last executing test programs: 4m43.599133628s ago: executing program 3 (id=413): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) syz_pidfd_open(r0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) newfstatat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x2000) chown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0x4004510f, &(0x7f00000000c0)={"d8582add2d5203746d2542b7ec1f15d2f38d95493569079e090c57b09bd9"}) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) 4m43.510428263s ago: executing program 3 (id=414): creat(&(0x7f0000000000)='./file0\x00', 0x10) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext3\x00', 0x400, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001480)={0x2020}, 0x2020) creat(&(0x7f0000000000)='./file0\x00', 0x10) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext3\x00', 0x400, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001480)={0x2020}, 0x2020) (async) 4m43.405612374s ago: executing program 3 (id=416): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/254, 0xfe}, {&(0x7f0000000a00)=""/230, 0xe6}, {&(0x7f0000003100)=""/4056, 0xfd8}, {&(0x7f0000000300)=""/230, 0xe6}, {&(0x7f0000000940)=""/188, 0xbc}, {&(0x7f0000000840)=""/208, 0xd0}, {0x0}, {&(0x7f0000000b00)=""/194, 0xc2}, {&(0x7f0000000240)=""/178, 0xb2}, {&(0x7f0000000c00)=""/196, 0xc4}], 0xa}, 0x40012100) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 4m43.296662609s ago: executing program 3 (id=417): creat(&(0x7f0000001380)='./file0\x00', 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a8c9684b73926e0f6728d7a04000", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mount(&(0x7f0000001400)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 4m43.122657128s ago: executing program 3 (id=418): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x3b, &(0x7f0000000200)=ANY=[]) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000000c0)={0xff, r0, 'id1\x00'}) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000000)={0x159, 0x3, 0x3}) 4m41.565622772s ago: executing program 3 (id=424): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r2, 0xc0045401, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 4m26.401325442s ago: executing program 32 (id=424): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r2, 0xc0045401, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 1m27.628148546s ago: executing program 1 (id=1928): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/19, 0x13}, {&(0x7f00000002c0)=""/212, 0xd4}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x3, 0x7ff, {0xffffffffffffffff}, {}, 0x5, 0xb28}) rt_sigqueueinfo(r1, 0x1, &(0x7f00000003c0)={0x2c, 0x9, 0xf}) r2 = syz_open_dev$vbi(&(0x7f0000000240), 0x3, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000000000)={0xf, {"a2e3ad21ed0d09f91b3d090987f70906d038e7ff7fc6e5539b0d3d0e8b089b3f31006c090890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x4e, 0x0, 0x47) r6 = fsopen(&(0x7f0000000140)='esdfs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, 0x0, 0x0, 0xffffffffffffff9c) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000000c0)={0xf0f041, 0xfffffffd}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100020a0000000000001000000000030006003320000002004e20ac141429000000000000000005000500000000000a0000000000000000000000000000000000ffffffffffff0000000000000000"], 0x50}, 0x1, 0x7}, 0x0) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000001040)={"e98f6ce03c6fd4a311cb248b1bdb082df2a9f57d589c71d7e4706604cbd4fb08", r4}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000080)={0x3, 0x5, 0xf, 0x3, 0x1000, 0x7, 0x0, 0x80}, &(0x7f00000000c0)={0x38, 0xd, 0xfffd, 0x7, 0x3ff, 0x9, 0x2b27a4b1, 0x1}, 0x0, 0x0, 0x0) 1m26.668311799s ago: executing program 1 (id=1936): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000003708"]) 1m26.394373773s ago: executing program 1 (id=1941): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f00000002c0)={0x14, &(0x7f0000000180)={0x20, 0x7, 0xee, {0xee, 0x0, "c98b16876a461494a85a6c3620e29f08654128c8fbb7e1087758186376b46971a442d71a0ee18f496b97397fd9aea62a98d3c63ea14984ace43d508514f8733c81baaf12d25acf6c4e035f5e80017c88599b64eba98f90e50bd3e935518b40eaa6ff2a273262021c10d5536b16736af9d2379b1843d82ae699f2dd50df2b922e0a1544118d023472c18678e57f951e9e0b3d22cb895e7fc63baaaa6ad1346d7c5e1afd2207ac3d16fe52f40e6a9df3cc5386fe4aa5e496444c8f3a330ba78d57a783e13bddfc5e3a25369a3d19df4028d0708a6bf52b0a42280171b898679c90271f9ac2b1cb1aed617ae42d"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000300)={0x0, 0x14, 0xd4, "b0887bc2dee9fc15400ac1f55bded8c2ed465d81ebedc57cb5038573d8072faf4cb3253ad8b498d3874c38cad1b4c800981735ced6b9e6f7a30fc67b0238a3f9b7ae954e6ae931fdb60b5c09949f4de32c244ce9cce05bbb4467cfd838b64c27dffbe0236c2e5cc7f838d11cb7c4739947bc05947fa89b0b2c189ecb2ffd51e1b84cc23d4bb56dc2c705ae00dfeb20f099b77520612bc0c00dc21301b6caebd1a28343a653566b1511e7eb0d76272a3057c7a6e09e03c6dc500b57c957acda17ced35bab11df4552c49675c7c9b34ff929c5b465"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x1, 0x1, 0x115bb423, 0x1, 0xfffb, 0x0, 0x5, 0x6, 0x0, 0x6, 0xc, 0x8}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2}, &(0x7f0000000680)={0x20, 0x89, 0x2}}) 1m23.605371724s ago: executing program 1 (id=1960): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x3c, r3, 0x205, 0x800000, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4b2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x48810) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007b40)=ANY=[@ANYBLOB="200000002200010a000000000000000007000002"], 0x20}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) setpriority(0x1, 0x0, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') read(r4, &(0x7f0000000100)=""/147, 0x93) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0", 0x3a}], 0x1) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setsig(0x4203, r7, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) 1m23.134586715s ago: executing program 1 (id=1961): r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES8, @ANYRESOCT], 0x20}}, 0x4040) 1m21.470243194s ago: executing program 1 (id=1972): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) (async) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) (async) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0x12) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000001e0001"], 0x40}}, 0x90) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r6) (async) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r6) r8 = socket$inet6(0xa, 0x3, 0x5) write$tun(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="60e832a900b706ff00000000000000000000000000000000fe8000000000000000000000000000aa3c0006b865000000671004080168000000000000000000000000000000000000ff020000000000000000000000000001ff010000000000000000000000000001fe88000000e8ff000000000000000101ff02000000000000f7ffffff00000001ff02000000000000000000000000000120010000000000000000000000000002200100000000000000000000000000020000000000000000000000000000000300004e2100004e210000000400"/223], 0xdf) sendmmsg(r8, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x4000000, @remote, 0x0, 0x6}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1000000000000000290010000b000000"], 0x10}}], 0x2, 0x0) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001580)=ANY=[@ANYBLOB="89282abd7000ffdbdf250100000008000200070000000900010073797a3000000000080008000a0101018d01d7e14648f02dda0e4dd0c610", @ANYRES16=r7, @ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYRESDEC=r5], 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xdb) (async) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xdb) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) 1m21.125516529s ago: executing program 33 (id=1972): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) (async) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) (async) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0x12) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000001e0001"], 0x40}}, 0x90) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r6) (async) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r6) r8 = socket$inet6(0xa, 0x3, 0x5) write$tun(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="60e832a900b706ff00000000000000000000000000000000fe8000000000000000000000000000aa3c0006b865000000671004080168000000000000000000000000000000000000ff020000000000000000000000000001ff010000000000000000000000000001fe88000000e8ff000000000000000101ff02000000000000f7ffffff00000001ff02000000000000000000000000000120010000000000000000000000000002200100000000000000000000000000020000000000000000000000000000000300004e2100004e210000000400"/223], 0xdf) sendmmsg(r8, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x4000000, @remote, 0x0, 0x6}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1000000000000000290010000b000000"], 0x10}}], 0x2, 0x0) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001580)=ANY=[@ANYBLOB="89282abd7000ffdbdf250100000008000200070000000900010073797a3000000000080008000a0101018d01d7e14648f02dda0e4dd0c610", @ANYRES16=r7, @ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYRESDEC=r5], 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xdb) (async) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xdb) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) 5.229698718s ago: executing program 2 (id=2372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000011ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000300)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000) sendmsg$NFT_MSG_GETSET(r0, &(0x7f000000d480)={0x0, 0x0, &(0x7f000000d440)={&(0x7f000000d140)={0x20, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r5, 0x0) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000080)="010000000d80ffff", 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r8, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x3f7, 0x819, 0x70bd2d, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400}, 0x880) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x1}, {}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x32, 0x0, 0x2, 0x6}) r9 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x5}, 0x8) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x22020600) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) getsockopt(r5, 0x0, 0x2d, &(0x7f0000000100)=""/20, &(0x7f0000000140)=0x14) ioctl$KVM_SET_IRQCHIP(r10, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0xeeef0000, 0x7fffffff, 0xbc0, 0x20000000, 0x0, [{0xed, 0x3, 0xb, '\x00', 0xf1}, {0x7, 0x7, 0x0, '\x00', 0x33}, {0x4, 0x4, 0x7, '\x00', 0x1}, {0x3, 0x7, 0x7, '\x00', 0x7}, {0xe0, 0x6, 0xa, '\x00', 0x8}, {0xd0, 0x4a, 0x7, '\x00', 0x9}, {0x5, 0x56, 0x7, '\x00', 0xfa}, {0x1, 0x3, 0x2e, '\x00', 0x6}, {0x3, 0x2, 0x8, '\x00', 0x4}, {0x2, 0x14, 0x8, '\x00', 0x7f}, {0x98, 0x5, 0x0, '\x00', 0xc2}, {0xb, 0x6, 0x8, '\x00', 0x9}, {0x2, 0x0, 0x5, '\x00', 0x2}, {0x81, 0x96, 0xb, '\x00', 0xd}, {0x2, 0x5, 0x6, '\x00', 0x54}, {0x99, 0x3, 0x6, '\x00', 0x7}, {0x9, 0x6, 0x0, '\x00', 0xb}, {0x0, 0x0, 0x20, '\x00', 0xdb}, {0x6, 0x43, 0x41, '\x00', 0x4}, {0xd, 0x3}, {0x6, 0x7, 0x0, '\x00', 0xf8}, {0x0, 0x26, 0x6b, '\x00', 0x6}, {0x10, 0x6, 0x5, '\x00', 0x9}, {0x25, 0x7, 0xf2, '\x00', 0x80}]}}) r12 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) personality(0x5400004) write$tun(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="000000170200000001007f0009000305007d05c0e8afd9f957e0653ba8c10d02e01b7136e2e5913c85412393f5510577f65f1534f647c7132393cd13387060581325fa35e9b988eed549ba7b03589030814964c267e81564fb2660f4d62adb1692658ca0899a4e858a11ee89cb87387e0400000075465f6eecbfb5d37612c87d0d3c683780a86fd209d6fdbbb25d42009fe03bc0bf3ca19db210420572e138d54ed7b30a31494de846823a63bf9f7c90d711"], 0xa5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r13 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x89e2, &(0x7f0000000340)={r13}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x4000010, r12, 0x7dfff000) 5.025279065s ago: executing program 4 (id=2373): creat(&(0x7f0000001380)='./file0\x00', 0x12c) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000cc0)) (async) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)=""/110, 0x6e}, {&(0x7f00000047c0)=""/4060, 0xfdc}, {&(0x7f00000037c0)=""/4069, 0xfe5}, {&(0x7f0000000140)=""/120, 0x78}, {&(0x7f00000011c0)=""/209, 0xd1}], 0x5}, 0x40000100) (async, rerun: 64) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) (async, rerun: 64) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f00000000c0)={0x0, 0x8}) (async, rerun: 64) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x8002, 0x0) (rerun: 64) 4.892624874s ago: executing program 4 (id=2375): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a03, 0x0) fadvise64(r0, 0x1000, 0x1, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a010400000000000000000100000008000b40000000000900010073797a300000000024000480200001800700010072740000140002800800014000000015080002400000000414000000110001"], 0xd4}}, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_THP_DISABLE(0x41, 0x3) mmap(&(0x7f00002ea000/0x1000)=nil, 0x1000, 0x37fffff, 0x4002011, 0xffffffffffffffff, 0x0) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef) timer_settime(r3, 0x0, &(0x7f0000000340)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000910000/0x2000)=nil, 0x2000, 0x2000001, 0x40010, r1, 0x3daf2000) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x0, 'lblcr\x00', 0x7, 0xfffffff8}, 0x2c) poll(&(0x7f0000000000), 0x0, 0x6) getsockopt$IP_VS_SO_GET_SERVICE(r7, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) r8 = socket$kcm(0x21, 0x3, 0x2) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000b00"], 0x10b8}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0x7, &(0x7f0000000100)={0x7ff, 0x80000000, 0x97, 0x2}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x1000, 0x4e24, 0x13a, 0xa, 0x20, 0x0, 0x21}, {0xb4c, 0x8, 0x2, 0x40, 0x5, 0x7ff, 0x2, 0xc84}, {0xfffffffffffffffd, 0x6, 0x800, 0x3}, 0x1, 0x6e6bb2, 0x3, 0x0, 0x2}, {{@in=@multicast2, 0x4d6, 0xff}, 0xf3106e573996233f, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3505, 0x0, 0x1, 0x6, 0x189c, 0x8, 0x2}}, 0xe8) r9 = fsopen(&(0x7f0000000080)='befs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r11) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r10, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2}}) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x100000001, 0x0) 4.855900627s ago: executing program 2 (id=2376): mount(&(0x7f0000000040)=@filename='./cgroup\x00', &(0x7f0000000000)='./cgroup/file0\x00', &(0x7f0000000380)='hugetlbfs\x00', 0x200800, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000080)) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000000)=0x1) ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@ipv4, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xfffffffffffffe83) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000180)=@rnullb, r4, &(0x7f0000000300)={0x3, 0x8, 0xfffffffffffffcc3, 0x7, 0x5, 0x965, 0xffffffffffffff1f, 0x8, 0x8936}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/file0/file0\x00', 0x10002, 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000140)) openat(r5, &(0x7f0000000100)='./cgroup/file0\x00', 0x4002, 0x100) 4.682233368s ago: executing program 2 (id=2378): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x53ff, 0x2}, 0xf, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r3, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020008008000140ffffff0600000000000000e405000500020000000500010006000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x4a) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00007c7000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r6 = msgget$private(0x0, 0x790) msgrcv(r6, 0x0, 0x0, 0x0, 0x0) msgrcv(r6, 0x0, 0x0, 0x1, 0x3000) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000200)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x0, 0x4e8, 0x0, 0xfffffffffffffffb, 0x5, 0x8, 0x1, 0x7, 0x7}) msgsnd(r6, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x1008, 0x800) r7 = semget$private(0x0, 0x7, 0x3c0) semop(r7, &(0x7f00000005c0)=[{0x3, 0xa0ea, 0x1000}], 0x1) semctl$IPC_RMID(r7, 0x0, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x12, r8, 0x99b33000) 3.701971467s ago: executing program 2 (id=2384): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x103800, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r5 = dup(r3) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) 3.554504015s ago: executing program 2 (id=2385): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x110) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000004100), r1) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000004140)={0x1c, r2, 0x601, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x800) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x2, r3}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4a7a7caf0f0690713cee8b2dc3f1ce1852407a6a8a426097297d5431c998c929bd7d5d1bd75e37be9cfb9c5873daf8aa67a81f6715e496c22c2269ce035e6647f103686f71f3de947988b7d876e0641cce3d48723b6429a95d60532fc9fcfb33e60444129c10d39754a551ecd534eda25f81c893d25975948dfcc14e7e8ee07838c2656cee26924b914044a705c3058764cebe19b9d7f8f87b17b09f0c"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) r4 