTION: forcing a failure. [ 1819.156743][ T7107] name failslab, interval 1, probability 0, space 0, times 0 [ 1819.185935][ T7107] CPU: 1 UID: 0 PID: 7107 Comm: syz.4.10657 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1819.185965][ T7107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1819.185977][ T7107] Call Trace: [ 1819.185986][ T7107] [ 1819.185995][ T7107] dump_stack_lvl+0x189/0x250 [ 1819.186036][ T7107] ? __pfx____ratelimit+0x10/0x10 [ 1819.186063][ T7107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1819.186090][ T7107] ? __pfx__printk+0x10/0x10 [ 1819.186134][ T7107] should_fail_ex+0x414/0x560 [ 1819.186169][ T7107] should_failslab+0xa8/0x100 [ 1819.186191][ T7107] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1819.186217][ T7107] ? skb_clone+0x212/0x3a0 [ 1819.186247][ T7107] skb_clone+0x212/0x3a0 [ 1819.186275][ T7107] __netlink_deliver_tap+0x404/0x850 [ 1819.186311][ T7107] ? netlink_deliver_tap+0x2e/0x1b0 [ 1819.186334][ T7107] netlink_deliver_tap+0x19c/0x1b0 [ 1819.186357][ T7107] netlink_dump+0x91c/0xe60 [ 1819.186391][ T7107] ? __pfx_netlink_dump+0x10/0x10 [ 1819.186428][ T7107] ? kmem_cache_free+0x18f/0x400 [ 1819.186462][ T7107] netlink_recvmsg+0x676/0xa30 [ 1819.186495][ T7107] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1819.186522][ T7107] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1819.186548][ T7107] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1819.186570][ T7107] ? security_socket_recvmsg+0x7e/0x2e0 [ 1819.186598][ T7107] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1819.186620][ T7107] sock_recvmsg+0x22c/0x270 [ 1819.186654][ T7107] sock_read_iter+0x231/0x2f0 [ 1819.186684][ T7107] ? __pfx_sock_read_iter+0x10/0x10 [ 1819.186724][ T7107] ? bpf_lsm_file_permission+0x9/0x20 [ 1819.186748][ T7107] ? security_file_permission+0x75/0x290 [ 1819.186778][ T7107] vfs_read+0x4d0/0x980 [ 1819.186809][ T7107] ? __pfx_vfs_read+0x10/0x10 [ 1819.186843][ T7107] ? __fget_files+0x2a/0x420 [ 1819.186879][ T7107] ksys_read+0x145/0x250 [ 1819.186902][ T7107] ? __pfx_ksys_read+0x10/0x10 [ 1819.186920][ T7107] ? rcu_is_watching+0x15/0xb0 [ 1819.186950][ T7107] ? do_syscall_64+0xbe/0x3b0 [ 1819.186975][ T7107] do_syscall_64+0xfa/0x3b0 [ 1819.186993][ T7107] ? lockdep_hardirqs_on+0x9c/0x150 [ 1819.187012][ T7107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1819.187038][ T7107] ? clear_bhb_loop+0x60/0xb0 [ 1819.187062][ T7107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1819.187081][ T7107] RIP: 0033:0x7f1185b8e929 [ 1819.187098][ T7107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1819.187115][ T7107] RSP: 002b:00007f1186993038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1819.187137][ T7107] RAX: ffffffffffffffda RBX: 00007f1185db5fa0 RCX: 00007f1185b8e929 [ 1819.187151][ T7107] RDX: 00000000000000f5 RSI: 0000200000000080 RDI: 0000000000000003 [ 1819.187164][ T7107] RBP: 00007f1186993090 R08: 0000000000000000 R09: 0000000000000000 [ 1819.187176][ T7107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1819.187188][ T7107] R13: 0000000000000000 R14: 00007f1185db5fa0 R15: 00007ffe087c0978 [ 1819.187221][ T7107] [ 1819.481789][ C1] vkms_vblank_simulate: vblank timer overrun [ 1819.559930][ T6926] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1819.646871][ T7111] loop2: detected capacity change from 0 to 7 [ 1819.651295][ T7113] binder: BINDER_SET_CONTEXT_MGR already set [ 1819.659732][ T7113] binder: 7112:7113 ioctl 4018620d 200000000040 returned -16 [ 1819.663650][ T7111] Dev loop2: unable to read RDB block 7 [ 1819.684177][ T7111] loop2: AHDI p1 p2 p3 [ 1819.691158][ T6926] usb 4-1: device descriptor read/64, error -71 [ 1819.695360][ T7111] loop2: partition table partially beyond EOD, truncated [ 1819.706888][ T7111] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1819.714154][ T7111] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1819.815332][ T6926] usb usb4-port1: attempt power cycle [ 1819.836186][ T3096] keytouch 0003:0926:3333.008F: fixing up Keytouch IEC report descriptor [ 1819.870115][ T3096] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.008F/input/input226 [ 1820.047508][ T3096] keytouch 0003:0926:3333.008F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1820.170387][ T6926] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1820.231811][ T6926] usb 4-1: device descriptor read/8, error -71 [ 1820.264304][ T7125] netlink: 'syz.6.10663': attribute type 4 has an invalid length. [ 1820.283070][ T7125] netlink: 152 bytes leftover after parsing attributes in process `syz.6.10663'. [ 1820.319072][ T7125] wlan1: mtu less than device minimum [ 1820.408291][ T7129] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10665'. [ 1820.421280][ T7129] netlink: 'syz.4.10665': attribute type 10 has an invalid length. [ 1820.470005][ T6926] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1820.499170][ T6926] usb 4-1: device descriptor read/8, error -71 [ 1820.528531][ T7131] loop1: detected capacity change from 0 to 7 [ 1820.536921][ T7131] loop1: [POWERTEC] [ 1820.640179][ T6926] usb usb4-port1: unable to enumerate USB device [ 1820.893184][T25332] block nbd0: Possible stuck request ffff8880257de000: control (read@0,1024B). Runtime 270 seconds [ 1820.904320][T25332] block nbd0: Possible stuck request ffff8880257de1c0: control (read@1024,1024B). Runtime 270 seconds [ 1820.916417][T25332] block nbd0: Possible stuck request ffff8880257de380: control (read@2048,1024B). Runtime 270 seconds [ 1820.929786][T25332] block nbd0: Possible stuck request ffff8880257de540: control (read@3072,1024B). Runtime 270 seconds [ 1821.087170][ T7148] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10673'. [ 1821.246624][ T7150] /dev/rnullb0: Can't open blockdev [ 1821.760549][T18415] usb 6-1: USB disconnect, device number 121 [ 1822.116873][ T30] audit: type=1800 audit(2000000649.642:286): pid=7176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.10685" name="bus" dev="overlay" ino=2552 res=0 errno=0 [ 1822.241310][ T5942] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1822.429908][ T5942] usb 4-1: Using ep0 maxpacket: 8 [ 1822.447340][ T5942] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1822.478214][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.497768][ T5942] usb 4-1: Product: syz [ 1822.512598][ T5942] usb 4-1: Manufacturer: syz [ 1822.517476][ T5942] usb 4-1: SerialNumber: syz [ 1822.528827][ T5942] usb 4-1: config 0 descriptor?? [ 1822.660285][T18204] usb 6-1: new full-speed USB device number 122 using dummy_hcd [ 1822.720249][ T3096] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1822.744216][ T5942] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1822.800518][T18204] usb 6-1: device descriptor read/64, error -71 [ 1822.882015][ T3096] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1822.896174][ T3096] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1822.905756][ T3096] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1822.929496][ T3096] usb 7-1: config 0 descriptor?? [ 1823.040124][T18204] usb 6-1: new full-speed USB device number 123 using dummy_hcd [ 1823.173006][T18204] usb 6-1: device descriptor read/64, error -71 [ 1823.283904][T18204] usb usb6-port1: attempt power cycle [ 1823.351351][ T3096] keytouch 0003:0926:3333.0090: fixing up Keytouch IEC report descriptor [ 1823.372852][ T3096] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0090/input/input227 [ 1823.485428][ T3096] keytouch 0003:0926:3333.0090: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 1823.630374][T18204] usb 6-1: new full-speed USB device number 124 using dummy_hcd [ 1823.663323][T18204] usb 6-1: device descriptor read/8, error -71 [ 1823.914675][T18204] usb 6-1: new full-speed USB device number 125 using dummy_hcd [ 1823.941965][T18204] usb 6-1: device descriptor read/8, error -71 [ 1824.050495][T18204] usb usb6-port1: unable to enumerate USB device [ 1824.180333][ T5942] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1824.199038][ T5942] usb 4-1: USB disconnect, device number 15 [ 1824.926062][ T7222] /dev/rnullb0: Can't open blockdev [ 1825.082013][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10704'. [ 1825.242790][ T7234] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10706'. [ 1825.493705][ T5942] usb 7-1: USB disconnect, device number 99 [ 1825.749623][ T30] audit: type=1800 audit(2000000653.272:287): pid=7247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10710" name="bus" dev="overlay" ino=1460 res=0 errno=0 [ 1825.812242][ T7249] tipc: MTU too low for tipc bearer [ 1825.825465][ T7249] /dev/rnullb0: Can't open blockdev [ 1826.183100][ T7259] overlayfs: statfs failed on './file0' [ 1826.462407][ T7274] syz_tun: entered allmulticast mode [ 1826.488582][ T7277] input: syz1 as /devices/virtual/input/input228 [ 1826.619611][ T7281] /dev/rnullb0: Can't open blockdev [ 1826.781916][ T5942] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1826.953813][ T5942] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1826.991529][ T5942] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 1827.023053][ T5942] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1827.041369][ T5942] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.049430][ T5942] usb 7-1: Product: syz [ 1827.063592][ T5942] usb 7-1: Manufacturer: syz [ 1827.068345][ T5942] usb 7-1: SerialNumber: syz [ 1827.259785][ T7273] syz_tun: left allmulticast mode [ 1827.443836][ T7270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1827.454741][ T7270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1827.660795][ T5942] cdc_ncm 7-1:1.0: bind() failure [ 1827.685955][ T5942] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1827.696311][ T5942] cdc_ncm 7-1:1.1: bind() failure [ 1827.713343][ T5942] usb 7-1: USB disconnect, device number 100 [ 1827.832151][ T7303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10732'. [ 1827.843270][ T7303] /dev/rnullb0: Can't open blockdev [ 1827.976524][ T7305] binder: BINDER_SET_CONTEXT_MGR already set [ 1827.985861][ T7305] binder: 7304:7305 ioctl 4018620d 200000000040 returned -16 [ 1828.472106][ T5893] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1828.540394][ T5942] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1828.610154][ T5893] usb 6-1: device descriptor read/64, error -71 [ 1828.702451][ T5942] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1828.733694][ T5942] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1828.758513][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1828.816174][ T5942] usb 4-1: config 0 descriptor?? [ 1828.835901][ T5942] pwc: Askey VC010 type 2 USB webcam detected. [ 1828.850038][ T5893] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1829.002758][ T5893] usb 6-1: device descriptor read/64, error -71 [ 1829.043238][ T5942] pwc: send_video_command error -71 [ 1829.056529][ T5942] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1829.077242][ T5942] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1829.091207][ T5942] usb 4-1: USB disconnect, device number 16 [ 1829.133869][ T5893] usb usb6-port1: attempt power cycle [ 1829.489945][ T5893] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1829.520815][ T5893] usb 6-1: device descriptor read/8, error -71 [ 1829.565902][ T5942] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1829.751654][ T5942] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1829.762593][ T5942] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1829.773182][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.792837][ T5893] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1829.794210][ T5942] usb 4-1: config 0 descriptor?? [ 1829.831338][ T5893] usb 6-1: device descriptor read/8, error -71 [ 1829.833737][ T5942] pwc: Askey VC010 type 2 USB webcam detected. [ 1829.960885][ T5893] usb usb6-port1: unable to enumerate USB device [ 1830.170766][ T10] usb 7-1: new full-speed USB device number 101 using dummy_hcd [ 1830.237129][ T5942] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1830.244926][ T5942] pwc: recv_control_msg error -32 req 02 val 2700 [ 1830.255048][ T5942] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1830.263190][ T5942] pwc: recv_control_msg error -32 req 04 val 1000 [ 1830.271053][ T5942] pwc: recv_control_msg error -32 req 04 val 1300 [ 1830.278065][ T5942] pwc: recv_control_msg error -32 req 04 val 1400 [ 1830.287887][ T5942] pwc: recv_control_msg error -32 req 02 val 2000 [ 1830.295608][ T5942] pwc: recv_control_msg error -32 req 02 val 2100 [ 1830.303171][ T5942] pwc: recv_control_msg error -32 req 04 val 1500 [ 1830.311379][ T5942] pwc: recv_control_msg error -32 req 02 val 2500 [ 1830.320037][ T10] usb 7-1: device descriptor read/64, error -71 [ 1830.519061][ T5942] pwc: recv_control_msg error -32 req 02 val 2600 [ 1830.567695][ T10] usb 7-1: new full-speed USB device number 102 using dummy_hcd [ 1830.700186][ T10] usb 7-1: device descriptor read/64, error -71 [ 1830.728609][ T5942] pwc: recv_control_msg error -71 req 02 val 2800 [ 1830.737452][ T5942] pwc: recv_control_msg error -71 req 04 val 1100 [ 1830.744495][ T5942] pwc: recv_control_msg error -71 req 04 val 1200 [ 1830.757384][ T5942] pwc: Registered as video103. [ 1830.786847][ T5942] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input229 [ 1830.813012][ T10] usb usb7-port1: attempt power cycle [ 1830.827882][ T5942] usb 4-1: USB disconnect, device number 17 [ 1831.180383][ T10] usb 7-1: new full-speed USB device number 103 using dummy_hcd [ 1831.211980][ T10] usb 7-1: device descriptor read/8, error -71 [ 1831.373339][ T7348] syz.3.10753 uses old SIOCAX25GETINFO [ 1831.450081][ T10] usb 7-1: new full-speed USB device number 104 using dummy_hcd [ 1831.485813][ T10] usb 7-1: device descriptor read/8, error -71 [ 1831.601162][ T10] usb usb7-port1: unable to enumerate USB device [ 1831.740305][T32291] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1831.905982][T32291] usb 4-1: Using ep0 maxpacket: 8 [ 1831.914802][T32291] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1831.926801][T32291] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1831.940549][T32291] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1831.950620][T32291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.958897][T32291] usb 4-1: Product: syz [ 1831.963354][T32291] usb 4-1: Manufacturer: syz [ 1831.968048][T32291] usb 4-1: SerialNumber: syz [ 1832.186668][ T7354] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10756'. [ 1832.201444][T32291] usb 4-1: skipping empty audio interface (v1) [ 1832.246616][T32291] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1832.272432][T32291] usb 4-1: USB disconnect, device number 18 [ 1832.308807][T25270] udevd[25270]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1832.901457][T18204] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1833.060221][ T5893] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1833.073105][T18204] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1833.084727][T18204] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1833.095201][T18204] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.108012][T18204] usb 6-1: config 0 descriptor?? [ 1833.169196][ T7377] netlink: 132 bytes leftover after parsing attributes in process `syz.6.10764'. [ 1833.222195][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 1833.235983][ T5893] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1833.246241][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1833.262671][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1833.274390][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1833.284973][ T5893] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 1833.295805][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1833.308480][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDD, changing to 0x8D [ 1833.321013][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1833.343397][ T5893] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1833.362114][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.371551][ T5893] usb 4-1: Product: syz [ 1833.375809][ T5893] usb 4-1: Manufacturer: syz [ 1833.383253][ T7383] FAULT_INJECTION: forcing a failure. [ 1833.383253][ T7383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1833.396681][ T5893] usb 4-1: SerialNumber: syz [ 1833.397662][ T7383] CPU: 0 UID: 0 PID: 7383 Comm: syz.6.10765 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1833.397686][ T7383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1833.397698][ T7383] Call Trace: [ 1833.397705][ T7383] [ 1833.397713][ T7383] dump_stack_lvl+0x189/0x250 [ 1833.397742][ T7383] ? __pfx____ratelimit+0x10/0x10 [ 1833.397762][ T7383] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1833.397786][ T7383] ? __pfx__printk+0x10/0x10 [ 1833.397823][ T7383] should_fail_ex+0x414/0x560 [ 1833.397863][ T7383] _copy_to_user+0x31/0xb0 [ 1833.397890][ T7383] simple_read_from_buffer+0xe1/0x170 [ 1833.397916][ T7383] proc_fail_nth_read+0x1df/0x250 [ 1833.397944][ T7383] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1833.397971][ T7383] ? rw_verify_area+0x2a6/0x4d0 [ 1833.397988][ T7383] ? __lock_acquire+0xab9/0xd20 [ 1833.398007][ T7383] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1833.398032][ T7383] vfs_read+0x1fd/0x980 [ 1833.398057][ T7383] ? __pfx___mutex_lock+0x10/0x10 [ 1833.398075][ T7383] ? __pfx_vfs_read+0x10/0x10 [ 1833.398096][ T7383] ? __fget_files+0x2a/0x420 [ 1833.398122][ T7383] ? __fget_files+0x3a0/0x420 [ 1833.398142][ T7383] ? __fget_files+0x2a/0x420 [ 1833.398172][ T7383] ksys_read+0x145/0x250 [ 1833.398194][ T7383] ? __pfx_ksys_read+0x10/0x10 [ 1833.398209][ T7383] ? rcu_is_watching+0x15/0xb0 [ 1833.398236][ T7383] ? do_syscall_64+0xbe/0x3b0 [ 1833.398259][ T7383] do_syscall_64+0xfa/0x3b0 [ 1833.398275][ T7383] ? lockdep_hardirqs_on+0x9c/0x150 [ 1833.398292][ T7383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1833.398309][ T7383] ? clear_bhb_loop+0x60/0xb0 [ 1833.398331][ T7383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1833.398347][ T7383] RIP: 0033:0x7f633298d33c [ 1833.398364][ T7383] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1833.398379][ T7383] RSP: 002b:00007f633380c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1833.398399][ T7383] RAX: ffffffffffffffda RBX: 00007f6332bb5fa0 RCX: 00007f633298d33c [ 1833.398412][ T7383] RDX: 000000000000000f RSI: 00007f633380c0a0 RDI: 0000000000000004 [ 1833.398423][ T7383] RBP: 00007f633380c090 R08: 0000000000000000 R09: 0000000000000000 [ 1833.398434][ T7383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1833.398445][ T7383] R13: 0000000000000000 R14: 00007f6332bb5fa0 R15: 00007ffc0b512568 [ 1833.398474][ T7383] [ 1833.663485][ T5893] usb 4-1: config 0 descriptor?? [ 1833.675340][ T7371] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1833.697030][ T5893] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1833.714138][T18204] keytouch 0003:0926:3333.0091: fixing up Keytouch IEC report descriptor [ 1833.770271][T18204] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0091/input/input230 [ 1833.963542][T18204] keytouch 0003:0926:3333.0091: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1833.965700][ T7371] fuse: Bad value for 'user_id' [ 1834.004578][T24972] udevd[24972]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1834.007477][ T7371] fuse: Bad value for 'user_id' [ 1834.076502][T18204] usb 4-1: USB disconnect, device number 19 [ 1834.713398][ T7396] loop1: detected capacity change from 0 to 7 [ 1834.733316][T25270] loop1: [POWERTEC] [ 1834.738514][ T7398] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10769'. [ 1834.754035][ T7396] loop1: [POWERTEC] [ 1834.767009][ T7398] netlink: 'syz.3.10769': attribute type 10 has an invalid length. [ 1834.994857][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10773'. [ 1835.528836][ T7422] netlink: 'syz.4.10781': attribute type 1 has an invalid length. [ 1835.545333][ T7422] netlink: 'syz.4.10781': attribute type 2 has an invalid length. [ 1835.572039][ T7422] /dev/rnullb0: Can't open blockdev [ 1835.587926][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10781'. [ 1835.601751][ T7422] openvswitch: netlink: nsh attr 0 has unexpected len 21 expected 0 [ 1835.615602][ T7422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1835.709267][ T5893] usb 6-1: USB disconnect, device number 4 [ 1835.869128][ T7429] /dev/rnullb0: Can't open blockdev [ 1835.984586][ T7434] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.10786'. [ 1836.058398][ T7437] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10787'. [ 1836.172123][ T7444] qrtr: Invalid version 24 [ 1836.179526][ T7444] qrtr: Invalid version 56 [ 1836.423211][ T5893] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1836.457809][ T30] audit: type=1800 audit(2000000663.972:288): pid=7451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10792" name="bus" dev="overlay" ino=283 res=0 errno=0 [ 1836.600235][ T5893] usb 7-1: Using ep0 maxpacket: 16 [ 1836.623885][ T5893] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 1836.649919][ T5893] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 1836.658288][ T5893] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 1836.698584][ T5893] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 1836.719588][ T5893] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1836.746164][ T5893] usb 7-1: config 0 has no interface number 0 [ 1836.754108][ T5893] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1836.770415][ T5893] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1836.781312][ T5893] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid maxpacket 65517, setting to 64 [ 1836.798431][ T5893] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1836.812115][ T5893] usb 7-1: config 0 interface 125 has no altsetting 0 [ 1836.818946][ T5893] usb 7-1: config 0 interface 125 has no altsetting 2 [ 1836.847890][ T5893] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1836.859108][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.867571][ T5893] usb 7-1: Product: syz [ 1836.872229][ T5893] usb 7-1: Manufacturer: syz [ 1836.876875][ T5893] usb 7-1: SerialNumber: syz [ 1836.897563][ T5893] usb 7-1: config 0 descriptor?? [ 1836.908043][ T5893] usb 7-1: selecting invalid altsetting 2 [ 1836.915224][ T7461] /dev/rnullb0: Can't open blockdev [ 1836.970119][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1837.129300][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1837.142267][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1837.156963][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.168906][T32291] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1837.181903][ C1] usb 7-1: async_complete: urb error -71 [ 1837.187700][ C1] usb 7-1: async_complete: urb error -71 [ 1837.188474][ T10] usb 4-1: config 0 descriptor?? [ 1837.193570][ C1] usb 7-1: async_complete: urb error -71 [ 1837.193657][ C1] usb 7-1: async_complete: urb error -71 [ 1837.210456][ C1] vkms_vblank_simulate: vblank