last executing test programs: 5m3.375913985s ago: executing program 0 (id=570): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount$fuse(0x0, 0x0, 0x0, 0x919009, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000080)='./file0\x00') r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000180)={0x2, 'vlan1\x00', {0x7fffffff}, 0x9}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x20, 0x7, 0x8, 0x8, {{0x47, 0x4, 0x1, 0x3, 0x11c, 0x65, 0x0, 0x3, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @cipso={0x86, 0x71, 0x2, [{0x0, 0xe, "eb063bf21a3d5300ad9f8d40"}, {0x6, 0x3, "bc"}, {0x1, 0xb, "8c97bd584af781740e"}, {0x6, 0x11, "28946379b1644bc428b57756296fda"}, {0x0, 0xc, "26d6a4b94ad2f1808db1"}, {0x0, 0x8, "d72dbe7a70b1"}, {0x3, 0xd, "5d512cc17f6a47b45ee39a"}, {0x1, 0x9, "9de6eed2488490"}, {0x6, 0x12, "cb1c5e64d64f99da3bdfc4c9db7163b8"}, {0x7, 0x2}]}, @timestamp_prespec={0x44, 0x34, 0xd6, 0x3, 0x9, [{@private=0xa010102, 0x7}, {@multicast2}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@loopback, 0x7fffffff}, {@empty, 0x9}, {@multicast2}]}, @ssrr={0x89, 0xf, 0x32, [@private=0xa010100, @broadcast, @loopback]}, @timestamp={0x44, 0xc, 0x41, 0x0, 0x4, [0x1, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0x33, 0x3, 0x4, [{@loopback, 0x8}, {@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e}, {@remote, 0x5}, {@multicast2, 0xfff}, {@loopback, 0x688}, {@empty, 0xffff}]}, @end, @ra={0x94, 0x4}]}}}}}) bind(r1, &(0x7f00000002c0)=@ll={0x11, 0x5, r2, 0x1, 0x3, 0x6, @multicast}, 0x80) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000000c0)=0x1) 5m2.470319924s ago: executing program 0 (id=578): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) vmsplice(r1, &(0x7f00000019c0)=[{&(0x7f0000001a00)="ce", 0x1}], 0x1, 0x1) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x2, 0xe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) (async) creat(&(0x7f0000000140)='./file0\x00', 0x71) (async) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) 5m2.469957208s ago: executing program 0 (id=579): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount$fuse(0x0, 0x0, 0x0, 0x919009, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000080)='./file0\x00') ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000000c0)=0x1) 5m1.618728639s ago: executing program 0 (id=586): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x6, r2}, 0x14) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000000)=""/24, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000400)=0x9, 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004041) dup3(r0, r4, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000000c0)={0x0, r4}) mount$fuse(0x0, 0x0, 0x0, 0x919009, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r7, 0x7}, 0x14}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002cc0)=""/2, 0x2) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0xe43986f95b0e4309}) ioctl$TUNGETSNDBUF(r8, 0x400454dc, &(0x7f0000001700)) name_to_handle_at(r4, &(0x7f0000000340)='./file0/file1\x00', &(0x7f0000000380)=@shmem={0xc, 0x1, {0x7, 0x2}}, &(0x7f00000003c0), 0x1000) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r5, &(0x7f0000000100)='./cgroup\x00') r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$poke(0x4, r9, &(0x7f0000001040), 0x1) syz_open_procfs(r9, &(0x7f0000000080)='net/hci\x00') 5m1.586511024s ago: executing program 0 (id=587): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r1, 0x325, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10004}, 0x8000) (async) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r6, 0xa0e52000) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000020a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00020100000000000000010900010073797a30"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) ioctl$KDGKBLED(r5, 0x4b64, &(0x7f0000000000)) (async, rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 32) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r8, 0x100000000) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) (async) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80800) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x237}) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r10, 0x5708e000) (async, rerun: 64) syz_usb_connect$cdc_ecm(0x5, 0x55, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x1, 0x6, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfbff}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x6, 0x8, 0x10}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x7, 0xcc}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0xcb, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0x4, 0x2}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x7b, 0x2, 0x3, 0x40, 0xfd}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x2, [{0xef, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000400)=@lang_id={0x4}}]}) (rerun: 64) 5m1.258323411s ago: executing program 0 (id=588): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$BLKCRYPTOPREPAREKEY(r0, 0xc040128b, &(0x7f00000000c0)={&(0x7f0000000000)="1f6ae15e6f9a3fbc5c1ca46dc15aba4b15ea601cf02887f3f8cc4374c1c99a24faa723db34702b77521d8e4323ed5f9ad94c1dc682fb33d6a4fd", 0x3a, &(0x7f0000000080)=""/17, 0x11}) write(r1, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c0400070080000f00", 0x33a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x10, r1, 0x93771000) 5m1.106184755s ago: executing program 32 (id=588): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$BLKCRYPTOPREPAREKEY(r0, 0xc040128b, &(0x7f00000000c0)={&(0x7f0000000000)="1f6ae15e6f9a3fbc5c1ca46dc15aba4b15ea601cf02887f3f8cc4374c1c99a24faa723db34702b77521d8e4323ed5f9ad94c1dc682fb33d6a4fd", 0x3a, &(0x7f0000000080)=""/17, 0x11}) write(r1, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c0400070080000f00", 0x33a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x10, r1, 0x93771000) 6.024273905s ago: executing program 4 (id=2093): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) (async) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)='H\x00', 0x2}], 0x1) (async) r3 = openat$dsp1(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SOUND_MIXER_INFO(r3, 0x805c4d65, &(0x7f00000001c0)) (async) clock_gettime(0x0, &(0x7f0000000840)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000100)=@xdp, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)=""/234, 0xea}, {&(0x7f0000000280)=""/242, 0xf2}, {&(0x7f0000000080)=""/11, 0xb}], 0x3, &(0x7f00000003c0)=""/56, 0x38}, 0x800}, {{&(0x7f0000000400)=@vsock, 0x80, &(0x7f0000000740)=[{&(0x7f0000000480)=""/215, 0xd7}, {&(0x7f0000000580)=""/95, 0x5f}, {&(0x7f0000000600)=""/160, 0xa0}, {&(0x7f00000006c0)=""/82, 0x52}], 0x4, &(0x7f0000000780)=""/21, 0x15}, 0x8}], 0x2, 0x124, &(0x7f0000000880)={r4, r5+10000000}) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x4, 0x5}) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x4b67, &(0x7f0000000000)) r7 = syz_open_dev$sg(&(0x7f0000000c40), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r7, 0x2275, &(0x7f0000000040)) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='cramfs\x00', 0x200000, 0x0) 5.113569792s ago: executing program 4 (id=2099): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x24, &(0x7f0000000540)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40095505, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x6000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000c44000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x59, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) mprotect(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 4.943119602s ago: executing program 3 (id=2104): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@host}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000010c0)={&(0x7f00000000c0)=[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x1, 0x400}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x2b, [0x8000, 0xc95a, 0xffffdff3, 0x1, 0x80, 0x6, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x800, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0xc, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x2, 0x8005, 0x3f, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x3, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x9, 0x3, 0x3, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0x8, 0x5, 0x10005, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x28, 0x1, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3ff, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x12000000, 0x2], [0x100007, 0x4, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0x10000003, 0x1000, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x5, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x83, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x2ac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0x6, 0x3, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0xbdfe, 0xce7, 0x1ff, 0xfffffffe, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x8003, 0xffff, 0x81, 0xff, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0xa71d, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x3ff, 0x9602, 0x7, 0x2, 0x7, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa23, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x2, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@local}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) 4.089929705s ago: executing program 4 (id=2111): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8fd00000905060200020d0006090582020002"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1c74}, 0x1, 0x0, 0x0, 0xc000}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000014c0)={0x24, 0x0, &(0x7f0000001400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0be}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x164, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r1) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8fd00000905060200020d0006090582020002"], 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1c74}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f00000014c0)={0x24, 0x0, &(0x7f0000001400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0be}}, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x164, &(0x7f0000000200)=ANY=[@ANYBLOB="5d01004e689544c1da98352f1b429a6bc19632b77a2d3cbde3674b55f60dacce1dc20b15344706373e7092260f2a140adacb43471f78a2953c86ea97f25ca4e653c6e9eb60aaa79ba486e1c0b3d38c1a7b7f6bd915dd21ca98dc1bba06d794c01d86a7e17c98d7419432727193b57947d0c1413b30cf58b8bbc6ad110ac116c7bbb909abbee5cc16e913b9ea09e5c10332a37dbb894c0f1f0e49119efd5254017dc6791d6fbbbf6cfdcb8db76970c734bd07c63aaaba8fdfc19cca6e9ca6374a892c825206840b973a3e918fcd93c7c4a29db5092cfdf67831ec4609b535d5e275180bc211851e2dbb33bdcda15263236ae9fe900532867ffb8859bf81ca3cd41a49344fee18afd64879f8db0bddabca5ceebfbff53fc0df5ee30169138c3428c3d95c39ae74143e6e6e9d8346982df996eca6b0e8ec08002bed7d347bfb56f30fb20d12ebc137ba85ac52706dec22eb6e551af174cafe"]) (async) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) (async) 4.061665917s ago: executing program 3 (id=2113): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = fcntl$dupfd(r0, 0x406, r1) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000080)) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x0, 'lblcr\x00', 0x7, 0xfffffff8}, 0x2c) (async) poll(&(0x7f0000000000), 0x20000000000000ea, 0x7) (async) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) (async) r6 = syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r6, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000007154a1cba7"], &(0x7f0000000100)={0x0, 0x3, 0x36, @string={0x36, 0x3, "27a68e8b9bdfcba5880f72c4bf38aed9ee12245a759865c1dc427448f44a1b9595623f1e5221bfb60004ec59394a25a0ddf8e666"}}, &(0x7f0000000140)={0x0, 0xf, 0x4d, {0x5, 0xf, 0x4d, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0x6, 0x5, 0x6ee2, 0xe}, @ss_container_id={0x14, 0x10, 0x4, 0x78, "70b4272924b29af1a68cb1a35c24218d"}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x4, 0x0, 0x8, [0xc09f, 0x0, 0xc0]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x3, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0xa, 0x810b}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x10, 0x3e, 0x8, "1a6c7bb8", "cc4d23a4"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x30, 0x80, 0xa, 0x3, 0xe, 0x2, 0xb}}}, &(0x7f0000000740)={0x84, &(0x7f00000002c0)={0x0, 0x12, 0x7e, "5e6787a9f0a404947686cce7bf48737db591acf6d83d2c87c6f1e9fbcd5e8f27ec4fa37ddbc8366b93518161bb689feb74c23e7b22505ce6815f10fdf854cece348faa0e146969c214901814aebf10203becf0047ceeea99ca202391f357827e79bf3256e6a2243c61284f574ce6dcb5df925f561f020b116922069b98fc"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xf7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x20, 0x8, [0xf00]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000004c0)={0x40, 0x9, 0x1}, &(0x7f0000000500)={0x40, 0xb, 0x2, "ac7f"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000580)={0x40, 0x13, 0x6, @remote}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, &(0x7f0000000600)={0x40, 0x19, 0x2, "931e"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x3e}}) flock(r2, 0x5) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) (async) r7 = syz_usb_connect$uac1(0x4, 0x9c, &(0x7f0000000800)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x2, 0xc0, 0xd, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x3}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x302, 0x2, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x28, 0x1001}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x98, 0x2, 0xec, 0xcd, "e528", "e3"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x8c, 0x3, 0xf}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1, 0xd5, 0x2, {0x7, 0x25, 0x1, 0x1, 0x7, 0x401}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x2, 0x7, 0xe}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x9c, 0x7f, {0x7, 0x25, 0x1, 0x80, 0x3, 0x1a5}}}}}}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x201, 0x5, 0x40, 0x4, 0xff, 0x82}, 0x9b, &(0x7f0000000900)={0x5, 0xf, 0x9b, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x9, 0x8}, @generic={0x78, 0x10, 0xa, "47750165245c08a84c02c852216dd33830aea4c1167cc8e4d108f5216102d2cffb82758eee977695a1df3003099e24b1f705ab1515a138d8f05ed709379853fe3c0dfc5203b5862b3217e940e0f3d0551ee1c7fb53970cedba6806acf0098a6d0dec1af9a3c4360078fa0214299c0b792e8c2ad256"}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "3f3fe76afa83575b423d704452c9f636"}]}, 0x2, [{0xbd, &(0x7f00000009c0)=@string={0xbd, 0x3, "ef501c01c9e70753ccf3d432c3557d5934a75e1da3bb9b23a541596d104788a55395e864ba1e1864e4b546bb6d8bf5aae7999786801bcaa49b6f63fb0ed77a55c591b7689650c4540b6f870bfdb3f89d8fbfc4ae2a464e4d8ef5be02a7a47dbb4272c6025b658982dbe20b31ca99e898a62dac1f98d81d79aae6705b575548c07493a1f90025dfe1b1b17754bd532291dcd949e32dd6f4301b8cced12a4b5002884fa49e95f943f5a8e56aa0588a603e0237f78739ff772ecc34f7"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x457}}]}) syz_usb_control_io$uac1(r7, &(0x7f0000000c80)={0x14, &(0x7f0000000b00)={0x60, 0x30, 0xde, {0xde, 0x2, "ef3dadfaeaf3e11f1d1ed9ca9618d075d4977a85ee08ec757629433754f67d81cae394be85f63d93b76e02fb83249996d2d71daab49e65519bafb5eaa97367e04362fdd5ca391dacd3ce0c18d34d9bee96de3d1566672c043bc0f70bd3d7a1f8422cb330452fffcc183214baf98c76130eba163ad9c8252679673863d979392383e9783d70953267dbeb7623cc8dad7d634da3faad1365624f37c25442b91b436e345831d6543ce17e4811e5d071428e8f9f5f38a03291d1eea34ea8b942cc8cf7d6edb2b707e89292e43a6e4f269e3d05f6930995d3aee68eecddf9"}}, &(0x7f0000000c00)={0x0, 0x3, 0x6e, @string={0x6e, 0x3, "9e3056e0f7c73f1224fb16fd3e7eb892d8ffd2a757b37faad2fdf56958603f13e6d43d79bd420fc7bf78ff0e9ed4ef8bddd424908bd2112227bdfe7c8e1e7b8bea39b35edf67c47faec29635900479d3ce991ae9b80d27d39762d350a2056092256e2a976f076bfd8bb84057"}}}, &(0x7f0000000f00)={0x44, &(0x7f0000000cc0)={0x20, 0x11, 0x46, "6b189101d9c5c1ecebfb943c69d2848ded8e4b12bf0bf3c6840f72829f441fe2284ae4178a2ee4fe0a333ba3b02c7a465b0c959ccfb77db890d65b1350ce8a812cd090ddd535"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000dc0)={0x20, 0x81, 0x1, "ed"}, &(0x7f0000000e00)={0x20, 0x82, 0x3, 'Wp\a'}, &(0x7f0000000e40)={0x20, 0x83, 0x3, "e1de49"}, &(0x7f0000000e80)={0x20, 0x84, 0x1, "16"}, &(0x7f0000000ec0)={0x20, 0x85, 0x3, "26f913"}}) 3.874267191s ago: executing program 2 (id=2115): delete_module(&(0x7f0000000000)='*$\x00', 0xc00) delete_module(&(0x7f0000000040)='\x00', 0x800) delete_module(&(0x7f0000000080)='*$\x00', 0x800) delete_module(&(0x7f00000000c0)='*$\x00', 0xa00) delete_module(&(0x7f0000000100)='\x00', 0x200) delete_module(&(0x7f0000000140)='\'\x00', 0x200) delete_module(&(0x7f0000000180)='\'\x00', 0x0) delete_module(&(0x7f00000001c0)='+}\'4}}@\xcb\\:^/\x00', 0x200) delete_module(&(0x7f0000000200)='\x00', 0x0) delete_module(&(0x7f0000000240)='+}\'4}}@\xcb\\:^/\x00', 0x200) delete_module(&(0x7f0000000280)='\x00', 0x800) delete_module(&(0x7f00000002c0)='+}\'4}}@\xcb\\:^/\x00', 0x200) delete_module(&(0x7f0000000300)='+}\'4}}@\xcb\\:^/\x00', 0x1100) delete_module(&(0x7f0000000340)='\x00', 0x800) delete_module(&(0x7f0000000380)='\x00', 0x0) delete_module(&(0x7f00000003c0)='\x00', 0xa00) delete_module(&(0x7f0000000400)='$\x00', 0x200) delete_module(&(0x7f0000000440)='\x00', 0x200) delete_module(&(0x7f0000000480)='+}\'4}}@\xcb\\:^/\x00', 0x800) delete_module(&(0x7f00000004c0)='\'^\'\x00', 0x800) delete_module(&(0x7f0000000500)='-\xbb\'!\xa9\x00', 0x800) delete_module(&(0x7f0000000540)='+}\'4}}@\xcb\\:^/\x00', 0x400) delete_module(&(0x7f0000000580)='\x00', 0x0) delete_module(&(0x7f00000005c0)='\x00', 0x800) delete_module(&(0x7f0000000600)='\x00', 0x800) delete_module(&(0x7f0000000640)='-&)]:\x00', 0x200) delete_module(&(0x7f0000000680)='+}\'4}}@\xcb\\:^/\x00', 0x200) delete_module(&(0x7f00000006c0)='$\x00', 0x200) delete_module(&(0x7f0000000700)='\'^\'\x00', 0x200) delete_module(&(0x7f0000000740)='+}\'4}}@\xcb\\:^/\x00', 0x0) 3.873789387s ago: executing program 2 (id=2116): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) syz_clone(0x200000, &(0x7f0000000000)="6c007b014589cf5958cfd738f0afa440d3455954d9c8fde58cafa738d9238603cf574056e72df585c999", 0x2a, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="8ea74093167b58b6a688723452742ca5a5b5ca93abfc21118d36deb75a91194984719abf05f005677e88b93ea19f5ecb526625c872") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.510868285s ago: executing program 2 (id=2118): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0xffffe000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000000), 0x0, 0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) lseek(r2, 0x0, 0x4) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000012c0)={0x1, 0x0, 0x1f, 0x16, 0x400082, &(0x7f0000000ec0)}) 3.310048512s ago: executing program 2 (id=2120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r1, 0x0, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x18) (rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2659d83d1ad2f12f}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xd0}}, 0x800) (async, rerun: 32) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000280)=0xc) r4 = syz_open_procfs(r3, &(0x7f00000002c0)='net/xfrm_stat\x00') (async, rerun: 32) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000740)=ANY=[@ANYBLOB="563f00001800599c6d0e0000ded650492d"], 0xfe33) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000dc0)={0x55c, 0x24, 0x1, 0x70bd22, 0x25dfdbfe, "", [@nested={0x549, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x311, 0x65, 0x0, 0x1, [@nested={0x145, 0x121, 0x0, 0x1, [@generic="d9b45c1c72ea0f6ec741f650e5d8f1c76e4d6e6f78dffc221296c2686a3b0e577e85e2", @generic="d42ec6795d0f76e5ed0f31909e6bed6e29fb89f169f2f3f03481b87cf2a83e3bc132072ed4ee7ab77002f80ddf0b8c819b047e1a70ad821d12b62ac2e3a2ccd666b54ee507ea702cd16bf1df7c22f67f542e5f0d71bc806d3888", @typed={0x8, 0xfa, 0x0, 0x0, @fd=r7}, @nested={0xb9, 0x1d, 0x0, 0x1, [@generic="395659cbee1ee6766c7549af751fbf2eb8788253b47d23023a32d9788c32998ee026024e276914d0aae70d786e120337fe9cbc0c9e9e9008c238dd702409482c45a977476e6638789f", @nested={0x6c, 0x1e, 0x0, 0x1, [@nested={0x59, 0xd4, 0x0, 0x1, [@generic="a4803e3fd1af764643b73de45d768de8db52619a63255c11ccef20dfffd887a99225e2f5ecae032cafb7216b237a1429eed88bc6f84aeb562009f34ab2a8894cd1d7697087420e5ab42922b7a9a487ed10c5c0e82b"]}, @typed={0xc, 0xf, 0x0, 0x0, @u64=0x100}]}]}]}, @generic="180187793ce4954a2d0c6394198efd86259a455b383d61a34aed593c5da530877c3102231ea96aa5cefb6c2d99b6fadffd0e3bd891225e8c0d45e6019a16c008707e0724a0a436faaabd146ae5a60224ca6e64f9e38c4349e259ac91811a57a27022ff05f1", @nested={0x15d, 0xf, 0x0, 0x1, [@typed={0xc, 0x63, 0x0, 