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x1c, 0x0, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x32}, 0x0}) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 3.402361962s ago: executing program 5 (id=2387): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000240)='H', 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000100)="ae912292", 0x4, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000180)={r1}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="0c0100001000130726bd700000000000e0000002000000000000000000000000ac1414130000000000000000000000004e2300010000000b020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000002b00000064010100000000000000000000000000000000000000000000000000000000000c000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000020000000000000000000000000000000200000000000000f8ffffffffffffff0a000000000000000200000029bd5500000000000200010008000000000000001c0004"], 0x10c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) prctl$PR_GET_SECCOMP(0x15) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001fcffffff00000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800b00010065787468647200000c05028008000640000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000af4de5215c24d4a36583b00244a4345b700"], 0x74}}, 0x0) setsockopt$llc_int(r3, 0x10c, 0x5, &(0x7f0000000000)=0x800, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socket(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x4008040) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) write$FUSE_NOTIFY_RESEND(r6, &(0x7f00000002c0)={0x14}, 0x14) ioctl$SIOCSIFHWADDR(r6, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000000008d"}) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) getsockname$inet(r8, 0x0, &(0x7f0000000080)) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, 0x0, 0x0) getsockopt$inet_int(r9, 0x0, 0x15, &(0x7f0000000100), &(0x7f0000000140)=0x4) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x4080, 0x0) 3.1449444s ago: executing program 5 (id=2388): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0xf648e000) r1 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000280)={0x7, @vbi={0x8, 0x7, 0x48000, 0x42303159, [0x3ff, 0x2], [0x5, 0xb4], 0x108}}) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)={0x18, 0x55, 0x1, 0x70bd2b, 0x0, {0x2}, [@typed={0x4, 0x120}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r2, &(0x7f0000000fc0)={'syz1\x00', {0x6, 0x8001, 0x0, 0x529}, 0x26, [0xf5, 0x8, 0x80000001, 0x2, 0x202, 0xffffffff, 0x8e, 0x9, 0x9, 0x4, 0x0, 0x9, 0x7, 0x1, 0xfffffffe, 0x38, 0xffffff7f, 0xac, 0x5, 0x1443, 0x0, 0xea7, 0x1, 0x9be4bf38, 0x0, 0x20002, 0xc, 0x5, 0xc, 0x6, 0x84, 0xd3, 0x8001, 0x3, 0x2001, 0xb, 0x2, 0x5f84, 0xfffffffe, 0xc1e, 0x9da, 0x939a, 0x8000, 0x1, 0x5c, 0x8, 0x7f, 0x3, 0xf2b, 0x1, 0x6, 0xfffffffa, 0xffff, 0x8, 0x7, 0x6, 0xffffff7e, 0xf3, 0x6, 0xd2, 0x8001, 0x5, 0x53, 0x1], [0x5, 0x2, 0xd91, 0x8, 0x401, 0x8, 0x1, 0x5, 0xfffffffe, 0x40a89, 0xffb, 0xffffff4b, 0x1, 0x2, 0x0, 0x0, 0x8, 0x8, 0xffffffff, 0x405, 0x2, 0x9, 0x5, 0x5, 0xd, 0xa, 0x206, 0x9, 0xa, 0x5, 0xf, 0xb2cf, 0x1, 0x200, 0xec, 0x9, 0x100, 0x9, 0x5, 0x10001, 0x1, 0x865f, 0x8ec5, 0x3, 0x802, 0x7, 0x3, 0x29e3, 0xce, 0x40b4e5, 0x20000, 0x200, 0x5, 0x4, 0xff, 0x9, 0x1d, 0x3, 0x10000, 0xa, 0x26, 0x2, 0x6, 0xad], [0x4343fe9f, 0xfffffffd, 0x101, 0xffffffff, 0x7f, 0x8, 0x917, 0x3, 0xc, 0x0, 0xcb06, 0xfffeffff, 0x4, 0x37, 0x5, 0x80003, 0xc8, 0xc, 0x8000, 0x2, 0xdf9e, 0x40005, 0x8, 0xa, 0x3, 0x7, 0x401, 0x5, 0x5, 0x2, 0x3, 0x2, 0x1, 0x0, 0x10000004, 0x911, 0x7, 0x8000, 0x31c1, 0x8, 0xb, 0x4, 0x2, 0x1f83, 0x9, 0x1, 0x2, 0x8, 0x7, 0x402, 0x9, 0xffff, 0x400, 0x80000000, 0x0, 0xb, 0x80, 0xf, 0x8, 0x8, 0x9, 0x4, 0x4, 0xfffffdad], [0x27b, 0x6, 0x6, 0x10, 0x7, 0x4009, 0x8, 0xff, 0x7fffffff, 0xe012, 0xfffffff8, 0x8, 0xffff7bfb, 0xffffffff, 0x401, 0x100, 0x2, 0x0, 0xb, 0x8, 0x3, 0x5, 0xfffffc00, 0x91, 0x9, 0x4, 0x80000000, 0x2, 0xa, 0x27, 0x400, 0x70, 0x9, 0xffc, 0x400002, 0xc, 0xffffffff, 0x49, 0x80088, 0x10, 0x5, 0x9a2, 0x81, 0xf011, 0x400, 0x103000, 0x8, 0x5, 0x4, 0xfffffffe, 0xb, 0x1, 0xc3, 0x9, 0x807ff, 0x1, 0x3, 0xfffffc02, 0x3, 0xb, 0x5, 0x8, 0xa, 0xfffffff7]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, &(0x7f00000000c0)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.982721963s ago: executing program 5 (id=2389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000f06010200000000000000000200000805000100"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) mount(&(0x7f0000000000)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='ocfs2_dlmfs\x00', 0x208002, 0x0) 2.956583187s ago: executing program 5 (id=2390): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x2010, 0xffffffffffffffff, 0x8aeb000) (async) r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x84182) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000100)="aa6001e448b9a30552f2b1c8ac17601026abb75a67b918394c5cada24e3ea2b3fbae82f635c6266c1a7890d72f5e2f0911a5bac5d74b685367b039b6322b7d71739a1e47639cde82f99a40abf63def305e1d09079ca95713557ebbdd69a716f67a608bdfd5be743af2b215cdc5898dc091bc2d865fc3365e4d0bed222df8643de290a662ebeb926b11166594afc6e4d9166494245c3582fd423ee1b6e1eebf77697e0c72d73a5a597a1792bfa401e1e3180ecbc3b22f9a31379bb772f58d62a83d7c9b393c5da06f8d403db6854d343c6b8d2dcd4ef7f9b3937c942da39d56e8e8a94b2fcc1e3eca") 2.872743469s ago: executing program 5 (id=2391): r0 = syz_open_dev$vbi(&(0x7f0000000240), 0x3, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041, 0xfffffffd}) pselect6(0x0, 0x0, &(0x7f00000000c0)={0x38, 0xd, 0xfffd, 0x7, 0x3ff, 0x9, 0x2b27a4b1, 0x1}, 0x0, 0x0, 0x0) 2.188983085s ago: executing program 0 (id=2394): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000180)={0x0, 'dummy0\x00', {0x3}, 0x3}) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) (async) connect$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r6, 0xc0585609, &(0x7f0000000280)={0x3, 0x4, 0x4, 0x4000, 0x7, {}, {0x3, 0x2, 0x1, 0x7f, 0x2, 0x4, "ef8ef440"}, 0x1, 0x4, {}, 0x9, 0x0, r6}) writev(r8, &(0x7f0000000180)=[{&(0x7f0000000440)="ce22f130df4ab82b9ba691d0423bc854e4394172197b0b71321d38aa4fd166272191b881e17aa8aaebaf80c0eae27734531c0b0acca256e1749556c55a2b41dee358e222d8203d97d0c10bccb824a1d5f77b09992866137ed3d51fb1d15f59d8045f", 0x62}], 0x1) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x0, 0x8}]}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), r9) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r10, 0x7e76bdd5c6254549, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x4000004) (async) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000140)={0x0, 0x0}) (async) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f00000000c0)) 1.954547677s ago: executing program 0 (id=2395): mount(&(0x7f0000000000)=@sr0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000001140)='ceph\x00', 0x208002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000072, 0x0, 0x1ff}]}) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x8000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000011c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r5 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0xc0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001180)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x12) sendfile(r3, r4, 0x0, 0xf03a0001) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) readlinkat(r7, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)=""/4096, 0x1000) iopl(0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) fchdir(r8) 1.884058s ago: executing program 5 (id=2396): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) brk(0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="0804cd8a33a3d4", @ANYRES16=0x0, @ANYBLOB="100027bd7000ffdbdf250800000004000280"], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='ip6_vti0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="28000000000000000000000007000000071714"], 0x28}}], 0x1, 0x40) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x38, r4, 0x601, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x18}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0xc000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae09, &(0x7f0000000080)=""/157) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000940)}, 0x40) 1.735287739s ago: executing program 4 (id=2397): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x22020600) (async) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) (async) r3 = gettid() clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000140)={0x77359400}, 0x0) (async) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x40, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$printer(r4, 0x0, 0x0) (rerun: 32) rt_sigqueueinfo(r3, 0x21, &(0x7f0000002d00)={0xfffffffe, 0x0, 0xffffffff}) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x7}, {0xf, 0x7, 0x5}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}}) (async, rerun: 64) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async, rerun: 64) mmap$snddsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10, 0xffffffffffffffff, 0xf000) (async) personality(0x5400004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f000021f000/0x1000)=nil, 0x1000, 0xb) (async) r6 = socket$kcm(0x2d, 0x2, 0x0) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r7, 0x11e, 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000340)={r6}) (async, rerun: 64) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r5, 0x7dfff000) (async, rerun: 64) r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r8, &(0x7f0000001440)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/36, 0x24}], 0x2, 0x0, 0x0) (async) syz_usb_control_io$uac1(r4, &(0x7f0000000240)={0x14, &(0x7f0000000080)={0x40, 0x2d, 0x6c, {0x6c, 0x2a, "3db588c8aeac814c1731c9a5ac25986f561816cf53b6b79979b48a7b8a778e2931161b5c7d159406f50c398f41cadd7d555c4b73d8bc7ee12b94b36fd247419e48eaa2eaf4554a73897ddf1a4704161d1cae24861897810d19cfd200bbb11a2ba95d6f8c1c63bc61a3f6"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81d}}}, &(0x7f0000000780)={0x44, &(0x7f0000000280)={0x20, 0x1, 0x90, "339c8c7833206be05f79aa50802bfd9cb618bc05ff6fc6cd608f1dc5e3d0339fccc8cb1e4e9887884af24427d0370cad99f418d74160155b55664da131795f3d08dd78755a5f8b89afb15deab2e0bf87a76a9cc0f5de2eba3c334b7724f96d443927ac997f9f4a74635cfd8775a631bc75fbdbdb260f108c59f12c4fb87ad11ec5048b101b7461a823510af756ef0f12"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000640)={0x20, 0x81, 0x3, "1d21ba"}, &(0x7f0000000680)={0x20, 0x82, 0x2, "30c1"}, &(0x7f00000006c0)={0x20, 0x83, 0x2, "2fc0"}, &(0x7f0000000700)={0x20, 0x84, 0x1, "cd"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "19ef88"}}) 1.606717566s ago: executing program 0 (id=2398): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x80000}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, 0x0, &(0x7f0000000200)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000240)={0xfffff50a, {{0x2, 0x4e20, @empty}}, 0x0, 0x2, [{{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e24, @multicast2}}]}, 0x190) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) 1.432412218s ago: executing program 4 (id=2399): r0 = openat$kvm(0x0, &(0x7f00000001c0), 0x2b82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="03000000000000006a0200000000000000000008"]) (async) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r3, 0x0, 0x8c) (async) creat(&(0x7f0000000080)='./file0\x00', 0x2) (async) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 1.413889675s ago: executing program 0 (id=2400): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) pwritev(r0, &(0x7f0000001400)=[{&(0x7f00000001c0)="2b23dbc895797f448077d77a88ca", 0xe}, {0x0}], 0x2, 0x7, 0x58) (async) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) 1.082515085s ago: executing program 0 (id=2401): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4801b}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000f400010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000240000000001800038014000100626f6e64300000000000000000000000080001400000000048000000180a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c000380140001"], 0xe8}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000140)={0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000280)={0x2, @pix={0x3, 0x1cf3, 0x30314752, 0x7, 0xe0a7, 0xf, 0x8, 0x7, 0xd5f7988630049798, 0x8, 0x1, 0x4}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x0) ioctl$NBD_SET_BLKSIZE(r6, 0xab01, 0x9) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x18, r4, 0xf03, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4}]}, 0x18}}, 0x0) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='virtiofs\x00', 0x200000, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0xc3) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0x9c}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000002400)={0x2, 0x100}, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext3\x00', 0x400, 0x0) 1.059187748s ago: executing program 4 (id=2402): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1400}, 0x0) (rerun: 64) r1 = socket$kcm(0x10, 0x2, 0x0) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r2, 0x540c) (async, rerun: 64) r3 = openat$kvm(0x0, &(0x7f0000000100), 0x40a40, 0x0) (rerun: 64) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000080)) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef"], 0x33fe0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async, rerun: 32) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="080029bd7000fcdbdf25050000001c0003800800030002e2ff000600040006000000050008000000000008000500060000000800060000000006"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x2000a805) 875.333118ms ago: executing program 0 (id=2403): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x71) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc4c85513, &(0x7f0000000080)={0x3, 0x1}) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) 382.63747ms ago: executing program 2 (id=2404): r0 = syz_open_dev$vbi(&(0x7f0000000240), 0x3, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041, 0xfffffffd}) pselect6(0x40, &(0x7f0000000080)={0x3, 0x5, 0xf, 0x3, 0x1000, 0x7, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=2405): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0xdc) (async) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r1 = socket(0x2, 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async, rerun: 64) ioprio_set$pid(0x2, 0x0, 0x6000) (async, rerun: 64) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x100000000) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) (async, rerun: 32) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) (rerun: 32) kernel console output (not intermixed with test programs): 394.971827][ T5944] usb 6-1: device descriptor read/8, error -71 [ 394.990672][ T927] m920x_read = error: -19 [ 394.999876][ T927] dvb-usb: error while querying for an remote control event. [ 395.080918][ T5944] usb usb6-port1: unable to enumerate USB device [ 395.112089][T14144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2135'. [ 395.127191][T14139] erofs: Unknown parameter ' @]:@-' [ 395.133122][ T5944] m920x_read = error: -19 [ 395.137880][ T5944] dvb-usb: error while querying for an remote control event. [ 395.213269][T14139] befs: Unknown parameter '&g^[&' [ 395.264240][ T927] m920x_read = error: -19 [ 395.271493][ T927] dvb-usb: error while querying for an remote control event. [ 395.383618][T14156] /dev/rnullb0: Can't open blockdev [ 395.390264][ T927] m920x_read = error: -19 [ 395.405067][ T927] dvb-usb: error while querying for an remote control event. [ 395.444949][T14158] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 395.540367][ T927] m920x_read = error: -19 [ 395.562563][ T927] dvb-usb: error while querying for an remote control event. [ 395.691226][ T5944] m920x_read = error: -19 [ 395.695649][ T5944] dvb-usb: error while querying for an remote control event. [ 395.794986][T14178] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 395.819778][ T5944] m920x_read = error: -19 [ 395.824186][ T5944] dvb-usb: error while querying for an remote control event. [ 395.929694][ T927] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 395.981611][ T43] m920x_read = error: -19 [ 395.986034][ T43] dvb-usb: error while querying for an remote control event. [ 395.989176][ T10] usb 3-1: USB disconnect, device number 113 [ 396.109753][ T5944] m920x_read = error: -19 [ 396.114146][ T5944] dvb-usb: error while querying for an remote control event. [ 396.143499][ T927] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 396.159703][ T927] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 396.168802][ T927] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 396.180620][ T927] usb 1-1: config 1 has no interface number 0 [ 396.186871][ T927] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 396.198453][ T927] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 396.205548][T14205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2144'. [ 396.215638][ T927] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 396.265521][ T927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.274215][ T7090] m920x_read = error: -19 [ 396.278755][ T7090] dvb-usb: error while querying for an remote control event. [ 396.310625][ T43] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 396.331646][ T927] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 396.410478][ T7090] m920x_read = error: -19 [ 396.414909][ T7090] dvb-usb: error while querying for an remote control event. [ 396.495884][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 396.524846][ T43] usb 5-1: not running at top speed; connect to a high speed hub [ 396.561313][ T5944] m920x_read = error: -19 [ 396.569003][ T5944] dvb-usb: error while querying for an remote control event. [ 396.580085][ T43] usb 5-1: config 10 has an invalid interface number: 12 but max is 0 [ 396.588338][ T43] usb 5-1: config 10 has no interface number 0 [ 396.619811][ T43] usb 5-1: config 10 interface 12 has no altsetting 0 [ 396.654927][ T43] usb 5-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=59.5c [ 396.680424][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.689128][ T43] usb 5-1: Product: syz [ 396.701291][ T43] usb 5-1: Manufacturer: syz [ 396.708646][ T43] usb 5-1: SerialNumber: syz [ 396.729768][ T5944] m920x_read = error: -19 [ 396.744408][ T5944] dvb-usb: error while querying for an remote control event. [ 396.809390][T14237] FAULT_INJECTION: forcing a failure. [ 396.809390][T14237] name failslab, interval 1, probability 0, space 0, times 0 [ 396.822736][T14237] CPU: 1 UID: 0 PID: 14237 Comm: syz.5.2148 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 396.822771][T14237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 396.822784][T14237] Call Trace: [ 396.822793][T14237] [ 396.822802][T14237] dump_stack_lvl+0x189/0x250 [ 396.822838][T14237] ? __pfx____ratelimit+0x10/0x10 [ 396.822862][T14237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.822890][T14237] ? __pfx__printk+0x10/0x10 [ 396.822926][T14237] ? __pfx___might_resched+0x10/0x10 [ 396.822950][T14237] ? fs_reclaim_acquire+0x7d/0x100 [ 396.822977][T14237] should_fail_ex+0x414/0x560 [ 396.823012][T14237] should_failslab+0xa8/0x100 [ 396.823045][T14237] __kmalloc_noprof+0xcb/0x4f0 [ 396.823073][T14237] ? kobject_get_path+0xc5/0x2d0 [ 396.823102][T14237] kobject_get_path+0xc5/0x2d0 [ 396.823133][T14237] kobject_uevent_env+0x292/0x8c0 [ 396.823159][T14237] ? device_pm_add+0x67/0x320 [ 396.823194][T14237] device_add+0x557/0xb50 [ 396.823221][T14237] input_register_device+0x99e/0x1090 [ 396.823257][T14237] uinput_create_device+0x422/0x670 [ 396.823288][T14237] uinput_ioctl_handler+0x3f0/0x1570 [ 396.823312][T14237] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 396.823345][T14237] ? __fget_files+0x2a/0x420 [ 396.823366][T14237] ? __fget_files+0x3a0/0x420 [ 396.823396][T14237] ? bpf_lsm_file_ioctl+0x9/0x20 [ 396.823423][T14237] ? __pfx_uinput_ioctl+0x10/0x10 [ 396.823452][T14237] __se_sys_ioctl+0xf9/0x170 [ 396.823483][T14237] do_syscall_64+0xfa/0x3b0 [ 396.823506][T14237] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.823528][T14237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.823548][T14237] ? clear_bhb_loop+0x60/0xb0 [ 396.823574][T14237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.823594][T14237] RIP: 0033:0x7f9437b8e929 [ 396.823613][T14237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.823632][T14237] RSP: 002b:00007f9438a19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.823655][T14237] RAX: ffffffffffffffda RBX: 00007f9437db5fa0 RCX: 00007f9437b8e929 [ 396.823670][T14237] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 396.823684][T14237] RBP: 00007f9438a19090 R08: 0000000000000000 R09: 0000000000000000 [ 396.823697][T14237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 396.823720][T14237] R13: 0000000000000000 R14: 00007f9437db5fa0 R15: 00007ffc5b9c05d8 [ 396.823755][T14237] [ 396.823838][T14237] input: syz1 as /devices/virtual/input/input52 [ 396.903993][ T10] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 397.065290][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.072831][ T5944] m920x_read = error: -19 [ 397.103710][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 397.108904][ T927] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 397.126127][ T5944] dvb-usb: error while querying for an remote control event. [ 397.146867][T14239] /dev/rnullb0: Can't open blockdev [ 397.152064][ T43] kl5kusb105 5-1:10.12: KL5KUSB105D / PalmConnect converter detected [ 397.186913][ T43] usb 5-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 397.192070][ T10] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 397.235108][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.239888][ T5944] m920x_read = error: -19 [ 397.247571][ T5944] dvb-usb: error while querying for an remote control event. [ 397.252616][ T5912] usb 1-1: USB disconnect, device number 113 [ 397.261845][ T43] usb 5-1: USB disconnect, device number 79 [ 397.294405][ T10] usb 3-1: Product: syz [ 397.320893][ T10] usb 3-1: Manufacturer: syz [ 397.344308][ T10] usb 3-1: SerialNumber: syz [ 397.352099][ T5912] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 397.369905][ T43] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 397.381146][ T5944] m920x_read = error: -19 [ 397.385535][ T5944] dvb-usb: error while querying for an remote control event. [ 397.391334][ T10] usb 3-1: config 0 descriptor?? [ 397.453965][ T43] kl5kusb105 5-1:10.12: device disconnected [ 397.461237][T14274] /dev/rnullb0: Can't open blockdev [ 397.571783][ T5944] m920x_read = error: -19 [ 397.576499][ T5944] dvb-usb: error while querying for an remote control event. [ 397.664279][ T30] audit: type=1800 audit(1752072871.161:103): pid=14226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2147" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 397.709715][T14291] x_tables: unsorted underflow at hook 4 [ 397.728051][ T5944] m920x_read = error: -19 [ 397.747924][T14291] /dev/rnullb0: Can't open blockdev [ 397.753679][ T5944] dvb-usb: error while querying for an remote control event. [ 397.792606][T14291] Bluetooth: MGMT ver 1.23 [ 397.893218][ T43] m920x_read = error: -19 [ 397.897711][ T43] dvb-usb: error while querying for an remote control event. [ 397.934537][T14309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2154'. [ 397.981406][ T5926] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 398.020014][ T43] m920x_read = error: -19 [ 398.029045][ T43] dvb-usb: error while querying for an remote control event. [ 398.049653][ T5912] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 398.143252][ T5926] usb 5-1: device descriptor read/64, error -71 [ 398.150106][ T5944] m920x_read = error: -19 [ 398.150140][ T5944] dvb-usb: error while querying for an remote control event. [ 398.252342][ T5912] usb 6-1: Using ep0 maxpacket: 32 [ 398.260714][ T43] m920x_read = error: -19 [ 398.260757][ T5912] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 398.272084][ T43] dvb-usb: error while querying for an remote control event. [ 398.274411][ T5912] usb 6-1: config 0 has no interface number 0 [ 398.292740][ T5912] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 398.302842][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.311833][ T5912] usb 6-1: Product: syz [ 398.321281][ T5912] usb 6-1: Manufacturer: syz [ 398.325962][ T5912] usb 6-1: SerialNumber: syz [ 398.334739][ T5912] usb 6-1: config 0 descriptor?? [ 398.352570][ T5912] smsc95xx v2.0.0 [ 398.399909][ T43] m920x_read = error: -19 [ 398.405574][ T43] dvb-usb: error while querying for an remote control event. [ 398.434374][ T5926] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 398.531133][ T43] m920x_read = error: -19 [ 398.537283][ T43] dvb-usb: error while querying for an remote control event. [ 398.593143][ T5926] usb 5-1: device descriptor read/64, error -71 [ 398.659916][ T43] m920x_read = error: -19 [ 398.665541][ T43] dvb-usb: error while querying for an remote control event. [ 398.710851][ T5926] usb usb5-port1: attempt power cycle [ 398.762281][ T5912] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 398.776931][ T5912] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 398.790564][ T43] m920x_read = error: -19 [ 398.794954][ T43] dvb-usb: error while querying for an remote control event. [ 398.909920][ T43] m920x_read = error: -19 [ 398.914474][ T43] dvb-usb: error while querying for an remote control event. [ 398.997055][ T5912] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 399.013017][ T5912] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 399.030058][ T43] m920x_read = error: -19 [ 399.035824][ T43] dvb-usb: error while querying for an remote control event. [ 399.070608][ T5926] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 399.100632][ T5926] usb 5-1: device descriptor read/8, error -71 [ 399.131719][T14355] lo speed is unknown, defaulting to 1000 [ 399.132044][T14356] rdma_rxe: rxe_newlink: failed to add lo [ 399.143064][T14355] lo speed is unknown, defaulting to 1000 [ 399.160365][ T43] m920x_read = error: -19 [ 399.164797][ T43] dvb-usb: error while querying for an remote control event. [ 399.235435][T14355] lo speed is unknown, defaulting to 1000 [ 399.289751][ T5944] m920x_read = error: -19 [ 399.294141][ T5944] dvb-usb: error while querying for an remote control event. [ 399.359976][ T5926] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 399.390739][ T5926] usb 5-1: device descriptor read/8, error -71 [ 399.418676][T14355] infiniband syz0: set active [ 399.425507][ T43] lo speed is unknown, defaulting to 1000 [ 399.433500][ T43] m920x_read = error: -19 [ 399.437868][ T43] dvb-usb: error while querying for an remote control event. [ 399.445405][T14355] infiniband syz0: added lo [ 399.452983][T14355] syz0: rxe_create_cq: returned err = -12 [ 399.461657][T14355] infiniband syz0: Couldn't create ib_mad CQ [ 399.467826][T14355] infiniband syz0: Couldn't open port 1 [ 399.510241][T14355] RDS/IB: syz0: added [ 399.514654][T14355] smc: adding ib device syz0 with port count 1 [ 399.520148][ T5926] usb usb5-port1: unable to enumerate USB device [ 399.528181][T14355] smc: ib device syz0 port 1 has pnetid [ 399.536211][ T43] lo speed is unknown, defaulting to 1000 [ 399.547269][T14355] lo speed is unknown, defaulting to 1000 [ 399.575151][ T43] m920x_read = error: -19 [ 399.584017][ T43] dvb-usb: error while querying for an remote control event. [ 399.676671][ T43] usb 3-1: USB disconnect, device number 114 [ 399.712596][ T927] m920x_read = error: -19 [ 399.717105][ T927] dvb-usb: error while querying for an remote control event. [ 399.742177][T14368] overlayfs: missing 'lowerdir' [ 399.845871][ T5944] m920x_read = error: -19 [ 399.856413][ T5944] dvb-usb: error while querying for an remote control event. [ 399.885898][T14355] lo speed is unknown, defaulting to 1000 [ 399.980083][ T5944] m920x_read = error: -19 [ 399.984741][ T5944] dvb-usb: error while querying for an remote control event. [ 400.074039][T14355] lo speed is unknown, defaulting to 1000 [ 400.099805][ T5944] m920x_read = error: -19 [ 400.105377][ T5944] dvb-usb: error while querying for an remote control event. [ 400.189676][ T43] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 400.219893][ T927] m920x_read = error: -19 [ 400.224306][ T927] dvb-usb: error while querying for an remote control event. [ 400.233631][T11413] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 400.265579][T14355] lo speed is unknown, defaulting to 1000 [ 400.339688][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 400.347791][ T43] usb 3-1: config index 0 descriptor too short (expected 59154, got 18) [ 400.356901][ T43] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 400.365781][ T927] m920x_read = error: -19 [ 400.372796][ T927] dvb-usb: error while querying for an remote control event. [ 400.381860][ T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 400.396025][ T43] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 400.405805][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.414782][ T43] usb 3-1: Product: syz [ 400.419213][ T43] usb 3-1: Manufacturer: syz [ 400.424337][ T43] usb 3-1: SerialNumber: syz [ 400.434731][ T43] usb 3-1: config 0 descriptor?? [ 400.450125][ T43] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 400.499812][ T927] m920x_read = error: -19 [ 400.504326][ T927] dvb-usb: error while querying for an remote control event. [ 400.508049][T14355] lo speed is unknown, defaulting to 1000 [ 400.619769][ T927] m920x_read = error: -19 [ 400.624380][ T927] dvb-usb: error while querying for an remote control event. [ 400.685967][ T5912] usb 6-1: USB disconnect, device number 10 [ 400.753297][ T7090] m920x_read = error: -19 [ 400.780882][ T7090] dvb-usb: error while querying for an remote control event. [ 400.919761][ T927] m920x_read = error: -19 [ 400.924206][ T927] dvb-usb: error while querying for an remote control event. [ 400.963279][T14392] /dev/rnullb0: Can't open blockdev [ 400.966158][T14394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2161'. [ 401.054093][ T927] m920x_read = error: -19 [ 401.058540][ T927] dvb-usb: error while querying for an remote control event. [ 401.199829][ T7090] m920x_read = error: -19 [ 401.211327][ T7090] dvb-usb: error while querying for an remote control event. [ 401.320319][ T7090] m920x_read = error: -19 [ 401.336425][ T7090] dvb-usb: error while querying for an remote control event. [ 401.449786][ T927] m920x_read = error: -19 [ 401.454255][ T927] dvb-usb: error while querying for an remote control event. [ 401.483688][ T43] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 401.523919][ T43] usb 3-1: USB disconnect, device number 115 [ 401.569796][ T927] m920x_read = error: -19 [ 401.578697][ T927] dvb-usb: error while querying for an remote control event. [ 401.609878][ T5971] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 401.699724][ T927] m920x_read = error: -19 [ 401.704112][ T927] dvb-usb: error while querying for an remote control event. [ 401.791974][ T5971] usb 5-1: config 202 has an invalid interface number: 153 but max is 0 [ 401.802432][ T5971] usb 5-1: config 202 has no interface number 0 [ 401.808700][ T5971] usb 5-1: too many endpoints for config 202 interface 153 altsetting 71: 176, using maximum allowed: 30 [ 401.822503][ T5971] usb 5-1: config 202 interface 153 altsetting 71 has 0 endpoint descriptors, different from the interface descriptor's value: 176 [ 401.829814][ T43] m920x_read = error: -19 [ 401.836563][ T5912] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 401.844506][ T43] dvb-usb: error while querying for an remote control event. [ 401.848113][ T5971] usb 5-1: config 202 interface 153 has no altsetting 0 [ 401.866454][ T5971] usb 5-1: New USB device found, idVendor=1199, idProduct=6832, bcdDevice=9c.50 [ 401.877110][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.885326][ T5971] usb 5-1: Product: syz [ 401.892806][ T5971] usb 5-1: Manufacturer: syz [ 401.897410][ T5971] usb 5-1: SerialNumber: syz [ 401.962338][ T43] m920x_read = error: -19 [ 401.966778][ T43] dvb-usb: error while querying for an remote control event. [ 402.012197][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.023562][ T5912] usb 6-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 402.032704][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.044933][ T5912] usb 6-1: config 0 descriptor?? [ 402.083231][ T43] m920x_read = error: -19 [ 402.087806][ T43] dvb-usb: error while querying for an remote control event. [ 402.114729][ T5971] hub 5-1:202.153: bad descriptor, ignoring hub [ 402.123009][ T5971] hub 5-1:202.153: probe with driver hub failed with error -5 [ 402.132825][ T5971] sierra 5-1:202.153: Sierra USB modem converter detected [ 402.199858][ T43] m920x_read = error: -19 [ 402.206747][ T43] dvb-usb: error while querying for an remote control event. [ 402.211808][ T5971] usb 5-1: USB disconnect, device number 84 [ 402.251288][ T5971] sierra 5-1:202.153: device disconnected [ 402.329237][T14452] /dev/rnullb0: Can't open blockdev [ 402.335555][ T927] m920x_read = error: -19 [ 402.341195][ T927] dvb-usb: error while querying for an remote control event. [ 402.460276][ T43] m920x_read = error: -19 [ 402.464799][ T43] dvb-usb: error while querying for an remote control event. [ 402.496501][ T5912] input: HID 28bd:0933 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28BD:0933.001F/input/input53 [ 402.580157][ T43] m920x_read = error: -19 [ 402.584752][ T43] dvb-usb: error while querying for an remote control event. [ 402.601103][ T10] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 402.621129][ T5912] uclogic 0003:28BD:0933.001F: input,hidraw0: USB HID vff.ff Mouse [HID 28bd:0933] on usb-dummy_hcd.5-1/input0 [ 402.669869][ T927] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 402.700259][ T43] m920x_read = error: -19 [ 402.714997][ T43] dvb-usb: error while querying for an remote control event. [ 402.729055][ T7090] usb 6-1: USB disconnect, device number 11 [ 402.791696][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 402.811548][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 402.824105][T14467] fido_id[14467]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 402.838555][ T10] usb 3-1: config 0 has no