timer overrun [ 1837.221768][ T5893] get_1284_register: usb error -71 [ 1837.227135][ T5893] uss720 7-1:0.125: probe with driver uss720 failed with error -71 [ 1837.258057][ T5893] usb 7-1: USB disconnect, device number 105 [ 1837.353858][T32291] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1837.363886][T32291] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.377008][T32291] usb 6-1: Product: syz [ 1837.381571][T32291] usb 6-1: Manufacturer: syz [ 1837.386220][T32291] usb 6-1: SerialNumber: syz [ 1837.408289][T32291] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1837.438325][ T6926] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1837.646304][ T10] keytouch 0003:0926:3333.0092: fixing up Keytouch IEC report descriptor [ 1837.667920][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0092/input/input231 [ 1837.810948][ T10] keytouch 0003:0926:3333.0092: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1837.855431][ T5893] usb 6-1: USB disconnect, device number 5 [ 1838.260807][ T7474] netlink: 'syz.6.10802': attribute type 10 has an invalid length. [ 1838.270306][ T7474] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10802'. [ 1838.490414][ T6926] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1838.498229][ T6926] ath9k_htc: Failed to initialize the device [ 1838.537226][ T5893] usb 6-1: ath9k_htc: USB layer deinitialized [ 1838.767266][ T7485] syz.5.10806: attempt to access beyond end of device [ 1838.767266][ T7485] md0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 1838.767305][ T7485] gfs2: error -5 reading superblock [ 1839.149779][ T7489] binder: 7488:7489 ioctl c0306201 200000000780 returned -14 [ 1839.200108][ T6926] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 1839.365192][ T6926] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1839.391824][ T6926] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1839.417670][ T6926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1839.465132][ T6926] usb 7-1: config 0 descriptor?? [ 1839.669145][ T3096] usb 4-1: USB disconnect, device number 20 [ 1839.908356][ T7501] fuse: Bad value for 'group_id' [ 1839.935296][ T7501] fuse: Bad value for 'group_id' [ 1839.946225][ T6926] keytouch 0003:0926:3333.0093: fixing up Keytouch IEC report descriptor [ 1839.987543][ T6926] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0093/input/input232 [ 1840.162163][ T7505] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10814'. [ 1840.173914][ T6926] keytouch 0003:0926:3333.0093: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 1840.295923][ T7505] netlink: 'syz.3.10814': attribute type 10 has an invalid length. [ 1840.509111][ T7517] netlink: 'syz.5.10817': attribute type 4 has an invalid length. [ 1840.542385][ T7517] netlink: 'syz.5.10817': attribute type 4 has an invalid length. [ 1841.857804][ T3096] usb 7-1: USB disconnect, device number 106 [ 1842.204762][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10824'. [ 1842.395461][ T3096] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 1842.572887][ T3096] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1842.595406][ T3096] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1842.595440][ T3096] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.604051][ T3096] usb 7-1: config 0 descriptor?? [ 1842.668762][ T7546] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1842.874827][T18204] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1843.042314][T18204] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1843.056683][T18204] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1843.080310][T18204] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.093621][ T3096] keytouch 0003:0926:3333.0094: fixing up Keytouch IEC report descriptor [ 1843.121013][ T3096] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0094/input/input233 [ 1843.134736][T18204] usb 4-1: config 0 descriptor?? [ 1843.272723][ T3096] keytouch 0003:0926:3333.0094: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 1843.555121][ T7562] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10834'. [ 1843.584261][T18204] keytouch 0003:0926:3333.0095: fixing up Keytouch IEC report descriptor [ 1843.619242][T18204] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0095/input/input234 [ 1843.762259][ T7566] netlink: 'syz.5.10835': attribute type 4 has an invalid length. [ 1843.770822][ T7566] netlink: 152 bytes leftover after parsing attributes in process `syz.5.10835'. [ 1843.785108][ T7566] wlan1: mtu less than device minimum [ 1843.804264][T18204] keytouch 0003:0926:3333.0095: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1844.030655][ T7570] netlink: 52 bytes leftover after parsing attributes in process `syz.5.10836'. [ 1844.053798][ T7570] netlink: 52 bytes leftover after parsing attributes in process `syz.5.10836'. [ 1844.070828][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10836'. [ 1844.485389][ T7576] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10838'. [ 1844.819573][ T7585] /dev/rnullb0: Can't open blockdev [ 1844.905287][ T7587] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10843'. [ 1844.922389][ T7587] netlink: 'syz.5.10843': attribute type 10 has an invalid length. [ 1845.005093][ T7589] loop1: detected capacity change from 0 to 7 [ 1845.017298][ T7589] loop1: [POWERTEC] [ 1845.098825][T18204] usb 7-1: USB disconnect, device number 107 [ 1845.470246][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1845.600196][ T10] usb 6-1: device descriptor read/64, error -71 [ 1845.614473][ T3096] usb 4-1: USB disconnect, device number 21 [ 1845.864160][ T7609] netlink: 'syz.3.10852': attribute type 1 has an invalid length. [ 1845.870211][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1845.873352][ T7609] netlink: 'syz.3.10852': attribute type 1 has an invalid length. [ 1846.010395][ T10] usb 6-1: device descriptor read/64, error -71 [ 1846.130469][ T10] usb usb6-port1: attempt power cycle [ 1846.326272][ T30] audit: type=1800 audit(2000000673.852:289): pid=7621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10857" name="bus" dev="overlay" ino=2718 res=0 errno=0 [ 1846.347110][ C1] vkms_vblank_simulate: vblank timer overrun [ 1846.501825][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1846.543108][ T10] usb 6-1: device descriptor read/8, error -71 [ 1846.703784][ T7633] /dev/rnullb0: Can't open blockdev [ 1846.810628][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1846.853265][ T10] usb 6-1: device descriptor read/8, error -71 [ 1846.971015][ T10] usb usb6-port1: unable to enumerate USB device [ 1847.240965][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10866'. [ 1847.813337][ T7667] comedi comedi1: pcl816: a I/O base address must be specified [ 1848.169988][T32291] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1848.301767][ T7675] program syz.4.10875 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1848.557934][T32291] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1848.570514][T32291] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1848.591309][T32291] usb 4-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 1848.609898][T32291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.619330][T32291] usb 4-1: Product: syz [ 1848.623941][T32291] usb 4-1: Manufacturer: syz [ 1848.628578][T32291] usb 4-1: SerialNumber: syz [ 1848.643189][T32291] usb 4-1: config 0 descriptor?? [ 1848.648952][ T7670] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1848.668803][ T7670] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1848.691025][T32291] option 4-1:0.0: GSM modem (1-port) converter detected [ 1848.713268][T32291] usb 4-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 1848.888102][T32291] usb 4-1: USB disconnect, device number 22 [ 1848.941231][T32291] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 1848.967892][T32291] option 4-1:0.0: device disconnected [ 1849.018590][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10878'. [ 1849.031231][ T7685] /dev/rnullb0: Can't open blockdev [ 1849.790578][ T5893] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1849.940366][ T5893] usb 6-1: device descriptor read/64, error -71 [ 1850.035178][ T7698] comedi comedi1: pcl816: a I/O base address must be specified [ 1850.036168][ T7696] netlink: 'syz.3.10883': attribute type 10 has an invalid length. [ 1850.063283][ T7696] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10883'. [ 1850.177525][ T7702] syzkaller1: entered promiscuous mode [ 1850.177554][ T7702] syzkaller1: entered allmulticast mode [ 1850.180552][ T5893] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1850.313649][ T5893] usb 6-1: device descriptor read/64, error -71 [ 1850.444022][ T5893] usb usb6-port1: attempt power cycle [ 1850.799442][ T5893] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1850.830810][ T5893] usb 6-1: device descriptor read/8, error -71 [ 1850.971004][T25332] block nbd0: Possible stuck request ffff8880257de000: control (read@0,1024B). Runtime 300 seconds [ 1850.982580][T25332] block nbd0: Possible stuck request ffff8880257de1c0: control (read@1024,1024B). Runtime 300 seconds [ 1850.993905][T25332] block nbd0: Possible stuck request ffff8880257de380: control (read@2048,1024B). Runtime 300 seconds [ 1851.005259][T25332] block nbd0: Possible stuck request ffff8880257de540: control (read@3072,1024B). Runtime 300 seconds [ 1851.070098][ T5893] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1851.094432][ T5893] usb 6-1: device descriptor read/8, error -71 [ 1851.211271][ T5893] usb usb6-port1: unable to enumerate USB device [ 1852.045172][ T7725] comedi comedi1: pcl816: a I/O base address must be specified [ 1852.071101][ T7728] /dev/rnullb0: Can't open blockdev [ 1852.272242][ T7732] affs: No valid root block on device nullb0 [ 1852.598480][ T7737] binder: 7735:7737 ioctl c0306201 200000000780 returned -14 [ 1853.046225][ T7760] comedi comedi1: pcl816: a I/O base address must be specified [ 1853.400118][ T5893] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1853.488589][ T7773] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10912'. [ 1853.498429][ T7773] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10912'. [ 1853.513706][ T7773] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10912'. [ 1853.528857][ T7773] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10912'. [ 1853.571925][ T7775] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10913'. [ 1853.593935][ T5893] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 1853.611170][ T5893] usb 4-1: config 0 has no interface number 0 [ 1853.623801][ T5893] usb 4-1: config 0 interface 255 has no altsetting 0 [ 1853.640232][ T5893] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1853.659775][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.701327][ T5893] usb 4-1: config 0 descriptor?? [ 1853.701419][ T7775] netlink: 'syz.4.10913': attribute type 10 has an invalid length. [ 1853.713722][ T5893] cp210x 4-1:0.255: cp210x converter detected [ 1853.757767][ T7783] netlink: 'syz.5.10916': attribute type 4 has an invalid length. [ 1853.806676][ T7783] netlink: 'syz.5.10916': attribute type 4 has an invalid length. [ 1853.920060][ T7763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1853.971037][ T7763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1853.993551][ T7785] /dev/rnullb0: Can't open blockdev [ 1854.074184][ T7790] netlink: 96 bytes leftover after parsing attributes in process `syz.5.10917'. [ 1854.124435][ T7790] gfs2: gfs2 mount