0x0, @u64}, @generic="796c3d3cc1f3db290ab3ff8af9998d01a9067f3cebdf5f818852b98b44e11fd441db5f6ccaf5833e192b4dca10fdf86450cae212660821bc12a1c14800e1893737f187022031f06b8d0f53b1090720f9f986853c93b418a7611f89d950d13b469a32796fe9d499cf7fd95151ff157e7e60ea88c4d6be9376ea4b50d5bd551481c915564cb2c452ed2344a4a800df8f95d198d2da935b789495ea7bb9ce6531ae7e6abf36751dba41809d5b16363323", @generic="9d22bafd4ac33962ab17d0d990f22e0ce4779bac24155d82f05498da6c9fa05cee888ef71b4755c9931b0200f564a52cdcc89114643ffd15fb495cd1bbb51ebd9f651e6ad3b3473949c0e79dcb948e0d4396e8c8a09ba50decb89def4523931fc20ba6e7ab5647f65f5ba45c278eec780cb651cd9c4ca1dc794060194b5f6e02947c12ad911895f1c0c5eee9b25581c2b4f2", @typed={0x8, 0x94, 0x0, 0x0, @fd=r7}, @nested={0x4, 0x30}]}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @nested={0x145, 0x76, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x7}, @generic="45e49df035ca3e1511b2d03e89c9c254104f6e", @typed={0xc, 0x7b, 0x0, 0x0, @u64=0x5}, @nested={0x4, 0x112}, @nested={0x69, 0x121, 0x0, 0x1, [@nested={0x4, 0x3b}, @generic="dd6bd77b5da6bb5285b3181026928cf10027116fd52ead1cc792fc621598f6f78bfa10e7fcfe5edec56cae74fc523cc23def9ad973065ca46abebd942423fed0dbfb631f048fc6d32cfcc22adc0348a9b0c20091ae85f67103c99e99237a574d05"]}, @generic="f0456535747b15e70e3b1e0827c3e8c3ca7710239259c6f0a0ad5c136073ab87021643c3ca285bd98186244d8cf0e3c2d947cea9a643f98d95ba39d918b5039f22dbc61b90167e1cdc4cc7c39c2a7c3a0a4d469d07e5b855", @generic="3463f5ed45c329f623b3a83de061691a5d5ae24b542dd38cdf2912ffefc9ba9e34309eb559b6ad91ab000bad5d941ac75df7510830cc33381b3e6fde47f0b1afda7d8b93f1eec61392d5938b73ff"]}]}]}, 0x55c}], 0x1}, 0x0) (async) r8 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) sendfile(r8, r5, 0x0, 0x7ffff000) (async) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$KVM_SET_TSC_KHZ_vm(r4, 0xaea2, 0xffffffffffffff9d) 3.251721542s ago: executing program 2 (id=2122): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r0, 0xa0e52000) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 3.241364356s ago: executing program 2 (id=2124): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = msgget$private(0x0, 0x100) msgrcv(r5, 0x0, 0x0, 0x1, 0x1000) msgsnd(r5, &(0x7f0000002cc0)={0x1}, 0x8, 0x800) msgrcv(r5, 0x0, 0x0, 0x1, 0x1000) msgsnd(r5, &(0x7f0000003600)={0x1}, 0x8, 0x800) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x34, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x22, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1}, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r9 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x8004, 0x851}, 0x10) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r10, 0x540b, &(0x7f0000000000)) r11 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0xb3800, 0x0) mmap$qrtrtun(&(0x7f0000413000/0x3000)=nil, 0x3000, 0x19, 0x50, r11, 0x3) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x210, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x8244}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6aaa}, {0x6, 0x11, 0xbc64}, {0x8, 0x15, 0xfffffff8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x11, 0x7ad}, {0x8, 0x15, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xc}, {0x6, 0x11, 0x42}, {0x8, 0x15, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x1000}, {0x8, 0x15, 0x10001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xe69}, {0x6, 0x11, 0xe4}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x2000000}}]}, 0x210}, 0x1, 0x0, 0x0, 0xc00c6}, 0x20000000) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r12 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r12, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r12, 0x100000000) openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4a89a1, 0x0) 1.528579189s ago: executing program 1 (id=2130): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x1000) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$uinput_user_dev(r3, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x2, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x1, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x7, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x12, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71d], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0xff, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xd, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) r4 = syz_io_uring_setup(0x1e07, &(0x7f0000001240)={0x0, 0x98ea, 0x400, 0x3, 0x388}, &(0x7f00000012c0), &(0x7f0000001300)) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002580)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0xcac) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc038563b, &(0x7f0000000280)={0x0, 0x4}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, 0x19, 0x1, 0x70bd27, 0x25dfdbfd, {0x2, 0x3}, [@typed={0xa, 0x120, 0x0, 0x0, @str='*\xc4\'\'%\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) io_submit(0x0, 0x6, &(0x7f00000025c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000000)="748bac14398ce2b9d66d99c40d6018a31c41859577610fb74db06ac4ec129a561123b652bc69bb683a7c4159fa0fc3173370cf6b8bbbfe138d927a082c9a6b", 0x3f, 0x6, 0x0, 0x3}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0xffff, 0xffffffffffffffff, &(0x7f0000000100)="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", 0x1000, 0x2, 0x0, 0x2, r1}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x3, r0, &(0x7f0000001180)="fd7d884772217edff8721b124a62d07729c4f4ce37f45d5927c131f5c7ac346570df10532ba139d260f9134cb5f16bed1fa727fae14b1fa10445b18013ec61f496d37d480071146ec0b2cd1ff94fd10791d677d93cb652fbd31eed66d9cf61ec0aacd3b4c5f2b582f08856c0829b433da13c504cfb56100886a69cfa4a2c", 0x7e, 0x8000000000000000, 0x0, 0x1, r3}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x2, 0xfffb, r4, &(0x7f0000001340)="743e533c19ab418016880ef11abe737b666fd8ff601d5b7333d6da05c92f2eacf9d91da78083fec017b820d7ff0b704d8f225804d9cc66b27884364ca012a55c1f2dbc9f9302d6eaeb0a48775b16f9c593318f4414a89fb6a9ce27041c92f5f18d313da53d89c8cd75c3c2e5869bf80185b2d8671c72de62c7d5c485cf2409ec52ea2b9781cb0d861a35cc8129c7c24d1260b23e6ad1f9484e7c9e5b6b10d5bcafe4772c18e8e22b", 0xa8, 0x5}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x2, 0xcb3, r0, &(0x7f0000001440)="2028d24371080622ff8cfa5cac391fb11fb737fc79ba61e9b604131cd9e3072e5db4e9ffe39ddc19705c701b27e9e6be60fea9bcff78d804d1f90e263f46f72a1f39be19a33b8ecefeced43a6b1b3fdc527766b0954d1066596e7575d1c9f0668804ef848d7a4b325740ebf553cee3e527e5e5e4cb9709ea075c6cadfe523ec430231e89965b6b1194c3789ade4b4f878ad12639299b14df4135b7ed46998ef6f98fe668c909b78ff0df91e691ed6b5c16f9caebb805fc028715206a84ae3d8d0cac069175c7e7161ef9a707ccb14709deada47297284bc1515aad7b7a9e040ece8b3ac69b03daf6", 0xe8, 0x95c6, 0x0, 0x1, r5}, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x5, 0x2, r0, &(0x7f0000001580)="c563048f3ff26f9f2fda2803bd506a854f3ade899131838f0598eec657373915c8989a366821332453634cf70e222549832cb2b11e71d39eec5fdc5c96281436322787b27f78ae2ad42fea2a8bea7576131f8b6ab24c2ccd230c7d78aed2e5e6dc0aab86207b8b50157d2a1f21af95a2288362a410954a4908e4d0a4e110b32f89a7fd32ca5af0e612dce628aa14fa5473af2974e181ace5175fc4079884ed1aeaa546cda5043d9040fc8f8b6762f2e2c25e0e4d78aab224085fe6054afbe91a4be7e721262e7109eb7cc5d120d72b46e8aa53fb8d189572fd48c9e3a962be202b9b0fe1af3d1b821479031a649121ead7c8cfb1f4775d5d5dca88723cca459d5acb6ffbc51c356494d92b25138fe28d6ca57435be2e9621779f8d548e2f94d2ab449eb8921b0298d48d6b9038441e9cf8c57e7410d59f525a2d521f4b7400226f46312e79bd5887bf8b77c0d89ce52296741c21cad2b012367d84c4516fed8e10062523747a56b7a25cde7e869c972d4a636131e901338297640cf5886c5d32a8edac3b0584cf2c212b99ccaa5bbb24392a584c4b077db8f63d63e92bbdf8fed47cdef8814a5bc6305e4fe35f14e816b1dbfbc80d865b42312f787ee596df16bcc380be4810b90518e2acf0d80bd87db29f44453acf8d7baa26d5ae0a900abcc891f7452c9e63be92261e9da332205a4ac9ffb3340c19b18bb01894be03269fe8df4f608d084b6f4ece7b014023924afc80a216ba6b1f7b995ae58b092560548eeea44cd9198dc802a3832c1758de5fadc95c8e032c71393e77aa20d3551dd97ee7bb09d91b937bd19818dfc098def73c89f28837b262ea21092109ce9c75ab859b045c143972e0ed5f804114bcf43cc8ee90b754f8095b50912335b6bfb25fc6e49aca531c2687e5e45b1a18adb5e15e5a9fcaacd823bb8cfd882ff5bf91ee4bc0dcd8c5fa3251e7e068eed4a0330c1d60e79045ad187ed2add6feb644fac5215c611c4499d770c05c4f992d7a3908991f679154935ac1eae8878e008b3a6224afd10f9f2ab69f57914e7fc204e47e6cf105d9c7d9847b1d572db722914c0aff9096a4b8719c59ad1b3b7ff6b0e6e9fdf72dc80b3f2c54ce34d4c5fd2a3ede31e3a2c9442c750af75f2b0662346b49ffe1e932656e8b8b11cb862d8ed57809fbbdaa0bcb1faf86b241920eb1f440f4a24e99b0803779f0455a0b54aa053639c2ac84b7a46d16f6c34d2f3498b029e150f9d0c28aab5be97f7ab30f70a98e9f8167a723d35790dde8bc215b7ad45caa244458ab9ff26f81b43803a78f18d024278f8818870460e24603be60ccdae1286268e2a7ab750c68cf6ba5ba5dc12e441243845b0b9b65bbdbb12b5d9b4d724429838d4b1e771b6ed5cc52d7068bace1f6455a6d1624c07bed83b532e9bcaf738c7dfc1c171ce2acdcba7b793dba03b9fa4aea8724229fb4d96d3a8dcb0aa8fee6fa59a32a13b4ce8925992016d6c6a2ac7eb676d8c44544367b24acd0d5a7f07d7628dc99d1a72030cc0d35966df134daf72715d1c82d1eb230682a60af30c2d3fa71df17e5d03a36cad55011d89329d4f2af26b9cca6c7bfc05b4c783c4f33b965c23e23c4e8b050a9d8385af904b7cff546aadb18735e8c03a6ca674e093c68ddf5ab504490ce5592dcf4b097aedb91e04d32c6326d4119cc17c3406e100cad1918c0cae9ef82eb680d8cfc418567c366c4f6e11d56f9c850adba7651fef732a2fad95314f7b64cfee7e11c4dad3929c34de06744fe015230e66a84bb6c0a3c9510074639e04d7975b2aaf17baafa346956c117496eca8d45a94f1a70c62119e2db2f353ca17261b06cf0d2c5d0ca5a47179d3d0284742ad8bfc79a50de60c1140f0b0a33862f2dbe0924370b37cca04e86c8074f71ffb17f4cd03a7aec5d25dfd0eeee56444b76e0e78bbcadb92f53699f2950b33f7d56714acc01f8c1912002baba66e52074fb93865876b61b81175b2e076b98cee0107caf3b6dc5420499b927ab1867a48529133135a0e05804fa13e9c1caffca4210e7a18ee9f18c50292b91ce693f23b39b2521c1c977a7d2b831d0bd2ee1e0b2cf1b9da53c2623d56194294fa13d06d6747c5f1d6305f17f5edac5ce30e3f2df726e5961b678f7d27d816eecd2d7c5b33955d8768355df939ac5ad980ca61b275037d57f84d3a30d621711013724b23d3533ff061149b4d9659d3de6cb9af77d238d0d073e4509f94de8933515587059407dafc5524632d5a61c81262fcaae74b2e2f1f3e1e67ec4499d6b9de5eafc4eba2cf98a8a3e34e7a81066f4108e0a1db9b06eb29664ab9f2aad0dca3d0581c8a3ef9161a2c89a6e0fd678937fab2a57ef1f40562d1ea798f83f38c7d913b8ffad1eb246a85ef91cfbc0cff974468656b5923e91e4d0a22bff6bf200a69a3a000de538b3677d1a6143d9514a9a0f06e374f6729afe18aa61387b70f3811691305ba753f79f41ddf3cba83e0467159b93da1a47c76c6d415a5d53851512c0b147724f620af9645389b2cbb4351f4018df80501918e493618dacb2867882fb28078f5ec3d2c0093b6774270df21f8d1d7a8de3ed76580f40e77b607690fac251447b0b6f2a55eb7e32bd9ac8fa791459c28a27e73480be516f6bb624c85f0f1727e9658ce26e8be1b32da05e82e753b48993637c14fb515f4dc9833f9b30b2006cce25a14178662e05e7414b4accc179aca162b62bb281285c821fe182c706da5815f944776165ea48e77e083f174b126a7ffaeeecc195bc1ffbccaebe4fb891fc369c1dfa3f9e00f5959f9543b4e518907158b239ab290e3a63fe94b730ba840277fa4ee851199ac1bc6783db8c50f7a1ad0be2c1bde14676acf354576b0b9ac5a60b50e7a7c5723c6e46154f15dc03c12f14de4cfb86b57db444991d7442f3b305a212e28f8b661abf7d6fb45962adf8222d0300f8e4df9cfc9d76af30266491f6ed00517b4a8f9fc2402ea674eda2c3b2d56d25a34cbdfcb42c879bd23fc89318629d6b8a6051eb35184e306e7b36685fbfe410b6129944ca3ea296a69991eabc926a8d5daf2ac5ea06690b36282f24fadc2ddf8682607bed7a7760a33d1bba2951280972e557ce780446114d767a8c3a06ec255ee02934e5521ced291399cd977884792af57c642f62c0bf4c5ad64aaca44fb45fea3d2aa3a36ad24936aebb7f03ba550145971e11dc9214625b117321b7507c06f8b29201f52f5dee454fa4c05f518b20b7fe41377cecc89ef1625057e59d34b849f072a86047bbea4fdd11a767c745c915e8f857068f342d7b2567a9773c10fb3aed9e962f70f1cbea93099f7624a241d6d7aa443ba1dec5cbb93eac3db46dbebda4edf3485640672635151315e06689f7d66fc76861a6dcea1f48e4327a82feeceefe9ebb91d02b9783c6c62391a51af1790d6cd831c124c4141fcda908c29c9e97a625619764ce876dab306a0682ca05b51d16b675f175fdffa5e21186a9c7c355c2859dcda520659e64f2c7e95ab13f9457d443d50341de9c2c31148c7fcb8a4245e76ffdf1724dc6a46f4de5c71a8ef0246ceeed3694c2e3501e362f6dd72aa21a3ef35f591a3cb3276c652eb2e1f1409a10093446a801b0ce9eae4c1220ddd7fa0ee63a3b812fed98ed75dfddd2b83f86113da4fca102df4f695aa0726ed7504cf7ebbebfeeb17e9c62f75f8d2a95fbaa061a0bfd41c28c40148238e284884c849d99930dea6090604afc255b3231f9133308986b1d6ae86429f162dced3e748bb46186d6e8d09d24eaf6150a0e6506ad7b0e70ea32d98fa6f3ca238a89f98e76abe28861e888560b0ccefb830c2c3e5ae753080b51704b1f819d8fa9cf8701694a9d5247303d911807807c100a19af8adbd3cd3c2156cdfd24d7d8a06c4a835f9676da7c9dd3c859bf9ba1ea2ff54f2d4c517b341aa272c1809c2d6c497a0ade9fe34e9174af7d0ca2463fa1522ef91b1f8404accf95c9ee2d588b8c930b2526ec2cf75e5a42cf4747232777079d41065ccea68795577a9a3d3c293ec710e3e2297b10ed3250bd5f5224afa2b806f6612889ff211b00249f53b3746686dd27fd9f3577fa4291674c9f660e589982c98400896231fe4cb0e845e731dda523a3a1747bc482bafa7b8fcbf1362bf2d537cc924395b3520e38479b27061044fb049dddecff3bd5c5e32f1c176d656061a4d3b14cc14e2da2c60348c03bba41b11931a23d946f3286865e35620319a0a5f7c9d2ab432e324f86754b82027bfcf8174e466ca4f9d4a41c9320b67cf291e658ef38c838fe41b2f29503c75e3e88c79c758ee3b549bb874da22b871ff771fe98209415d4c48f73545f1e28ef0665a7f07eb8ec2a24116efabcb617b33ccc2863f969c230393cf76e005bd3a2f3014ae229765ac018d55cfceae7230444cdb8354fd017b2a5b015a1db95819186cc5b21345488e31a5ece27910582655557c6773807d37c20fcf25f06fbec792e35707cd86a3bc5e361ece59d5e25c40496e5a9b4df187765859a49e5ea6b64a50343212eb750038464d0ab9a3ffbb431a640a50ab7e8e940fe6206f8b255f9f1edade6416c4459abaebd0211ff6e1c6eeb3ac54d3a3ba9b1da1aeab050973ef0581531ac2a59822cfed074716b608c10e003a5925cb656d7d3634a0f5e444006ec205c03d2c029208698bdfe64fe4b6b6ac62183c896ef07ba06a7cf3fbb30ee7f7368e3bee65c0501208c5cdf9b39f91f1532cb5285284b7bdf6b1e938eb720874f87fa70433fcd0c04502e9cfdbdd1e951772f7bf28edaba471d7d87148f4ebfd796d4331fa926542e224322d423e3b4c57640b85835b3b028bd55ea900ff9607cec6465fe31d662cb3aa629236381cc7777d9a610c25b3bdb8622da88648c1579c8d330ef06a9b642f99c09990d1dacf9a44ab8b7721e84896fff4db3623a0ece3d443f2ee22cd266aea65ec0ad9374b731e6cbce7558f85fa648f9314bc2918edb39c8febd64ac55aab6a187c231c690e1c3efc00dd43b37170f987271d10ce4a0827e5cf22c9db6936727cbaaa06890f30e50940f57c24d9b06bea0b88d1d83f8c4c15d05218e4065dc3143d4d094763c3b8e01158f548895d8dee21636f137637837f77ffcef98738cd40f814907df3fbfc2a9428180fe9a54f6fb3b469885c60513313b4a6208ea4804a60c004d58f72aea07e3389aa98d416b11db898ba4442e2de27d4721aae4736c9dcddb21c476562695386ecdd1cc967acb1665cbaea1ee33672898b738c66d45decd31444ac999eae394b6bf571e8f1e9b20da78cd2ef9d29bd1d0edab1a7582b309b90185064418bb4ede1e316caa92d7efe303f08f9c2190b2d644ddfc056ebe36e2a73b43ba513f6442fef63b9422052cc674e7bf9814f34471a4e7d1570b4ca31811b1ee586b689df18ea3ae45bc21bc984d4ed16052aa40bd15c55e9a74db0ea4c7e2d132ff6a0fdf3b79f0b57370342de6c5226795112e145fc9f901386bf3f63997c9bf2f8ece52603aa8d1d114166d6964e31280ecc9c8193dfcfe524266a50db9088f9c0238f55109d72a0335958b74b63bb511460de55927066ddca50bfb9ebd7096b4562ef9268cc9770223bd542ba9bee79a666345721dff6993379cffb743dd1ce0c241e3dfd5b54d82d42c8c08da1ffcb89409e9e5e29a4164417ed59fee0ee752074f82f9aa00040691ac6a36eee96c434a92b1aa59d895cdf658bb5a7bc936ace4ecedb2caffd68dd34a4b5b6f0f73aa58e91a85f892452e2f22d8c0193178", 0x1000, 0xffffffffffff8001}]) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x1000) (async) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) dup(r2) (async) write$uinput_user_dev(r3, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x2, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x1, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x7, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x12, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71d], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0xff, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xd, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) (async) syz_io_uring_setup(0x1e07, &(0x7f0000001240)={0x0, 0x98ea, 0x400, 0x3, 0x388}, &(0x7f00000012c0), &(0x7f0000001300)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002580)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0xcac) (async) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc038563b, &(0x7f0000000280)={0x0, 0x4}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, 0x19, 0x1, 0x70bd27, 0x25dfdbfd, {0x2, 0x3}, [@typed={0xa, 0x120, 0x0, 0x0, @str='*\xc4\'\'%\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) (async) io_submit(0x0, 0x6, &(0x7f00000025c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000000)="748bac14398ce2b9d66d99c40d6018a31c41859577610fb74db06ac4ec129a561123b652bc69bb683a7c4159fa0fc3173370cf6b8bbbfe138d927a082c9a6b", 0x3f, 0x6, 0x0, 0x3}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0xffff, 0xffffffffffffffff, &(0x7f0000000100)="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", 0x1000, 0x2, 0x0, 0x2, r1}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x3, r0, &(0x7f0000001180)="fd7d884772217edff8721b124a62d07729c4f4ce37f45d5927c131f5c7ac346570df10532ba139d260f9134cb5f16bed1fa727fae14b1fa10445b18013ec61f496d37d480071146ec0b2cd1ff94fd10791d677d93cb652fbd31eed66d9cf61ec0aacd3b4c5f2b582f08856c0829b433da13c504cfb56100886a69cfa4a2c", 0x7e, 0x8000000000000000, 0x0, 0x1, r3}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x2, 0xfffb, r4, &(0x7f0000001340)="743e533c19ab418016880ef11abe737b666fd8ff601d5b7333d6da05c92f2eacf9d91da78083fec017b820d7ff0b704d8f225804d9cc66b27884364ca012a55c1f2dbc9f9302d6eaeb0a48775b16f9c593318f4414a89fb6a9ce27041c92f5f18d313da53d89c8cd75c3c2e5869bf80185b2d8671c72de62c7d5c485cf2409ec52ea2b9781cb0d861a35cc8129c7c24d1260b23e6ad1f9484e7c9e5b6b10d5bcafe4772c18e8e22b", 0xa8, 0x5}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x2, 0xcb3, r0, &(0x7f0000001440)="2028d24371080622ff8cfa5cac391fb11fb737fc79ba61e9b604131cd9e3072e5db4e9ffe39ddc19705c701b27e9e6be60fea9bcff78d804d1f90e263f46f72a1f39be19a33b8ecefeced43a6b1b3fdc527766b0954d1066596e7575d1c9f0668804ef848d7a4b325740ebf553cee3e527e5e5e4cb9709ea075c6cadfe523ec430231e89965b6b1194c3789ade4b4f878ad12639299b14df4135b7ed46998ef6f98fe668c909b78ff0df91e691ed6b5c16f9caebb805fc028715206a84ae3d8d0cac069175c7e7161ef9a707ccb14709deada47297284bc1515aad7b7a9e040ece8b3ac69b03daf6", 0xe8, 0x95c6, 0x0, 0x1, r5}, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x5, 0x2, r0, &(0x7f0000001580)="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", 0x1000, 0xffffffffffff8001}]) (async) 1.40219281s ago: executing program 1 (id=2131): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'caif0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2721, 0x0, &(0x7f0000000400)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x9c8c4, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000000780)='\r\n', 0x2, 0x6d91fb6102d8d9cc, 0x0, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) sendto$inet6(r7, &(0x7f0000000e00)="dd11", 0x2, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000140)=ANY=[]) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r11, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000a40)={0x30, r13, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x14, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 1.283047537s ago: executing program 1 (id=2132): prlimit64(0x0, 0xd, &(0x7f0000000140)={0x8, 0x8}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000b40)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x5d11], [0x10000, 0x0, 0x0, 0x0, 0x3a3], [0x7]], '\x00', [{}, {0x3, 0x8}, {0x1}, {0x0, 0x80000000}, {0x3, 0x0, 0x0, 0x1, 0x1}, {0x18, 0x5f}, {}, {0x0, 0x6}, {0x0, 0x3}, {0x0, 0xfffffffe}, {0x0, 0xbcf}, {0x0, 0x2}], '\x00', 0x1000}) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r1 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r1, 0x0, 0x0) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) sendfile(r2, r2, 0x0, 0x7ffff000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x10000001) write$binfmt_aout(r3, &(0x7f0000000280)={{0x107, 0x7, 0x7, 0x111, 0x3db, 0x8, 0x2b1, 0x6}, "63878fa42438f826097b34ad44729efb63c644e63dc3879107a74e16f117accf00bfeec274a779a35e1896ddaf0f65596653a2e909ee6b6a7a68124a9290e18550c0d41e83dfe4a13a0aab2386c9a796cb3741d13342ad569b0fc73155f8a8f3a37efe44ad52c94a76ddfcc27242841798c51e2743618ecbe7f828785a694021822d54346d67580f83", ['\x00', '\x00', '\x00']}, 0x3a9) 1.003616397s ago: executing program 4 (id=2133): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0xe8, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_USERDATA={0xd4, 0x6, "ba4aad1c0f41061ee8be667f47543db0f864ea8f7a589244004251b19251aaba24c20497a890836ee295971afe1230f18a217fcf060b6a0b11abf0da58119f89cb57ebb5428c1b0364c5acc9ccb147a6c94635dadd00844dda5c75f0638bbac05638366d37c686c00799a2144a762d21e515b486e54ff51fa50ef9151ac3b2632341cf6827da9a636c451bfb1ff58f6df5704ab97b7aaf95b866089d6eaddd7394cdb8e3aa70ead5e3a2c00c39f58fe4615e60bc315a811654a275f6517ecaf365a7d8308aeb9d0c52e5995a3ba04408"}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x19c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 638.134024ms ago: executing program 3 (id=2134): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000340)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000180)={0x8, [0xfff7, 0x276, 0x89, 0x9, 0x7, 0x8, 0x6, 0x26c]}, 0x14) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) (async) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000340)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6}) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000180)={0x8, [0xfff7, 0x276, 0x89, 0x9, 0x7, 0x8, 0x6, 0x26c]}, 0x14) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) (async) 381.57694ms ago: executing program 1 (id=2135): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89b1, &(0x7f0000000580)={'veth1_macvtap\x00', @remote}) write(0xffffffffffffffff, &(0x7f00000000c0)='&\x00\x00\x00\"', 0x5) r2 = socket$packet(0x11, 0x3, 0x300) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$packet(r2, 0x0, 0x0, 0x90, &(0x7f00000000c0)={0x11, 0x86dd, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000004c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x4c, r4, 0x564b2bccd8c95370, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd51}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x600000}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_NODE={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000084}, 0x80) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xc, 0x100010, r0, 0x6c127000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)={0x164, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1a65}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x532a}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x38f7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0xfffe}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x81}, 0x40000) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141343, 0x0) sendfile(r6, r6, 0x0, 0x7ffff000) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0xff}, 0x8) r8 = syz_open_dev$dri(&(0x7f0000000300), 0xfffffffffffffff7, 0x402040) ioctl$DRM_IOCTL_SET_VERSION(r8, 0xc0106407, &(0x7f0000000340)={0x2, 0x2, 0x6, 0x3ff}) write$tun(r5, &(0x7f0000000380)={@void, @void, @ipv4=@generic={{0x5, 0x4, 0x1, 0x20, 0x103, 0x66, 0x0, 0x7, 0x2e, 0x0, @loopback, @local}, "044518ad8efa5341c2d3d41adcd4fa5a9abbd2d2aca9b4be66784e47b16bda4f792cd54457e7e01b0de82b72416d0016cba614fde52f991871f13c9f31414397abb2faf0a971b98cab61b685ebab305f92988c730e7b880b3110d12a92a1a837ffb171b6e6d387b22bd7bfd71165024864e5d3c6ae09ba296191c49fbfb2d9da54a8dbbdcf20bd7aa3dc300fcc6ee9214228528aba7157f8ea70812da386efeadb2e83c98c8b595493a068772f0ce794df9e8f38ca345dea023f5823544c608e562ebee6de4944f4d7734931745dc9719749e4578388d5a6df38a6b5eb97d24d778f63dfb572610be99170ddf065ee"}}, 0x103) 363.483593ms ago: executing program 3 (id=2136): r0 = fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f0000000040)='\x00\x80', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x1c, r2, 0xe17131a1c005744d, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x40010) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='gfs2\x00', 0x208002, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 157.998706ms ago: executing program 3 (id=2137): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xe53, 0x3, 0x8}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={r1, 0x84, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0xfff, @mcast1, 0x8}, @in6={0xa, 0x4e20, 0x7ff, @empty, 0x8}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e23, 0x10000, @private1, 0x9}, @in={0x2, 0x4e24, @multicast2}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r2, 0x7, 0xfff, 0x5, 0x4, 0x9}, 0x14) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000240)={r1, 0xffff}, 0x8) setsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000280)="5188d3e6179f890a63838a0e6c8bdab6c48900", 0x13) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={r1, 0x9}, 0x8) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x30040850}, 0xc8084) r3 = socket$inet6(0xa, 0x2, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000500)={r2, 0x9}, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000540)) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000580)={r2}, 0x8) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x101002, 0x0, 0x20}, 0x18) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000640)) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000680)={r1, @in={{0x2, 0x4e21, @broadcast}}, 0x7, 0xfffd, 0xfffffffa, 0x1, 0x41, 0x4, 0x9}, 0x9c) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x1, 0x2, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c091}, 0x20000090) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x10, 0x3f2, 0x20, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$TIOCEXCL(r0, 0x540c) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000801, 0xee01, &(0x7f0000000940)={0x7f9, 0x40, 0x6, 0x10000, 0x7f, 0x101, 0x1, 0x401, 0xe9}) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000bc0)={{&(0x7f0000000b40)={'GENERAL\x00', {&(0x7f0000000a80)=@adf_str={@format={'Cy', '0', 'RingSymRx\x00'}, {"dae806fd41ca59026401a36b07152d1b393eb47b1efa3ee4790664d408cbda6b78c97b493719f08c473fe42c223dcf614de9c91952786cad2e95fd388b3abdc5"}, {&(0x7f00000009c0)=@adf_hex={@format={'Cy', '1', 'RingAsymTx\x00'}, {0x4}}}}}}}, 0xb}) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x20, 0x5, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x4000081) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x12) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000d00)) socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000e40)) 148.239838ms ago: executing program 1 (id=2138): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x20, 0x0, "2868a600dc271cd320f7ff000000000000db8d1268a98bff90a7df415580f29210f10559e51d2ae235c5fb9a5a38238ef94b0729f5e6875edcfcffffffffffffff00"}, 0xd8) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_int(r1, 0x1, 0xb, 0x0, &(0x7f0000000080)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r3, 0x208) r4 = accept4(r3, 0x0, 0x0, 0x80000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000000), &(0x7f0000000040)=0x8) inotify_init1(0x984781f22c5c6a3f) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000001c0)={0xffffffffffffffb7, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x4, 0x0, 0x0, 0x3, 0x2, 0x4, 0x8effd365f977435f, 0x2}) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x104}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) syz_open_procfs$pagemap(r6, &(0x7f0000000180)) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x1ea) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f0000000080), 0x72a, 0x0, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r9, &(0x7f0000003240)={0x2020}, 0x2020) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) r10 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x1000001000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8}) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xc) 92.574005ms ago: executing program 4 (id=2139): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x480, 0x0, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) 67.345242ms ago: executing program 1 (id=2140): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000470000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x20000) (async) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x101ff, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000be9000/0x1000)=nil, 0x1000, 0x15) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 2.215164ms ago: executing program 3 (id=2141): process_vm_readv(0x0, &(0x7f0000001100)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='sockfs\x00', 0x1210051, 0x0) 0s ago: executing program 4 (id=2142): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000080)=@v2={0x2000000, [{0x6, 0x40}, {0x8, 0x5}]}, 0x14, 0x3) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000880)={'mpc624\x00', [0x4f27, 0x2, 0x2, 0x7, 0x1, 0xcc7, 0x4, 0x9, 0x7, 0x3ff, 0x802, 0x3, 0x1, 0x719, 0x9, 0xe1cb, 0x8, 0x4, 0x5, 0x395, 0x0, 0x3, 0x0, 0xfffffff5, 0xfeffcadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xc1e]}) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) kernel console output (not intermixed with test programs): as unexpected len 2 expected 4 [ 164.007020][ T7818] total_mapped_file 0 [ 164.019567][ T7818] total_dirty 0 [ 164.027433][ T7818] total_writeback 0 [ 164.031248][ T7818] total_workingset_refault_anon 43 [ 164.064020][ T7818] total_workingset_refault_file 0 [ 164.074558][ T7818] total_swap 53248 [ 164.078316][ T7818] total_swapcached 126976 [ 164.092232][ T7818] total_pgpgin 113541 [ 164.115261][ T7818] total_pgpgout 37193 [ 164.126174][ T7818] total_pgfault 31195 [ 164.134737][ T5901] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 164.146365][ T7818] total_pgmajfault 6006 [ 164.160391][ T7818] total_inactive_anon 307056640 [ 164.176617][ T7818] total_active_anon 163840 [ 164.201273][ T7818] total_inactive_file 0 [ 164.231541][ T7818] total_active_file 2748416 [ 164.261810][ T7818] total_unevictable 2748416 [ 164.274398][ T5901] usb 4-1: device descriptor read/64, error -71 [ 164.275916][ T7818] anon_cost 0 [ 164.314450][ T7818] file_cost 0 [ 164.321085][ T7818] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.903,pid=8894,uid=0 [ 164.351416][ T7818] Memory cgroup out of memory: Killed process 8894 (syz.4.903) total-vm:102024kB, anon-rss:9852kB, file-rss:23208kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 164.411862][ T8964] netlink: 20 bytes leftover after parsing attributes in process `syz.1.931'. [ 164.535720][ T5901] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 164.674490][ T5901] usb 4-1: device descriptor read/64, error -71 [ 164.804923][ T5901] usb usb4-port1: attempt power cycle [ 164.968008][ T8980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.936'. [ 165.184420][ T5901] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 165.205049][ T5901] usb 4-1: device descriptor read/8, error -71 [ 165.444519][ T5901] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 165.465051][ T5901] usb 4-1: device descriptor read/8, error -71 [ 165.584666][ T5901] usb usb4-port1: unable to enumerate USB device [ 165.641915][ T8993] /dev/rnullb0: Can't lookup blockdev [ 165.690671][ T8996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.701151][ T8996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.068351][ T9021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.079176][ T9021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.091036][ T9021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.092606][ T30] audit: type=1804 audit(166.058:103): pid=9018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.949" name="rnullb0" dev="tmpfs" ino=1302 res=1 errno=0 [ 166.100998][ T9021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.126342][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.967042][ T9034] netlink: 14428 bytes leftover after parsing attributes in process `syz.3.954'. [ 166.977680][ T9034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.280664][ T9044] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 167.432375][ T9058] overlayfs: failed to clone upperpath [ 168.103928][ T9071] 9p: Bad value for 'msize' [ 168.113120][ T9071] overlay: Unknown parameter 'trans' [ 168.120577][ T9072] overlay: ./file0 is not a directory [ 168.253426][ T9082] syzkaller1: entered promiscuous mode [ 168.260384][ T9082] syzkaller1: entered allmulticast mode [ 168.549060][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.971'. [ 168.733416][ T9116] netlink: 'syz.1.975': attribute type 1 has an invalid length. [ 168.747109][ T9116] netlink: 'syz.1.975': attribute type 2 has an invalid length. [ 168.756508][ T9116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.975'. [ 168.921282][ T9126] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.006687][ T9126] FAT-fs (loop4): unable to read boot sector [ 169.274426][ T5901] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 169.414428][ T5901] usb 4-1: device descriptor read/64, error -71 [ 169.428937][ T9139] /dev/rnullb0: Can't open blockdev [ 169.554148][ T9146] netlink: 2 bytes leftover after parsing attributes in process `syz.1.984'. [ 169.577495][ T9148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.588118][ T9148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.654421][ T5901] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 169.804483][ T5901] usb 4-1: device descriptor read/64, error -71 [ 169.925676][ T5901] usb usb4-port1: attempt power cycle [ 170.118932][ T9172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.991'. [ 170.294527][ T5901] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 170.325044][ T5901] usb 4-1: device descriptor read/8, error -71 [ 170.574517][ T5901] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 170.629132][ T5901] usb 4-1: device descriptor read/8, error -71 [ 170.763743][ T5901] usb usb4-port1: unable to enumerate USB device [ 170.939211][ T9194] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 170.957363][ T9195] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 170.972538][ T9194] /dev/rnullb0: Can't open blockdev [ 170.987032][ T9195] /dev/rnullb0: Can't open blockdev [ 171.134040][ T9198] overlayfs: failed to clone upperpath [ 171.888395][ T9223] /dev/rnullb0: Can't open blockdev [ 172.185968][ T9238] /dev/rnullb0: Can't open blockdev [ 173.805931][ T9293] /dev/rnullb0: Can't open blockdev [ 174.186024][ T9314] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 174.203837][ T9314] /dev/rnullb0: Can't open blockdev [ 174.217310][ T9317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1035'. [ 174.613111][ T9337] /dev/rnullb0: Can't open blockdev [ 174.920609][ T9345] IPVS: set_ctl: invalid protocol: 137 100.1.1.2:20000 [ 174.987167][ T5876] Bluetooth: hci3: unexpected event for opcode 0x2012 [ 174.996984][ T5876] Bluetooth: hci3: unexpected event for opcode 0x2012 [ 175.067786][ T9347] netlink: 'syz.2.1045': attribute type 19 has an invalid length. [ 175.075633][ T9347] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1045'. [ 175.775834][ T5876] Bluetooth: hci0: command 0x0406 tx timeout [ 175.901318][ T9378] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1057'. [ 175.922122][ T9377] /dev/rnullb0: Can't lookup blockdev [ 175.952970][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1058'. [ 176.000405][ T30] audit: type=1800 audit(175.968:104): pid=9385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1059" name="nullb0" dev="tmpfs" ino=1875 res=0 errno=0 [ 176.034242][ T9387] QAT: Device 253 not found [ 176.052769][ T9387] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 176.061005][ T51] Bluetooth: hci0: unexpected cc 0x1408 length: 103 > 4 [ 176.065002][ T9387] /dev/rnullb0: Can't open blockdev [ 176.069840][ T51] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 176.132903][ T9393] team0: No ports can be present during mode change [ 176.141719][ T9393] /dev/rnullb0: Can't open blockdev [ 176.343706][ T9407] use of bytesused == 0 is deprecated and will be removed in the future, [ 176.353731][ T9407] use the actual size instead. [ 176.355505][ T9385] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1059'. [ 176.404951][ T30] audit: type=1326 audit(176.348:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedf98ebe9 code=0x7fc00000 [ 176.489797][ T51] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 176.864557][ T5901] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 177.024477][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 177.031017][ T5901] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 177.040310][ T5901] usb 4-1: config 0 has no interface number 0 [ 177.048681][ T5901] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 177.063911][ T5901] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 177.078874][ T5901] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 177.088123][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.104376][ T5901] usb 4-1: Product: syz [ 177.108544][ T5901] usb 4-1: Manufacturer: syz [ 177.113137][ T5901] usb 4-1: SerialNumber: syz [ 177.120562][ T5901] usb 4-1: config 0 descriptor?? [ 177.136044][ T9428] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 177.143255][ T9428] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 177.232226][ T51] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 177.352443][ T9428] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 177.359719][ T9428] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 177.437625][ T9445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.455962][ T9445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.481185][ T51] Bluetooth: hci2: connection err: -111 [ 177.491082][ T9447] autofs: Unknown parameter '' [ 177.589875][ T5901] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 177.601815][ T5901] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 177.624648][ T5901] asix 4-1:0.251: probe with driver asix failed with error -71 [ 177.638456][ T9453] tmpfs: Bad value for 'mpol' [ 177.643395][ T5901] usb 4-1: USB disconnect, device number 43 [ 178.024916][ T9472] [U]  [ 178.027742][ T9472] [U] K{ [ 178.030847][ T9472] [U] T 1ŠFFˊ`GJǘGO/MC [ 178.055921][ T9472] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 178.081980][ T9472] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 178.106692][ T9472] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 178.159612][ T9476] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 178.177715][ T9479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.201979][ T9475] autofs: Unknown parameter '' [ 178.207391][ T9476] /dev/rnullb0: Can't open blockdev [ 178.224104][ T9472] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 178.256498][ T9479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.321305][ T9472] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 178.344628][ T9472] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 178.395538][ T9472] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 178.504832][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.546906][ T9472] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 178.555746][ T5901] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 178.563611][ T9472] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 178.585257][ T9472] [U] 22Ʃ۩X?0;3U [ 178.595034][ T9472] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 178.652471][ T9472] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 178.672541][ T9472] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 178.684523][ T9472] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 178.690877][ T9472] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 178.713438][ T9472] [U] EC [ 178.723717][ T9472] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 178.736481][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 178.747532][ T5901] usb 4-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.770616][ T5901] usb 4-1: config 1 interface 0 has no altsetting 0 [ 178.788496][ T5901] usb 4-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 178.814219][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.849065][ T9509] overlayfs: failed to clone upperpath [ 178.854195][ T5901] usb 4-1: Product: syz [ 178.859028][ T5901] usb 4-1: Manufacturer: syz [ 178.863617][ T5901] usb 4-1: SerialNumber: syz [ 179.037315][ T9524] netlink: 'syz.1.1102': attribute type 8 has an invalid length. [ 179.050583][ T9525] C: renamed from team_slave_0 (while UP) [ 179.060382][ T9525] netlink: 'syz.1.1102': attribute type 4 has an invalid length. [ 179.069527][ T9525] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1102'. [ 179.081627][ T9525] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 179.099957][ T9524] netlink: 'syz.1.1102': attribute type 4 has an invalid length. [ 179.108268][ T9524] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1102'. [ 179.119276][ T9524] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 179.254319][ T9531] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.1104'. [ 179.264044][ T9531] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.1104'. [ 179.298552][ T9531] /dev/rnullb0: Can't lookup blockdev [ 179.405945][ T9471] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 179.426540][ T5901] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input16 [ 179.437263][ T5222] bcm5974 4-1:1.0: could not read from device [ 179.448275][ T5222] bcm5974 4-1:1.0: could not read from device [ 179.456892][ T5901] usb 4-1: USB disconnect, device number 44 [ 179.829467][ T9536] program syz.2.1106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.026795][ T9541] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 