interface number 0 [ 402.845809][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 402.847430][ T927] usb 1-1: Using ep0 maxpacket: 8 [ 402.859818][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.860488][ T43] m920x_read = error: -19 [ 402.882843][ T10] usb 3-1: Product: syz [ 402.887111][ T10] usb 3-1: Manufacturer: syz [ 402.887395][ T43] dvb-usb: error while querying for an remote control event. [ 402.904178][ T10] usb 3-1: SerialNumber: syz [ 402.918029][ T927] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 402.924132][ T10] usb 3-1: config 0 descriptor?? [ 402.936910][ T927] usb 1-1: config 179 has no interface number 0 [ 402.951880][ T927] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 402.963498][ T10] smsc95xx v2.0.0 [ 402.984644][ T927] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 402.988896][T14489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2172'. [ 403.007613][ T927] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 403.022032][ T7090] m920x_read = error: -19 [ 403.026514][ T7090] dvb-usb: error while querying for an remote control event. [ 403.054673][ T927] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 403.067713][ T927] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 403.082049][ T927] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 403.091588][ T927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.117541][T14458] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 403.159881][ T7090] m920x_read = error: -19 [ 403.164611][ T7090] dvb-usb: error while querying for an remote control event. [ 403.182321][T14495] /dev/rnullb0: Can't open blockdev [ 403.289957][T14498] input: syz1 as /devices/virtual/input/input54 [ 403.320013][ T927] m920x_read = error: -19 [ 403.324767][ T927] dvb-usb: error while querying for an remote control event. [ 403.369916][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 403.406577][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 403.450441][ T927] m920x_read = error: -19 [ 403.461938][ T927] dvb-usb: error while querying for an remote control event. [ 403.482012][T14458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.504801][T14458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.540717][T14505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.589959][ T927] m920x_read = error: -19 [ 403.594380][ T927] dvb-usb: error while querying for an remote control event. [ 403.692426][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 403.710503][ T927] m920x_read = error: -19 [ 403.715530][ T927] dvb-usb: error while querying for an remote control event. [ 403.721654][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 403.747879][ T9] usb 1-1: USB disconnect, device number 114 [ 403.747917][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 403.762557][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 403.879915][ T927] m920x_read = error: -19 [ 403.884336][ T927] dvb-usb: error while querying for an remote control event. [ 403.999951][ T927] m920x_read = error: -19 [ 404.004382][ T927] dvb-usb: error while querying for an remote control event. [ 404.129865][ T927] m920x_read = error: -19 [ 404.134243][ T927] dvb-usb: error while querying for an remote control event. [ 404.249812][ T927] m920x_read = error: -19 [ 404.257490][ T927] dvb-usb: error while querying for an remote control event. [ 404.372316][ T927] m920x_read = error: -19 [ 404.379823][ T927] dvb-usb: error while querying for an remote control event. [ 404.512046][ T927] m920x_read = error: -19 [ 404.516477][ T927] dvb-usb: error while querying for an remote control event. [ 404.652376][ T43] m920x_read = error: -19 [ 404.656782][ T43] dvb-usb: error while querying for an remote control event. [ 404.775406][T14546] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 404.786027][ T43] m920x_read = error: -19 [ 404.791296][ T43] dvb-usb: error while querying for an remote control event. [ 404.799541][T14549] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 404.900351][ T43] m920x_read = error: -19 [ 404.909884][ T43] dvb-usb: error while querying for an remote control event. [ 404.949225][T14562] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2184'. [ 405.039801][ T43] m920x_read = error: -19 [ 405.049983][ T43] dvb-usb: error while querying for an remote control event. [ 405.170673][ T43] m920x_read = error: -19 [ 405.175223][ T43] dvb-usb: error while querying for an remote control event. [ 405.229476][ T5912] usb 3-1: USB disconnect, device number 116 [ 405.290539][ T43] m920x_read = error: -19 [ 405.302683][ T43] dvb-usb: error while querying for an remote control event. [ 405.303682][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 405.449690][ T43] m920x_read = error: -19 [ 405.454109][ T43] dvb-usb: error while querying for an remote control event. [ 405.479880][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 405.490798][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.502335][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 405.537917][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40 [ 405.548256][ T9] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 405.562247][ T9] usb 6-1: Product: syz [ 405.566543][ T9] usb 6-1: Manufacturer: syz [ 405.579853][ T10] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 405.591632][ T43] m920x_read = error: -19 [ 405.605653][ T9] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 405.623642][ T43] dvb-usb: error while querying for an remote control event. [ 405.739774][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 405.750264][ T43] m920x_read = error: -19 [ 405.754655][ T43] dvb-usb: error while querying for an remote control event. [ 405.758404][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.786754][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 405.800796][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.808029][ T43] usb 6-1: USB disconnect, device number 12 [ 405.851506][ T10] usb 5-1: config 0 descriptor?? [ 405.901898][ T927] m920x_read = error: -19 [ 405.906301][ T927] dvb-usb: error while querying for an remote control event. [ 406.052698][ T43] m920x_read = error: -19 [ 406.057115][ T43] dvb-usb: error while querying for an remote control event. [ 406.191369][ T43] m920x_read = error: -19 [ 406.202158][ T43] dvb-usb: error while querying for an remote control event. [ 406.298162][ T10] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 406.305746][ T10] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 406.320412][ T10] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 406.324632][ T43] m920x_read = error: -19 [ 406.328537][ T10] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 406.342769][ T43] dvb-usb: error while querying for an remote control event. [ 406.344653][ T10] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 406.382688][ T10] mcp2221 0003:04D8:00DD.0020: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 406.477364][ T927] m920x_read = error: -19 [ 406.489457][ T927] dvb-usb: error while querying for an remote control event. [ 406.514246][T14578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.528435][T14628] netlink: 763 bytes leftover after parsing attributes in process `syz.5.2190'. [ 406.542155][T14628] /dev/rnullb0: Can't open blockdev [ 406.554399][T14578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.629837][ T927] m920x_read = error: -19 [ 406.634453][ T927] dvb-usb: error while querying for an remote control event. [ 406.649899][ T9] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 406.749867][ T927] m920x_read = error: -19 [ 406.757816][ T927] dvb-usb: error while querying for an remote control event. [ 406.789820][ T9] usb 3-1: device descriptor read/64, error -71 [ 406.870473][ T927] m920x_read = error: -19 [ 406.874876][ T927] dvb-usb: error while querying for an remote control event. [ 406.989765][ T927] m920x_read = error: -19 [ 406.995005][ T927] dvb-usb: error while querying for an remote control event. [ 407.049832][ T9] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 407.110946][ T927] m920x_read = error: -19 [ 407.115350][ T927] dvb-usb: error while querying for an remote control event. [ 407.179786][ T9] usb 3-1: device descriptor read/64, error -71 [ 407.230532][ T927] m920x_read = error: -19 [ 407.234935][ T927] dvb-usb: error while querying for an remote control event. [ 407.280503][ T927] usb 5-1: USB disconnect, device number 85 [ 407.292785][ T9] usb usb3-port1: attempt power cycle [ 407.349980][ T7090] m920x_read = error: -19 [ 407.354394][ T7090] dvb-usb: error while querying for an remote control event. [ 407.386369][T14640] /dev/rnullb0: Can't open blockdev [ 407.478527][T14654] /dev/rnullb0: Can't open blockdev [ 407.509916][ T7090] m920x_read = error: -19 [ 407.514320][ T7090] dvb-usb: error while querying for an remote control event. [ 407.640151][ T927] m920x_read = error: -19 [ 407.644549][ T927] dvb-usb: error while querying for an remote control event. [ 407.659986][ T9] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 407.682936][ T9] usb 3-1: device descriptor read/8, error -71 [ 407.759778][ T927] m920x_read = error: -19 [ 407.764341][ T927] dvb-usb: error while querying for an remote control event. [ 407.799788][ T7090] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 407.880346][ T43] m920x_read = error: -19 [ 407.884772][ T43] dvb-usb: error while querying for an remote control event. [ 407.929972][ T9] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 407.953170][ T7090] usb 6-1: config 2 has an invalid interface number: 153 but max is 0 [ 407.960551][ T9] usb 3-1: device descriptor read/8, error -71 [ 407.962992][ T7090] usb 6-1: config 2 has no interface number 0 [ 407.976210][ T7090] usb 6-1: New USB device found, idVendor=0711, idProduct=0901, bcdDevice=f7.06 [ 407.985386][ T7090] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.993630][ T7090] usb 6-1: Product: syz [ 407.997840][ T7090] usb 6-1: Manufacturer: syz [ 408.002762][ T43] m920x_read = error: -19 [ 408.007117][ T43] dvb-usb: error while querying for an remote control event. [ 408.014741][ T7090] usb 6-1: SerialNumber: syz [ 408.027398][ T7090] hub 6-1:2.153: bad descriptor, ignoring hub [ 408.034039][ T7090] hub 6-1:2.153: probe with driver hub failed with error -5 [ 408.043852][ T7090] sisusb 6-1:2.153: Invalid USB2VGA device [ 408.049765][ T7090] sisusb 6-1:2.153: probe with driver sisusb failed with error -22 [ 408.079823][ T927] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 408.082328][ T9] usb usb3-port1: unable to enumerate USB device [ 408.140137][ T43] m920x_read = error: -19 [ 408.144543][ T43] dvb-usb: error while querying for an remote control event. [ 408.243131][ T927] usb 5-1: config 202 has an invalid interface number: 153 but max is 0 [ 408.252688][ T927] usb 5-1: config 202 has no interface number 0 [ 408.258963][ T927] usb 5-1: too many endpoints for config 202 interface 153 altsetting 71: 176, using maximum allowed: 30 [ 408.274668][ T43] m920x_read = error: -19 [ 408.279106][ T43] dvb-usb: error while querying for an remote control event. [ 408.287462][ T927] usb 5-1: config 202 interface 153 altsetting 71 has 0 endpoint descriptors, different from the interface descriptor's value: 176 [ 408.301915][ T927] usb 5-1: config 202 interface 153 has no altsetting 0 [ 408.312432][ T927] usb 5-1: New USB device found, idVendor=1199, idProduct=6832, bcdDevice=9c.50 [ 408.321657][ T927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.330305][ T927] usb 5-1: Product: syz [ 408.334507][ T927] usb 5-1: Manufacturer: syz [ 408.339094][ T927] usb 5-1: SerialNumber: syz [ 408.340109][ T9] usb 6-1: USB disconnect, device number 13 [ 408.410235][ T43] m920x_read = error: -19 [ 408.418354][ T43] dvb-usb: error while querying for an remote control event. [ 408.453384][T14679] /dev/rnullb0: Can't open blockdev [ 408.539863][ T7090] m920x_read = error: -19 [ 408.544560][ T7090] dvb-usb: error while querying for an remote control event. [ 408.562293][ T927] hub 5-1:202.153: bad descriptor, ignoring hub [ 408.571445][ T927] hub 5-1:202.153: probe with driver hub failed with error -5 [ 408.579853][ T927] sierra 5-1:202.153: Sierra USB modem converter detected [ 408.610962][ T927] usb 5-1: USB disconnect, device number 86 [ 408.617529][ T927] sierra 5-1:202.153: device disconnected [ 408.659808][ T7090] m920x_read = error: -19 [ 408.664241][ T7090] dvb-usb: error while querying for an remote control event. [ 408.699897][ T43] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 408.782585][ T7090] m920x_read = error: -19 [ 408.787008][ T7090] dvb-usb: error while querying for an remote control event. [ 408.852170][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 408.864022][ T43] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 408.885405][ T43] usb 1-1: config 0 has no interface number 0 [ 408.893009][ T43] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 408.904109][ T43] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 408.916084][ T7090] m920x_read = error: -19 [ 408.920634][ T43] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 408.932570][ T7090] dvb-usb: error while querying for an remote control event. [ 408.940985][ T43] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 408.951386][ T43] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 408.963241][ T43] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 408.973207][ T43] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 408.984409][ T43] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 408.995725][ T43] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 409.005988][ T43] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 409.022576][ T43] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 409.031793][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.040375][ T43] usb 1-1: Product: syz [ 409.044578][ T43] usb 1-1: Manufacturer: syz [ 409.049201][ T43] usb 1-1: SerialNumber: syz [ 409.053981][ T7090] m920x_read = error: -19 [ 409.058355][ T7090] dvb-usb: error while querying for an remote control event. [ 409.069219][ T43] usb 1-1: config 0 descriptor?? [ 409.075302][T14679] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 409.084133][T14679] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 409.094394][ T43] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 409.102975][ T43] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 409.119987][ T43] scsi host1: microtekX6 [ 409.120084][ T5926] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 409.169739][ T43] m920x_read = error: -19 [ 409.178068][ T43] dvb-usb: error while querying for an remote control event. [ 409.226234][T14715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2198'. [ 409.299760][ T43] m920x_read = error: -19 [ 409.299765][ T5926] usb 6-1: Using ep0 maxpacket: 32 [ 409.301620][ T5926] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 409.319912][ T43] dvb-usb: error while querying for an remote control event. [ 409.322395][ T5926] usb 6-1: config 0 has no interface number 0 [ 409.342816][ T5926] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 409.354099][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.364331][ T5926] usb 6-1: Product: syz [ 409.369468][ T5926] usb 6-1: Manufacturer: syz [ 409.393340][T14679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.397987][ T5926] usb 6-1: SerialNumber: syz [ 409.430620][ T43] m920x_read = error: -19 [ 409.431516][ T5926] usb 6-1: config 0 descriptor?? [ 409.435023][ T43] dvb-usb: error while querying for an remote control event. [ 409.435599][T14679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.497780][T14679] /dev/rnullb0: Can't open blockdev [ 409.498825][ T5926] smsc95xx v2.0.0 [ 409.540282][ T7090] m920x_read = error: -19 [ 409.544921][ T7090] dvb-usb: error while querying for an remote control event. [ 409.581172][T14729] /dev/rnullb0: Can't open blockdev [ 409.619041][ T43] usb 1-1: USB disconnect, device number 115 [ 409.682163][ T7090] m920x_read = error: -19 [ 409.686578][ T7090] dvb-usb: error while querying for an remote control event. [ 409.744686][T14734] /dev/rnullb0: Can't open blockdev [ 409.809843][ T7090] m920x_read = error: -19 [ 409.814248][ T7090] dvb-usb: error while querying for an remote control event. [ 409.886233][T14748] /dev/rnullb0: Can't open blockdev [ 409.889791][ T5926] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 409.903448][ T5926] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 409.950136][ T7090] m920x_read = error: -19 [ 409.954523][ T7090] dvb-usb: error while querying for an remote control event. [ 410.070479][ T7090] m920x_read = error: -19 [ 410.074896][ T7090] dvb-usb: error while querying for an remote control event. [ 410.115172][ T5926] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 410.126613][ T5926] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 410.189954][ T7090] m920x_read = error: -19 [ 410.199044][ T7090] dvb-usb: error while querying for an remote control event. [ 410.279848][ T43] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 410.301206][T14761] syzkaller1: entered promiscuous mode [ 