does not exist [ 1854.420063][ T5893] cp210x 4-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 1854.830698][ T5893] cp210x 4-1:0.255: GPIO initialisation failed: -19 [ 1854.853129][ T5893] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1854.872474][ T7763] /dev/rnullb0: Can't open blockdev [ 1854.936186][ T5893] usb 4-1: USB disconnect, device number 23 [ 1854.966729][ T5893] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1855.017788][ T5893] cp210x 4-1:0.255: device disconnected [ 1855.133769][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10925'. [ 1855.382511][ T7808] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1855.401971][ T7808] /dev/rnullb0: Can't open blockdev [ 1855.557530][ T7812] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1855.670007][ T30] audit: type=1326 audit(2000000683.192:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.3.10929" exe="/root/syz-executor" sig=31 arch=c000003e syscall=157 compat=0 ip=0x7f7c1ef8e929 code=0x0 [ 1856.010340][ T7785] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1856.643255][ T7840] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1856.677200][ T7842] syz.3.10938: attempt to access beyond end of device [ 1856.677200][ T7842] md0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1856.740188][ T7842] exFAT-fs (md0): unable to read boot sector [ 1856.778967][ T7842] exFAT-fs (md0): failed to read boot sector [ 1856.808764][ T7842] exFAT-fs (md0): failed to recognize exfat type [ 1856.919686][ T7848] netlink: 'syz.5.10940': attribute type 4 has an invalid length. [ 1856.937988][ T7848] netlink: 152 bytes leftover after parsing attributes in process `syz.5.10940'. [ 1856.967500][ T7848] wlan1: mtu less than device minimum [ 1857.078363][ T7851] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10941'. [ 1857.152502][ T7853] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10942'. [ 1857.520133][ T5942] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1857.690607][ T5942] usb 6-1: Using ep0 maxpacket: 32 [ 1857.711716][ T5942] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1857.744298][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1857.774140][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1857.829236][ T5942] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1857.849740][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.877547][ T5942] usb 6-1: config 0 descriptor?? [ 1857.941479][ T7857] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1857.969586][ T5942] hub 6-1:0.0: USB hub found [ 1858.227862][T32291] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1858.259099][ T5942] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 1858.325649][ T5942] usbhid 6-1:0.0: can't add hid device: -71 [ 1858.343737][ T5942] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1858.393341][ T5942] usb 6-1: USB disconnect, device number 14 [ 1858.445053][T32291] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1858.475879][T32291] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1858.520503][T32291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.547275][T32291] usb 4-1: config 0 descriptor?? [ 1858.565729][T32291] pwc: Askey VC010 type 2 USB webcam detected. [ 1858.629573][ T7876] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10951'. [ 1858.668594][ T7876] netlink: 'syz.6.10951': attribute type 10 has an invalid length. [ 1858.682212][ T7878] loop1: detected capacity change from 0 to 7 [ 1858.695506][T25270] loop1: [POWERTEC] [ 1858.730026][ T7878] loop1: [POWERTEC] [ 1858.768045][T32291] pwc: send_video_command error -71 [ 1858.773894][ T5942] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1858.802691][T32291] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1858.820385][T32291] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1858.850107][T32291] usb 4-1: USB disconnect, device number 24 [ 1858.974700][ T5942] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1858.996071][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.060190][ T5942] usb 6-1: config 0 descriptor?? [ 1859.083972][ T5942] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1859.273302][ T5942] gspca_spca508: reg_read err -32 [ 1859.310333][T32291] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1859.336842][ T5942] gspca_spca508: reg_read err -71 [ 1859.349406][ T5942] gspca_spca508: reg_read err -71 [ 1859.360280][ T5942] gspca_spca508: reg_read err -71 [ 1859.382043][ T5942] gspca_spca508: reg_read err -71 [ 1859.401897][ T5942] gspca_spca508: reg write: error -71 [ 1859.407438][ T5942] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 1859.444756][ T5942] usb 6-1: USB disconnect, device number 15 [ 1859.487918][T32291] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1859.508997][T32291] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1859.540091][T32291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.564148][T32291] usb 4-1: config 0 descriptor?? [ 1859.593032][T32291] pwc: Askey VC010 type 2 USB webcam detected. [ 1859.940160][ T5942] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1859.993119][T32291] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1859.993970][T32291] pwc: recv_control_msg error -32 req 02 val 2700 [ 1859.994741][T32291] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1859.995495][T32291] pwc: recv_control_msg error -32 req 04 val 1000 [ 1859.996098][T32291] pwc: recv_control_msg error -32 req 04 val 1300 [ 1859.996830][T32291] pwc: recv_control_msg error -32 req 04 val 1400 [ 1859.997575][T32291] pwc: recv_control_msg error -32 req 02 val 2000 [ 1859.998205][T32291] pwc: recv_control_msg error -32 req 02 val 2100 [ 1860.000420][T32291] pwc: recv_control_msg error -32 req 04 val 1500 [ 1860.001153][T32291] pwc: recv_control_msg error -32 req 02 val 2500 [ 1860.073623][T32291] pwc: recv_control_msg error -32 req 02 val 2400 [ 1860.089563][T32291] pwc: recv_control_msg error -32 req 02 val 2600 [ 1860.160870][ T5942] usb 6-1: Using ep0 maxpacket: 8 [ 1860.173374][ T5942] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1860.183945][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.203840][ T5942] usb 6-1: Product: syz [ 1860.208632][ T5942] usb 6-1: Manufacturer: syz [ 1860.229874][ T5942] usb 6-1: SerialNumber: syz [ 1860.258828][ T7919] FAULT_INJECTION: forcing a failure. [ 1860.258828][ T7919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1860.260222][ T5942] usb 6-1: config 0 descriptor?? [ 1860.288121][ T7919] CPU: 1 UID: 0 PID: 7919 Comm: syz.6.10966 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1860.288150][ T7919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1860.288163][ T7919] Call Trace: [ 1860.288172][ T7919] [ 1860.288182][ T7919] dump_stack_lvl+0x189/0x250 [ 1860.288216][ T7919] ? __pfx____ratelimit+0x10/0x10 [ 1860.288236][ T7919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1860.288263][ T7919] ? __pfx__printk+0x10/0x10 [ 1860.288291][ T7919] ? __might_fault+0xb0/0x130 [ 1860.288334][ T7919] should_fail_ex+0x414/0x560 [ 1860.288370][ T7919] _copy_from_user+0x2d/0xb0 [ 1860.288396][ T7919] comedi_unlocked_ioctl+0x3a9/0xf40 [ 1860.288431][ T7919] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1860.288490][ T7919] ? __lock_acquire+0xab9/0xd20 [ 1860.288534][ T7919] ? __fget_files+0x2a/0x420 [ 1860.288562][ T7919] ? __fget_files+0x2a/0x420 [ 1860.288585][ T7919] ? __fget_files+0x3a0/0x420 [ 1860.288607][ T7919] ? __fget_files+0x2a/0x420 [ 1860.288644][ T7919] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1860.288669][ T7919] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1860.288692][ T7919] __se_sys_ioctl+0xfc/0x170 [ 1860.288715][ T7919] do_syscall_64+0xfa/0x3b0 [ 1860.288735][ T7919] ? lockdep_hardirqs_on+0x9c/0x150 [ 1860.288753][ T7919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1860.288772][ T7919] ? clear_bhb_loop+0x60/0xb0 [ 1860.288797][ T7919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1860.288813][ T7919] RIP: 0033:0x7f633298e929 [ 1860.288832][ T7919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1860.288849][ T7919] RSP: 002b:00007f63337eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1860.288871][ T7919] RAX: ffffffffffffffda RBX: 00007f6332bb6080 RCX: 00007f633298e929 [ 1860.288885][ T7919] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000004 [ 1860.288898][ T7919] RBP: 00007f63337eb090 R08: 0000000000000000 R09: 0000000000000000 [ 1860.288910][ T7919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1860.288922][ T7919] R13: 0000000000000001 R14: 00007f6332bb6080 R15: 00007ffc0b512568 [ 1860.288953][ T7919] [ 1860.296835][ T5942] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1860.526100][T32291] pwc: recv_control_msg error -71 req 02 val 2800 [ 1860.534626][T32291] pwc: recv_control_msg error -71 req 04 val 1100 [ 1860.541682][T32291] pwc: recv_control_msg error -71 req 04 val 1200 [ 1860.553598][T32291] pwc: Registered as video103. [ 1860.567052][T32291] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input235 [ 1860.620492][T32291] usb 4-1: USB disconnect, device number 25 [ 1861.274842][ T3096] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1861.444559][ T3096] usb 4-1: config 2 has an invalid interface number: 220 but max is 2 [ 1861.463024][ T3096] usb 4-1: config 2 has an invalid interface number: 168 but max is 2 [ 1861.463058][ T3096] usb 4-1: config 2 has an invalid interface number: 6 but max is 2 [ 1861.463080][ T3096] usb 4-1: config 2 has an invalid descriptor of length 108, skipping remainder of the config [ 1861.463100][ T3096] usb 4-1: config 2 has no interface number 0 [ 1861.463118][ T3096] usb 4-1: config 2 has no interface number 1 [ 1861.463135][ T3096] usb 4-1: config 2 has no interface number 2 [ 1861.463211][ T3096] usb 4-1: config 2 interface 220 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1861.463238][ T3096] usb 4-1: config 2 interface 220 altsetting 7 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1861.463266][ T3096] usb 4-1: config 2 interface 220 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1861.463307][ T3096] usb 4-1: config 2 interface 6 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1861.463333][ T3096] usb 4-1: config 2 interface 220 has no altsetting 0 [ 1861.463352][ T3096] usb 4-1: config 2 interface 168 has no altsetting 0 [ 1861.463372][ T3096] usb 4-1: config 2 interface 6 has no altsetting 0 [ 1861.467433][ T3096] usb 4-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=51.fd [ 1861.467468][ T3096] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.467490][ T3096] usb 4-1: Product: syz [ 1861.467506][ T3096] usb 4-1: Manufacturer: ะพ [ 1861.467522][ T3096] usb 4-1: SerialNumber: syz [ 1861.479276][ T7933] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1861.795653][ T3096] usb 4-1: USB disconnect, device number 26 [ 1862.246327][ T30] audit: type=1800 audit(2000000689.752:291): pid=7964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10984" name="bus" dev="overlay" ino=1875 res=0 errno=0 [ 1862.366218][ T7966] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10985'. [ 1862.370779][ T7967] /dev/rnullb0: Can't open blockdev [ 1862.383553][ T5942] gspca_sonixj: reg_w1 err -71 [ 1862.400577][ T5942] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 1862.439271][ T5942] usb 6-1: USB disconnect, device number 16 [ 1862.570769][ T7972] /dev/rnullb0: Can't open blockdev [ 1862.709158][ T7978] /dev/rnullb0: Can't open blockdev [ 