180.033876][ T9541] /dev/rnullb0: Can't open blockdev [ 180.416919][ T5901] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 180.576549][ T5901] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 180.587028][ T5901] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.596628][ T9551] overlay: ./file0 is not a directory [ 180.607786][ T5901] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 180.617239][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.617278][ T9555] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 180.635814][ T9555] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 180.641746][ T9555] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 180.652884][ T9555] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 180.660003][ T9555] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 180.666243][ T9555] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 180.672809][ T9555] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 180.681356][ T9555] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 180.757368][ T9560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.770783][ T9560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.846735][ T5901] usb 4-1: usb_control_msg returned -32 [ 180.852331][ T5901] usbtmc 4-1:16.0: can't read capabilities [ 182.474918][ T9583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.522638][ T9583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.610965][ T30] audit: type=1800 audit(182.578:106): pid=9583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1121" name="bus" dev="ramfs" ino=26831 res=0 errno=0 [ 182.664702][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 182.671162][ T5188] Bluetooth: hci0: command 0x0406 tx timeout [ 182.754430][ T51] Bluetooth: hci1: command 0x0405 tx timeout [ 182.760471][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 183.032062][ T5901] usb 4-1: USB disconnect, device number 45 [ 183.283758][ T9604] overlayfs: missing 'lowerdir' [ 183.403482][ T9621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1136'. [ 183.413867][ T9622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1136'. [ 183.436194][ T24] hid-generic 0008:0000:FFFFFBFF.000D: item fetching failed at offset 5/169 [ 183.448368][ T24] hid-generic 0008:0000:FFFFFBFF.000D: probe with driver hid-generic failed with error -22 [ 183.590622][ T30] audit: type=1804 audit(183.558:107): pid=9638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1141" name="rnullb0" dev="tmpfs" ino=1302 res=1 errno=0 [ 184.250366][ T9648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1145'. [ 184.276121][ T30] audit: type=1326 audit(184.238:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.1.1145" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feedf98ebe9 code=0x0 [ 184.297147][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.747928][ T5188] Bluetooth: hci2: command 0x0c1a tx timeout [ 184.824439][ T5188] Bluetooth: hci1: command 0x0405 tx timeout [ 184.894552][ T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 185.044412][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 185.051272][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 185.066231][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 185.080243][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 185.103282][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.131424][ T24] usb 4-1: Product: syz [ 185.136132][ T24] usb 4-1: Manufacturer: syz [ 185.159490][ T24] usb 4-1: SerialNumber: syz [ 185.177446][ T24] usb 4-1: config 0 descriptor?? [ 185.197402][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 185.214140][ T24] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 185.384025][ T9683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1156'. [ 185.801141][ T24] em28xx 4-1:0.0: chip ID is em2874 [ 185.940719][ T9687] /dev/rnullb0: Can't lookup blockdev [ 186.077056][ T24] usb 4-1: USB disconnect, device number 46 [ 186.089630][ T24] em28xx 4-1:0.0: Disconnecting em28xx [ 186.097493][ T24] em28xx 4-1:0.0: Freeing device [ 186.216105][ T9689] capability: warning: `syz.2.1159' uses 32-bit capabilities (legacy support in use) [ 186.814438][ T5188] Bluetooth: hci2: command 0x0c1a tx timeout [ 186.894450][ T5188] Bluetooth: hci1: command 0x0405 tx timeout [ 187.660582][ T9721] Invalid ELF header magic: != ELF [ 188.158077][ T9728] overlayfs: upper fs does not support file handles, falling back to index=off. [ 188.851775][ T30] audit: type=1804 audit(188.818:109): pid=9748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1177" name="rnullb0" dev="tmpfs" ino=1302 res=1 errno=0 [ 188.974729][ T5188] Bluetooth: hci1: command 0x0405 tx timeout [ 189.025749][ T9754] autofs: Unknown parameter './file0' [ 189.539038][ T9786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.567881][ T9786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.593938][ T9788] /dev/rnullb0: Can't lookup blockdev [ 189.623382][ T9788] /dev/rnullb0: Can't lookup blockdev [ 189.644751][ T9790] /dev/rnullb0: Can't lookup blockdev [ 190.171110][ T9808] /dev/rnullb0: Can't open blockdev [ 191.054823][ T5188] Bluetooth: hci1: command 0x0405 tx timeout [ 194.177631][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.184192][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 246.976812][ T5188] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 246.999907][ T9821] netlink: 'syz.2.1201': attribute type 2 has an invalid length. [ 247.016804][ T9821] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1201'. [ 247.027789][ T9821] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1201'. [ 247.136886][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1203'. [ 247.224993][ T5958] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 247.380979][ T9832] netlink: 'syz.2.1204': attribute type 13 has an invalid length. [ 247.388964][ T5958] usb 4-1: Using ep0 maxpacket: 16 [ 247.399892][ T5958] usb 4-1: unable to get BOS descriptor or descriptor too short [ 247.418471][ T5958] usb 4-1: config 3 has an invalid interface number: 216 but max is 0 [ 247.437198][ T5958] usb 4-1: config 3 has no interface number 0 [ 247.443294][ T5958] usb 4-1: config 3 interface 216 has no altsetting 0 [ 247.452617][ T5958] usb 4-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=de.a6 [ 247.466650][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.475013][ T5958] usb 4-1: Product: syz [ 247.479178][ T5958] usb 4-1: Manufacturer: syz [ 247.483768][ T5958] usb 4-1: SerialNumber: syz [ 247.671993][ T9840] /dev/rnullb0: Can't open blockdev [ 247.681141][ T9842] /dev/rnullb0: Can't open blockdev [ 247.703843][ T9822] /dev/rnullb0: Can't open blockdev [ 247.761641][ T9846] block nbd2: Attempted send on invalid socket [ 247.769958][ T9846] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.794415][ T5958] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.216/input/input17 [ 247.808463][ T5222] bcm5974 4-1:3.216: could not read from device [ 247.818124][ T5222] bcm5974 4-1:3.216: could not read from device [ 247.835786][ T5958] usb 4-1: USB disconnect, device number 47 [ 247.846727][ T9849] /dev/rnullb0: Can't open blockdev [ 247.853487][ T9850] /dev/rnullb0: Can't open blockdev [ 248.093255][ T30] audit: type=1800 audit(248.058:110): pid=9857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.1213" name="/" dev="sockfs" ino=27560 res=0 errno=0 [ 248.149149][ T9867] No control pipe specified [ 248.449964][ T9873] netlink: 'syz.3.1218': attribute type 16 has an invalid length. [ 248.458121][ T9873] netlink: 'syz.3.1218': attribute type 2 has an invalid length. [ 248.472466][ T9873] netlink: 'syz.3.1218': attribute type 2 has an invalid length. [ 248.481064][ T9873] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.1218'. [ 248.482060][ T5188] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 248.509441][ T9875] loop7: detected capacity change from 0 to 7 [ 248.819841][ T9886] /dev/rnullb0: Can't lookup blockdev [ 248.938443][ T9892] 9p: Unknown parameter 'v' [ 249.251181][ T9903] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1227'. [ 249.353365][ T30] audit: type=1800 audit(249.308:111): pid=9913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1230" name="rnullb0" dev="tmpfs" ino=1302 res=0 errno=0 [ 249.419243][ T9918] openvswitch: netlink: EtherType 50a is less than min 600 [ 249.607437][ T9927] /dev/rnullb0: Can't open blockdev [ 249.708790][ T30] audit: type=1804 audit(249.678:112): pid=9934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1238" name="rnullb0" dev="tmpfs" ino=1302 res=1 errno=0 [ 249.796346][ T5188] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 249.804175][ T5188] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 249.991798][ T9943] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 250.009776][ T9943] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 250.019971][ T9943] comedi comedi3: 8255: I/O port conflict (0xdb,4) [ 250.027878][ T9943] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 250.035152][ T9943] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 250.041594][ T9943] comedi comedi3: 8255: I/O port conflict (0xffffffff800003ff,4) [ 250.050639][ T9943] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 250.067140][ T9943] syzkaller1: entered promiscuous mode [ 250.072665][ T9943] syzkaller1: entered allmulticast mode [ 250.553274][ T30] audit: type=1804 audit(250.518:113): pid=9957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1247" name="rnullb0" dev="tmpfs" ino=1302 res=1 errno=0 [ 250.787722][ T5188] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 250.931103][ T30] audit: type=1804 audit(250.898:114): pid=9969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1252" name="rnullb0" dev="tmpfs" ino=1302 res=1 errno=0 [ 251.004891][ T9973] /dev/rnullb0: Can't lookup blockdev [ 251.361624][ T9984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.384931][ T9984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.852073][ T9988] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1259'. [ 251.942112][ T9875] syz.4.1219 (9875) used greatest stack depth: 18608 bytes left [ 252.114410][ T5958] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 252.281087][ T9999] netlink: 'syz.1.1261': attribute type 10 has an invalid length. [ 252.284932][ T5958] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 252.290087][ T9998] netlink: 'syz.1.1261': attribute type 10 has an invalid length. [ 252.325556][ T5958] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 252.328748][ T9999] team0: Device ipvlan1 failed to register rx_handler [ 252.354651][ T5958] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 252.370826][ T5958] usb 4-1: config 0 interface 0 has no altsetting 0 [ 252.372454][ T9998] team0: Device ipvlan1 failed to register rx_handler [ 252.388381][ T5958] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 252.405622][ T5958] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 252.424687][ T5958] usb 4-1: config 0 interface 0 has no altsetting 0 [ 252.432192][ T5958] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 252.442863][ T5958] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 252.464383][ T5958] usb 4-1: config 0 interface 0 has no altsetting 0 [ 252.486101][ T5958] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 252.496749][ T5958] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 252.524401][ T5958] usb 4-1: config 0 interface 0 has no altsetting 0 [ 252.532560][ T5958] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 252.555608][ T5958] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 252.566702][ T5958] usb 4-1: config 0 interface 0 has no altsetting 0 [ 252.585068][ T5958] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 252.593942][ T5958] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 252.604931][ T30] audit: type=1804 audit(252.558:115): pid=10004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1263" name="rnullb0" dev="tmpfs" ino=1302 res=1 errno=0 [ 252.645947][ T5958] usb 4-1: config 0 interface 0 has no altsetting 0 [ 252.657794][ T5958] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 252.674500][ T5958] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 252.704360][ T5958] usb 4-1: config 0 interface 0 has no altsetting 0 [ 252.711753][ T5958] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 252.727989][ T5958] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 252.755351][ T5958] usb 4-1: config 0 interface 0 has no altsetting 0 [ 252.778626][ T5958] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 252.789248][ T5958] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 252.805290][ T5958] usb 4-1: Product: syz [ 252.809455][ T5958] usb 4-1: Manufacturer: syz [ 252.814039][ T5958] usb 4-1: SerialNumber: syz [ 252.827043][ T5958] usb 4-1: config 0 descriptor?? [ 252.838849][ T5958] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 252.913601][T10016] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1267'. [ 253.042873][ T5188] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 253.043593][ T5958] usb 4-1: USB disconnect, device number 48 [ 253.299244][ T5958] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 254.028398][T10044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1275'. [ 254.050515][T10044] /dev/rnullb0: Can't open blockdev [ 254.160602][T10049] /dev/rnullb0: Can't open blockdev [ 254.259533][T10053] /dev/rnullb0: Can't open blockdev [ 254.330774][T10055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.361795][T10055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.553139][ T30] audit: type=1804 audit(254.518:116): pid=10057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1280" name="rnullb0" dev="tmpfs" ino=1302 res=1 errno=0 [ 254.696548][T10063] MTD: Couldn't look up '/dev/rnullb0': -15 [ 255.324463][T10074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.357517][T10074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.522598][T10074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.562828][T10074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.674860][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.681159][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.903820][T10093] MTD: Couldn't look up '/dev/rnullb0': -15 [ 255.945689][ T5188] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 256.039990][T10100] /dev/rnullb0: Can't open blockdev [ 256.604601][ T5188] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 256.719702][T10135] /dev/rnullb0: Can't lookup blockdev [ 257.125434][ T981] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 257.284596][ T981] usb 4-1: Using ep0 maxpacket: 8 [ 257.297793][ T981] usb 4-1: unable to get BOS descriptor or descriptor too short [ 257.316928][ T981] usb 4-1: config 4 interface 0 has no altsetting 0 [ 257.324922][ T981] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 257.333957][ T981] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 257.343574][ T981] usb 4-1: Manufacturer: syz [ 257.348581][ T981] usb 4-1: SerialNumber: syz [ 257.409963][T10169] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 257.572232][T10143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.580889][T10143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.590419][T10143] /dev/rnullb0: Can't open blockdev [ 257.598858][T10143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.632131][T10143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.666818][ T981] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 257.681404][ T5188] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 257.690826][ T5188] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 257.701570][ T981] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 257.714156][ T981] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 257.721417][ T981] usb 4-1: media controller created [ 257.737250][ T981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 257.757780][ T981] zl10353_read_register: readreg error (reg=127, ret==0) [ 257.769123][T10190] netlink: 'syz.3.1322': attribute type 3 has an invalid length. [ 257.800454][ T981] usb 4-1: USB disconnect, device number 49 [ 257.874353][ T30] audit: type=1804 audit(257.828:117): pid=10195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1324" name="rnullb0" dev="tmpfs" ino=1302 res=1 errno=0 [ 257.981948][T10201] GUP no longer grows the stack in syz.1.1325 (10201): 200000005000-200000008000 (200000004000) [ 257.992666][T10201] CPU: 1 UID: 0 PID: 10201 Comm: syz.1.1325 Not tainted syzkaller #0 PREEMPT(full) [ 257.992690][T10201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 257.992702][T10201] Call Trace: [ 257.992709][T10201] [ 257.992716][T10201] dump_stack_lvl+0x189/0x250 [ 257.992755][T10201] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.992779][T10201] ? __pfx__printk+0x10/0x10 [ 257.992800][T10201] ? find_vma+0xe7/0x160 [ 257.992824][T10201] ? unwind_next_frame+0xa5/0x2390 [ 257.992844][T10201] ? rcu_is_watching+0x15/0xb0 [ 257.992864][T10201] __get_user_pages+0x24d0/0x2ce0 [ 257.992883][T10201] ? rcu_is_watching+0x15/0xb0 [ 257.992913][T10201] ? __gup_longterm_locked+0xc68/0x1660 [ 257.992941][T10201] ? __gup_longterm_locked+0xc68/0x1660 [ 257.992966][T10201] __gup_longterm_locked+0xde9/0x1660 [ 257.992988][T10201] ? rcu_is_watching+0x15/0xb0 [ 257.993006][T10201] ? lock_acquire+0x5f/0x360 [ 257.993021][T10201] ? gup_fast_fallback+0x21f/0x2010 [ 257.993041][T10201] ? rcu_is_watching+0x15/0xb0 [ 257.993060][T10201] ? rcu_is_watching+0x15/0xb0 [ 257.993079][T10201] ? rcu_is_watching+0x15/0xb0 [ 257.993097][T10201] gup_fast_fallback+0x1e6a/0x2010 [ 257.993130][T10201] ? __pfx_gup_fast_fallback+0x10/0x10 [ 257.993150][T10201] ? __resched_curr+0x202/0x3e0 [ 257.993168][T10201] ? __pfx___resched_curr+0x10/0x10 [ 257.993187][T10201] ? is_valid_gup_args+0x11f/0x200 [ 257.993209][T10201] ? get_user_pages_fast+0x4d/0xb0 [ 257.993230][T10201] get_futex_key+0x938/0x1660 [ 257.993254][T10201] ? __pfx_get_futex_key+0x10/0x10 [ 257.993273][T10201] ? futex_private_hash_put+0x4b/0x280 [ 257.993296][T10201] futex_wake_op+0x132/0xd80 [ 257.993313][T10201] ? futex_private_hash_put+0x4b/0x280 [ 257.993334][T10201] ? futex_wake+0x4b2/0x560 [ 257.993349][T10201] ? __pfx_futex_wake_op+0x10/0x10 [ 257.993366][T10201] ? __pfx_futex_wake+0x10/0x10 [ 257.993380][T10201] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 257.993400][T10201] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 257.993420][T10201] do_futex+0x3bd/0x420 [ 257.993443][T10201] ? __pfx_do_futex+0x10/0x10 [ 257.993463][T10201] ? __vm_munmap+0x301/0x3d0 [ 257.993486][T10201] __se_sys_futex+0x36f/0x400 [ 257.993509][T10201] ? __pfx___se_sys_futex+0x10/0x10 [ 257.993532][T10201] ? __x64_sys_futex+0x21/0xf0 [ 257.993551][T10201] do_syscall_64+0xfa/0xfa0 [ 257.993572][T10201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.993589][T10201] ? clear_bhb_loop+0x60/0xb0 [ 257.993606][T10201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.993623][T10201] RIP: 0033:0x7feedf98ebe9 [ 257.993644][T10201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.993660][T10201] RSP: 002b:00007feee07a9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 257.993686][T10201] RAX: ffffffffffffffda RBX: 00007feedfbc6090 RCX: 00007feedf98ebe9 [ 257.993700][T10201] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000200000004000 [ 257.993711][T10201] RBP: 00007feedfa11e19 R08: 0000000000000000 R09: 00000000a3020000 [ 257.993722][T10201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.993732][T10201] R13: 00007feedfbc6128 R14: 00007feedfbc6090 R15: 00007ffe7ec51fc8 [ 257.993750][T10201] [ 258.531998][T10221] wlan1 speed is unknown, defaulting to 1000 [ 258.545864][T10221] wlan1 speed is unknown, defaulting to 1000 [ 258.571472][T10221] wlan1 speed is unknown, defaulting to 1000 [ 258.610230][ T5188] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 258.659121][T10222] /dev/rnullb0: Can't lookup blockdev [ 258.812740][T10221] infiniband syz0: set active [ 258.817796][ T981] wlan1 speed is unknown, defaulting to 1000 [ 258.829678][T10221] infiniband syz0: added wlan1 [ 258.883752][T10221] RDS/IB: syz0: added [ 258.896368][T10221] smc: adding ib device syz0 with port count 1 [ 258.909438][T10221] smc: ib device syz0 port 1 has pnetid [ 258.933097][ T981] wlan1 speed is unknown, defaulting to 1000 [ 258.941118][T10221] wlan1 speed is unknown, defaulting to 1000 [ 259.155742][T10221] wlan1 speed is unknown, defaulting to 1000 [ 259.219287][T10234] overlayfs: failed to resolve './file0': -2 [ 259.312011][T10236] syzkaller1: entered promiscuous mode [ 