410.306731][T14761] syzkaller1: entered allmulticast mode [ 410.319881][ T7090] m920x_read = error: -19 [ 410.326269][ T7090] dvb-usb: error while querying for an remote control event. [ 410.440349][ T7090] m920x_read = error: -19 [ 410.444741][ T7090] dvb-usb: error while querying for an remote control event. [ 410.452244][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 410.470309][ T43] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 410.479382][ T43] usb 5-1: config 0 has no interface number 0 [ 410.486284][ T43] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 410.497932][ T43] usb 5-1: config 0 interface 85 has no altsetting 0 [ 410.510730][ T43] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 410.521287][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.529422][ T43] usb 5-1: Product: syz [ 410.539488][ T43] usb 5-1: Manufacturer: syz [ 410.543937][T14766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2207'. [ 410.547041][ T43] usb 5-1: SerialNumber: syz [ 410.569171][ T43] usb 5-1: config 0 descriptor?? [ 410.574852][ T7090] m920x_read = error: -19 [ 410.581641][ T7090] dvb-usb: error while querying for an remote control event. [ 410.700943][ T7090] m920x_read = error: -19 [ 410.707732][ T7090] dvb-usb: error while querying for an remote control event. [ 410.805003][T14780] /dev/rnullb0: Can't open blockdev [ 410.833325][ T7090] m920x_read = error: -19 [ 410.847926][ T7090] dvb-usb: error while querying for an remote control event. [ 410.856199][T14782] [U]  [ 410.884015][ T43] appletouch 5-1:0.85: Failed to request geyser raw mode [ 410.917615][ T43] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 410.953361][ T43] usb 5-1: USB disconnect, device number 87 [ 410.984545][ T5943] m920x_read = error: -19 [ 410.991535][ T5943] dvb-usb: error while querying for an remote control event. [ 411.099794][ T5943] m920x_read = error: -19 [ 411.110020][ T5943] dvb-usb: error while querying for an remote control event. [ 411.181664][T14801] kvm: kvm [14800]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000074) = 0x0 [ 411.230663][ T5943] m920x_read = error: -19 [ 411.242990][ T5943] dvb-usb: error while querying for an remote control event. [ 411.332111][ T43] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 411.380213][ T5943] m920x_read = error: -19 [ 411.384893][ T5943] dvb-usb: error while querying for an remote control event. [ 411.492237][ T43] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 411.514791][ T43] usb 5-1: config 0 has no interface number 0 [ 411.524388][ T5943] m920x_read = error: -19 [ 411.532895][ T5943] dvb-usb: error while querying for an remote control event. [ 411.549744][ T43] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 411.564597][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.592886][ T43] usb 5-1: config 0 descriptor?? [ 411.618125][ T43] cp210x 5-1:0.1: cp210x converter detected [ 411.670047][ T5943] m920x_read = error: -19 [ 411.674619][ T5943] dvb-usb: error while querying for an remote control event. [ 411.810363][ T927] m920x_read = error: -19 [ 411.810655][ T5926] usb 6-1: USB disconnect, device number 14 [ 411.819501][ T927] dvb-usb: error while querying for an remote control event. [ 411.952464][ T5943] m920x_read = error: -19 [ 411.956962][ T5943] dvb-usb: error while querying for an remote control event. [ 412.037123][ T43] cp210x 5-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 412.089766][ T5943] m920x_read = error: -19 [ 412.092384][T14835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2216'. [ 412.094277][ T5943] dvb-usb: error while querying for an remote control event. [ 412.199926][ T5943] m920x_read = error: -19 [ 412.204491][ T5943] dvb-usb: error while querying for an remote control event. [ 412.290525][T14841] /dev/rnullb0: Can't open blockdev [ 412.308856][ T43] usb 5-1: cp210x converter now attached to ttyUSB0 [ 412.360066][ T43] m920x_read = error: -19 [ 412.364477][ T43] dvb-usb: error while querying for an remote control event. [ 412.430657][T14851] /dev/rnullb0: Can't open blockdev [ 412.523197][ T43] m920x_read = error: -19 [ 412.527609][ T43] dvb-usb: error while querying for an remote control event. [ 412.659770][ T43] m920x_read = error: -19 [ 412.664794][ T43] dvb-usb: error while querying for an remote control event. [ 412.820463][ T43] m920x_read = error: -19 [ 412.824969][ T43] dvb-usb: error while querying for an remote control event. [ 412.960119][ T5943] m920x_read = error: -19 [ 412.964539][ T5943] dvb-usb: error while querying for an remote control event. [ 413.064632][ T5943] usb 5-1: USB disconnect, device number 88 [ 413.100172][ T7090] m920x_read = error: -19 [ 413.111279][ T7090] dvb-usb: error while querying for an remote control event. [ 413.131164][ T5943] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 413.184949][ T5943] cp210x 5-1:0.1: device disconnected [ 413.222177][ T7090] m920x_read = error: -19 [ 413.226594][ T7090] dvb-usb: error while querying for an remote control event. [ 413.239823][ T9] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 413.350282][ T43] m920x_read = error: -19 [ 413.354693][ T43] dvb-usb: error while querying for an remote control event. [ 413.439814][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 413.462207][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 413.470529][ T43] m920x_read = error: -19 [ 413.470563][ T43] dvb-usb: error while querying for an remote control event. [ 413.496830][ T9] usb 3-1: config 0 has no interface number 0 [ 413.507689][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 413.539675][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.564189][ T9] usb 3-1: Product: syz [ 413.575158][ T9] usb 3-1: Manufacturer: syz [ 413.579738][ T43] m920x_read = error: -19 [ 413.583778][ T9] usb 3-1: SerialNumber: syz [ 413.595530][ T43] dvb-usb: error while querying for an remote control event. [ 413.603672][ T9] usb 3-1: config 0 descriptor?? [ 413.623643][ T9] smsc95xx v2.0.0 [ 413.729739][ T43] m920x_read = error: -19 [ 413.737527][ T43] dvb-usb: error while querying for an remote control event. [ 413.869734][ T43] m920x_read = error: -19 [ 413.874183][ T43] dvb-usb: error while querying for an remote control event. [ 413.910729][T14931] /dev/rnullb0: Can't open blockdev [ 413.999697][ T7090] m920x_read = error: -19 [ 414.008470][ T7090] dvb-usb: error while querying for an remote control event. [ 414.069920][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 414.101126][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 414.139762][ T7090] m920x_read = error: -19 [ 414.144902][ T7090] dvb-usb: error while querying for an remote control event. [ 414.279782][ T7090] m920x_read = error: -19 [ 414.284196][ T7090] dvb-usb: error while querying for an remote control event. [ 414.325061][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 414.366918][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 414.396177][T14955] netlink: 'syz.0.2234': attribute type 29 has an invalid length. [ 414.412263][T14955] netlink: 'syz.0.2234': attribute type 29 has an invalid length. [ 414.420852][ T7090] m920x_read = error: -19 [ 414.425241][ T7090] dvb-usb: error while querying for an remote control event. [ 414.439720][T14955] netlink: 'syz.0.2234': attribute type 29 has an invalid length. [ 414.460594][ T10] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 414.551688][ T7090] m920x_read = error: -19 [ 414.573655][ T7090] dvb-usb: error while querying for an remote control event. [ 414.675344][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.700170][ T7090] m920x_read = error: -19 [ 414.700834][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.704712][ T7090] dvb-usb: error while querying for an remote control event. [ 414.729448][ T10] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 414.747006][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.766434][T14966] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2237'. [ 414.777767][ T10] usb 5-1: config 0 descriptor?? [ 414.849772][ T7090] m920x_read = error: -19 [ 414.858463][ T7090] dvb-usb: error while querying for an remote control event. [ 414.969901][ T43] m920x_read = error: -19 [ 414.974426][ T43] dvb-usb: error while querying for an remote control event. [ 415.090460][ T7090] m920x_read = error: -19 [ 415.101776][ T7090] dvb-usb: error while querying for an remote control event. [ 415.153592][T14978] syz.5.2239 (14978): /proc/14977/oom_adj is deprecated, please use /proc/14977/oom_score_adj instead. [ 415.239839][ T7090] m920x_read = error: -19 [ 415.246828][ T7090] dvb-usb: error while querying for an remote control event. [ 415.350535][ T7090] m920x_read = error: -19 [ 415.350570][ T7090] dvb-usb: error while querying for an remote control event. [ 415.465276][ T7090] m920x_read = error: -19 [ 415.465309][ T7090] dvb-usb: error while querying for an remote control event. [ 415.569911][ T7090] m920x_read = error: -19 [ 415.569942][ T7090] dvb-usb: error while querying for an remote control event. [ 415.679850][ T7090] m920x_read = error: -19 [ 415.679883][ T7090] dvb-usb: error while querying for an remote control event. [ 415.724758][T14985] /dev/rnullb0: Can't open blockdev [ 415.789803][ T7090] m920x_read = error: -19 [ 415.789837][ T7090] dvb-usb: error while querying for an remote control event. [ 415.881734][ T5912] usb 3-1: USB disconnect, device number 121 [ 415.900957][ T7090] m920x_read = error: -19 [ 415.916973][ T7090] dvb-usb: error while querying for an remote control event. [ 416.059727][ T7090] m920x_read = error: -19 [ 416.059759][ T7090] dvb-usb: error while querying for an remote control event. [ 416.169768][ T43] m920x_read = error: -19 [ 416.169802][ T43] dvb-usb: error while querying for an remote control event. [ 416.279789][ T7090] m920x_read = error: -19 [ 416.279822][ T7090] dvb-usb: error while querying for an remote control event. [ 416.364354][T15010] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.2244'. [ 416.390030][ T7090] m920x_read = error: -19 [ 416.390064][ T7090] dvb-usb: error while querying for an remote control event. [ 416.501999][ T7090] m920x_read = error: -19 [ 416.502032][ T7090] dvb-usb: error while querying for an remote control event. [ 416.503598][ T43] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 416.610252][ T7090] m920x_read = error: -19 [ 416.610286][ T7090] dvb-usb: error while querying for an remote control event. [ 416.663173][ T43] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 416.663208][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.675582][ T43] usb 1-1: config 0 descriptor?? [ 416.696159][ T43] cp210x 1-1:0.0: cp210x converter detected [ 416.719989][ T7090] m920x_read = error: -19 [ 416.720026][ T7090] dvb-usb: error while querying for an remote control event. [ 416.769727][ T5912] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 416.829728][ T7090] m920x_read = error: -19 [ 416.829753][ T7090] dvb-usb: error while querying for an remote control event. [ 416.939778][ T7090] m920x_read = error: -19 [ 416.939841][ T7090] dvb-usb: error while querying for an remote control event. [ 416.942218][ T5912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.963801][ T5912] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 416.967270][ T5912] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 416.984236][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.984267][ T5912] usb 3-1: Product: syz [ 416.984284][ T5912] usb 3-1: Manufacturer: syz [ 416.984332][ T5912] usb 3-1: SerialNumber: syz [ 416.990368][ T5912] usb 3-1: config 0 descriptor?? [ 417.049782][ T7090] m920x_read = error: -19 [ 417.049841][ T7090] dvb-usb: error while querying for an remote control event. [ 417.159765][ T5943] m920x_read = error: -19 [ 417.159829][ T5943] dvb-usb: error while querying for an remote control event. [ 417.214381][ T10] uclogic 0003:256C:006D.0021: failed retrieving Huion firmware version: -71 [ 417.214457][ T10] uclogic 0003:256C:006D.0021: failed probing parameters: -71 [ 417.214590][ T10] uclogic 0003:256C:006D.0021: probe with driver uclogic failed with error -71 [ 417.238482][ T10] usb 5-1: USB disconnect, device number 89 [ 417.255745][ T30] audit: type=1800 audit(1752072890.751:104): pid=15014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2245" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 417.270321][ T5943] m920x_read = error: -19 [ 417.340641][ T5943] dvb-usb: error while querying for an remote control event. [ 417.449800][ T5943] m920x_read = error: -19 [ 417.449865][ T5943] dvb-usb: error while querying for an remote control event. [ 417.526210][T15005] /dev/rnullb0: Can't open blockdev [ 417.559766][ T5943] m920x_read = error: -19 [ 417.559799][ T5943] dvb-usb: error while querying for an remote control event. [ 417.669741][ T5943] m920x_read = error: -19 [ 417.669775][ T5943] dvb-usb: error while querying for an remote control event. [ 417.779835][ T5943] m920x_read = error: -19 [ 417.779900][ T5943] dvb-usb: error while querying for an remote control event. [ 417.824488][ T43] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 417.824555][ T43] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 417.852147][ T43] usb 1-1: cp210x converter now attached to ttyUSB0 [ 417.856504][ T43] usb 1-1: USB disconnect, device number 116 [ 417.880883][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 417.881622][ T43] cp210x 1-1:0.0: device disconnected [ 417.891524][ T5943] m920x_read = error: -19 [ 417.891554][ T5943] dvb-usb: error while querying for an remote control event. [ 417.999798][ T5943] m920x_read = error: -19 [ 417.999832][ T5943] dvb-usb: error while querying for an remote control event. [ 418.109866][ T43] m920x_read = error: -19 [ 418.109899][ T43] dvb-usb: error while querying for an remote control event. [ 418.176536][T15067] /dev/rnullb0: Can't open blockdev [ 418.225372][ T5943] m920x_read = error: -19 [ 418.229916][ T5943] dvb-usb: error while querying for an remote control event. [ 418.334737][T15073] /dev/rnullb0: Can't open blockdev [ 418.340484][ T5943] m920x_read = error: -19 [ 418.344868][ T5943] dvb-usb: error while querying for an remote control event. [ 418.361584][T15075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2251'. [ 418.486810][ T43] m920x_read = error: -19 [ 418.492741][ T43] dvb-usb: error while querying for an remote control event. [ 418.517953][T15084] /dev/rnullb0: Can't open blockdev [ 418.528291][T15084] /dev/rnullb0: Can't open blockdev [ 418.619778][ T43] m920x_read = error: -19 [ 418.624221][ T43] dvb-usb: error while querying for an remote control event. [ 418.659711][ T10] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 418.759915][ T43] m920x_read = error: -19 [ 418.769186][ T43] dvb-usb: error while querying for an remote control event. [ 418.789381][T15097] input: syz1 as /devices/virtual/input/input56 [ 418.796614][T15097] FAULT_INJECTION: forcing a failure. [ 418.796614][T15097] name failslab, interval 1, probability 0, space 0, times 0 [ 418.811090][T15097] CPU: 0 UID: 0 PID: 15097 Comm: syz.5.2256 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 418.811120][T15097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 418.811133][T15097] Call Trace: [ 418.811147][T15097] [ 418.811156][T15097] dump_stack_lvl+0x189/0x250 [ 418.811222][T15097] ? __pfx____ratelimit+0x10/0x10 [ 418.811246][T15097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.811274][T15097] ? __pfx__printk+0x10/0x10 [ 418.811307][T15097] ? __pfx___might_resched+0x10/0x10 [ 418.811334][T15097] ? fs_reclaim_acquire+0x7d/0x100 [ 418.811362][T15097] should_fail_ex+0x414/0x560 [ 418.811398][T15097] should_failslab+0xa8/0x100 [ 418.811431][T15097] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 418.811460][T15097] ? __kernfs_new_node+0x9c/0x7e0 [ 418.811494][T15097] kstrdup+0x42/0x100 [ 418.811520][T15097] __kernfs_new_node+0x9c/0x7e0 [ 418.811544][T15097] ? __lock_acquire+0xab9/0xd20 [ 418.811578][T15097] ? __pfx___kernfs_new_node+0x10/0x10 [ 418.811605][T15097] ? kernfs_root+0x1c/0x230 [ 418.811638][T15097] ? kernfs_root+0x1c/0x230 [ 418.811663][T15097] ? kernfs_root+0x1c/0x230 [ 418.811694][T15097] kernfs_new_node+0x102/0x210 [ 418.811726][T15097] kernfs_create_link+0xa7/0x200 [ 418.811751][T15097] sysfs_do_create_link_sd+0x83/0x110 [ 418.811778][T15097] device_add_class_symlinks+0x1cf/0x240 [ 418.811805][T15097] device_add+0x475/0xb50 [ 418.811832][T15097] cdev_device_add+0x1d6/0x390 [ 418.811862][T15097] evdev_connect+0x34f/0x3f0 [ 418.811895][T15097] input_register_device+0xcbb/0x1090 [ 418.811931][T15097] uinput_create_device+0x422/0x670 [ 418.811963][T15097] uinput_ioctl_handler+0x3f0/0x1570 [ 418.811987][T15097] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 418.812021][T15097] ? __fget_files+0x2a/0x420 [ 418.812043][T15097] ? __fget_files+0x3a0/0x420 [ 418.812072][T15097] ? bpf_lsm_file_ioctl+0x9/0x20 [ 418.812099][T15097] ? __pfx_uinput_ioctl+0x10/0x10 [ 418.812130][T15097] __se_sys_ioctl+0xf9/0x170 [ 418.812162][T15097] do_syscall_64+0xfa/0x3b0 [ 418.812185][T15097] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.812214][T15097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.812234][T15097] ? clear_bhb_loop+0x60/0xb0 [ 418.812261][T15097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.812280][T15097] RIP: 0033:0x7f9437b8e929 [ 418.812299][T15097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.812317][T15097] RSP: 002b:00007f9438a19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.812340][T15097] RAX: ffffffffffffffda RBX: 00007f9437db5fa0 RCX: 00007f9437b8e929 [ 418.812355][T15097] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 418.812369][T15097] RBP: 00007f9438a19090 R08: 0000000000000000 R09: 0000000000000000 [ 418.812382][T15097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 418.812395][T15097] R13: 0000000000000000 R14: 00007f9437db5fa0 R15: 00007ffc5b9c05d8 [ 418.812430][T15097] [ 418.815729][T15097] input: failed to attach handler evdev to device input56, error: -12 [ 418.906422][ T43] m920x_read = error: -19 [ 418.910445][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 418.912148][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 418.918857][ T43] dvb-usb: error while querying for an remote control event. [ 418.920948][ T10] usb 1-1: config 0 has no interface number 0 [ 419.039887][ T43] m920x_read = error: -19 [ 419.053026][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 419.087281][ T43] dvb-usb: error while querying for an remote control event. [ 419.105125][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.185837][ T10] usb 1-1: Product: syz [ 419.215225][ T10] usb 1-1: Manufacturer: syz [ 419.224847][ T10] usb 1-1: SerialNumber: syz [ 419.242067][ T10] usb 1-1: config 0 descriptor?? [ 419.255929][T15107] /dev/rnullb0: Can't open blockdev [ 419.260395][ T10] smsc95xx v2.0.0 [ 419.289839][ T43] m920x_read = error: -19 [ 419.294255][ T43] dvb-usb: error while querying for an remote control event. [ 419.409974][ T43] m920x_read = error: -19 [ 419.419751][ T43] dvb-usb: error while querying for an remote control event. [ 419.491851][ T5864] Bluetooth: hci4: unexpected event for opcode 0x2019 [ 419.567571][ T43] m920x_read = error: -19 [ 419.575019][ T43] dvb-usb: error while querying for an remote control event. [ 419.599348][T15122] netlink: 'syz.5.2261': attribute type 1 has an invalid length. [ 419.647988][ T5926] usb 3-1: USB disconnect, device number 122 [ 419.667712][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 419.690089][ T43] m920x_read = error: -19 [ 419.694494][ T43] dvb-usb: error while querying for an remote control event. [ 419.709418][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 419.787707][T15134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2262'. [ 419.869753][ T43] m920x_read = error: -19 [ 419.879815][ T43] dvb-usb: error while querying for an remote control event. [ 419.936369][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 419.958729][T15142] /dev/rnullb0: Can't open blockdev [ 419.974459][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 420.020269][ T43] m920x_read = error: -19 [ 420.024784][ T43] dvb-usb: error while querying for an remote control event. [ 420.046500][T15146] input: syz1 as /devices/virtual/input/input57 [ 420.057285][T15146] FAULT_INJECTION: forcing a failure. [ 420.057285][T15146] name failslab, interval 1, probability 0, space 0, times 0 [ 420.079675][T15146] CPU: 1 UID: 0 PID: 15146 Comm: syz.4.2265 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 420.079707][T15146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 420.079719][T15146] Call Trace: [ 420.079729][T15146] [ 420.079739][T15146] dump_stack_lvl+0x189/0x250 [ 420.079773][T15146] ? __pfx____ratelimit+0x10/0x10 [ 420.079798][T15146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.079826][T15146] ? __pfx__printk+0x10/0x10 [ 420.079862][T15146] ? __pfx___might_resched+0x10/0x10 [ 420.079888][T15146] ? fs_reclaim_acquire+0x7d/0x100 [ 420.079915][T15146] should_fail_ex+0x414/0x560 [ 420.079952][T15146] should_failslab+0xa8/0x100 [ 420.079985][T15146] kmem_cache_alloc_noprof+0x73/0x3c0 [ 420.080013][T15146] ? __kernfs_new_node+0xd7/0x7e0 [ 420.080045][T15146] __kernfs_new_node+0xd7/0x7e0 [ 420.080069][T15146] ? __lock_acquire+0xab9/0xd20 [ 420.080103][T15146] ? __pfx___kernfs_new_node+0x10/0x10 [ 420.080129][T15146] ? kernfs_root+0x1c/0x230 [ 420.080162][T15146] ? kernfs_root+0x1c/0x230 [ 420.080186][T15146] ? kernfs_root+0x1c/0x230 [ 420.080227][T15146] kernfs_new_node+0x102/0x210 [ 420.080260][T15146] kernfs_create_link+0xa7/0x200 [ 420.080285][T15146] sysfs_do_create_link_sd+0x83/0x110 [ 420.080313][T15146] device_add_class_symlinks+0x1cf/0x240 [ 420.080340][T15146] device_add+0x475/0xb50 [ 420.080366][T15146] cdev_device_add+0x1d6/0x390 [ 420.080396][T15146] evdev_connect+0x34f/0x3f0 [ 420.080430][T15146] input_register_device+0xcbb/0x1090 [ 420.080466][T15146] uinput_create_device+0x422/0x670 [ 420.080497][T15146] uinput_ioctl_handler+0x3f0/0x1570 [ 420.080521][T15146] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 420.080554][T15146] ? __fget_files+0x2a/0x420 [ 420.080576][T15146] ? __fget_files+0x3a0/0x420 [ 420.080604][T15146] ? bpf_lsm_file_ioctl+0x9/0x20 [ 420.080631][T15146] ? __pfx_uinput_ioctl+0x10/0x10 [ 420.080662][T15146] __se_sys_ioctl+0xf9/0x170 [ 420.080694][T15146] do_syscall_64+0xfa/0x3b0 [ 420.080717][T15146] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.080738][T15146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.080759][T15146] ? clear_bhb_loop+0x60/0xb0 [ 420.080785][T15146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.080805][T15146] RIP: 0033:0x7f71c758e929 [ 420.080825][T15146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.080842][T15146] RSP: 002b:00007f71c53f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 420.080867][T15146] RAX: ffffffffffffffda RBX: 00007f71c77b5fa0 RCX: 00007f71c758e929 [ 420.080883][T15146] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 420.080896][T15146] RBP: 00007f71c53f6090 R08: 0000000000000000 R09: 0000000000000000 [ 420.080909][T15146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 420.080922][T15146] R13: 0000000000000000 R14: 00007f71c77b5fa0 R15: 00007ffc7957be68 [ 420.080957][T15146] [ 420.087044][T15146] input: failed to attach handler evdev to device input57, error: -12 [ 420.186941][T15156] /dev/rnullb0: Can't open blockdev [ 420.189399][ T43] m920x_read = error: -19 [ 420.196871][T15156] /dev/rnullb0: Can't open blockdev [ 420.198327][ T43] dvb-usb: error while querying for an remote control event. [ 420.300101][ T7090] m920x_read = error: -19 [ 420.315633][T15156] /dev/rnullb0: Can't open blockdev [ 420.317081][ T7090] dvb-usb: error while querying for an remote control event. [ 420.323810][T15156] /dev/rnullb0: Can't open blockdev [ 420.447728][T15156] /dev/rnullb0: Can't open blockdev [ 420.455232][T15156] /dev/rnullb0: Can't open blockdev [ 420.461934][T15156] /dev/rnullb0: Can't open blockdev [ 420.467990][T15156] /dev/rnullb0: Can't open blockdev [ 420.470884][ T7090] m920x_read = error: -19 [ 420.474747][T15156] /dev/rnullb0: Can't open blockdev [ 420.485172][ T7090] dvb-usb: error while querying for an remote control event. [ 420.485180][T15156] /dev/rnullb0: Can't open blockdev [ 420.485917][T15156] /dev/rnullb0: Can't open blockdev [ 420.506650][T15156] /dev/rnullb0: Can't open blockdev [ 420.513985][T15156] /dev/rnullb0: Can't open blockdev [ 420.520950][T15156] /dev/rnullb0: Can't open blockdev [ 420.527088][T15156] /dev/rnullb0: Can't open blockdev [ 420.534027][T15156] /dev/rnullb0: Can't open blockdev [ 420.540899][T15156] /dev/rnullb0: Can't open blockdev [ 420.547111][T15156] /dev/rnullb0: Can't open blockdev [ 420.555216][T15156] /dev/rnullb0: Can't open blockdev [ 420.562120][T15156] /dev/rnullb0: Can't open blockdev [ 420.568136][T15156] /dev/rnullb0: Can't open blockdev [ 420.574176][T15156] /dev/rnullb0: Can't open blockdev [ 420.581104][T15156] /dev/rnullb0: Can't open blockdev [ 420.587473][T15156] /dev/rnullb0: Can't open blockdev [ 420.594463][T15156] /dev/rnullb0: Can't open blockdev [ 420.600999][T15156] /dev/rnullb0: Can't open blockdev [ 420.607070][T15156] /dev/rnullb0: Can't open blockdev [ 420.615031][T15156] /dev/rnullb0: Can't open blockdev [ 420.621482][ T7090] m920x_read = error: -19 [ 420.630849][ T7090] dvb-usb: error while querying for an remote control event. [ 420.641072][T15156] /dev/rnullb0: Can't open blockdev [ 420.649181][T15156] /dev/rnullb0: Can't open blockdev [ 420.659360][T15156] /dev/rnullb0: Can't open blockdev [ 420.701333][T15156] /dev/rnullb0: Can't open blockdev [ 420.707484][T15156] /dev/rnullb0: Can't open blockdev [ 420.741885][ T7090] m920x_read = error: -19 [ 420.747792][ T7090] dvb-usb: error while querying for an remote control event. [ 420.800342][T15174] netlink: 'syz.4.2270': attribute type 63 has an invalid length. [ 420.808485][T15174] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2270'. [ 420.821333][T15174] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 420.880095][ T7090] m920x_read = error: -19 [ 420.889008][ T7090] dvb-usb: error while querying for an remote control event. [ 421.033867][ T5943] m920x_read = error: -19 [ 421.038298][ T5943] dvb-usb: error while querying for an remote control event. [ 421.160387][ T5943] m920x_read = error: -19 [ 421.191307][ T5943] dvb-usb: error while querying for an remote control event. [ 421.304931][ T7090] usb 1-1: USB disconnect, device number 117 [ 421.354302][T15184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2273'. [ 421.402458][ T5943] m920x_read = error: -19 [ 421.440836][ T5943] dvb-usb: error while querying for an remote control event. [ 421.606151][ T7090] m920x_read = error: -19 [ 421.639796][ T7090] dvb-usb: error while querying for an remote control event. [ 421.810298][ T7090] m920x_read = error: -19 [ 421.814709][ T7090] dvb-usb: error while querying for an remote control event. [ 421.960652][ T7090] m920x_read = error: -19 [ 421.965062][ T7090] dvb-usb: error while querying for an remote control event. [ 422.110320][ T7090] m920x_read = error: -19 [ 422.130816][ T7090] dvb-usb: error while querying for an remote control event. [ 422.230053][T15204] input: syz1 as /devices/virtual/input/input58 [ 422.270142][ T7090] m920x_read = error: -19 [ 422.274550][ T7090] dvb-usb: error while querying for an remote control event. [ 422.284778][T15204] FAULT_INJECTION: forcing a failure. [ 422.284778][T15204] name failslab, interval 1, probability 0, space 0, times 0 [ 422.319415][T15204] CPU: 1 UID: 0 PID: 15204 Comm: syz.4.2276 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 422.319454][T15204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 422.319468][T15204] Call Trace: [ 422.319478][T15204] [ 422.319487][T15204] dump_stack_lvl+0x189/0x250 [ 422.319525][T15204] ? __pfx____ratelimit+0x10/0x10 [ 422.319555][T15204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.319584][T15204] ? __pfx__printk+0x10/0x10 [ 422.319615][T15204] ? __pfx___might_resched+0x10/0x10 [ 422.319642][T15204] ? fs_reclaim_acquire+0x7d/0x100 [ 422.319670][T15204] should_fail_ex+0x414/0x560 [ 422.319706][T15204] should_failslab+0xa8/0x100 [ 422.319740][T15204] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 422.319772][T15204] ? __kernfs_new_node+0x9c/0x7e0 [ 422.319807][T15204] kstrdup+0x42/0x100 [ 422.319833][T15204] __kernfs_new_node+0x9c/0x7e0 [ 422.319856][T15204] ? __lock_acquire+0xab9/0xd20 [ 422.319889][T15204] ? __pfx___kernfs_new_node+0x10/0x10 [ 422.319914][T15204] ? kernfs_root+0x1c/0x230 [ 422.319947][T15204] ? kernfs_root+0x1c/0x230 [ 422.319973][T15204] ? kernfs_root+0x1c/0x230 [ 422.320005][T15204] kernfs_new_node+0x102/0x210 [ 422.320038][T15204] kernfs_create_link+0xa7/0x200 [ 422.320064][T15204] sysfs_do_create_link_sd+0x83/0x110 [ 422.320090][T15204] device_add_class_symlinks+0x1cf/0x240 [ 422.320116][T15204] device_add+0x475/0xb50 [ 422.320145][T15204] cdev_device_add+0x1d6/0x390 [ 422.320177][T15204] evdev_connect+0x34f/0x3f0 [ 422.320213][T15204] input_register_device+0xcbb/0x1090 [ 422.320252][T15204] uinput_create_device+0x422/0x670 [ 422.320285][T15204] uinput_ioctl_handler+0x3f0/0x1570 [ 422.320312][T15204] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 422.320347][T15204] ? __fget_files+0x2a/0x420 [ 422.320372][T15204] ? __fget_files+0x3a0/0x420 [ 422.320402][T15204] ? bpf_lsm_file_ioctl+0x9/0x20 [ 422.320440][T15204] ? __pfx_uinput_ioctl+0x10/0x10 [ 422.320472][T15204] __se_sys_ioctl+0xf9/0x170 [ 422.320506][T15204] do_syscall_64+0xfa/0x3b0 [ 422.320530][T15204] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.320553][T15204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.320575][T15204] ? clear_bhb_loop+0x60/0xb0 [ 422.320602][T15204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.320622][T15204] RIP: 0033:0x7f71c758e929 [ 422.320643][T15204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.320662][T15204] RSP: 002b:00007f71c53f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.320687][T15204] RAX: ffffffffffffffda RBX: 00007f71c77b5fa0 RCX: 00007f71c758e929 [ 422.320703][T15204] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 422.320717][T15204] RBP: 00007f71c53f6090 R08: 0000000000000000 R09: 0000000000000000 [ 422.320732][T15204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 422.320745][T15204] R13: 0000000000000000 R14: 00007f71c77b5fa0 R15: 00007ffc7957be68 [ 422.320781][T15204] [ 422.618446][ T7090] m920x_read = error: -19 [ 422.623146][ T7090] dvb-usb: error while querying for an remote control event. [ 422.775999][ T5943] m920x_read = error: -19 [ 422.780466][ T5943] dvb-usb: error while querying for an remote control event. [ 422.855554][T15204] input: failed to attach handler evdev to device input58, error: -12 [ 422.889707][ T5943] m920x_read = error: -19 [ 422.894146][ T5943] dvb-usb: error while querying for an remote control event. [ 423.009708][ T5943] m920x_read = error: -19 [ 423.014320][ T5943] dvb-usb: error while querying for an remote control event. [ 423.042119][T15215] /dev/rnullb0: Can't open blockdev [ 423.139823][ T5943] m920x_read = error: -19 [ 423.145389][ T5943] dvb-usb: error while querying for an remote control event. [ 423.217809][T15238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2283'. [ 423.229343][T15212] /dev/rnullb0: Can't open blockdev [ 423.269454][ T7090] m920x_read = error: -19 [ 423.279607][ T7090] dvb-usb: error while querying for an remote control event. [ 423.411753][ T7090] m920x_read = error: -19 [ 423.416200][ T7090] dvb-usb: error while querying for an remote control event. [ 423.449887][ T5943] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 423.549944][ T7090] m920x_read = error: -19 [ 423.559410][ T7090] dvb-usb: error while querying for an remote control event. [ 423.625399][ T5943] usb 5-1: Using ep0 maxpacket: 32 [ 423.643942][ T5943] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 423.652393][ T5943] usb 5-1: config 0 has no interface number 0 [ 423.670652][ T5943] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 423.692455][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.701075][ T7090] m920x_read = error: -19 [ 423.705614][ T7090] dvb-usb: error while querying for an remote control event. [ 423.728254][ T5943] usb 5-1: Product: syz [ 423.732953][ T5943] usb 5-1: Manufacturer: syz [ 423.738070][ T5943] usb 5-1: SerialNumber: syz [ 423.797773][ T5943] usb 5-1: config 0 descriptor?? [ 423.811621][ T5943] smsc95xx v2.0.0 [ 423.840422][ T7090] m920x_read = error: -19 [ 423.844964][ T7090] dvb-usb: error while querying for an remote control event. [ 423.991332][ T7090] m920x_read = error: -19 [ 423.995847][ T7090] dvb-usb: error while querying for an remote control event. [ 424.118081][ T7090] m920x_read = error: -19 [ 424.127732][T15268] /dev/rnullb0: Can't open blockdev [ 424.133638][ T7090] dvb-usb: error while querying for an remote control event. [ 424.228631][ T5943] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 424.254654][ T5943] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 424.264629][ T7090] m920x_read = error: -19 [ 424.269097][ T7090] dvb-usb: error while querying for an remote control event. [ 424.289850][T15270] input: syz1 as /devices/virtual/input/input59 [ 424.304753][T15270] FAULT_INJECTION: forcing a failure. [ 424.304753][T15270] name failslab, interval 1, probability 0, space 0, times 0 [ 424.318363][T15270] CPU: 1 UID: 0 PID: 15270 Comm: syz.0.2288 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 424.318393][T15270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 424.318406][T15270] Call Trace: [ 424.318414][T15270] [ 424.318424][T15270] dump_stack_lvl+0x189/0x250 [ 424.318459][T15270] ? __pfx____ratelimit+0x10/0x10 [ 424.318483][T15270] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.318511][T15270] ? __pfx__printk+0x10/0x10 [ 424.318547][T15270] ? __pfx___might_resched+0x10/0x10 [ 424.318573][T15270] ? fs_reclaim_acquire+0x7d/0x100 [ 424.318601][T15270] should_fail_ex+0x414/0x560 [ 424.318637][T15270] should_failslab+0xa8/0x100 [ 424.318669][T15270] kmem_cache_alloc_noprof+0x73/0x3c0 [ 424.318698][T15270] ? __kernfs_new_node+0xd7/0x7e0 [ 424.318731][T15270] __kernfs_new_node+0xd7/0x7e0 [ 424.318756][T15270] ? __lock_acquire+0xab9/0xd20 [ 