1863.064402][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10994'. [ 1863.410104][ T3096] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 1863.414251][ T8001] /dev/rnullb0: Can't open blockdev [ 1863.549977][ T3096] usb 7-1: device descriptor read/64, error -71 [ 1863.697920][ T8007] binder: 8006:8007 ioctl c0306201 200000000640 returned -22 [ 1863.800172][ T3096] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 1863.970238][ T3096] usb 7-1: device descriptor read/64, error -71 [ 1864.080420][ T3096] usb usb7-port1: attempt power cycle [ 1864.440088][ T3096] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 1864.460666][ T3096] usb 7-1: device descriptor read/8, error -71 [ 1864.516065][ T8029] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1864.522653][ T8029] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1864.532923][ T8029] vhci_hcd vhci_hcd.0: Device attached [ 1864.710135][ T3096] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 1864.740784][ T3096] usb 7-1: device descriptor read/8, error -71 [ 1864.779961][T18204] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 1864.787538][T24853] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1864.851492][ T3096] usb usb7-port1: unable to enumerate USB device [ 1864.944854][T24853] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1864.954941][T24853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.963064][T24853] usb 4-1: Product: syz [ 1864.967259][T24853] usb 4-1: Manufacturer: syz [ 1864.972479][T24853] usb 4-1: SerialNumber: syz [ 1864.979308][T24853] usb 4-1: config 0 descriptor?? [ 1865.189541][ T8029] /dev/rnullb0: Can't open blockdev [ 1865.212354][T24853] usb 4-1: Firmware version (0.0) predates our first public release. [ 1865.215052][ T8030] usb 39-1: recv xbuf, 0 [ 1865.230310][T24853] usb 4-1: Please update to version 0.2 or newer [ 1865.237437][ T13] vhci_hcd: stop threads [ 1865.246813][ T13] vhci_hcd: release socket [ 1865.267353][ T13] vhci_hcd: disconnect device [ 1865.301143][T18204] vhci_hcd: vhci_device speed not set [ 1865.353759][T24853] usb 4-1: USB disconnect, device number 27 [ 1865.383400][ T8037] netlink: 'syz.5.11012': attribute type 10 has an invalid length. [ 1865.402237][ T8037] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11012'. [ 1866.270310][ T5942] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1866.461327][ T5942] usb 6-1: config 0 has an invalid interface number: 139 but max is 0 [ 1866.496878][ T5942] usb 6-1: config 0 has no interface number 0 [ 1866.523855][ T5942] usb 6-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1866.568640][ T5942] usb 6-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 1866.610115][ T5942] usb 6-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64 [ 1866.616069][ T8064] binder: 8063:8064 ioctl c0306201 200000000780 returned -14 [ 1866.640333][ T5942] usb 6-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1866.696273][ T5942] usb 6-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 1866.706728][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.732581][ T5942] usb 6-1: Product: syz [ 1866.739064][ T5942] usb 6-1: Manufacturer: syz [ 1866.753019][ T5942] usb 6-1: SerialNumber: syz [ 1866.778518][ T5942] usb 6-1: config 0 descriptor?? [ 1866.790698][ T8055] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1866.817288][ T8055] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1867.080112][ T8080] /dev/rnullb0: Can't open blockdev [ 1867.085664][ T8055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1867.116040][ T8055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1867.224919][ T5942] mct_u232 6-1:0.139: MCT U232 converter detected [ 1867.265089][ T5942] usb 6-1: MCT U232 converter now attached to ttyUSB0 [ 1867.301159][ T5942] usb 6-1: USB disconnect, device number 17 [ 1867.343220][ T5942] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 1867.383459][ T5942] mct_u232 6-1:0.139: device disconnected [ 1867.552150][ T8098] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11036'. [ 1867.668665][ T8104] netlink: 'syz.3.11039': attribute type 4 has an invalid length. [ 1867.726509][T16491] Bluetooth: hci1: Invalid handle: 0x20c9 > 0x0eff [ 1867.734091][ T8106] /dev/rnullb0: Can't open blockdev [ 1867.736326][ T8104] netlink: 'syz.3.11039': attribute type 4 has an invalid length. [ 1867.802270][ T8108] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11041'. [ 1867.928366][ T8108] netlink: 'syz.5.11041': attribute type 10 has an invalid length. [ 1867.954883][ T8114] syz.6.11043: attempt to access beyond end of device [ 1867.954883][ T8114] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1867.974369][ T8114] syz.6.11043: attempt to access beyond end of device [ 1867.974369][ T8114] nbd6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1868.223918][ T8126] /dev/rnullb0: Can't open blockdev [ 1868.439594][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11050'. [ 1868.536463][ T8137] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1868.793675][ T8140] /dev/rnullb0: Can't open blockdev [ 1868.982724][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11055'. [ 1869.535644][ T8166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1869.591708][ T8166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1869.641815][ T8171] netlink: 52 bytes leftover after parsing attributes in process `syz.5.11063'. [ 1869.663875][ T8173] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11062'. [ 1869.760075][T18204] usb 7-1: new full-speed USB device number 112 using dummy_hcd [ 1869.867148][ T8178] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1869.952244][T18204] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1869.979957][T18204] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1870.027850][T18204] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1870.027883][T18204] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1870.027904][T18204] usb 7-1: Product: syz [ 1870.027920][T18204] usb 7-1: Manufacturer: syz [ 1870.027935][T18204] usb 7-1: SerialNumber: syz [ 1870.031420][T18204] usb 7-1: config 0 descriptor?? [ 1870.159781][ T8183] mmap: syz.3.11068 (8183): VmData 37859328 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 1870.287443][ T8166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1870.307426][ T8166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1870.433993][ T8194] input: syz1 as /devices/virtual/input/input236 [ 1870.555668][T18204] imon_raw 7-1:0.0: IR endpoint missing [ 1870.586073][T18204] usb 7-1: USB disconnect, device number 112 [ 1870.742160][ T8198] overlayfs: statfs failed on './file0' [ 1870.868054][ T6926] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1871.009992][ T30] audit: type=1326 audit(2000000698.532:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.6.11077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633298e929 code=0x7ffc0000 [ 1871.033304][ T30] audit: type=1326 audit(2000000698.542:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.6.11077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633298e929 code=0x7ffc0000 [ 1871.062200][ T30] audit: type=1326 audit(2000000698.542:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.6.11077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f633298e929 code=0x7ffc0000 [ 1871.084584][ C0] vkms_vblank_simulate: vblank timer overrun [ 1871.099548][ T6926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1871.112114][ T6926] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1871.121536][ T6926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1871.140468][ T30] audit: type=1326 audit(2000000698.672:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.6.11077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633298e929 code=0x7ffc0000 [ 1871.163234][ C0] vkms_vblank_simulate: vblank timer overrun [ 1871.201779][ T6926] usb 4-1: config 0 descriptor?? [ 1871.226460][ T30] audit: type=1326 audit(2000000698.672:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.6.11077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f633292ab19 code=0x7ffc0000 [ 1871.249159][ C0] vkms_vblank_simulate: vblank timer overrun [ 1871.257425][ T981] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1871.279271][ T30] audit: type=1326 audit(2000000698.672:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.6.11077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f633292ab19 code=0x7ffc0000 [ 1871.339504][ T30] audit: type=1326 audit(2000000698.672:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.6.11077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f633292ab19 code=0x7ffc0000 [ 1871.401854][ T30] audit: type=1326 audit(2000000698.672:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.6.11077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f633292ab19 code=0x7ffc0000 [ 1871.448798][ T30] audit: type=1326 audit(2000000698.672:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.6.11077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f633292ab19 code=0x7ffc0000 [ 1871.483175][ T981] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1871.485909][ T30] audit: type=1326 audit(2000000698.672:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.6.11077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f633292ab19 code=0x7ffc0000 [ 1871.568983][ T981] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1871.580229][ T981] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1871.603830][ T981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1871.631878][ T6926] keytouch 0003:0926:3333.0096: fixing up Keytouch IEC report descriptor [ 1871.662253][ T981] usb 6-1: SerialNumber: syz [ 1871.688011][ T6926] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0096/input/input237 [ 1871.711634][ T981] usb 6-1: 0:2 : does not exist [ 1871.748659][ T8217] /dev/rnullb0: Can't open blockdev [ 1871.886005][ T6926] keytouch 0003:0926:3333.0096: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1871.975156][ T8222] syz.4.11082: attempt to access beyond end of device [ 1871.975156][ T8222] loop4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1872.260527][T18204] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 1872.357148][ T8232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11083'. [ 1872.369309][ T8232] netlink: 'syz.4.11083': attribute type 10 has an invalid length. [ 1872.432713][T18204] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1872.445555][T18204] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1872.477097][T18204] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1872.478631][ T8234] loop1: detected capacity change from 0 to 7 [ 1872.504112][ T5893] usb 6-1: USB disconnect, device number 18 [ 1872.504438][ T8234] loop1: [POWERTEC] [ 1872.544694][T18204] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1872.578351][T18204] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1872.604300][T18204] usb 7-1: config 0 descriptor?? [ 1872.722595][ T8236] /dev/rnullb0: Can't open blockdev [ 1873.078598][ T8242] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 1873.096247][T18204] plantronics 0003:047F:FFFF.0097: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1873.097316][ T8242] /dev/rnullb0: Can't open blockdev [ 1873.409727][T18204] usb 7-1: USB disconnect, device number 113 [ 1873.418507][ T8250] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11091'. [ 1873.440578][ T8250] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11091'. [ 1873.576229][ T5893] usb 4-1: USB disconnect, device