259.338198][T10236] syzkaller1: entered allmulticast mode [ 259.354970][T10221] wlan1 speed is unknown, defaulting to 1000 [ 259.463197][T10221] wlan1 speed is unknown, defaulting to 1000 [ 259.609236][ T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 259.676244][T10248] syzkaller1: entered promiscuous mode [ 259.686691][ T5188] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 259.695941][T10248] syzkaller1: entered allmulticast mode [ 259.768243][ T24] usb 4-1: New USB device found, idVendor=13d3, idProduct=3206, bcdDevice=69.02 [ 259.780503][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.800150][ T24] usb 4-1: Product: syz [ 259.811621][ T24] usb 4-1: Manufacturer: syz [ 259.822594][ T24] usb 4-1: SerialNumber: syz [ 259.833843][ T24] dvb-usb: found a 'Twinhan USB2.0 DVB-T receiver (TwinhanDTV Alpha/MagicBox II)' in warm state. [ 259.875283][T10262] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1344'. [ 259.885998][ T981] IPVS: starting estimator thread 0... [ 259.975589][T10263] IPVS: using max 46 ests per chain, 110400 per kthread [ 260.081661][T10236] wlan1 speed is unknown, defaulting to 1000 [ 260.083922][T10270] /dev/rnullb0: Can't open blockdev [ 260.342261][ T30] audit: type=1326 audit(260.308:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10235 comm="syz.3.1337" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e0858ebe9 code=0x0 [ 260.354077][T10287] 9pnet: p9_errstr2errno: server reported unknown error @cF [ 260.402342][ T5188] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 260.976615][T10287] /dev/rnullb0: Can't open blockdev [ 261.254777][T10299] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 261.268479][T10299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.277456][T10299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.816688][T10301] /dev/rnullb0: Can't open blockdev [ 261.843408][T10303] netlink: 'syz.2.1358': attribute type 1 has an invalid length. [ 261.851450][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1358'. [ 262.064105][ T5188] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 262.076430][T10312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1360'. [ 262.111128][T10314] overlay: Unknown parameter 'dont_appraise' [ 262.334552][ T24] vp7045: USB control message 'in' went wrong. [ 262.340737][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 262.366944][ T24] dvbdev: DVB: registering new adapter (Twinhan USB2.0 DVB-T receiver (TwinhanDTV Alpha/MagicBox II)) [ 262.379762][ T24] usb 4-1: media controller created [ 262.388609][ T24] vp7045: USB control message 'out' went wrong. [ 262.394908][ T24] dvb-usb: MAC address reading failed. [ 262.412632][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.432414][ T24] vp7045: USB control message 'out' went wrong. [ 262.439824][ T24] vp7045: USB control message 'out' went wrong. [ 262.448157][ T24] vp7045: USB control message 'out' went wrong. [ 262.464497][ T24] usb 4-1: DVB: registering adapter 1 frontend 0 (Twinhan VP7045/46 USB DVB-T)... [ 262.476410][ T24] dvbdev: dvb_create_media_entity: media entity 'Twinhan VP7045/46 USB DVB-T' registered. [ 262.504774][T10329] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 262.536741][T10329] /dev/rnullb0: Can't open blockdev [ 262.694631][ T24] rc_core: IR keymap rc-twinhan1027 not found [ 262.700725][ T24] Registered IR keymap rc-empty [ 262.719068][ T24] rc rc0: Twinhan USB2.0 DVB-T receiver (TwinhanDTV Alpha/MagicBox II) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 262.755954][ T24] input: Twinhan USB2.0 DVB-T receiver (TwinhanDTV Alpha/MagicBox II) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input20 [ 262.776333][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 262.794393][ T24] vp7045: USB control message 'out' went wrong. [ 262.800650][ T24] dvb-usb: Twinhan USB2.0 DVB-T receiver (TwinhanDTV Alpha/MagicBox II) successfully initialized and connected. [ 262.844153][ T24] usb 4-1: USB disconnect, device number 50 [ 262.949250][T10337] Invalid ELF header magic: != ELF [ 263.063441][ T24] dvb-usb: Twinhan USB2.0 DVB-T receiver (TwinhanD successfully deinitialized and disconnected. [ 263.571956][T10350] /dev/rnullb0: Can't open blockdev [ 263.649840][T10352] IPVS: Unknown mcast interface: pimreg0 [ 264.034628][ T30] audit: type=1326 audit(263.998:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10369 comm="syz.3.1381" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e0858ebe9 code=0x0 [ 264.167399][T10378] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1382'. [ 264.449164][T10381] syzkaller1: entered promiscuous mode [ 264.485610][T10381] syzkaller1: entered allmulticast mode [ 264.646020][T10392] /dev/rnullb0: Can't lookup blockdev [ 264.782338][T10402] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1390'. [ 264.796581][T10402] /dev/rnullb0: Can't lookup blockdev [ 264.954446][ T24] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 265.115007][ T24] usb 4-1: no configurations [ 265.119889][ T24] usb 4-1: can't read configurations, error -22 [ 265.254453][ T24] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 265.360708][T10407] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1392'. [ 265.405615][ T24] usb 4-1: no configurations [ 265.415811][ T24] usb 4-1: can't read configurations, error -22 [ 265.434413][ T30] audit: type=1804 audit(265.398:120): pid=10412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1394" name="rnullb0" dev="tmpfs" ino=1302 res=1 errno=0 [ 265.464534][ T24] usb usb4-port1: attempt power cycle [ 265.532369][ T30] audit: type=1804 audit(265.498:121): pid=10417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1396" name="rnullb0" dev="tmpfs" ino=1302 res=1 errno=0 [ 265.834400][ T24] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 265.857784][ T24] usb 4-1: no configurations [ 265.862382][ T24] usb 4-1: can't read configurations, error -22 [ 265.994459][ T24] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 266.016790][ T24] usb 4-1: no configurations [ 266.021393][ T24] usb 4-1: can't read configurations, error -22 [ 266.028531][ T24] usb usb4-port1: unable to enumerate USB device [ 266.599247][T10439] mmap: syz.2.1401 (10439) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 267.002983][T10453] overlayfs: failed to clone upperpath [ 267.046783][ T30] audit: type=1804 audit(267.008:122): pid=10455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1407" name="rnullb0" dev="tmpfs" ino=1302 res=1 errno=0 [ 267.473411][T10479] /dev/rnullb0: Can't open blockdev [ 267.500923][T10482] 9p: Bad value for 'rfdno' [ 267.516867][T10487] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 267.531732][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1419'. [ 267.674686][T10496] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1421'. [ 267.776714][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059132c00: rx timeout, send abort [ 267.866845][T10502] wlan1 speed is unknown, defaulting to 1000 [ 267.927838][ T5188] Bluetooth: hci3: unexpected event for opcode 0x2029 [ 268.024294][T10512] MTD: Couldn't look up '/dev/rnullb0': -15 [ 268.276900][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059130400: rx timeout, send abort [ 268.285376][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059132c00: abort rx timeout. Force session deactivation [ 268.372339][T10521] FAT-fs (nullb0): bogus number of reserved sectors [ 268.381752][T10521] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 268.391346][ T5188] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 268.748392][T10546] /dev/rnullb0: Can't lookup blockdev [ 268.785177][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059130400: abort rx timeout. Force session deactivation [ 268.804654][ T30] audit: type=1804 audit(268.778:123): pid=10551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1439" name="rnullb0" dev="tmpfs" ino=1302 res=1 errno=0 [ 269.026972][T10565] /dev/rnullb0: Can't open blockdev [ 269.066595][T10561] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1444'. [ 269.175787][T10561] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1444'. [ 269.203055][T10561] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1444'. [ 269.456377][T10577] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 269.505096][T10581] /dev/rnullb0: Can't open blockdev [ 269.751462][T10590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.777865][T10590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.787832][T10590] /dev/rnullb0: Can't open blockdev [ 269.984079][T10596] sg_write: data in/out 2907/14 bytes for SCSI command 0x0-- guessing data in; [ 269.984079][T10596] program syz.3.1453 not setting count and/or reply_len properly [ 270.013555][T10596] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 270.349762][T10604] rdma_rxe: rxe_newlink: failed to add wlan1 [ 270.366248][T10604] /dev/rnullb0: Can't open blockdev [ 270.416031][T10607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.426961][T10607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.439216][T10607] /dev/rnullb0: Can't open blockdev [ 270.449222][T10607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.459795][T10607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.470946][T10607] netlink: 'syz.2.1456': attribute type 1 has an invalid length. [ 270.479355][T10607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1456'. [ 271.048091][T10611] /dev/rnullb0: Can't open blockdev [ 271.152063][T10614] /dev/rnullb0: Can't open blockdev [ 271.346743][ T30] audit: type=1804 audit(271.318:124): pid=10634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1465" name="/newroot/295/cgroup.controllers" dev="tmpfs" ino=1569 res=1 errno=0 [ 271.372585][ T30] audit: type=1800 audit(271.318:125): pid=10634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1465" name="cgroup.controllers" dev="tmpfs" ino=1569 res=0 errno=0 [ 271.934589][ T5188] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 271.944496][ T5188] Bluetooth: hci3: Injecting HCI hardware error event [ 271.951357][ T51] Bluetooth: hci3: hardware error 0x00 [ 272.075192][T10676] netlink: 'syz.1.1467': attribute type 1 has an invalid length. [ 272.886806][T10704] Bluetooth: MGMT ver 1.23 [ 272.958558][T10707] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1475'. [ 272.984584][T10707] netlink: 'syz.1.1475': attribute type 83 has an invalid length. [ 273.074667][T10715] MTD: Couldn't look up '/dev/rnullb0': -15 [ 273.184224][T10721] /dev/rnullb0: Can't lookup blockdev [ 273.201562][T10723] /dev/rnullb0: Can't open blockdev [ 273.245299][ T30] audit: type=1804 audit(273.218:126): pid=10726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1482" name="rnullb0" dev="tmpfs" ino=1302 res=1 errno=0 [ 273.385737][T10734] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.1485'. [ 273.977266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 274.014639][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 274.245632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 274.388389][T10757] MTD: Couldn't look up '/dev/rnullb0': -15 [ 274.450461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 274.801784][T10765] netlink: 'syz.1.1496': attribute type 27 has an invalid length. [ 274.811011][T10765] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1496'. [ 274.954376][ T5958] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 275.094394][ T5958] usb 4-1: device descriptor read/64, error -71 [ 275.346255][ T5958] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 275.494381][ T5958] usb 4-1: device descriptor read/64, error -71 [ 275.604546][ T5958] usb usb4-port1: attempt power cycle [ 275.944416][ T5958] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 275.985490][ T5958] usb 4-1: device descriptor read/8, error -71 [ 276.224610][ T5958] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 276.245767][ T5958] usb 4-1: device descriptor read/8, error -71 [ 276.356276][ T5958] usb usb4-port1: unable to enumerate USB device [ 276.489079][ T30] audit: type=1804 audit(276.458:127): pid=10792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1504" name="rnullb0" dev="tmpfs" ino=1302 res=1 errno=0 [ 277.778884][T10836] /dev/rnullb0: Can't open blockdev [ 278.081424][T10845] 8021q: VLANs not supported on vcan0 [ 278.110427][T10847] /dev/rnullb0: Can't open blockdev [ 278.117963][T10848] /dev/rnullb0: Can't open blockdev [ 278.438508][T10866] 9pnet: p9_errstr2errno: server reported unknown error @c [ 279.328106][T10892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.340660][T10892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.534413][ T5901] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 279.718489][ T5901] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 279.728486][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.739408][ T5901] usb 4-1: config 0 descriptor?? [ 279.755634][ T5901] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 279.940291][T10904] /dev/rnullb0: Can't open blockdev [ 280.156180][T10883] /dev/rnullb0: Can't open blockdev [ 280.161601][ T5901] gspca_cpia1: usb_control_msg 03, error -32 [ 280.180009][ T5901] gspca_cpia1: usb_control_msg 03, error -71 [ 280.186779][ T5901] gspca_cpia1: usb_control_msg 01, error -71 [ 280.192795][ T5901] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 280.205921][ T5901] usb 4-1: USB disconnect, device number 59 [ 280.453653][T10926] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1544'. [ 280.632492][T10931] /dev/rnullb0: Can't open blockdev [ 280.734869][T10943] /dev/rnullb0: Can't open blockdev [ 281.159281][T10960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.171048][T10960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.666542][T10965] netlink: 'syz.4.1556': attribute type 11 has an invalid length. [ 281.722823][ T51] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 281.730809][ T51] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 282.211920][T10982] /dev/rnullb0: Can't open blockdev [ 282.289191][T10986] /dev/rnullb0: Can't open blockdev [ 282.348620][T10992] 9pnet: p9_errstr2errno: server reported unknown error 000000 [ 282.559104][T11005] /dev/rnullb0: Can't open blockdev [ 282.604442][ T24] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 282.765894][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.776871][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.786681][ T24] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 282.795793][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.806119][ T24] usb 4-1: config 0 descriptor?? [ 283.060276][ T30] audit: type=1804 audit(283.028:128): pid=11009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1572" name="rnullb0" dev="tmpfs" ino=1302 res=1 errno=0 [ 283.168282][ T30] audit: type=1804 audit(283.138:129): pid=11021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1576" name="rnullb0" dev="tmpfs" ino=1302 res=1 errno=0 [ 283.216250][ T24] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 283.230589][ T24] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 283.240381][ T24] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 283.247968][ T24] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 283.255139][ T24] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 283.263773][ T24] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 283.292695][ T24] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 283.301718][ T24] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 283.317172][T11032] 9p: Bad value for 'rfdno' [ 283.324663][T11032] /dev/rnullb0: Can't lookup blockdev [ 283.364955][ T24] cp2112 0003:10C4:EA90.000E: Part Number: 0x00 Device Version: 0x00 [ 283.402234][T11039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1583'. [ 283.508353][T11046] : renamed from lo (while UP) [ 283.611176][T11048] 9p: Bad value for 'rfdno' [ 283.970534][ T24] cp2112 0003:10C4:EA90.000E: error reading lock byte: -71 [ 283.991949][ T24] usb 4-1: USB disconnect, device number 60 [ 284.014129][T11069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.032441][T11069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.094664][ T5188] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 285.102353][ T5188] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 285.111095][ T5188] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 285.120771][ T5188] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 285.128718][ T5188] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 285.207519][T11078] wlan1 speed is unknown, defaulting to 1000 [ 285.465248][T11078] chnl_net:caif_netlink_parms(): no params data found [ 285.533369][T11078] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.541957][T11078] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.549539][T11078] bridge_slave_0: entered allmulticast mode [ 285.557899][T11078] bridge_slave_0: entered promiscuous mode [ 285.565918][T11078] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.573123][T11078] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.582140][T11078] bridge_slave_1: entered allmulticast mode [ 285.592501][T11078] bridge_slave_1: entered promiscuous mode [ 285.625219][T11078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.638245][T11078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.668443][T11078] team0: Port device team_slave_0 added [ 285.684888][T11078] team0: Port device team_slave_1 added [ 285.747028][T11078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.755194][T11088] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 285.765915][T11078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.792915][T11089] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 285.803733][ T5188] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 285.817697][ T5188] Bluetooth: hci1: Injecting HCI hardware error event [ 285.824976][ T5188] Bluetooth: hci1: hardware error 0x00 [ 285.836407][T11088] random: crng reseeded on system resumption [ 285.859795][T11078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.886974][T11078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.901224][T11078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.949998][T11078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.019775][T11078] hsr_slave_0: entered promiscuous mode [ 286.029174][T11078] hsr_slave_1: entered promiscuous mode [ 286.038726][T11078] debugfs: 'hsr0' already exists in 'hsr' [ 286.046024][T11078] Cannot create hsr debugfs directory [ 286.057040][T11090] wlan1 speed is unknown, defaulting to 1000 [ 286.245646][T11078] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.390721][T11078] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.500597][T11078] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.622217][T11078] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.786136][T11078] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 286.797140][T11078] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 286.809341][T11078] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 286.820129][T11078] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 286.939127][T11109] /dev/rnullb0: Can't open blockdev [ 286.959241][T11078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.978544][T10429] bridge_slave_1: left allmulticast mode [ 286.985383][T10429] bridge_slave_1: left promiscuous mode [ 286.991207][T10429] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.006078][T10429] bridge_slave_0: left allmulticast mode [ 287.016171][T10429] bridge_slave_0: left promiscuous mode [ 287.021872][T10429] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.156147][T10429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.166601][T10429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.179795][T10429] bond0 (unregistering): Released all slaves [ 287.197337][T11078] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.212090][T10430] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.219200][T10430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.219205][ T24] usb 4-1: new low-speed USB device number 61 using dummy_hcd [ 287.234241][ T51] Bluetooth: hci4: command tx timeout [ 287.242530][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.249684][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.313196][T10428] smc: removing ib device syz0 [ 287.328986][ T5864] wlan1 speed is unknown, defaulting to 1000 [ 287.342565][ T5864] syz0: Port: 1 Link DOWN [ 287.395589][ T24] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 287.403908][ T24] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 287.419133][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.437868][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 