424.318788][T15270] ? __pfx___kernfs_new_node+0x10/0x10 [ 424.318816][T15270] ? kernfs_root+0x1c/0x230 [ 424.318849][T15270] ? kernfs_root+0x1c/0x230 [ 424.318873][T15270] ? kernfs_root+0x1c/0x230 [ 424.318896][T15270] ? kernfs_root+0x1c/0x230 [ 424.318927][T15270] kernfs_new_node+0x102/0x210 [ 424.318958][T15270] __kernfs_create_file+0x4b/0x2e0 [ 424.318983][T15270] sysfs_add_file_mode_ns+0x238/0x300 [ 424.319013][T15270] sysfs_merge_group+0x177/0x310 [ 424.319041][T15270] ? __pfx_sysfs_merge_group+0x10/0x10 [ 424.319067][T15270] ? kobject_put+0x43f/0x480 [ 424.319097][T15270] dpm_sysfs_add+0xd2/0x270 [ 424.319133][T15270] device_add+0x4d8/0xb50 [ 424.319157][T15270] cdev_device_add+0x1d6/0x390 [ 424.319186][T15270] evdev_connect+0x34f/0x3f0 [ 424.319218][T15270] input_register_device+0xcbb/0x1090 [ 424.319255][T15270] uinput_create_device+0x422/0x670 [ 424.319287][T15270] uinput_ioctl_handler+0x3f0/0x1570 [ 424.319310][T15270] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 424.319344][T15270] ? __fget_files+0x2a/0x420 [ 424.319366][T15270] ? __fget_files+0x3a0/0x420 [ 424.319394][T15270] ? bpf_lsm_file_ioctl+0x9/0x20 [ 424.319422][T15270] ? __pfx_uinput_ioctl+0x10/0x10 [ 424.319454][T15270] __se_sys_ioctl+0xf9/0x170 [ 424.319485][T15270] do_syscall_64+0xfa/0x3b0 [ 424.319508][T15270] ? lockdep_hardirqs_on+0x9c/0x150 [ 424.319531][T15270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.319551][T15270] ? clear_bhb_loop+0x60/0xb0 [ 424.319576][T15270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.319596][T15270] RIP: 0033:0x7f3661b8e929 [ 424.319616][T15270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.319635][T15270] RSP: 002b:00007f3662ac1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.319658][T15270] RAX: ffffffffffffffda RBX: 00007f3661db5fa0 RCX: 00007f3661b8e929 [ 424.319674][T15270] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 424.319687][T15270] RBP: 00007f3662ac1090 R08: 0000000000000000 R09: 0000000000000000 [ 424.319700][T15270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 424.319712][T15270] R13: 0000000000000000 R14: 00007f3661db5fa0 R15: 00007ffc4199c0e8 [ 424.319748][T15270] [ 424.634760][ T7090] m920x_read = error: -19 [ 424.639199][ T7090] dvb-usb: error while querying for an remote control event. [ 424.664525][ T5943] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 424.675796][ T5943] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 424.703576][T15270] input: failed to attach handler evdev to device input59, error: -12 [ 424.767729][ T5943] m920x_read = error: -19 [ 424.772242][ T5943] dvb-usb: error while querying for an remote control event. [ 424.906958][ T5943] m920x_read = error: -19 [ 424.912048][ T5943] dvb-usb: error while querying for an remote control event. [ 425.029869][ T5943] m920x_read = error: -19 [ 425.034397][ T5943] dvb-usb: error while querying for an remote control event. [ 425.159981][ T5943] m920x_read = error: -19 [ 425.164530][ T5943] dvb-usb: error while querying for an remote control event. [ 425.290032][ T5943] m920x_read = error: -19 [ 425.294440][ T5943] dvb-usb: error while querying for an remote control event. [ 425.429725][ T5943] m920x_read = error: -19 [ 425.434759][ T5943] dvb-usb: error while querying for an remote control event. [ 425.494390][T15280] /dev/rnullb0: Can't open blockdev [ 425.571414][ T5943] m920x_read = error: -19 [ 425.583447][ T5943] dvb-usb: error while querying for an remote control event. [ 425.699882][ T5943] m920x_read = error: -19 [ 425.710231][ T5943] dvb-usb: error while querying for an remote control event. [ 425.844660][ T7090] m920x_read = error: -19 [ 425.849121][ T7090] dvb-usb: error while querying for an remote control event. [ 425.982754][ T7090] m920x_read = error: -19 [ 425.987154][ T7090] dvb-usb: error while querying for an remote control event. [ 426.109904][ T7090] m920x_read = error: -19 [ 426.114333][ T7090] dvb-usb: error while querying for an remote control event. [ 426.136154][ T43] usb 5-1: USB disconnect, device number 90 [ 426.257827][T15303] input: syz1 as /devices/virtual/input/input60 [ 426.265076][ T5943] m920x_read = error: -19 [ 426.269460][ T5943] dvb-usb: error while querying for an remote control event. [ 426.278663][T15303] FAULT_INJECTION: forcing a failure. [ 426.278663][T15303] name failslab, interval 1, probability 0, space 0, times 0 [ 426.295514][T15303] CPU: 1 UID: 0 PID: 15303 Comm: syz.4.2297 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 426.295543][T15303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 426.295555][T15303] Call Trace: [ 426.295563][T15303] [ 426.295572][T15303] dump_stack_lvl+0x189/0x250 [ 426.295604][T15303] ? __pfx____ratelimit+0x10/0x10 [ 426.295626][T15303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 426.295651][T15303] ? __pfx__printk+0x10/0x10 [ 426.295690][T15303] ? __pfx___might_resched+0x10/0x10 [ 426.295712][T15303] ? fs_reclaim_acquire+0x7d/0x100 [ 426.295737][T15303] should_fail_ex+0x414/0x560 [ 426.295770][T15303] should_failslab+0xa8/0x100 [ 426.295800][T15303] kmem_cache_alloc_noprof+0x73/0x3c0 [ 426.295825][T15303] ? __kernfs_new_node+0xd7/0x7e0 [ 426.295855][T15303] __kernfs_new_node+0xd7/0x7e0 [ 426.295877][T15303] ? __lock_acquire+0xab9/0xd20 [ 426.295908][T15303] ? __pfx___kernfs_new_node+0x10/0x10 [ 426.295932][T15303] ? kernfs_root+0x1c/0x230 [ 426.295963][T15303] ? kernfs_root+0x1c/0x230 [ 426.295984][T15303] ? kernfs_root+0x1c/0x230 [ 426.296002][T15303] ? kernfs_root+0x1c/0x230 [ 426.296031][T15303] kernfs_new_node+0x102/0x210 [ 426.296061][T15303] __kernfs_create_file+0x4b/0x2e0 [ 426.296084][T15303] sysfs_add_file_mode_ns+0x238/0x300 [ 426.296115][T15303] sysfs_merge_group+0x177/0x310 [ 426.296143][T15303] ? __pfx_sysfs_merge_group+0x10/0x10 [ 426.296168][T15303] ? kobject_put+0x43f/0x480 [ 426.296198][T15303] dpm_sysfs_add+0xd2/0x270 [ 426.296224][T15303] device_add+0x4d8/0xb50 [ 426.296250][T15303] cdev_device_add+0x1d6/0x390 [ 426.296278][T15303] evdev_connect+0x34f/0x3f0 [ 426.296309][T15303] input_register_device+0xcbb/0x1090 [ 426.296343][T15303] uinput_create_device+0x422/0x670 [ 426.296384][T15303] uinput_ioctl_handler+0x3f0/0x1570 [ 426.296407][T15303] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 426.296438][T15303] ? __fget_files+0x2a/0x420 [ 426.296458][T15303] ? __fget_files+0x3a0/0x420 [ 426.296485][T15303] ? bpf_lsm_file_ioctl+0x9/0x20 [ 426.296510][T15303] ? __pfx_uinput_ioctl+0x10/0x10 [ 426.296537][T15303] __se_sys_ioctl+0xf9/0x170 [ 426.296567][T15303] do_syscall_64+0xfa/0x3b0 [ 426.296587][T15303] ? lockdep_hardirqs_on+0x9c/0x150 [ 426.296607][T15303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.296626][T15303] ? clear_bhb_loop+0x60/0xb0 [ 426.296649][T15303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.296667][T15303] RIP: 0033:0x7f71c758e929 [ 426.296686][T15303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.296703][T15303] RSP: 002b:00007f71c53f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.296725][T15303] RAX: ffffffffffffffda RBX: 00007f71c77b5fa0 RCX: 00007f71c758e929 [ 426.296740][T15303] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 426.296751][T15303] RBP: 00007f71c53f6090 R08: 0000000000000000 R09: 0000000000000000 [ 426.296763][T15303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 426.296775][T15303] R13: 0000000000000000 R14: 00007f71c77b5fa0 R15: 00007ffc7957be68 [ 426.296809][T15303] [ 426.626692][ T5943] m920x_read = error: -19 [ 426.631220][ T5943] dvb-usb: error while querying for an remote control event. [ 426.677520][T15303] input: failed to attach handler evdev to device input60, error: -12 [ 426.757442][ T43] m920x_read = error: -19 [ 426.762049][ T43] dvb-usb: error while querying for an remote control event. [ 426.880162][ T43] m920x_read = error: -19 [ 426.884617][ T43] dvb-usb: error while querying for an remote control event. [ 427.002905][ T43] m920x_read = error: -19 [ 427.007973][ T43] dvb-usb: error while querying for an remote control event. [ 427.129773][ T5943] m920x_read = error: -19 [ 427.134277][ T5943] dvb-usb: error while querying for an remote control event. [ 427.291398][ T5943] m920x_read = error: -19 [ 427.295820][ T5943] dvb-usb: error while querying for an remote control event. [ 427.382251][ T5912] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 427.415895][ T5943] m920x_read = error: -19 [ 427.420353][ T5943] dvb-usb: error while querying for an remote control event. [ 427.519809][ T5912] usb 5-1: device descriptor read/64, error -71 [ 427.537817][ T5943] m920x_read = error: -19 [ 427.542404][ T5943] dvb-usb: error while querying for an remote control event. [ 427.666066][ T5943] m920x_read = error: -19 [ 427.670932][ T5943] dvb-usb: error while querying for an remote control event. [ 427.759682][ T5912] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 427.789749][ T5943] m920x_read = error: -19 [ 427.794156][ T5943] dvb-usb: error while querying for an remote control event. [ 427.900556][ T5912] usb 5-1: device descriptor read/64, error -71 [ 427.911187][ T43] m920x_read = error: -19 [ 427.915594][ T43] dvb-usb: error while querying for an remote control event. [ 427.954519][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2302'. [ 428.020521][ T5912] usb usb5-port1: attempt power cycle [ 428.049842][ T43] m920x_read = error: -19 [ 428.056014][ T43] dvb-usb: error while querying for an remote control event. [ 428.069681][ T10] usb 1-1: new low-speed USB device number 118 using dummy_hcd [ 428.085607][T15349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2304'. [ 428.180095][ T43] m920x_read = error: -19 [ 428.187071][ T43] dvb-usb: error while querying for an remote control event. [ 428.242283][ T10] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 428.256748][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.306388][ T10] usb 1-1: config 0 descriptor?? [ 428.324666][ T43] m920x_read = error: -19 [ 428.329113][ T43] dvb-usb: error while querying for an remote control event. [ 428.370218][ T5912] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 428.399340][ T5912] usb 5-1: device descriptor read/8, error -71 [ 428.469849][ T43] m920x_read = error: -19 [ 428.474354][ T43] dvb-usb: error while querying for an remote control event. [ 428.520534][ T5926] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 428.619785][ T43] m920x_read = error: -19 [ 428.624216][ T43] dvb-usb: error while querying for an remote control event. [ 428.642283][ T5912] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 428.669778][ T5926] usb 3-1: device descriptor read/64, error -71 [ 428.690075][ T5912] usb 5-1: device descriptor read/8, error -71 [ 428.766485][ T43] m920x_read = error: -19 [ 428.776051][ T43] dvb-usb: error while querying for an remote control event. [ 428.806296][ T5912] usb usb5-port1: unable to enumerate USB device [ 428.899888][ T43] m920x_read = error: -19 [ 428.904297][ T43] dvb-usb: error while querying for an remote control event. [ 428.909704][ T5926] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 429.019313][T15363] input: syz1 as /devices/virtual/input/input62 [ 429.040076][ T5943] m920x_read = error: -19 [ 429.044470][ T5943] dvb-usb: error while querying for an remote control event. [ 429.057311][T15363] FAULT_INJECTION: forcing a failure. [ 429.057311][T15363] name failslab, interval 1, probability 0, space 0, times 0 [ 429.069732][ T5926] usb 3-1: device descriptor read/64, error -71 [ 429.074313][T15363] CPU: 1 UID: 0 PID: 15363 Comm: syz.5.2306 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 429.074349][T15363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 429.074361][T15363] Call Trace: [ 429.074370][T15363] [ 429.074379][T15363] dump_stack_lvl+0x189/0x250 [ 429.074411][T15363] ? __pfx____ratelimit+0x10/0x10 [ 429.074444][T15363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.074470][T15363] ? __pfx__printk+0x10/0x10 [ 429.074502][T15363] ? __pfx___might_resched+0x10/0x10 [ 429.074524][T15363] ? fs_reclaim_acquire+0x7d/0x100 [ 429.074549][T15363] should_fail_ex+0x414/0x560 [ 429.074581][T15363] should_failslab+0xa8/0x100 [ 429.074611][T15363] kmem_cache_alloc_noprof+0x73/0x3c0 [ 429.074636][T15363] ? __kernfs_new_node+0xd7/0x7e0 [ 429.074665][T15363] __kernfs_new_node+0xd7/0x7e0 [ 429.074687][T15363] ? __lock_acquire+0xab9/0xd20 [ 429.074716][T15363] ? __pfx___kernfs_new_node+0x10/0x10 [ 429.074741][T15363] ? kernfs_root+0x1c/0x230 [ 429.074771][T15363] ? kernfs_root+0x1c/0x230 [ 429.074792][T15363] ? kernfs_root+0x1c/0x230 [ 429.074811][T15363] ? kernfs_root+0x1c/0x230 [ 429.074838][T15363] kernfs_new_node+0x102/0x210 [ 429.074868][T15363] __kernfs_create_file+0x4b/0x2e0 [ 429.074890][T15363] sysfs_add_file_mode_ns+0x238/0x300 [ 429.074920][T15363] sysfs_merge_group+0x177/0x310 [ 429.074946][T15363] ? __pfx_sysfs_merge_group+0x10/0x10 [ 429.074971][T15363] ? kobject_put+0x43f/0x480 [ 429.075000][T15363] dpm_sysfs_add+0xd2/0x270 [ 429.075025][T15363] device_add+0x4d8/0xb50 [ 429.075049][T15363] cdev_device_add+0x1d6/0x390 [ 429.075075][T15363] evdev_connect+0x34f/0x3f0 [ 429.075105][T15363] input_register_device+0xcbb/0x1090 [ 429.075137][T15363] uinput_create_device+0x422/0x670 [ 429.075164][T15363] uinput_ioctl_handler+0x3f0/0x1570 [ 429.075186][T15363] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 429.075216][T15363] ? __fget_files+0x2a/0x420 [ 429.075234][T15363] ? __fget_files+0x3a0/0x420 [ 429.075259][T15363] ? bpf_lsm_file_ioctl+0x9/0x20 [ 429.075290][T15363] ? __pfx_uinput_ioctl+0x10/0x10 [ 429.075318][T15363] __se_sys_ioctl+0xf9/0x170 [ 429.075358][T15363] do_syscall_64+0xfa/0x3b0 [ 429.075378][T15363] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.075398][T15363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.075415][T15363] ? clear_bhb_loop+0x60/0xb0 [ 429.075439][T15363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.075456][T15363] RIP: 0033:0x7f9437b8e929 [ 429.075473][T15363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.075488][T15363] RSP: 002b:00007f9438a19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.075510][T15363] RAX: ffffffffffffffda RBX: 00007f9437db5fa0 RCX: 00007f9437b8e929 [ 429.075523][T15363] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 429.075535][T15363] RBP: 00007f9438a19090 R08: 0000000000000000 R09: 0000000000000000 [ 429.075547][T15363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 429.075559][T15363] R13: 0000000000000000 R14: 00007f9437db5fa0 R15: 00007ffc5b9c05d8 [ 429.075590][T15363] [ 429.189678][ T5943] m920x_read = error: -19 [ 429.305781][ T5926] usb usb3-port1: attempt power cycle [ 429.327161][ T5943] dvb-usb: error while querying for an remote control event. [ 429.411871][T15363] input: failed to attach handler evdev to device input62, error: -12 [ 429.520789][ T43] m920x_read = error: -19 [ 429.525336][ T43] dvb-usb: error while querying for an remote control event. [ 429.639860][ T43] m920x_read = error: -19 [ 429.644351][ T43] dvb-usb: error while querying for an remote control event. [ 429.749799][ T5926] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 429.779785][ T5912] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 429.789693][ T43] m920x_read = error: -19 [ 429.790867][ T5926] usb 3-1: device descriptor read/8, error -71 [ 429.794076][ T43] dvb-usb: error while querying for an remote control event. [ 429.939762][ T43] m920x_read = error: -19 [ 429.945900][ T43] dvb-usb: error while querying for an remote control event. [ 429.968502][ T5912] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 429.977943][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.987564][ T5912] usb 6-1: Product: syz [ 429.992724][ T5912] usb 6-1: Manufacturer: syz [ 429.997486][ T5912] usb 6-1: SerialNumber: syz [ 430.010639][ T5912] usb 6-1: config 0 descriptor?? [ 430.039872][ T5926] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 430.060254][ T43] m920x_read = error: -19 [ 430.064657][ T43] dvb-usb: error while querying for an remote control event. [ 430.099930][ T5926] usb 3-1: device descriptor read/8, error -71 [ 430.190667][ T5943] m920x_read = error: -19 [ 430.199783][ T5943] dvb-usb: error while querying for an remote control event. [ 430.202004][T15379] /dev/rnullb0: Can't open blockdev [ 430.230440][ T5926] usb usb3-port1: unable to enumerate USB device [ 430.319766][ T5943] m920x_read = error: -19 [ 430.324185][ T5943] dvb-usb: error while querying for an remote control event. [ 430.469723][ T43] m920x_read = error: -19 [ 430.474144][ T43] dvb-usb: error while querying for an remote control event. [ 430.609711][ T43] m920x_read = error: -19 [ 430.614519][ T43] dvb-usb: error while querying for an remote control event. [ 430.649341][ T5912] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 430.750406][ T43] m920x_read = error: -19 [ 430.754829][ T43] dvb-usb: error while querying for an remote control event. [ 430.890549][ T43] m920x_read = error: -19 [ 430.896224][ T43] dvb-usb: error while querying for an remote control event. [ 431.030272][ T43] m920x_read = error: -19 [ 431.037302][T15384] kAFS: unparsable volume name [ 431.043290][ T43] dvb-usb: error while querying for an remote control