number 28 [ 1874.125338][ T8271] FAULT_INJECTION: forcing a failure. [ 1874.125338][ T8271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1874.138900][ T8271] CPU: 1 UID: 0 PID: 8271 Comm: syz.5.11098 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1874.138929][ T8271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1874.138941][ T8271] Call Trace: [ 1874.138949][ T8271] [ 1874.138958][ T8271] dump_stack_lvl+0x189/0x250 [ 1874.138990][ T8271] ? __pfx____ratelimit+0x10/0x10 [ 1874.139011][ T8271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1874.139038][ T8271] ? __pfx__printk+0x10/0x10 [ 1874.139065][ T8271] ? __might_fault+0xb0/0x130 [ 1874.139105][ T8271] should_fail_ex+0x414/0x560 [ 1874.139142][ T8271] _copy_from_user+0x2d/0xb0 [ 1874.139171][ T8271] comedi_unlocked_ioctl+0x3a9/0xf40 [ 1874.139207][ T8271] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1874.139266][ T8271] ? __lock_acquire+0xab9/0xd20 [ 1874.139313][ T8271] ? __fget_files+0x2a/0x420 [ 1874.139342][ T8271] ? __fget_files+0x2a/0x420 [ 1874.139364][ T8271] ? __fget_files+0x3a0/0x420 [ 1874.139386][ T8271] ? __fget_files+0x2a/0x420 [ 1874.139414][ T8271] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1874.139440][ T8271] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1874.139463][ T8271] __se_sys_ioctl+0xfc/0x170 [ 1874.139486][ T8271] do_syscall_64+0xfa/0x3b0 [ 1874.139506][ T8271] ? lockdep_hardirqs_on+0x9c/0x150 [ 1874.139525][ T8271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1874.139544][ T8271] ? clear_bhb_loop+0x60/0xb0 [ 1874.139578][ T8271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1874.139597][ T8271] RIP: 0033:0x7f4c8a78e929 [ 1874.139616][ T8271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1874.139633][ T8271] RSP: 002b:00007f4c885d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1874.139656][ T8271] RAX: ffffffffffffffda RBX: 00007f4c8a9b6080 RCX: 00007f4c8a78e929 [ 1874.139671][ T8271] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000004 [ 1874.139685][ T8271] RBP: 00007f4c885d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1874.139698][ T8271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1874.139709][ T8271] R13: 0000000000000001 R14: 00007f4c8a9b6080 R15: 00007fff77f5a6c8 [ 1874.139743][ T8271] [ 1874.640030][ T981] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1874.794218][ T981] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1874.804758][T32291] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 1874.813480][ T981] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1874.825109][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1874.840793][ T981] usb 4-1: config 0 descriptor?? [ 1874.853620][ T981] pwc: Askey VC010 type 2 USB webcam detected. [ 1874.978183][T32291] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1875.007205][T32291] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1875.024513][T32291] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.042355][T32291] usb 7-1: config 0 descriptor?? [ 1875.063805][ T8273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1875.099049][ T8273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1875.125389][ T8283] syz.5.11104: attempt to access beyond end of device [ 1875.125389][ T8283] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1875.146251][ T8283] FAT-fs (nbd5): unable to read boot sector [ 1875.314754][ T8273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1875.360962][ T8273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1875.539310][T32291] keytouch 0003:0926:3333.0098: fixing up Keytouch IEC report descriptor [ 1875.590343][T32291] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0098/input/input239 [ 1875.614126][ T981] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1875.629372][ T981] pwc: recv_control_msg error -32 req 02 val 2700 [ 1875.637313][ T981] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1875.744189][T32291] keytouch 0003:0926:3333.0098: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 1875.841543][T24853] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1875.857584][ T981] pwc: recv_control_msg error -71 req 04 val 1300 [ 1875.871019][ T981] pwc: recv_control_msg error -71 req 04 val 1400 [ 1875.890263][ T981] pwc: recv_control_msg error -71 req 02 val 2000 [ 1875.901818][ T981] pwc: recv_control_msg error -71 req 02 val 2100 [ 1875.913087][ T981] pwc: recv_control_msg error -71 req 04 val 1500 [ 1875.922136][ T981] pwc: recv_control_msg error -71 req 02 val 2500 [ 1875.928995][ T981] pwc: recv_control_msg error -71 req 02 val 2400 [ 1875.946004][ T981] pwc: recv_control_msg error -71 req 02 val 2600 [ 1875.955470][ T981] pwc: recv_control_msg error -71 req 02 val 2900 [ 1875.962918][ T981] pwc: recv_control_msg error -71 req 02 val 2800 [ 1875.970129][ T981] pwc: recv_control_msg error -71 req 04 val 1100 [ 1875.977423][ T981] pwc: recv_control_msg error -71 req 04 val 1200 [ 1875.986617][ T981] pwc: Registered as video103. [ 1875.997480][ T981] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input240 [ 1876.031879][T24853] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1876.036450][ T981] usb 4-1: USB disconnect, device number 29 [ 1876.047558][T24853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1876.097689][T24853] usb 6-1: config 0 descriptor?? [ 1876.548974][T24853] usb 6-1: Cannot set MAC address [ 1876.572846][T24853] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1876.617130][T24853] usb 6-1: USB disconnect, device number 19 [ 1876.849241][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 1876.849261][ T30] audit: type=1326 audit(2000000704.372:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.3.11116" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c1ef8e929 code=0x10000 [ 1877.239406][ T30] audit: type=1800 audit(2000000704.762:375): pid=8319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.11117" name="bus" dev="overlay" ino=3146 res=0 errno=0 [ 1877.467719][ T8321] netlink: 60 bytes leftover after parsing attributes in process `syz.5.11118'. [ 1877.576585][ T981] usb 7-1: USB disconnect, device number 114 [ 1877.751824][ T8323] syz.5.11119: attempt to access beyond end of device [ 1877.751824][ T8323] md0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1877.804241][ T8323] EXT4-fs (md0): unable to read superblock [ 1877.930359][ T8329] netlink: 128 bytes leftover after parsing attributes in process `syz.6.11121'. [ 1877.956368][ T8329] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1878.206659][ T8334] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11124'. [ 1878.300974][ T8339] /dev/rnullb0: Can't open blockdev [ 1878.636721][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11127'. [ 1879.150356][T18204] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1879.322198][T18204] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1879.354788][T18204] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1879.390185][T18204] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.423120][T18204] usb 6-1: config 0 descriptor?? [ 1879.862791][T18204] keytouch 0003:0926:3333.0099: fixing up Keytouch IEC report descriptor [ 1879.890473][T18204] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0099/input/input241 [ 1879.908075][ T8370] /dev/rnullb0: Can't open blockdev [ 1880.052570][T18204] keytouch 0003:0926:3333.0099: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1880.673789][ T8388] /dev/rnullb0: Can't open blockdev [ 1880.844375][ T8397] /dev/rnullb0: Can't open blockdev [ 1881.051821][T25332] block nbd0: Possible stuck request ffff8880257de000: control (read@0,1024B). Runtime 330 seconds [ 1881.063147][T25332] block nbd0: Possible stuck request ffff8880257de1c0: control (read@1024,1024B). Runtime 330 seconds [ 1881.075218][T25332] block nbd0: Possible stuck request ffff8880257de380: control (read@2048,1024B). Runtime 330 seconds [ 1881.087149][T25332] block nbd0: Possible stuck request ffff8880257de540: control (read@3072,1024B). Runtime 330 seconds [ 1881.206749][ T8409] netlink: 'syz.3.11148': attribute type 10 has an invalid length. [ 1881.223611][ T8409] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11148'. [ 1881.317141][ T8413] /dev/rnullb0: Can't open blockdev [ 1881.564652][ T8419] netlink: 6 bytes leftover after parsing attributes in process `syz.6.11153'. [ 1881.648915][ T8421] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1881.674646][ T8420] /dev/rnullb0: Can't open blockdev [ 1881.853213][T24853] usb 6-1: USB disconnect, device number 20 [ 1882.613200][ T8438] binder: 8437:8438 ioctl c0306201 200000000780 returned -14 [ 1882.759969][T32291] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 1882.937607][T32291] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1882.973162][T16491] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1882.986654][T16491] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1882.997078][T32291] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1883.007527][T16491] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1883.013924][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11162'. [ 1883.020411][T32291] usb 7-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 1883.039657][T16491] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1883.058550][T32291] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1883.077887][T16491] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1883.094688][T32291] usb 7-1: config 0 descriptor?? [ 1883.271904][ T8441] lo speed is unknown, defaulting to 1000 [ 1883.353644][T15793] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1883.404761][ T8441] wg0 speed is unknown, defaulting to 1000 [ 1883.537911][T32291] itetech 0003:06CB:2968.009A: hidraw0: USB HID v0.00 Device [HID 06cb:2968] on usb-dummy_hcd.6-1/input0 [ 1883.576881][T15793] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1883.726700][T15793] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1883.728854][ T8436] /dev/rnullb0: Can't open blockdev [ 1883.778261][T18204] usb 7-1: USB disconnect, device number 115 [ 1883.821271][ T981] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1883.908322][T15793] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1884.010509][ T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1884.055849][ T981] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1884.113618][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1884.159408][ T981] usb 4-1: config 0 descriptor?? [ 1884.696060][ T981] keytouch 0003:0926:3333.009B: fixing up Keytouch IEC report descriptor [ 1884.821213][ T981] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.009B/input/input242 [ 1885.030852][ T8441] chnl_net:caif_netlink_parms(): no params data found [ 1885.211544][T24739] Bluetooth: hci2: command tx timeout [ 1885.230240][ T981] keytouch 0003:0926:3333.009B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1885.947859][T15793] bridge_slave_1: left allmulticast mode [ 1885.970227][T15793] bridge_slave_1: left promiscuous mode [ 1885.976336][T15793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1886.002091][T15793] bridge_slave_0: left allmulticast mode [ 1886.007837][T15793] bridge_slave_0: left promiscuous mode [ 1886.020999][T15793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1886.110030][ T8480] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11173'. [ 1886.383211][ T8486] /dev/rnullb0: Can't open blockdev [ 1886.713589][ T981] usb 4-1: USB disconnect, device number 30 [ 