287.466750][ T24] usb 4-1: string descriptor 0 read error: -22 [ 287.473663][ T24] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 287.485145][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.520898][T11078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.548209][ T24] usb 4-1: config 0 descriptor?? [ 287.563091][ T24] hub 4-1:0.0: bad descriptor, ignoring hub [ 287.570797][ T24] hub 4-1:0.0: probe with driver hub failed with error -5 [ 287.586939][T11078] veth0_vlan: entered promiscuous mode [ 287.611395][T11078] veth1_vlan: entered promiscuous mode [ 287.642029][T11078] veth0_macvtap: entered promiscuous mode [ 287.661127][T11078] veth1_macvtap: entered promiscuous mode [ 287.731278][T11078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.753756][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1606'. [ 287.756616][T11078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.784607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 287.785292][T11077] /dev/rnullb0: Can't open blockdev [ 287.800769][T11130] /dev/rnullb0: Can't open blockdev [ 287.808864][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.841887][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.858996][ T5188] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 287.861908][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.876788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 287.891227][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.993259][ T5864] usb 4-1: USB disconnect, device number 61 [ 288.018872][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.053134][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.099423][T10430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.108690][T10430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.208746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 288.231928][T10429] hsr_slave_0: left promiscuous mode [ 288.237806][T10429] hsr_slave_1: left promiscuous mode [ 288.243408][T10429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.253528][T10429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.263641][T10429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.271206][T10429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.296168][T10429] veth1_macvtap: left promiscuous mode [ 288.301763][T10429] veth0_macvtap: left promiscuous mode [ 288.307782][T10429] veth1_vlan: left promiscuous mode [ 288.313668][T10429] veth0_vlan: left promiscuous mode [ 288.470909][T11149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.501044][T11149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.596287][T10429] team0 (unregistering): Port device team_slave_1 removed [ 288.628081][T10429] team0 (unregistering): Port device C removed [ 288.960692][T11170] i2c i2c-0: Invalid block write size 254 [ 289.094750][T11182] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 289.139460][T11186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.158968][T11186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.178764][T11186] /dev/rnullb0: Can't open blockdev [ 289.208397][T11188] /dev/rnullb0: Can't open blockdev [ 289.298681][ T5188] Bluetooth: hci4: command tx timeout [ 289.785800][T11244] I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 289.808019][T11244] qnx6: unable to read the first superblock [ 289.814693][T11244] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 289.835862][T11248] /dev/rnullb0: Can't open blockdev [ 289.841645][T11247] /dev/rnullb0: Can't open blockdev [ 289.849832][T11244] qnx6: unable to read the first superblock [ 289.875644][T11244] qnx6: unable to read the first superblock [ 289.945019][T11251] /dev/rnullb0: Can't open blockdev [ 290.094371][ T5864] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 290.274370][ T5864] usb 4-1: Using ep0 maxpacket: 32 [ 290.289001][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.327630][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.424394][ T5864] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 290.444677][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.454181][ T5864] usb 4-1: config 0 descriptor?? [ 290.504195][T11269] /dev/rnullb0: Can't open blockdev [ 290.584609][ T5901] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 290.754443][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 290.761571][ T5901] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 290.772317][ T5901] usb 2-1: config 0 has no interface number 0 [ 290.778729][ T5901] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 290.789979][ T5901] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 290.802996][ T5901] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 290.812763][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 290.821211][ T5901] usb 2-1: Product: syz [ 290.825645][ T5901] usb 2-1: SerialNumber: syz [ 290.833799][ T5901] usb 2-1: config 0 descriptor?? [ 290.844930][ T5901] cm109 2-1:0.8: invalid payload size 1024, expected 4 [ 290.853735][ T5901] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input21 [ 290.881610][ T5864] aquacomputer_d5next 0003:0C70:F0B6.000F: hidraw0: USB HID vff.fc Device [HID 0c70:f0b6] on usb-dummy_hcd.3-1/input0 [ 291.072653][T11245] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 291.079728][T11245] /dev/rnullb0: Can't open blockdev [ 291.085924][ T5958] usb 4-1: USB disconnect, device number 62 [ 291.251402][ T30] audit: type=1326 audit(291.218:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11263 comm="syz.1.1645" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bd3d8ebe9 code=0x0 [ 291.276844][T11275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.285419][T11275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.353483][T11278] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 291.360596][T11278] /dev/rnullb0: Can't open blockdev [ 291.374572][ T5188] Bluetooth: hci4: command tx timeout [ 291.739520][T11284] /dev/rnullb0: Can't open blockdev [ 292.594181][T11287] Failed to get privilege flags for destination (handle=0x2:0x0) [ 292.627694][T11292] /dev/rnullb0: Can't open blockdev [ 292.964406][ T5901] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 293.136060][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 293.147304][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 293.158418][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 293.171248][ T5901] usb 4-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 293.180376][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.190152][ T5901] usb 4-1: config 0 descriptor?? [ 293.197053][T11304] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 293.353520][ C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 293.358675][ T24] usb 2-1: USB disconnect, device number 27 [ 293.360480][ C0] cm109 2-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19 [ 293.383963][ T24] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 293.412860][T11308] /dev/rnullb0: Can't open blockdev [ 293.420745][T11308] /dev/rnullb0: Can't open blockdev [ 293.426999][T11308] /dev/rnullb0: Can't open blockdev [ 293.432615][T11308] /dev/rnullb0: Can't open blockdev [ 293.438290][T11308] /dev/rnullb0: Can't open blockdev [ 293.443825][T11308] /dev/rnullb0: Can't open blockdev [ 293.450553][T11308] /dev/rnullb0: Can't open blockdev [ 293.454644][ T5188] Bluetooth: hci4: command tx timeout [ 293.459186][T11308] /dev/rnullb0: Can't open blockdev [ 293.468328][T11308] /dev/rnullb0: Can't open blockdev [ 293.473986][T11308] /dev/rnullb0: Can't open blockdev [ 293.479777][T11308] /dev/rnullb0: Can't open blockdev [ 293.485650][T11308] /dev/rnullb0: Can't open blockdev [ 293.491210][T11308] /dev/rnullb0: Can't open blockdev [ 293.497271][T11308] /dev/rnullb0: Can't open blockdev [ 293.502882][T11308] /dev/rnullb0: Can't open blockdev [ 293.509402][T11308] /dev/rnullb0: Can't open blockdev [ 293.515188][T11308] /dev/rnullb0: Can't open blockdev [ 293.520844][T11308] /dev/rnullb0: Can't open blockdev [ 293.526826][T11308] /dev/rnullb0: Can't open blockdev [ 293.532394][T11308] /dev/rnullb0: Can't open blockdev [ 293.538468][T11308] /dev/rnullb0: Can't open blockdev [ 293.544066][T11308] /dev/rnullb0: Can't open blockdev [ 293.554099][T11308] /dev/rnullb0: Can't open blockdev [ 293.568072][T11308] /dev/rnullb0: Can't open blockdev [ 293.573766][T11308] /dev/rnullb0: Can't open blockdev [ 293.580241][T11308] /dev/rnullb0: Can't open blockdev [ 293.586564][T11308] /dev/rnullb0: Can't open blockdev [ 293.592220][T11308] /dev/rnullb0: Can't open blockdev [ 293.600362][T11308] /dev/rnullb0: Can't open blockdev [ 293.606768][T11308] /dev/rnullb0: Can't open blockdev [ 293.612601][T11308] /dev/rnullb0: Can't open blockdev [ 293.619056][T11308] /dev/rnullb0: Can't open blockdev [ 293.624791][T11308] /dev/rnullb0: Can't open blockdev [ 293.630510][T11308] /dev/rnullb0: Can't open blockdev [ 293.640764][T11308] /dev/rnullb0: Can't open blockdev [ 293.647487][ T5901] usbhid 4-1:0.0: can't add hid device: -71 [ 293.653028][T11308] /dev/rnullb0: Can't open blockdev [ 293.656616][ T5901] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 293.672042][T11308] /dev/rnullb0: Can't open blockdev [ 293.680618][ T5901] usb 4-1: USB disconnect, device number 63 [ 293.688121][T11308] /dev/rnullb0: Can't open blockdev [ 293.700599][T11308] /dev/rnullb0: Can't open blockdev [ 293.709162][T11308] /dev/rnullb0: Can't open blockdev [ 293.717735][T11308] /dev/rnullb0: Can't open blockdev [ 293.723449][T11308] /dev/rnullb0: Can't open blockdev [ 293.729673][T11308] /dev/rnullb0: Can't open blockdev [ 293.737755][T11308] /dev/rnullb0: Can't open blockdev [ 293.743459][T11308] /dev/rnullb0: Can't open blockdev [ 293.749502][T11308] /dev/rnullb0: Can't open blockdev [ 293.755604][T11308] /dev/rnullb0: Can't open blockdev [ 293.761349][T11308] /dev/rnullb0: Can't open blockdev [ 293.767289][T11308] /dev/rnullb0: Can't open blockdev [ 293.773075][T11308] /dev/rnullb0: Can't open blockdev [ 293.779906][T11308] /dev/rnullb0: Can't open blockdev [ 293.786733][T11308] /dev/rnullb0: Can't open blockdev [ 293.792644][T11308] /dev/rnullb0: Can't open blockdev [ 293.827348][T11308] /dev/rnullb0: Can't open blockdev [ 293.856595][T11308] /dev/rnullb0: Can't open blockdev [ 293.868815][T11308] /dev/rnullb0: Can't open blockdev [ 293.880032][T11308] /dev/rnullb0: Can't open blockdev [ 293.892747][T11308] /dev/rnullb0: Can't open blockdev [ 293.904856][T11308] /dev/rnullb0: Can't open blockdev [ 293.917292][T11308] /dev/rnullb0: Can't open blockdev [ 293.929575][T11308] /dev/rnullb0: Can't open blockdev [ 293.942047][T11308] /dev/rnullb0: Can't open blockdev [ 293.954229][T11308] /dev/rnullb0: Can't open blockdev [ 293.966450][T11308] /dev/rnullb0: Can't open blockdev [ 293.978736][T11308] /dev/rnullb0: Can't open blockdev [ 294.074760][T11319] /dev/rnullb0: Can't open blockdev [ 294.275560][T11325] /dev/sg0: Can't lookup blockdev [ 294.451864][T11330] /dev/rnullb0: Can't open blockdev [ 294.526116][T11332] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 294.550561][T11334] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 294.604125][T11332] /dev/rnullb0: Can't open blockdev [ 294.616444][T11334] /dev/rnullb0: Can't open blockdev [ 294.631114][T11338] /dev/rnullb0: Can't open blockdev [ 294.671416][T11332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.702540][T11332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.817435][T11346] /dev/rnullb0: Can't open blockdev [ 294.974612][ T5908] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 295.004018][T11354] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1670'. [ 295.017760][T11353] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1670'. [ 295.076968][T11356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1671'. [ 295.112395][T11353] cgroup2: Unknown parameter 'net_prio' [ 295.188121][T11359] Invalid ELF header magic: != ELF [ 295.209019][T11359] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 295.224241][T11359] /dev/rnullb0: Can't open blockdev [ 295.356676][T11367] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 295.389449][T11367] /dev/rnullb0: Can't open blockdev [ 295.734418][ T5864] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 295.898527][ T5864] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 295.926319][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.948298][ T5864] usb 4-1: Product: syz [ 295.964434][ T5864] usb 4-1: Manufacturer: syz [ 295.974341][ T5864] usb 4-1: SerialNumber: syz [ 295.981349][ T5864] usb 4-1: config 0 descriptor?? [ 296.382576][T11388] /dev/rnullb0: Can't open blockdev [ 296.858682][T11409] /dev/rnullb0: Can't open blockdev [ 296.884218][ T5864] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 296.903614][ T5864] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 296.921598][ T5864] asix 4-1:0.0: probe with driver asix failed with error -71 [ 296.939580][ T5864] usb 4-1: USB disconnect, device number 64 [ 297.660439][T11422] /dev/rnullb0: Can't open blockdev [ 297.703603][T11427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.726637][T11427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.958194][T11432] ieee802154 phy0 wpan0: encryption failed: -22 [ 297.974722][T11432] ieee802154 phy0 wpan0: encryption failed: -90 [ 298.024219][T11432] /dev/rnullb0: Can't open blockdev [ 298.085160][T11435] pimreg3: entered allmulticast mode [ 298.096614][T11435] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 298.103544][T11435] /dev/rnullb0: Can't open blockdev [ 298.707040][T11448] /dev/rnullb0: Can't open blockdev [ 298.774050][T11447] infiniband syz1: set down [ 298.779888][T11447] infiniband syz1: added ipvlan1 [ 298.807388][T11447] RDS/IB: syz1: added [ 298.813070][T11447] smc: adding ib device syz1 with port count 1 [ 298.820386][T11447] smc: ib device syz1 port 1 has pnetid [ 299.305115][T11452] netlink: zone id is out of range [ 299.310304][T11452] netlink: zone id is out of range [ 299.334386][T11452] netlink: zone id is out of range [ 299.339555][T11452] netlink: zone id is out of range [ 299.345828][T11452] netlink: del zone limit has 4 unknown bytes [ 299.990666][T11492] /dev/rnullb0: Can't open blockdev [ 300.031956][T11494] block nbd3: Attempted send on invalid socket [ 300.038582][T11494] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 300.051208][T11494] block nbd3: Attempted send on invalid socket [ 300.059703][T11494] I/O error, dev nbd3, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 300.070469][T11494] Mount JFS Failure: -5 [ 300.135738][T11496] /dev/rnullb0: Can't open blockdev [ 300.164438][ T5908] usb 2-1: device descriptor read/64, error -110 [ 300.176181][T11500] netlink: 'syz.3.1718': attribute type 11 has an invalid length. [ 300.184137][T11500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1718'. [ 300.223803][T11502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1719'. [ 300.435871][ T5958] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 300.757120][T11508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.778071][T11508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.804426][ T5958] usb 4-1: Using ep0 maxpacket: 16 [ 300.822594][ T5958] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.853494][ T5958] usb 4-1: config 0 interface 0 has no altsetting 0 [ 300.877643][ T5958] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 300.907872][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.943863][ T5958] usb 4-1: config 0 descriptor?? [ 301.282555][ T5908] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 301.457914][ T5958] nzxt-smart2 0003:1E71:2009.0010: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 301.534341][ T5908] usb 2-1: device descriptor read/64, error -32 [ 301.657396][ T5908] usb usb2-port1: attempt power cycle [ 301.667868][T11518] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input23 [ 301.798144][T11523] /dev/rnullb0: Can't open blockdev [ 302.034224][T11526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.117688][T11526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.147270][T11528] autofs4:pid:11528:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 302.214140][T11500] /dev/rnullb0: Can't open blockdev [ 302.233390][ T24] usb 4-1: USB disconnect, device number 65 [ 302.304582][ T5908] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 302.348265][ T5908] usb 2-1: device descriptor read/8, error -32 [ 302.464458][ T5908] raw-gadget.0 gadget.1: failed to queue suspend event [ 302.471503][ T5908] raw-gadget.0 gadget.1: failed to queue reset event [ 302.554364][ T5908] raw-gadget.0 gadget.1: failed to queue resume event [ 302.616170][ T5908] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 302.644519][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 302.651722][ T5908] usb 2-1: device descriptor read/8, error -32 [ 302.767573][ T5908] raw-gadget.0 gadget.1: failed to queue suspend event [ 302.801557][ T5908] usb usb2-port1: unable to enumerate USB device [ 302.949861][T11536] /dev/rnullb0: Can't open blockdev [ 303.453072][T11558] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 303.485645][T11558] /dev/rnullb0: Can't open blockdev [ 303.671736][T11570] /dev/rnullb0: Can't open blockdev [ 303.791170][T11574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.800760][T11574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.813934][T11574] /dev/nullb0: Can't open blockdev [ 304.037431][T11576] cgroup: none used incorrectly [ 304.090587][T11578] /dev/rnullb0: Can't open blockdev [ 304.121518][T11578] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1742'. [ 304.332020][T11589] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1746'. [ 304.550310][T11591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.598517][T11591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.763204][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.778013][T11598] /dev/rnullb0: Can't open blockdev [ 305.094115][T11613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.105131][T11613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.628720][T11622] /dev/rnullb0: Can't open blockdev [ 305.799200][T11628] /dev/rnullb0: Can't open blockdev [ 307.541777][T11651] /dev/rnullb0: Can't open blockdev [ 307.549821][T11654] /dev/rnullb0: Can't open blockdev [ 307.591182][T11656] bpf: Bad value for 'uid' [ 307.602755][T11658] /dev/rnullb0: Can't open blockdev [ 307.677769][T11653] IPv6: Can't replace route, no match found [ 307.713387][T11663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.726103][T11663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.743293][ T5188] Bluetooth: hci2: Malformed LE Event: 0x0d [ 307.744113][T11665] vivid-000: disconnect [ 307.783795][T11667] vivid-000: reconnect [ 307.864053][T11675] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 307.870565][T11675] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 307.879165][T11675] vhci_hcd vhci_hcd.0: Device attached [ 307.893168][T11676] vhci_hcd: connection closed [ 307.893432][T10429] vhci_hcd: stop threads [ 307.902881][T10429] vhci_hcd: release socket [ 307.908521][T10429] vhci_hcd: disconnect device [ 308.164367][ T5908] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 308.324397][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 308.330683][ T5908] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.340859][ T5908] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 308.351964][ T5908] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 308.361132][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.369141][ T5908] usb 4-1: Product: syz [ 308.373291][ T5908] usb 4-1: Manufacturer: syz [ 308.377935][ T5908] usb 4-1: SerialNumber: syz [ 308.470012][T11691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.478724][T11691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.489108][T11691] /dev/rnullb0: Can't open blockdev [ 308.691352][T11693] /dev/sg0: Can't lookup blockdev [ 308.707527][ T5908] usb 4-1: 0:2 : does not exist [ 308.721809][ T5908] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 308.739778][ T5908] usb 4-1: USB disconnect, device number 66 [ 308.766889][T10336] udevd[10336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 309.096056][T11712] /dev/rnullb0: Can't open blockdev [ 309.128295][T11714] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1782'. [ 309.261017][T11722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.273705][T11722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.063468][T11729] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 310.071610][T11729] /dev/rnullb0: Can't open blockdev [ 310.599101][ T30] audit: type=1326 audit(310.568:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.2.