1887.029246][ T8498] netlink: 'syz.3.11176': attribute type 4 has an invalid length. [ 1887.087124][ T8499] netlink: 'syz.3.11176': attribute type 4 has an invalid length. [ 1887.265118][T15793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1887.288528][T15793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1887.299611][T24739] Bluetooth: hci2: command tx timeout [ 1887.310553][T15793] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1887.321980][T15793] bond0 (unregistering): Released all slaves [ 1887.588283][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11178'. [ 1887.642091][ T8509] /dev/rnullb0: Can't open blockdev [ 1887.649179][ T8508] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11179'. [ 1887.680510][ T8441] bridge0: port 1(bridge_slave_0) entered blocking state [ 1887.689361][ T8441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1887.697689][ T8441] bridge_slave_0: entered allmulticast mode [ 1887.716633][ T8441] bridge_slave_0: entered promiscuous mode [ 1887.738886][ T8441] bridge0: port 2(bridge_slave_1) entered blocking state [ 1887.748432][ T8441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1887.761542][ T8441] bridge_slave_1: entered allmulticast mode [ 1887.791822][ T8508] netlink: 'syz.6.11179': attribute type 10 has an invalid length. [ 1887.792144][ T8441] bridge_slave_1: entered promiscuous mode [ 1888.023761][ T8441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1888.053530][ T8441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1888.282849][T15793] hsr_slave_0: left promiscuous mode [ 1888.309870][T15793] hsr_slave_1: left promiscuous mode [ 1888.317423][T15793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1888.359966][ T10] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1888.367746][T15793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1888.382681][T15793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1888.400975][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11183'. [ 1888.415738][T15793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1888.498616][T15793] veth1_macvtap: left promiscuous mode [ 1888.530071][T15793] veth0_macvtap: left promiscuous mode [ 1888.537807][T15793] veth1_vlan: left promiscuous mode [ 1888.556950][T15793] veth0_vlan: left promiscuous mode [ 1889.370782][T24739] Bluetooth: hci2: command tx timeout [ 1890.634784][T15793] team0 (unregistering): Port device team_slave_1 removed [ 1890.760230][T15793] team0 (unregistering): Port device team_slave_0 removed [ 1891.181285][ T8541] /dev/rnullb0: Can't open blockdev [ 1891.450628][T16491] Bluetooth: hci2: command tx timeout [ 1892.027318][ T8441] team0: Port device team_slave_0 added [ 1892.149371][ T8441] team0: Port device team_slave_1 added [ 1892.197175][ T8549] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1892.370099][ T8441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1892.377820][ T8441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1892.466860][ T8441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1892.520225][ T8441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1892.527242][ T8441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1892.578784][ T8441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1892.947821][ T8566] /dev/rnullb0: Can't open blockdev [ 1893.171818][ T8441] hsr_slave_0: entered promiscuous mode [ 1893.178862][ T8441] hsr_slave_1: entered promiscuous mode [ 1893.242854][ T8441] debugfs: 'hsr0' already exists in 'hsr' [ 1893.248662][ T8441] Cannot create hsr debugfs directory [ 1893.711729][ T8584] virtio-fs: tag not found [ 1894.230274][ T8598] netlink: 52 bytes leftover after parsing attributes in process `syz.6.11199'. [ 1894.267687][ T8600] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11200'. [ 1894.430265][ T8603] /dev/rnullb0: Can't open blockdev [ 1894.775300][ T8613] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11204'. [ 1894.800612][ T8612] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11204'. [ 1894.831707][ T8613] /dev/rnullb0: Can't open blockdev [ 1895.026755][ T8618] input: syz1 as /devices/virtual/input/input243 [ 1895.197146][ T8441] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1895.226164][ T8622] /dev/rnullb0: Can't open blockdev [ 1895.244406][ T8441] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1895.265943][ T8624] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1895.291917][ T8441] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1895.336399][ T8441] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1895.494356][ T8629] overlayfs: statfs failed on './file0' [ 1895.685412][ T8441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1895.766392][ T8441] 8021q: adding VLAN 0 to HW filter on device team0 [ 1895.793985][ T6537] bridge0: port 1(bridge_slave_0) entered blocking state [ 1895.801265][ T6537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1895.887819][ T6537] bridge0: port 2(bridge_slave_1) entered blocking state [ 1895.895087][ T6537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1896.373760][ T8659] /dev/rnullb0: Can't open blockdev [ 1896.649355][ T8441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1896.871105][ T8676] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1897.168095][ T8682] /dev/rnullb0: Can't open blockdev [ 1897.405902][ T8690] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11218'. [ 1897.456813][ T8690] netlink: 'syz.4.11218': attribute type 10 has an invalid length. [ 1897.714842][ T8697] loop1: detected capacity change from 0 to 7 [ 1897.742481][ T8697] loop1: [POWERTEC] [ 1897.807211][ T8441] veth0_vlan: entered promiscuous mode [ 1897.882915][ T8441] veth1_vlan: entered promiscuous mode [ 1897.996354][ T8441] veth0_macvtap: entered promiscuous mode [ 1898.076764][ T8441] veth1_macvtap: entered promiscuous mode [ 1898.111604][ T8710] gfs2: gfs2 mount does not exist [ 1898.186186][ T8441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1898.261980][ T8441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1898.299959][ T1253] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.362358][ T1253] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.410158][ T1253] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.419032][ T1253] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.560558][T32291] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1898.610489][ T6926] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 1898.658715][ T6537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1898.658742][ T6537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1898.755201][T32291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1898.755259][T32291] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1898.755284][T32291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1898.758800][T32291] usb 4-1: config 0 descriptor?? [ 1898.790307][T24845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1898.790348][T24845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1898.804633][ T6926] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1898.804699][ T6926] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1898.804724][ T6926] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1898.804770][ T6926] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1898.804795][ T6926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1898.819409][ T6926] usb 7-1: config 0 descriptor?? [ 1899.182114][T32291] keytouch 0003:0926:3333.009C: fixing up Keytouch IEC report descriptor [ 1899.280211][T32291] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.009C/input/input245 [ 1899.302128][ T6926] plantronics 0003:047F:FFFF.009D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1899.558545][T32291] keytouch 0003:0926:3333.009C: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1899.695160][T24853] usb 7-1: USB disconnect, device number 116 [ 1900.313150][ T8754] FAULT_INJECTION: forcing a failure. [ 1900.313150][ T8754] name failslab, interval 1, probability 0, space 0, times 0 [ 1900.362608][ T8754] CPU: 0 UID: 0 PID: 8754 Comm: syz.5.11233 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1900.362640][ T8754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1900.362652][ T8754] Call Trace: [ 1900.362662][ T8754] [ 1900.362671][ T8754] dump_stack_lvl+0x189/0x250 [ 1900.362712][ T8754] ? __pfx____ratelimit+0x10/0x10 [ 1900.362733][ T8754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1900.362761][ T8754] ? __pfx__printk+0x10/0x10 [ 1900.362796][ T8754] ? __pfx___might_resched+0x10/0x10 [ 1900.362841][ T8754] ? fs_reclaim_acquire+0x7d/0x100 [ 1900.362868][ T8754] should_fail_ex+0x414/0x560 [ 1900.362904][ T8754] should_failslab+0xa8/0x100 [ 1900.362926][ T8754] __kmalloc_noprof+0xcb/0x4f0 [ 1900.362952][ T8754] ? rcu_is_watching+0x15/0xb0 [ 1900.362972][ T8754] ? comedi_alloc_subdevices+0x4a/0x240 [ 1900.363005][ T8754] comedi_alloc_subdevices+0x4a/0x240 [ 1900.363039][ T8754] waveform_common_attach+0x89/0x800 [ 1900.363075][ T8754] comedi_device_attach+0x51d/0x670 [ 1900.363114][ T8754] comedi_unlocked_ioctl+0x686/0xf40 [ 1900.363149][ T8754] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1900.363210][ T8754] ? __lock_acquire+0xab9/0xd20 [ 1900.363259][ T8754] ? __fget_files+0x2a/0x420 [ 1900.363286][ T8754] ? __fget_files+0x2a/0x420 [ 1900.363310][ T8754] ? __fget_files+0x3a0/0x420 [ 1900.363334][ T8754] ? __fget_files+0x2a/0x420 [ 1900.363362][ T8754] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1900.363389][ T8754] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1900.363414][ T8754] __se_sys_ioctl+0xfc/0x170 [ 1900.363438][ T8754] do_syscall_64+0xfa/0x3b0 [ 1900.363458][ T8754] ? lockdep_hardirqs_on+0x9c/0x150 [ 1900.363477][ T8754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1900.363497][ T8754] ? clear_bhb_loop+0x60/0xb0 [ 1900.363530][ T8754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1900.363549][ T8754] RIP: 0033:0x7fcb9298e929 [ 1900.363567][ T8754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1900.363584][ T8754] RSP: 002b:00007fcb93858038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1900.363606][ T8754] RAX: ffffffffffffffda RBX: 00007fcb92bb6080 RCX: 00007fcb9298e929 [ 1900.363621][ T8754] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000004 [ 1900.363634][ T8754] RBP: 00007fcb93858090 R08: 0000000000000000 R09: 0000000000000000 [ 1900.363647][ T8754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1900.363658][ T8754] R13: 0000000000000001 R14: 00007fcb92bb6080 R15: 00007ffcd0c01558 [ 1900.363690][ T8754] [ 1900.363731][ T8754] INFO: trying to register non-static key. [ 1900.620141][ T8754] The code is fine but needs lockdep annotation, or maybe [ 1900.627252][ T8754] you didn't initialize this object before use? [ 1900.633488][ T8754] turning off the locking correctness validator. [ 1900.639818][ T8754] CPU: 0 UID: 0 PID: 8754 Comm: syz.5.11233 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1900.639843][ T8754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1900.639855][ T8754] Call Trace: [ 1900.639863][ T8754] [ 1900.639871][ T8754] dump_stack_lvl+0x189/0x250 [ 1900.639903][ T8754] ? rcu_is_watching+0x15/0xb0 [ 1900.639927][ T8754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1900.639951][ T8754] ? __pfx__printk+0x10/0x10 [ 1900.639978][ T8754] ? __is_module_percpu_address+0x39b/0x3f0 [ 1900.640002][ T8754] ? is_module_address+0x17/0xf0 [ 1900.640031][ T8754] assign_lock_key+0x133/0x150 [ 1900.640056][ T8754] register_lock_class+0x105/0x320 [ 1900.640080][ T8754] __lock_acquire+0x99/0xd20 [ 1900.640102][ T8754] ? __timer_delete_sync+0x106/0x2d0 [ 1900.640114][ T8754] lock_acquire+0x120/0x360 [ 1900.640129][ T8754] ? __timer_delete_sync+0x106/0x2d0 [ 1900.640145][ T8754] ? __timer_delete_sync+0x106/0x2d0 [ 1900.640158][ T8754] __timer_delete_sync+0x11f/0x2d0 [ 1900.640171][ T8754] ? __timer_delete_sync+0x106/0x2d0 [ 1900.640184][ T8754] ? __pfx___timer_delete_sync+0x10/0x10 [ 1900.640197][ T8754] ? down_write+0x162/0x1f0 [ 1900.640214][ T8754] ? __pfx_down_write+0x10/0x10 [ 1900.640232][ T8754] waveform_detach+0x45/0x60 [ 1900.640249][ T8754] comedi_device_detach+0x137/0x720 [ 1900.640269][ T8754] ? waveform_common_attach+0x9d/0x800 [ 1900.640287][ T8754] comedi_device_attach+0x568/0x670 [ 1900.640310][ T8754] comedi_unlocked_ioctl+0x686/0xf40 [ 1900.640330][ T8754] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1900.640356][ T8754] ? __lock_acquire+0xab9/0xd20 [ 1900.640377][ T8754] ? __fget_files+0x2a/0x420 [ 1900.640395][ T8754] ? __fget_files+0x2a/0x420 [ 1900.640412][ T8754] ? __fget_files+0x3a0/0x420 [ 1900.640429][ T8754] ? __fget_files+0x2a/0x420 [ 1900.640447][ T8754] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1900.640466][ T8754] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1900.640483][ T8754] __se_sys_ioctl+0xfc/0x170 [ 1900.640497][ T8754] do_syscall_64+0xfa/0x3b0 [ 1900.640512][ T8754] ? lockdep_hardirqs_on+0x9c/0x150 [ 1900.640525][ T8754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1900.640539][ T8754] ? clear_bhb_loop+0x60/0xb0 [ 1900.640563][ T8754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1900.640577][ T8754] RIP: 0033:0x7fcb9298e929 [ 1900.640592][ T8754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1900.640605][ T8754] RSP: 002b:00007fcb93858038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1900.640623][ T8754] RAX: ffffffffffffffda RBX: 00007fcb92bb6080 RCX: 00007fcb9298e929 [ 1900.640634][ T8754] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000004 [ 1900.640645][ T8754] RBP: 00007fcb93858090 R08: 0000000000000000 R09: 0000000000000000 [ 1900.640654][ T8754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1900.640664][ T8754] R13: 0000000000000001 R14: 00007fcb92bb6080 R15: 00007ffcd0c01558 [ 1900.640678][ T8754] [ 1900.671539][ T30] audit: type=1326 audit(2000000728.172:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8758 comm="syz.6.11234" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f633298e929 code=0x0 [ 1900.673795][ C0] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1900.733708][ T30] audit: type=1326 audit(2000000728.232:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8758 comm="syz.6.11234" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f633298e929 code=0x0 [ 1900.735901][ C0] vkms_vblank_simulate: vblank timer overrun [ 1900.991482][ C0] vkms_vblank_simulate: vblank timer overrun [ 1901.036778][ T8754] ------------[ cut here ]------------ [ 1901.042916][ T8754] ODEBUG: assert_init not available (active state 0) object: ffff8880361c0400 object type: timer_list hint: 0x0 [ 1901.073816][ T8754] WARNING: lib/debugobjects.c:615 at debug_print_object+0x16b/0x1e0, CPU#1: syz.5.11233/8754 [ 1901.084180][ T8754] Modules linked in: [ 1901.088210][ T8754] CPU: 1 UID: 0 PID: 8754 Comm: syz.5.11233 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1901.100508][ T8754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1901.110899][ T8754] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 1901.116972][ T8754] Code: 4c 89 ff e8 97 15 4d fd 4d 8b 0f 48 c7 c7 20 fc 04 8c 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 fa de ab fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 07 95 0c 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 1901.137151][ T8754] RSP: 0018:ffffc9000afc7858 EFLAGS: 00010282 [ 1901.143856][ T8754] RAX: df776658b8083c00 RBX: dffffc0000000000 RCX: ffff88804d131e00 [ 1901.152959][ T8754] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1901.161475][ T8754] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1901.169483][ T8754] R10: dffffc0000000000 R11: fffffbfff1c7a80c R12: 0000000000000000 [ 1901.178017][ T8754] R13: ffffffff8c04fde0 R14: ffff8880361c0400 R15: ffffffff8bace5c0 [ 1901.186396][ T8754] FS: 00007fcb938586c0(0000) GS:ffff8881258aa000(0000) knlGS:0000000000000000 [ 1901.195704][ T8754] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1901.203011][ T8754] CR2: 000056247e5c6178 CR3: 000000006831c000 CR4: 00000000003526f0 [ 1901.212315][ T8754] DR0: 0000000000000007 DR1: 0000000000000002 DR2: 0000000000000008 [ 1901.221026][ T8754] DR3: 1000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1901.229031][ T8754] Call Trace: [ 1901.233227][ T8754] [ 1901.236515][ T8754] debug_object_assert_init+0x2db/0x380 [ 1901.242552][ T8754] __try_to_del_timer_sync+0x29/0x3a0 [ 1901.249078][ T8754] __timer_delete_sync+0x1fe/0x2d0 [ 1901.254893][ T8754] ? __pfx___timer_delete_sync+0x10/0x10 [ 1901.261363][ T8754] ? down_write+0x162/0x1f0 [ 1901.265905][ T8754] ? __pfx_down_write+0x10/0x10 [ 1901.271689][ T8754] waveform_detach+0x45/0x60 [ 1901.276336][ T8754] comedi_device_detach+0x137/0x720 [ 1901.282163][ T8754] ? waveform_common_attach+0x9d/0x800 [ 1901.287782][ T8754] comedi_device_attach+0x568/0x670 [ 1901.293581][ T8754] comedi_unlocked_ioctl+0x686/0xf40 [ 1901.298917][ T8754] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1901.305337][ T8754] ? __lock_acquire+0xab9/0xd20 [ 1901.310526][ T8754] ? __fget_files+0x2a/0x420 [ 1901.315168][ T8754] ? __fget_files+0x2a/0x420 [ 1901.320050][ T8754] ? __fget_files+0x3a0/0x420 [ 1901.324755][ T8754] ? __fget_files+0x2a/0x420 [ 1901.329654][ T8754] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1901.334772][ T8754] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1901.340780][ T8754] __se_sys_ioctl+0xfc/0x170 [ 1901.345492][ T8754] do_syscall_64+0xfa/0x3b0 [ 1901.350634][ T8754] ? lockdep_hardirqs_on+0x9c/0x150 [ 1901.356652][ T8754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1901.363238][ T8754] ? clear_bhb_loop+0x60/0xb0 [ 1901.367982][ T8754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1901.375320][ T8754] RIP: 0033:0x7fcb9298e929 [ 1901.380062][ T8754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1901.391736][T24739] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1901.400042][ T8754] RSP: 002b:00007fcb93858038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1901.408485][T24739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1901.416314][ T8754] RAX: ffffffffffffffda RBX: 00007fcb92bb6080 RCX: 00007fcb9298e929 [ 1901.423548][T24739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1901.431264][ T8754] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000004 [ 1901.431284][ T8754] RBP: 00007fcb93858090 R08: 0000000000000000 R09: 0000000000000000 [ 1901.431298][ T8754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1901.439476][T24739] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1901.446619][ T8754] R13: 0000000000000001 R14: 00007fcb92bb6080 R15: 00007ffcd0c01558 [ 1901.479107][ T8754] [ 1901.482622][ T8754] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1901.490043][ T8754] CPU: 1 UID: 0 PID: 8754 Comm: syz.5.11233 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1901.501964][ T8754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1901.512131][ T8754] Call Trace: [ 1901.515427][ T8754] [ 1901.518456][ T8754] dump_stack_lvl+0x99/0x250 [ 1901.523076][ T8754] ? __asan_memcpy+0x40/0x70 [ 1901.527679][ T8754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1901.532888][ T8754] ? __pfx__printk+0x10/0x10 [ 1901.537577][ T8754] vpanic+0x281/0x750 [ 1901.541571][ T8754] ? __pfx__printk+0x10/0x10 [ 1901.546181][ T8754] ? __pfx_vpanic+0x10/0x10 [ 1901.550694][ T8754] ? is_bpf_text_address+0x292/0x2b0 [ 1901.556009][ T8754] ? is_bpf_text_address+0x26/0x2b0 [ 1901.561245][ T8754] panic+0xb9/0xc0 [ 1901.565269][ T8754] ? __pfx_panic+0x10/0x10 [ 1901.569720][ T8754] __warn+0x334/0x4c0 [ 1901.573753][ T8754] ? debug_print_object+0x16b/0x1e0 [ 1901.578978][ T8754] ? debug_print_object+0x16b/0x1e0 [ 1901.584447][ T8754] report_bug+0x2be/0x4f0 [ 1901.588779][ T8754] ? debug_print_object+0x16b/0x1e0 [ 1901.593994][ T8754] ? debug_print_object+0x16b/0x1e0 [ 1901.599387][ T8754] ? debug_print_object+0x16d/0x1e0 [ 1901.604589][ T8754] handle_bug+0x84/0x160 [ 1901.608837][ T8754] exc_invalid_op+0x1a/0x50 [ 1901.613348][ T8754] asm_exc_invalid_op+0x1a/0x20 [ 1901.618205][ T8754] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 1901.624800][ T8754] Code: 4c 89 ff e8 97 15 4d fd 4d 8b 0f 48 c7 c7 20 fc 04 8c 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 fa de ab fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 07 95 0c 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 1901.644765][ T8754] RSP: 0018:ffffc9000afc7858 EFLAGS: 00010282 [ 1901.651038][ T8754] RAX: df776658b8083c00 RBX: dffffc0000000000 RCX: ffff88804d131e00 [ 1901.659107][ T8754] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1901.667103][ T8754] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1901.675120][ T8754] R10: dffffc0000000000 R11: fffffbfff1c7a80c R12: 0000000000000000 [ 1901.683110][ T8754] R13: ffffffff8c04fde0 R14: ffff8880361c0400 R15: ffffffff8bace5c0 [ 1901.691121][ T8754] debug_object_assert_init+0x2db/0x380 [ 1901.696699][ T8754] __try_to_del_timer_sync+0x29/0x3a0 [ 1901.702083][ T8754] __timer_delete_sync+0x1fe/0x2d0 [ 1901.707459][ T8754] ? __pfx___timer_delete_sync+0x10/0x10 [ 1901.713198][ T8754] ? down_write+0x162/0x1f0 [ 1901.717725][ T8754] ? __pfx_down_write+0x10/0x10 [ 1901.722589][ T8754] waveform_detach+0x45/0x60 [ 1901.727217][ T8754] comedi_device_detach+0x137/0x720 [ 1901.732516][ T8754] ? waveform_common_attach+0x9d/0x800 [ 1901.737988][ T8754] comedi_device_attach+0x568/0x670 [ 1901.743649][ T8754] comedi_unlocked_ioctl+0x686/0xf40 [ 1901.748969][ T8754] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1901.754800][ T8754] ? __lock_acquire+0xab9/0xd20 [ 1901.759753][ T8754] ? __fget_files+0x2a/0x420 [ 1901.764359][ T8754] ? __fget_files+0x2a/0x420 [ 1901.768967][ T8754] ? __fget_files+0x3a0/0x420 [ 1901.773652][ T8754] ? __fget_files+0x2a/0x420 [ 1901.778341][ T8754] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1901.783409][ T8754] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1901.789253][ T8754] __se_sys_ioctl+0xfc/0x170 [ 1901.793883][ T8754] do_syscall_64+0xfa/0x3b0 [ 1901.798419][ T8754] ? lockdep_hardirqs_on+0x9c/0x150 [ 1901.803627][ T8754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1901.809717][ T8754] ? clear_bhb_loop+0x60/0xb0 [ 1901.814424][ T8754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1901.820338][ T8754] RIP: 0033:0x7fcb9298e929 [ 1901.824812][ T8754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1901.844991][ T8754] RSP: 002b:00007fcb93858038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1901.853725][ T8754] RAX: ffffffffffffffda RBX: 00007fcb92bb6080 RCX: 00007fcb9298e929 [ 1901.862153][ T8754] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000004 [ 1901.870238][ T8754] RBP: 00007fcb93858090 R08: 0000000000000000 R09: 0000000000000000 [ 1901.878220][ T8754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1901.886196][ T8754] R13: 0000000000000001 R14: 00007fcb92bb6080 R15: 00007ffcd0c01558 [ 1901.894203][ T8754] [ 1901.897794][ T8754] Kernel Offset: disabled [ 1901.902217][ T8754] Rebooting in 86400 seconds..