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b02f8ebe9 code=0x7fc00000 [ 310.891271][T11750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.905534][T11751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.918783][T11750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.928278][T11751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.978834][T11750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1791'. [ 310.990223][T11750] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 310.997220][T11750] /dev/rnullb0: Can't open blockdev [ 311.002874][T11751] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 311.010121][T11751] /dev/rnullb0: Can't open blockdev [ 311.017208][T11750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.025864][T11750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.584466][T11758] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.712802][T11758] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.795350][T11758] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.851433][T11758] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.975274][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.983591][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.009162][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.033004][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.123256][T11767] /dev/rnullb0: Can't open blockdev [ 312.176276][ T32] oom_reaper: reaped process 11702 (syz.3.1779), now anon-rss:48kB, file-rss:20480kB, shmem-rss:0kB [ 312.228209][T11773] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1795'. [ 312.236630][T11775] /dev/rnullb0: Can't open blockdev [ 312.286458][T11777] comedi comedi3: comedi_config --init_data is deprecated [ 312.474391][ T5901] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 312.626222][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.636605][ T5901] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 312.645844][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.656556][ T5901] usb 4-1: config 0 descriptor?? [ 312.816822][T11781] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1799'. [ 313.081671][ T5901] lenovo 0003:17EF:6047.0011: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 313.147476][T11807] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 313.235628][T11809] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 313.236182][T11810] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 313.242716][T11809] /dev/rnullb0: Can't open blockdev [ 313.255457][T11810] /dev/rnullb0: Can't open blockdev [ 313.337322][T11818] /dev/rnullb0: Can't open blockdev [ 313.342825][T11819] /dev/rnullb0: Can't open blockdev [ 313.723701][T11825] netlink: 328 bytes leftover after parsing attributes in process `syz.1.1810'. [ 313.758281][ T5864] hid-generic 7FFF:0007:0009.0012: unknown main item tag 0x0 [ 313.779380][ T5864] hid-generic 7FFF:0007:0009.0012: unknown main item tag 0x0 [ 313.782354][T11837] syzkaller1: entered promiscuous mode [ 313.793179][T11837] syzkaller1: entered allmulticast mode [ 313.803164][ T5864] hid-generic 7FFF:0007:0009.0012: unknown main item tag 0x0 [ 313.818226][ T5864] hid-generic 7FFF:0007:0009.0012: unknown main item tag 0x0 [ 313.831037][ T5864] hid-generic 7FFF:0007:0009.0012: unknown main item tag 0x0 [ 313.848325][ T5864] hid-generic 7FFF:0007:0009.0012: unknown main item tag 0x0 [ 313.867156][T11772] /dev/rnullb0: Can't open blockdev [ 313.876222][ T5864] hid-generic 7FFF:0007:0009.0012: unknown main item tag 0x0 [ 313.894435][ T5901] lenovo 0003:17EF:6047.0011: Sensitivity setting failed: -71 [ 313.902200][ T5864] hid-generic 7FFF:0007:0009.0012: unknown main item tag 0x0 [ 314.197500][ T5901] usb 4-1: USB disconnect, device number 67 [ 314.203501][ T5864] hid-generic 7FFF:0007:0009.0012: unknown main item tag 0x0 [ 314.214150][ T5864] hid-generic 7FFF:0007:0009.0012: unknown main item tag 0x0 [ 314.225810][ T5864] hid-generic 7FFF:0007:0009.0012: hidraw0: HID v0.04 Device [syz0] on syz0 [ 314.348985][T11847] fido_id[11847]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 314.475887][ T30] audit: type=1326 audit(314.448:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.2.1817" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b02f8ebe9 code=0x0 [ 314.604392][ T5901] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 314.734478][ T5901] usb 4-1: device descriptor read/64, error -71 [ 314.994385][ T5901] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 315.124833][ T5901] usb 4-1: device descriptor read/64, error -71 [ 315.254518][ T5901] usb usb4-port1: attempt power cycle [ 315.386328][ T5188] Bluetooth: hci2: unexpected event for opcode 0x0428 [ 315.386832][T11870] /dev/rnullb0: Can't open blockdev [ 315.595018][ T5901] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 315.617596][ T5901] usb 4-1: device descriptor read/8, error -71 [ 315.874397][ T5901] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 315.877427][T11877] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1823'. [ 315.902070][ T5901] usb 4-1: device descriptor read/8, error -71 [ 316.308113][ T5901] usb usb4-port1: unable to enumerate USB device [ 316.330101][T11886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.349778][T11886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.058993][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.065443][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.081744][T11900] TCP: TCP_TX_DELAY enabled [ 319.454401][ T5188] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 319.462737][ T5188] Bluetooth: hci2: Injecting HCI hardware error event [ 319.470663][ T51] Bluetooth: hci2: hardware error 0x00 [ 321.534770][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 375.590592][T11943] /dev/rnullb0: Can't open blockdev [ 375.618397][T11945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.634587][T11945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.653958][T11945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.666704][T11945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.163552][T11963] /dev/rnullb0: Can't open blockdev [ 376.267695][T11966] /dev/rnullb0: Can't open blockdev [ 376.631852][T11981] netlink: 'syz.1.1850': attribute type 11 has an invalid length. [ 376.645690][T11981] /dev/rnullb0: Can't open blockdev [ 376.692134][T11984] /dev/sg0: Can't lookup blockdev [ 376.817022][T11995] af_packet: tpacket_rcv: packet too big, clamped from 44 to 4294967272. macoff=96 [ 376.911647][T11997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.923086][T11997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.249038][ T30] audit: type=1326 audit(377.218:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12005 comm="syz.3.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0858ebe9 code=0x7ffc0000 [ 377.272389][ T30] audit: type=1326 audit(377.218:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12005 comm="syz.3.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0858ebe9 code=0x7ffc0000 [ 377.294583][ T30] audit: type=1326 audit(377.228:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12005 comm="syz.3.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2e0858ebe9 code=0x7ffc0000 [ 377.316286][ T30] audit: type=1326 audit(377.228:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12005 comm="syz.3.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0858ebe9 code=0x7ffc0000 [ 377.339703][ T30] audit: type=1326 audit(377.228:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12005 comm="syz.3.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0858ebe9 code=0x7ffc0000 [ 377.361662][ T30] audit: type=1326 audit(377.228:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12005 comm="syz.3.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e0858ebe9 code=0x7ffc0000 [ 377.384180][ T30] audit: type=1326 audit(377.228:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12005 comm="syz.3.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0858ebe9 code=0x7ffc0000 [ 377.406154][ T30] audit: type=1326 audit(377.228:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12005 comm="syz.3.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e0858ebe9 code=0x7ffc0000 [ 377.428019][ T30] audit: type=1326 audit(377.228:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12005 comm="syz.3.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0858ebe9 code=0x7ffc0000 [ 377.450509][ T30] audit: type=1326 audit(377.228:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12005 comm="syz.3.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0858ebe9 code=0x7ffc0000 [ 377.738127][T12031] /dev/rnullb0: Can't open blockdev [ 378.000303][T12036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.010255][T12036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.496501][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.502848][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.671239][T12061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.680661][T12061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.687435][T12065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.699080][T12065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.243186][T12075] /dev/rnullb0: Can't open blockdev [ 379.292250][T12077] /dev/rnullb0: Can't open blockdev [ 379.335049][T12084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.343705][T12084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.692414][T12096] overlayfs: invalid origin (0000) [ 379.737255][T12101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.747491][T12101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.017245][T12127] /dev/rnullb0: Can't open blockdev [ 381.809417][T12129] /dev/rnullb0: Can't open blockdev [ 381.881281][T12135] /dev/rnullb0: Can't open blockdev [ 381.908038][T12139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.916747][T12139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.927466][T12139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.936267][T12139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.946144][T12139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.954805][T12139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.114880][ T7300] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 382.264305][ T7300] usb 4-1: Using ep0 maxpacket: 32 [ 382.270507][ T7300] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.280676][ T7300] usb 4-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 382.292739][ T7300] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 382.303784][ T7300] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 382.313653][ T7300] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 382.326782][ T7300] usb 4-1: config 0 interface 0 has no altsetting 0 [ 382.333444][ T7300] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 382.342669][ T7300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.352153][ T7300] usb 4-1: config 0 descriptor?? [ 382.486723][T12146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.487870][T12148] /dev/rnullb0: Can't open blockdev [ 382.496006][T12146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.516595][T12148] /dev/rnullb0: Can't open blockdev [ 382.525105][T12148] /dev/rnullb0: Can't open blockdev [ 382.530739][T12148] /dev/rnullb0: Can't open blockdev [ 382.536839][T12148] /dev/rnullb0: Can't open blockdev [ 382.542375][T12148] /dev/rnullb0: Can't open blockdev [ 382.548324][T12148] /dev/rnullb0: Can't open blockdev [ 382.554033][T12148] /dev/rnullb0: Can't open blockdev [ 382.561240][T12148] /dev/rnullb0: Can't open blockdev [ 382.568435][T12148] /dev/rnullb0: Can't open blockdev [ 382.574065][T12148] /dev/rnullb0: Can't open blockdev [ 382.581539][T12148] /dev/rnullb0: Can't open blockdev [ 382.587282][T12148] /dev/rnullb0: Can't open blockdev [ 382.593259][T12148] /dev/rnullb0: Can't open blockdev [ 382.599202][T12148] /dev/rnullb0: Can't open blockdev [ 382.605173][T12148] /dev/rnullb0: Can't open blockdev [ 382.610823][T12148] /dev/rnullb0: Can't open blockdev [ 382.616761][T12148] /dev/rnullb0: Can't open blockdev [ 382.622398][T12148] /dev/rnullb0: Can't open blockdev [ 382.628588][T12148] /dev/rnullb0: Can't open blockdev [ 382.634189][T12148] /dev/rnullb0: Can't open blockdev [ 382.640070][T12148] /dev/rnullb0: Can't open blockdev [ 382.645711][T12148] /dev/rnullb0: Can't open blockdev [ 382.651394][T12148] /dev/rnullb0: Can't open blockdev [ 382.657312][T12148] /dev/rnullb0: Can't open blockdev [ 382.662839][T12148] /dev/rnullb0: Can't open blockdev [ 382.668707][T12148] /dev/rnullb0: Can't open blockdev [ 382.674212][T12148] /dev/rnullb0: Can't open blockdev [ 382.679935][T12148] /dev/rnullb0: Can't open blockdev [ 382.685596][T12148] /dev/rnullb0: Can't open blockdev [ 382.691283][T12148] /dev/rnullb0: Can't open blockdev [ 382.697213][T12148] /dev/rnullb0: Can't open blockdev [ 382.702920][T12148] /dev/rnullb0: Can't open blockdev [ 382.709119][T12148] /dev/rnullb0: Can't open blockdev [ 382.715046][T12148] /dev/rnullb0: Can't open blockdev [ 382.720576][T12148] /dev/rnullb0: Can't open blockdev [ 382.726448][T12148] /dev/rnullb0: Can't open blockdev [ 382.731942][T12148] /dev/rnullb0: Can't open blockdev [ 382.737643][T12148] /dev/rnullb0: Can't open blockdev [ 382.743144][T12148] /dev/rnullb0: Can't open blockdev [ 382.748811][T12148] /dev/rnullb0: Can't open blockdev [ 382.754589][T12148] /dev/rnullb0: Can't open blockdev [ 382.760091][T12148] /dev/rnullb0: Can't open blockdev [ 382.765711][T12148] /dev/rnullb0: Can't open blockdev [ 382.771339][T12148] /dev/rnullb0: Can't open blockdev [ 382.777298][T12148] /dev/rnullb0: Can't open blockdev [ 382.782876][T12148] /dev/rnullb0: Can't open blockdev [ 382.788717][T12148] /dev/rnullb0: Can't open blockdev [ 382.794439][T12148] /dev/rnullb0: Can't open blockdev [ 382.800360][T12148] /dev/rnullb0: Can't open blockdev [ 382.806137][T12148] /dev/rnullb0: Can't open blockdev [ 382.811761][T12148] /dev/rnullb0: Can't open blockdev [ 382.818164][T12148] /dev/rnullb0: Can't open blockdev [ 382.823808][T12148] /dev/rnullb0: Can't open blockdev [ 382.834948][T12148] /dev/rnullb0: Can't open blockdev [ 382.842035][ T7300] usbhid 4-1:0.0: can't add hid device: -71 [ 382.848258][T12148] /dev/rnullb0: Can't open blockdev [ 382.852107][ T7300] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 382.854683][T12148] /dev/rnullb0: Can't open blockdev [ 382.866955][T12148] /dev/rnullb0: Can't open blockdev [ 382.870103][ T7300] usb 4-1: USB disconnect, device number 72 [ 382.872617][T12148] /dev/rnullb0: Can't open blockdev [ 382.885538][T12148] /dev/rnullb0: Can't open blockdev [ 382.891154][T12148] /dev/rnullb0: Can't open blockdev [ 382.902843][T12148] /dev/rnullb0: Can't open blockdev [ 382.908678][T12148] /dev/rnullb0: Can't open blockdev [ 382.914388][T12148] /dev/rnullb0: Can't open blockdev [ 382.920024][T12148] /dev/rnullb0: Can't open blockdev [ 383.080523][T12166] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1907'. [ 383.112534][T12169] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1908'. [ 383.196521][T12174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.233861][T12174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.249615][T12181] ./file0: Can't lookup blockdev [ 383.307220][T12186] /dev/rnullb0: Can't open blockdev [ 383.413246][T12190] Bluetooth: MGMT ver 1.23 [ 383.419250][T12190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.421053][T12190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.149559][T12210] /dev/rnullb0: Can't open blockdev [ 384.638737][T12224] /dev/rnullb0: Can't open blockdev [ 384.690047][T12227] NILFS (nbd3): device size too small [ 384.742120][T12230] /dev/rnullb0: Can't open blockdev [ 385.027275][ T981] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 385.200087][ T981] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.211636][ T981] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 385.224648][ T981] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 385.239559][ T981] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 385.249178][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.257802][ T981] usb 4-1: Product: ӿ [ 385.261997][ T981] usb 4-1: Manufacturer: ␊ [ 385.266930][ T981] usb 4-1: SerialNumber: І [ 385.273864][ T981] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 385.285803][ T981] usb 4-1: no configuration chosen from 1 choice [ 385.507708][T12239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.520427][T12239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.940689][T12260] /dev/rnullb0: Can't open blockdev [ 387.270765][T12269] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 387.278375][T12269] /dev/rnullb0: Can't open blockdev [ 387.315683][T12273] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 387.326256][T12273] exFAT-fs (nullb0): invalid boot record signature [ 387.332795][T12273] exFAT-fs (nullb0): failed to read boot sector [ 387.339497][T12273] exFAT-fs (nullb0): failed to recognize exfat type [ 387.790936][ T7300] usb 4-1: USB disconnect, device number 73 [ 388.159874][T12283] /dev/rnullb0: Can't open blockdev [ 388.165189][ T7300] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 388.334514][ T7300] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 388.344360][ T7300] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.355994][ T7300] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 388.367686][ T7300] usb 4-1: config 1 has no interface number 0 [ 388.373807][ T7300] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 388.386874][ T7300] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 388.402318][ T7300] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 388.412805][ T7300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.422313][ T7300] usb 4-1: Product: syz [ 388.445292][ T7300] usb 4-1: Manufacturer: syz [ 388.454661][ T7300] usb 4-1: SerialNumber: syz [ 388.469500][T12289] netlink: 'syz.1.1954': attribute type 1 has an invalid length. [ 388.483948][ T7300] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 388.501115][ T7300] cdc_ncm 4-1:1.1: bind() failure [ 388.627749][T12292] /dev/rnullb0: Can't open blockdev [ 388.676190][T12295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.688658][T12295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.712188][T12295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.723924][ T981] usb 4-1: USB disconnect, device number 74 [ 388.736645][T12295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.749872][T12295] cgroup: Name too long [ 389.300498][T12302] /dev/rnullb0: Can't open blockdev [ 389.361435][T12304] /dev/rnullb0: Can't open blockdev [ 389.509748][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1961'. [ 389.622455][T12313] /dev/rnullb0: Can't open blockdev [ 389.799536][ T5901] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 389.958728][T12318] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.979020][T12318] /dev/rnullb0: Can't open blockdev [ 390.002808][ T5901] usb 4-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 390.012320][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.020697][ T5901] usb 4-1: Product: syz [ 390.024894][ T5901] usb 4-1: Manufacturer: syz [ 390.029483][ T5901] usb 4-1: SerialNumber: syz [ 390.057634][ T5901] usb 4-1: config 0 descriptor?? [ 390.295276][T12330] binder: 12325:12330 ioctl c018937e 200000000100 returned -22 [ 390.299382][ T5901] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 390.319064][ T5901] asix 4-1:0.0: probe with driver asix failed with error -71 [ 390.337755][ T5901] usb 4-1: USB disconnect, device number 75 [ 390.518711][T12336] overlay: Unknown parameter 'smackfsfloor' [ 390.524139][T12338] /dev/rnullb0: Can't open blockdev [ 394.102730][T12398] overlay: filesystem on ./bus not supported as upperdir [ 394.156713][T12401] /dev/rnullb0: Can't open blockdev [ 394.188845][T12399] ALSA: mixer_oss: invalid OSS volume '' [ 394.333391][T12405] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 394.358464][T12405] File: /dev/rnullb0 PID: 12405 Comm: syz.2.1991 [ 394.389436][T12410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.422216][T12410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.986623][T12421] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 395.096265][T12423] /dev/rnullb0: Can't open blockdev [ 395.830681][T12442] /dev/rnullb0: Can't open blockdev [ 395.903113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 396.005524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 396.653343][T12449] /dev/rnullb0: Can't open blockdev [ 396.713060][T12454] netlink: 'syz.2.2009': attribute type 10 has an invalid length. [ 396.738633][T12454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.755487][T12454] team0: Port device bond0 added [ 396.764117][T12449] /dev/rnullb0: Can't open blockdev [ 396.974225][T12465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.986475][T12465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.177859][T12471] Attempt to restore checkpoint with obsolete wellknown handles [ 397.186306][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2015'. [ 397.537522][T12475] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003 [ 397.549287][T12475] fuse: Bad value for 'fd' [ 397.591804][T12477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.600802][T12477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.980372][T12504] /dev/rnullb0: Can't open blockdev [ 399.042433][T12507] MTD: Couldn't look up '/dev/sg0': -15 [ 399.933654][T12524] netlink: 'syz.3.2033': attribute type 10 has an invalid length. [ 399.943565][T12524] team0: Device ipvlan1 failed to register rx_handler [ 400.314361][ T5958] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 400.454361][ T5958] usb 4-1: device descriptor read/64, error -71 [ 400.694350][ T5958] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 400.844329][ T5958] usb 4-1: device descriptor read/64, error -71 [ 400.955700][ T5958] usb usb4-port1: attempt power cycle [ 401.294383][ T5958] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 401.314783][ T5958] usb 4-1: device descriptor read/8, error -71 [ 401.348023][ T5861] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 401.360751][ T5861] CPU: 1 UID: 0 PID: 5861 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 401.360773][ T5861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 401.360795][ T5861] Call Trace: [ 401.360802][ T5861] [ 401.360807][ T5861] dump_stack_lvl+0x189/0x250 [ 401.360836][ T5861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.360859][ T5861] ? __pfx__printk+0x10/0x10 [ 401.360881][ T5861] ? rcu_is_watching+0x15/0xb0 [ 401.360902][ T5861] dump_header+0xd3/0x480 [ 401.360919][ T5861] oom_kill_process+0x387/0x920 [ 401.360940][ T5861] out_of_memory+0xf09/0x12a0 [ 401.360959][ T5861] ? mem_cgroup_iter+0x3b/0x460 [ 401.360979][ T5861] ? __pfx_out_of_memory+0x10/0x10 [ 401.360999][ T5861] mem_cgroup_out_of_memory+0x145/0x240 [ 401.361017][ T5861] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 401.361039][ T5861] ? _raw_spin_unlock+0x28/0x50 [ 401.361064][ T5861] ? memcg1_oom_prepare+0x37f/0x450 [ 401.361085][ T5861] try_charge_memcg+0xdff/0x1290 [ 401.361106][ T5861] ? rcu_is_watching+0x15/0xb0 [ 401.361129][ T5861] ? __pfx_try_charge_memcg+0x10/0x10 [ 401.361150][ T5861] ? rcu_irq_exit_check_preempt+0x201/0x210 [ 401.361168][ T5861] ? xa_load+0x60/0x210 [ 401.361188][ T5861] ? rcu_is_watching+0x15/0xb0 [ 401.361205][ T5861] ? rcu_is_watching+0x15/0xb0 [ 401.361222][ T5861] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 401.361245][ T5861] charge_memcg+0x9f/0x180 [ 401.361266][ T5861] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 401.361288][ T5861] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 401.361312][ T5861] __read_swap_cache_async+0x28c/0x510 [ 401.361334][ T5861] swap_cluster_readahead+0x305/0x5f0 [ 401.361355][ T5861] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 401.361376][ T5861] ? rcu_is_watching+0x15/0xb0 [ 401.361392][ T5861] ? filemap_get_entry+0xad/0x2f0 [ 401.361414][ T5861] ? get_vma_policy+0x27c/0x3c0 [ 401.361436][ T5861] swapin_readahead+0x17d/0xb50 [ 401.361454][ T5861] ? __pfx_filemap_get_entry+0x10/0x10 [ 401.361474][ T5861] ? get_swap_device_info+0x1c/0x2b0 [ 401.361492][ T5861] ? rcu_is_watching+0x15/0xb0 [ 401.361508][ T5861] ? __pfx_swapin_readahead+0x10/0x10 [ 401.361528][ T5861] ? __filemap_get_folio+0x9a6/0xaf0 [ 401.361549][ T5861] ? swap_cache_get_folio+0xae/0x3b0 [ 401.361569][ T5861] do_swap_page+0x525/0x5ac0 [ 401.361595][ T5861] ? ___pte_offset_map+0x29/0x250 [ 401.361616][ T5861] ? lock_acquire+0x5f/0x360 [ 401.361631][ T5861] ? do_swap_page+0x184/0x5ac0 [ 401.361649][ T5861] ? __pfx_do_swap_page+0x10/0x10 [ 401.361670][ T5861] ? __pfx_default_wake_function+0x10/0x10 [ 401.361687][ T5861] ? ___pte_offset_map+0x45/0x250 [ 401.361707][ T5861] ? ___pte_offset_map+0x1cf/0x250 [ 401.361728][ T5861] ? pte_offset_map_rw_nolock+0xea/0x160 [ 401.361750][ T5861] __handle_mm_fault+0xe55/0x5400 [ 401.361777][ T5861] ? __pfx___handle_mm_fault+0x10/0x10 [ 401.361798][ T5861] ? rcu_is_watching+0x15/0xb0 [ 401.361819][ T5861] ? lock_vma_under_rcu+0x3cb/0x450 [ 401.361836][ T5861] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 401.361854][ T5861] handle_mm_fault+0x40a/0x8e0 [ 401.361878][ T5861] do_user_addr_fault+0xa81/0x1390 [ 401.361898][ T5861] ? rcu_is_watching+0x15/0xb0 [ 401.361915][ T5861] ? trace_page_fault_user+0x84/0x1e0 [ 401.361933][ T5861] exc_page_fault+0x82/0x100 [ 401.361953][ T5861] asm_exc_page_fault+0x26/0x30 [ 401.361969][ T5861] RIP: 0033:0x7f6b02fc14a8 [ 401.361984][ T5861] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 401.361999][ T5861] RSP: 002b:00007ffefe1d0080 EFLAGS: 00010293 [ 401.362014][ T5861] RAX: 0000000000000000 RBX: 00000000000005bd RCX: 00007f6b02fc14a5 [ 401.362026][ T5861] RDX: 00007ffefe1d00c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 401.362037][ T5861] RBP: 00007ffefe1d012c R08: 0000000000000000 R09: 0000000000000000 [ 401.362048][ T5861] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 401.362065][ T5861] R13: 00000000000927c0 R14: 00000000000615c9 R15: 00007ffefe1d0180 [ 401.362083][ T5861] [ 401.362105][ T5861] memory: usage 307200kB, limit 307200kB, failcnt 72660 [ 401.764910][ T5861] memory+swap: usage 308232kB, limit 9007199254740988kB, failcnt 0 [ 401.772895][ T5861] kmem: usage 4024kB, limit 9007199254740988kB, failcnt 0 [ 401.781893][ T5861] Memory cgroup stats for /syz2: [ 401.781968][ T5861] cache 309669888 [ 401.790859][ T5861] rss 147456 [ 401.794050][ T5861] rss_huge 0 [ 401.797287][ T5861] shmem 309665792 [ 401.800923][ T5861] mapped_file 4096 [ 401.805052][ T5861] dirty 4096 [ 401.808253][ T5861] writeback 0 [ 401.811522][ T5861] workingset_refault_anon 198 [ 401.816248][ T5861] workingset_refault_file 9106 [ 401.821017][ T5861] swap 1523712 [ 401.824437][ T5861] swapcached 176128 [ 401.828261][ T5861] pgpgin 853219 [ 401.831705][ T5861] pgpgout 780146 [ 401.835633][ T5861] pgfault 328599 [ 401.839325][ T5861] pgmajfault 57459 [ 401.843485][ T5861] inactive_anon 309690368 [ 401.847875][ T5861] active_anon 184320 [ 401.851770][ T5861] inactive_file 0 [ 401.855552][ T5861] active_file 4096 [ 401.859379][ T5861] unevictable 0 [ 401.862857][ T5861] hierarchical_memory_limit 314572800 [ 401.868264][ T5861] hierarchical_memsw_limit 9223372036854771712 [ 401.874601][ T5861] total_cache 309669888 [ 401.878762][ T5861] total_rss 147456 [ 401.882472][ T5861] total_rss_huge 0 [ 401.886219][ T5861] total_shmem 309665792 [ 401.890374][ T5861] total_mapped_file 4096 [ 401.894703][ T5958] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 401.902364][ T5861] total_dirty 4096 [ 401.906240][ T5861] total_writeback 0 [ 401.910051][ T5861] total_workingset_refault_anon 198 [ 401.915282][ T5861] total_workingset_refault_file 9106 [ 401.920571][ T5861] total_swap 1523712 [ 401.924592][ T5861] total_swapcached 176128 [ 401.928959][ T5861] total_pgpgin 853219 [ 401.933012][ T5958] usb 4-1: device descriptor read/8, error -71 [ 401.933074][ T5861] total_pgpgout 780146 [ 401.943445][ T5861] total_pgfault 328599 [ 401.948032][ T5861] total_pgmajfault 57459 [ 401.952267][ T5861] total_inactive_anon 309690368 [ 401.957150][ T5861] total_active_anon 184320 [ 401.961552][ T5861] total_inactive_file 0 [ 401.965708][ T5861] total_active_file 4096 [ 401.969933][ T5861] total_unevictable 0 [ 401.973890][ T5861] anon_cost 0 [ 401.977211][ T5861] file_cost 0 [ 401.980483][ T5861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2023,pid=12496,uid=0 [ 401.995434][ T5861] Memory cgroup out of memory: Killed process 12496 (syz.2.2023) total-vm:102140kB, anon-rss:1148kB, file-rss:23336kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 402.044457][ T5958] usb usb4-port1: unable to enumerate USB device [ 402.574487][T12538] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 402.579677][T12544] sg_write: data in/out 44713/14 bytes for SCSI command 0x0-- guessing data in; [ 402.579677][T12544] program syz.4.2038 not setting count and/or reply_len properly [ 402.580723][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 403.517808][T12538] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 403.523872][T12538] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 403.784475][ T5901] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 403.809699][T12563] /dev/rnullb0: Can't open blockdev [ 403.956460][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 403.974372][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 404.004368][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 404.014108][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 404.029417][ T32] oom_reaper: reaped process 12496 (syz.2.2023), now anon-rss:12kB, file-rss:22156kB, shmem-rss:0kB [ 404.054422][ T5901] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 404.063462][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.085650][ T5901] usb 4-1: config 0 descriptor?? [ 404.342141][T12572] kAFS: unable to lookup cell 'sy0' [ 404.428625][T12573] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 404.447108][T12573] /dev/rnullb0: Can't open blockdev [ 404.513146][ T5901] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 404.654501][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 404.944845][T12589] /dev/rnullb0: Can't open blockdev [ 405.117959][T12593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.131064][T12593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.176056][T12594] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 405.486753][T12615] /dev/rnullb0: Can't open blockdev [ 405.490531][T12617] netlink: 'syz.1.2062': attribute type 12 has an invalid length. [ 405.518177][T12622] /dev/rnullb0: Can't open blockdev [ 405.560736][T12617] /dev/rnullb0: Can't open blockdev [ 405.680067][T12640] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2069'. [ 405.788189][T12546] usb 4-1: string descriptor 0 read error: -2 [ 406.442537][T12650] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 406.469655][T12650] CIFS mount error: No usable UNC path provided in device string! [ 406.469655][T12650] [ 406.480633][T12650] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 406.490499][T12650] /dev/rnullb0: Can't open blockdev [ 406.528423][T12651] /dev/rnullb0: Can't open blockdev [ 406.571238][T12654] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2073'. [ 406.575598][T12655] /dev/rnullb0: Can't open blockdev [ 406.583077][ T5901] usb 4-1: USB disconnect, device number 80 [ 406.605778][T12657] /dev/rnullb0: Can't open blockdev [ 406.640905][T12658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.650985][T12658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.663512][T12658] /dev/rnullb0: Can't open blockdev [ 406.764384][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 407.368235][T12675] bridge0: port 3(batadv0) entered blocking state [ 407.392457][T12675] bridge0: port 3(batadv0) entered disabled state [ 407.413841][T12675] batadv0: entered allmulticast mode [ 407.437569][T12675] batadv0: entered promiscuous mode [ 407.458173][T12675] bridge0: port 3(batadv0) entered blocking state [ 407.464751][T12675] bridge0: port 3(batadv0) entered forwarding state [ 407.566519][ T2961] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 407.575998][ T2961] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 407.752568][T12679] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2082'. [ 407.944399][ T5901] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 408.232182][T12691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.248585][T12691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.261611][T12691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.272943][T12691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.286692][ T5901] usb 4-1: unable to get BOS descriptor or descriptor too short [ 408.295572][ T5901] usb 4-1: not running at top speed; connect to a high speed hub [ 408.314368][ T5901] usb 4-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice=ae.13 [ 408.333765][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.343609][ T5901] usb 4-1: Product: syz [ 408.356871][ T5901] usb 4-1: Manufacturer: syz [ 408.361991][T12694] /dev/rnullb0: Can't open blockdev [ 408.371621][ T5901] usb 4-1: SerialNumber: syz [ 409.100620][T12704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.142534][T12704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.608754][ T5901] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 409.646636][ T5901] snd-usb-audio 4-1:8.0: probe with driver snd-usb-audio failed with error -2 [ 409.668666][ T5901] usb 4-1: USB disconnect, device number 81 [ 409.688663][T12087] udevd[12087]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 410.267017][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c1b [ 410.587115][T12723] /dev/rnullb0: Can't open blockdev [ 410.629684][T12725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.646533][T12725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.906537][T12727] /dev/rnullb0: Can't open blockdev [ 411.228695][T12747] /dev/rnullb0: Can't open blockdev [ 411.258298][T12747] tipc: Started in network mode [ 411.263798][T12747] tipc: Node identity 4, cluster identity 4711 [ 411.271236][T12747] tipc: Node number set to 4 [ 411.279682][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 411.279694][ T30] audit: type=1400 audit(411.248:144): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=12746 comm="syz.2.2103" [ 411.331634][T12754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.345594][T12754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.358112][T12754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.373498][T12755] /dev/rnullb0: Can't open blockdev [ 411.378988][T12754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.397820][T12754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.411481][T12754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.173440][ T5958] IPVS: starting estimator thread 0... [ 412.274330][T12780] IPVS: using max 44 ests per chain, 105600 per kthread [ 412.433360][ T5958] usb 4-1: new low-speed USB device number 82 using dummy_hcd [ 412.526798][T12800] /dev/rnullb0: Can't open blockdev [ 412.584310][ T5958] usb 4-1: Invalid ep0 maxpacket: 64 [ 412.714335][ T5958] usb 4-1: new low-speed USB device number 83 using dummy_hcd [ 412.874863][ T5958] usb 4-1: Invalid ep0 maxpacket: 64 [ 412.881978][ T5958] usb usb4-port1: attempt power cycle [ 412.911418][T12812] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 412.930917][T12812] /dev/rnullb0: Can't open blockdev [ 413.044877][T12817] /dev/rnullb0: Can't open blockdev [ 413.076054][T12823] /dev/rnullb0: Can't open blockdev [ 413.090552][T12818] netlink: 'syz.2.2124': attribute type 1 has an invalid length. [ 413.099488][T12818] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2124'. [ 413.234347][ T5958] usb 4-1: new low-speed USB device number 84 using dummy_hcd [ 413.265541][ T5958] usb 4-1: Invalid ep0 maxpacket: 64 [ 413.394363][ T5958] usb 4-1: new low-speed USB device number 85 using dummy_hcd [ 413.424788][ T5958] usb 4-1: Invalid ep0 maxpacket: 64 [ 413.431515][ T5958] usb usb4-port1: unable to enumerate USB device [ 414.090190][T12830] binder: 12829:12830 ioctl 400c620e 2000000014c0 returned -22 [ 414.375360][T12834] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 414.382296][T12834] /dev/rnullb0: Can't open blockdev [ 414.391591][T12834] fuse: Bad value for 'fd' [ 415.626753][T12856] kvm: pic: non byte write [ 415.642600][T12856] /dev/rnullb0: Can't open blockdev [ 415.901106][T12862] I/O error, dev loop3, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 415.933986][T12862] gfs2: error -5 reading superblock [ 416.186982][T12880] /dev/rnullb0: Can't open blockdev [ 416.229775][T12883] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI [ 416.241696][T12883] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 416.250110][T12883] CPU: 0 UID: 0 PID: 12883 Comm: syz.4.2142 Not tainted syzkaller #0 PREEMPT(full) [ 416.259478][T12883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 416.269519][T12883] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 416.275059][T12883] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d9 85 2b f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 b8 85 2b f9 4d 8b 24 24 48 83 c3 [ 416.294653][T12883] RSP: 0018:ffffc90003a77a40 EFLAGS: 00010206 [ 416.300712][T12883] RAX: 0000000000000005 RBX: ffff888034c04980 RCX: 0000000000080000 [ 416.308665][T12883] RDX: ffffc9000bbb1000 RSI: 00000000000003b1 RDI: 00000000000003b2 [ 416.316622][T12883] RBP: 0000000000000000 R08: ffff88802f3e212f R09: 1ffff11005e7c425 [ 416.324576][T12883] R10: dffffc0000000000 R11: ffffffff88f8cd30 R12: 0000000000000028 [ 416.332529][T12883] R13: dffffc0000000000 R14: ffff88802f3e2000 R15: dffffc0000000000 [ 416.340481][T12883] FS: 00007f3e8dee76c0(0000) GS:ffff8881257c4000(0000) knlGS:0000000000000000 [ 416.349395][T12883] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 416.355975][T12883] CR2: 000000110c3fb792 CR3: 000000004155e000 CR4: 00000000003526f0 [ 416.363932][T12883] Call Trace: [ 416.367194][T12883] [ 416.370111][T12883] pcl818_detach+0x66/0xd0 [ 416.374517][T12883] comedi_device_detach_locked+0x175/0x750 [ 416.380312][T12883] ? security_capable+0x7e/0x2e0 [ 416.385239][T12883] comedi_unlocked_ioctl+0xcde/0x1020 [ 416.390606][T12883] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 416.396397][T12883] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 416.402024][T12883] ? do_futex+0x333/0x420 [ 416.406346][T12883] ? __se_sys_futex+0x36f/0x400 [ 416.411182][T12883] ? __fget_files+0x3a0/0x420 [ 416.415844][T12883] ? __fget_files+0x2a/0x420 [ 416.420424][T12883] ? bpf_lsm_file_ioctl+0x9/0x20 [ 416.425347][T12883] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 416.431144][T12883] __se_sys_ioctl+0xf9/0x170 [ 416.435719][T12883] do_syscall_64+0xfa/0xfa0 [ 416.440207][T12883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.446257][T12883] ? clear_bhb_loop+0x60/0xb0 [ 416.450919][T12883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.456795][T12883] RIP: 0033:0x7f3e8cf8ebe9 [ 416.461191][T12883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.480780][T12883] RSP: 002b:00007f3e8dee7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 416.489183][T12883] RAX: ffffffffffffffda RBX: 00007f3e8d1c5fa0 RCX: 00007f3e8cf8ebe9 [ 416.497138][T12883] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000004 [ 416.505093][T12883] RBP: 00007f3e8d011e19 R08: 0000000000000000 R09: 0000000000000000 [ 416.513045][T12883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.520998][T12883] R13: 00007f3e8d1c6038 R14: 00007f3e8d1c5fa0 R15: 00007ffd7a8e7bf8 [ 416.528960][T12883] [ 416.531961][T12883] Modules linked in: [ 416.536447][T12883] ---[ end trace 0000000000000000 ]--- [ 416.559459][T12887] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 416.570230][T12883] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 416.577210][T12883] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d9 85 2b f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 b8 85 2b f9 4d 8b 24 24 48 83 c3 [ 416.601233][T12883] RSP: 0018:ffffc90003a77a40 EFLAGS: 00010206 [ 416.608417][T12883] RAX: 0000000000000005 RBX: ffff888034c04980 RCX: 0000000000080000 [ 416.617727][T12883] RDX: ffffc9000bbb1000 RSI: 00000000000003b1 RDI: 00000000000003b2 [ 416.626271][T12883] RBP: 0000000000000000 R08: ffff88802f3e212f R09: 1ffff11005e7c425 [ 416.635794][T12883] R10: dffffc0000000000 R11: ffffffff88f8cd30 R12: 0000000000000028 [ 416.643873][T12883] R13: dffffc0000000000 R14: ffff88802f3e2000 R15: dffffc0000000000 [ 416.660607][T12883] FS: 00007f3e8dee76c0(0000) GS:ffff8881258c4000(0000) knlGS:0000000000000000 [ 416.684485][T12883] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 416.711813][T12883] CR2: 00007f3e8dea4f98 CR3: 000000004155e000 CR4: 00000000003526f0 [ 416.724460][T12883] Kernel panic - not syncing: Fatal exception [ 416.730797][T12883] Kernel Offset: disabled [ 416.735102][T12883] Rebooting in 86400 seconds..