event. [ 431.052386][T15369] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2307'. [ 431.134612][ T5912] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 431.158516][T11413] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 431.171436][ T43] m920x_read = error: -19 [ 431.175387][ T5912] usb 6-1: USB disconnect, device number 15 [ 431.175815][ T43] dvb-usb: error while querying for an remote control event. [ 431.279957][ T43] m920x_read = error: -19 [ 431.287733][ T43] dvb-usb: error while querying for an remote control event. [ 431.345870][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 431.361574][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 431.375228][ T10] asix 1-1:0.0: probe with driver asix failed with error -71 [ 431.391311][ T10] usb 1-1: USB disconnect, device number 118 [ 431.420179][ T43] m920x_read = error: -19 [ 431.424581][ T43] dvb-usb: error while querying for an remote control event. [ 431.490384][T15417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2313'. [ 431.529805][ T5943] usb 5-1: new low-speed USB device number 95 using dummy_hcd [ 431.547933][ T43] m920x_read = error: -19 [ 431.552506][ T43] dvb-usb: error while querying for an remote control event. [ 431.680406][ T43] m920x_read = error: -19 [ 431.684884][ T43] dvb-usb: error while querying for an remote control event. [ 431.709672][ T5943] usb 5-1: Invalid ep0 maxpacket: 64 [ 431.735898][T15424] /dev/rnullb0: Can't open blockdev [ 431.800510][ T43] m920x_read = error: -19 [ 431.807283][ T43] dvb-usb: error while querying for an remote control event. [ 431.811832][T15430] /dev/rnullb0: Can't open blockdev [ 431.826108][T15430] /dev/rnullb0: Can't open blockdev [ 431.839706][ T5943] usb 5-1: new low-speed USB device number 96 using dummy_hcd [ 431.929155][T15437] /dev/rnullb0: Can't open blockdev [ 431.939712][ T43] m920x_read = error: -19 [ 431.944111][ T43] dvb-usb: error while querying for an remote control event. [ 432.015462][ T5943] usb 5-1: Invalid ep0 maxpacket: 64 [ 432.032979][ T5943] usb usb5-port1: attempt power cycle [ 432.069101][T15447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2323'. [ 432.089849][ T43] m920x_read = error: -19 [ 432.094266][ T43] dvb-usb: error while querying for an remote control event. [ 432.114766][T15450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2324'. [ 432.204560][T15452] program syz.0.2326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 432.239943][ T43] m920x_read = error: -19 [ 432.244349][ T43] dvb-usb: error while querying for an remote control event. [ 432.289118][T15462] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 432.379852][ T43] m920x_read = error: -19 [ 432.390590][ T5943] usb 5-1: new low-speed USB device number 97 using dummy_hcd [ 432.420108][ T43] dvb-usb: error while querying for an remote control event. [ 432.453279][ T5943] usb 5-1: Invalid ep0 maxpacket: 64 [ 432.488394][T15475] nfs4: Unknown parameter '/dev/rnullb0' [ 432.496193][T15475] /dev/rnullb0: Can't open blockdev [ 432.497474][T15477] input: syz1 as /devices/virtual/input/input63 [ 432.533914][T15477] FAULT_INJECTION: forcing a failure. [ 432.533914][T15477] name failslab, interval 1, probability 0, space 0, times 0 [ 432.546831][ T43] m920x_read = error: -19 [ 432.550039][T15477] CPU: 0 UID: 0 PID: 15477 Comm: syz.0.2329 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 432.550065][T15477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 432.550076][T15477] Call Trace: [ 432.550085][T15477] [ 432.550093][T15477] dump_stack_lvl+0x189/0x250 [ 432.550124][T15477] ? __pfx____ratelimit+0x10/0x10 [ 432.550145][T15477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.550170][T15477] ? __pfx__printk+0x10/0x10 [ 432.550202][T15477] ? __pfx___might_resched+0x10/0x10 [ 432.550224][T15477] ? fs_reclaim_acquire+0x7d/0x100 [ 432.550249][T15477] should_fail_ex+0x414/0x560 [ 432.550281][T15477] should_failslab+0xa8/0x100 [ 432.550321][T15477] kmem_cache_alloc_noprof+0x73/0x3c0 [ 432.550346][T15477] ? __kernfs_new_node+0xd7/0x7e0 [ 432.550375][T15477] __kernfs_new_node+0xd7/0x7e0 [ 432.550397][T15477] ? __lock_acquire+0xab9/0xd20 [ 432.550426][T15477] ? __pfx___kernfs_new_node+0x10/0x10 [ 432.550449][T15477] ? kernfs_root+0x1c/0x230 [ 432.550479][T15477] ? kernfs_root+0x1c/0x230 [ 432.550500][T15477] ? kernfs_root+0x1c/0x230 [ 432.550519][T15477] ? kernfs_root+0x1c/0x230 [ 432.550546][T15477] kernfs_new_node+0x102/0x210 [ 432.550575][T15477] __kernfs_create_file+0x4b/0x2e0 [ 432.550596][T15477] sysfs_add_file_mode_ns+0x238/0x300 [ 432.550626][T15477] sysfs_merge_group+0x177/0x310 [ 432.550652][T15477] ? __pfx_sysfs_merge_group+0x10/0x10 [ 432.550676][T15477] ? kobject_put+0x43f/0x480 [ 432.550706][T15477] dpm_sysfs_add+0xd2/0x270 [ 432.550736][T15477] device_add+0x4d8/0xb50 [ 432.550760][T15477] cdev_device_add+0x1d6/0x390 [ 432.550787][T15477] evdev_connect+0x34f/0x3f0 [ 432.550818][T15477] input_register_device+0xcbb/0x1090 [ 432.550849][T15477] uinput_create_device+0x422/0x670 [ 432.550878][T15477] uinput_ioctl_handler+0x3f0/0x1570 [ 432.550899][T15477] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 432.550929][T15477] ? __fget_files+0x2a/0x420 [ 432.550948][T15477] ? __fget_files+0x3a0/0x420 [ 432.550973][T15477] ? bpf_lsm_file_ioctl+0x9/0x20 [ 432.550998][T15477] ? __pfx_uinput_ioctl+0x10/0x10 [ 432.551048][T15477] __se_sys_ioctl+0xf9/0x170 [ 432.551077][T15477] do_syscall_64+0xfa/0x3b0 [ 432.551097][T15477] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.551117][T15477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.551135][T15477] ? clear_bhb_loop+0x60/0xb0 [ 432.551158][T15477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.551176][T15477] RIP: 0033:0x7f3661b8e929 [ 432.551193][T15477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.551209][T15477] RSP: 002b:00007f3662ac1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 432.551231][T15477] RAX: ffffffffffffffda RBX: 00007f3661db5fa0 RCX: 00007f3661b8e929 [ 432.551246][T15477] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 432.551259][T15477] RBP: 00007f3662ac1090 R08: 0000000000000000 R09: 0000000000000000 [ 432.551272][T15477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 432.551284][T15477] R13: 0000000000000000 R14: 00007f3661db5fa0 R15: 00007ffc4199c0e8 [ 432.551325][T15477] [ 432.663202][ T9] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 432.667697][ T5943] usb 5-1: new low-speed USB device number 98 using dummy_hcd [ 432.720212][T15477] input: failed to attach handler evdev to device input63, error: -12 [ 432.724446][ T43] dvb-usb: error while querying for an remote control event. [ 432.843197][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 432.847038][ T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 432.870786][ T5943] usb 5-1: Invalid ep0 maxpacket: 64 [ 432.871093][ T5943] usb usb5-port1: unable to enumerate USB device [ 432.890312][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.959860][ T5943] m920x_read = error: -19 [ 432.964450][ T5943] dvb-usb: error while querying for an remote control event. [ 433.012443][ T9] usb 3-1: Product: syz [ 433.016700][ T9] usb 3-1: Manufacturer: syz [ 433.045634][T15493] lo speed is unknown, defaulting to 1000 [ 433.211075][ T5943] m920x_read = error: -19 [ 433.222096][ T5943] dvb-usb: error while querying for an remote control event. [ 433.240634][ T9] usb 3-1: SerialNumber: syz [ 433.289825][ T9] usb 3-1: config 0 descriptor?? [ 433.340865][ T5943] m920x_read = error: -19 [ 433.345283][ T5943] dvb-usb: error while querying for an remote control event. [ 433.367160][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2335'. [ 433.509746][ T5943] m920x_read = error: -19 [ 433.515016][ T5943] dvb-usb: error while querying for an remote control event. [ 433.557810][T15527] /dev/rnullb0: Can't open blockdev [ 433.649912][ T5943] m920x_read = error: -19 [ 433.654340][ T5943] dvb-usb: error while querying for an remote control event. [ 433.704571][ T9] airspy 3-1:0.0: Board ID: 00 [ 433.718753][ T9] airspy 3-1:0.0: Firmware version: [ 433.780580][T15531] /dev/rnullb0: Can't open blockdev [ 433.789836][ T5943] m920x_read = error: -19 [ 433.813614][ T5943] dvb-usb: error while querying for an remote control event. [ 433.937009][ T9] airspy 3-1:0.0: usb_control_msg() failed -71 request 11 [ 433.950088][ T5943] m920x_read = error: -19 [ 433.962949][ T5943] dvb-usb: error while querying for an remote control event. [ 434.056047][ T9] airspy 3-1:0.0: Registered as swradio24 [ 434.068082][ T9] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 434.090608][ T5943] m920x_read = error: -19 [ 434.105914][ T5943] dvb-usb: error while querying for an remote control event. [ 434.142139][ T9] usb 3-1: USB disconnect, device number 127 [ 434.257786][ T5943] m920x_read = error: -19 [ 434.282839][ T5943] dvb-usb: error while querying for an remote control event. [ 434.420095][ T7090] m920x_read = error: -19 [ 434.424523][ T7090] dvb-usb: error while querying for an remote control event. [ 434.539766][ T5943] m920x_read = error: -19 [ 434.554640][ T5943] dvb-usb: error while querying for an remote control event. [ 434.646593][T15574] /dev/rnullb0: Can't open blockdev [ 434.699742][ T5943] m920x_read = error: -19 [ 434.704212][ T5943] dvb-usb: error while querying for an remote control event. [ 434.781541][T15585] ./cgroup: Can't lookup blockdev [ 434.830267][ T7090] m920x_read = error: -19 [ 434.836006][ T7090] dvb-usb: error while querying for an remote control event. [ 434.875221][T15592] trusted_key: encrypted_key: insufficient parameters specified [ 434.892456][T15592] netlink: 'syz.4.2347': attribute type 6 has an invalid length. [ 434.950598][T15596] /dev/rnullb0: Can't open blockdev [ 434.969766][ T7090] m920x_read = error: -19 [ 434.974269][ T5943] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 434.981806][ T7090] dvb-usb: error while querying for an remote control event. [ 435.109853][ T7090] m920x_read = error: -19 [ 435.114270][ T7090] dvb-usb: error while querying for an remote control event. [ 435.149865][ T5912] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 435.162723][ T5943] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 435.175210][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.183618][ T5943] usb 3-1: Product: syz [ 435.187804][ T5943] usb 3-1: Manufacturer: syz [ 435.196376][ T5943] usb 3-1: SerialNumber: syz [ 435.218524][ T5943] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 435.229983][ T43] m920x_read = error: -19 [ 435.234371][ T43] dvb-usb: error while querying for an remote control event. [ 435.293714][ T7090] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 435.316663][ T5912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.329850][ T5912] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 435.349045][ T5912] usb 5-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 435.360368][ T927] m920x_read = error: -19 [ 435.364818][ T927] dvb-usb: error while querying for an remote control event. [ 435.375381][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.385053][ T5912] usb 5-1: Product: syz [ 435.393240][ T5912] usb 5-1: Manufacturer: syz [ 435.398627][ T5912] usb 5-1: SerialNumber: syz [ 435.409244][ T5912] usb 5-1: config 0 descriptor?? [ 435.489767][ T927] m920x_read = error: -19 [ 435.504463][ T927] dvb-usb: error while querying for an remote control event. [ 435.640478][ T927] m920x_read = error: -19 [ 435.655290][ T927] dvb-usb: error while querying for an remote control event. [ 435.793128][ T927] m920x_read = error: -19 [ 435.797575][ T927] dvb-usb: error while querying for an remote control event. [ 435.851773][ T9] usb 3-1: USB disconnect, device number 2 [ 435.884444][T15625] /dev/rnullb0: Can't open blockdev [ 435.929953][ T927] m920x_read = error: -19 [ 435.934436][ T927] dvb-usb: error while querying for an remote control event. [ 436.061148][ T927] m920x_read = error: -19 [ 436.065532][ T927] dvb-usb: error while querying for an remote control event. [ 436.210075][ T927] m920x_read = error: -19 [ 436.214488][ T927] dvb-usb: error while querying for an remote control event. [ 436.339688][ T927] m920x_read = error: -19 [ 436.344101][ T927] dvb-usb: error while querying for an remote control event. [ 436.390575][ T7090] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 436.399278][ T7090] ath9k_htc: Failed to initialize the device [ 436.432341][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 436.469808][ T927] m920x_read = error: -19 [ 436.474221][ T927] dvb-usb: error while querying for an remote control event. [ 436.548202][T15640] FAULT_INJECTION: forcing a failure. [ 436.548202][T15640] name failslab, interval 1, probability 0, space 0, times 0 [ 436.565324][T15640] CPU: 0 UID: 0 PID: 15640 Comm: syz.2.2356 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 436.565358][T15640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 436.565371][T15640] Call Trace: [ 436.565380][T15640] [ 436.565390][T15640] dump_stack_lvl+0x189/0x250 [ 436.565425][T15640] ? __pfx____ratelimit+0x10/0x10 [ 436.565450][T15640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.565479][T15640] ? __pfx__printk+0x10/0x10 [ 436.565515][T15640] ? __pfx___might_resched+0x10/0x10 [ 436.565546][T15640] should_fail_ex+0x414/0x560 [ 436.565581][T15640] should_failslab+0xa8/0x100 [ 436.565613][T15640] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 436.565641][T15640] ? __alloc_skb+0x112/0x2d0 [ 436.565670][T15640] __alloc_skb+0x112/0x2d0 [ 436.565709][T15640] netlink_sendmsg+0x5c6/0xb30 [ 436.565747][T15640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.565776][T15640] ? aa_sock_msg_perm+0xf1/0x1d0 [ 436.565807][T15640] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 436.565832][T15640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.565858][T15640] __sock_sendmsg+0x21c/0x270 [ 436.565884][T15640] ____sys_sendmsg+0x505/0x830 [ 436.565919][T15640] ? __pfx_____sys_sendmsg+0x10/0x10 [ 436.565959][T15640] ? import_iovec+0x74/0xa0 [ 436.566002][T15640] ___sys_sendmsg+0x21f/0x2a0 [ 436.566033][T15640] ? __pfx____sys_sendmsg+0x10/0x10 [ 436.566103][T15640] ? __fget_files+0x2a/0x420 [ 436.566125][T15640] ? __fget_files+0x3a0/0x420 [ 436.566160][T15640] __x64_sys_sendmsg+0x19b/0x260 [ 436.566191][T15640] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 436.566231][T15640] ? __pfx_ksys_write+0x10/0x10 [ 436.566247][T15640] ? rcu_is_watching+0x15/0xb0 [ 436.566279][T15640] ? do_syscall_64+0xbe/0x3b0 [ 436.566308][T15640] do_syscall_64+0xfa/0x3b0 [ 436.566330][T15640] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.566352][T15640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.566373][T15640] ? clear_bhb_loop+0x60/0xb0 [ 436.566398][T15640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.566418][T15640] RIP: 0033:0x7f262c98e929 [ 436.566439][T15640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.566457][T15640] RSP: 002b:00007f262d82f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.566481][T15640] RAX: ffffffffffffffda RBX: 00007f262cbb5fa0 RCX: 00007f262c98e929 [ 436.566497][T15640] RDX: 0000000000004040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 436.566512][T15640] RBP: 00007f262d82f090 R08: 0000000000000000 R09: 0000000000000000 [ 436.566525][T15640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.566538][T15640] R13: 0000000000000000 R14: 00007f262cbb5fa0 R15: 00007ffdd64501c8 [ 436.566571][T15640] [ 436.609785][ T43] m920x_read = error: -19 [ 436.612628][ C0] vkms_vblank_simulate: vblank timer overrun [ 436.627811][ T43] dvb-usb: error while querying for an remote control event. [ 436.632072][ C0] vkms_vblank_simulate: vblank timer overrun [ 436.993171][T15647] kAFS: unparsable volume name [ 437.072998][ T43] m920x_read = error: -19 [ 437.077567][ T43] dvb-usb: error while querying for an remote control event. [ 437.200250][ T43] m920x_read = error: -19 [ 437.204669][ T43] dvb-usb: error while querying for an remote control event. [ 437.284804][T15656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2361'. [ 437.324248][ T43] m920x_read = error: -19 [ 437.328957][ T43] dvb-usb: error while querying for an remote control event. [ 437.441658][ T43] m920x_read = error: -19 [ 437.457291][ T43] dvb-usb: error while querying for an remote control event. [ 437.505094][T15660] /dev/rnullb0: Can't open blockdev [ 437.524370][T15660] /dev/rnullb0: Can't open blockdev [ 437.546242][T15660] /dev/rnullb0: Can't open blockdev [ 437.563718][T15660] /dev/rnullb0: Can't open blockdev [ 437.580474][T15660] /dev/rnullb0: Can't open blockdev [ 437.587567][T15660] /dev/rnullb0: Can't open blockdev [ 437.593516][ T43] m920x_read = error: -19 [ 437.598874][ T43] dvb-usb: error while querying for an remote control event. [ 437.607730][T15660] /dev/rnullb0: Can't open blockdev [ 437.615190][T15660] /dev/rnullb0: Can't open blockdev [ 437.622764][T15660] /dev/rnullb0: Can't open blockdev [ 437.629059][T15660] /dev/rnullb0: Can't open blockdev [ 437.637191][T15660] /dev/rnullb0: Can't open blockdev [ 437.644039][T15660] /dev/rnullb0: Can't open blockdev [ 437.659361][T15662] /dev/rnullb0: Can't open blockdev [ 437.659366][T15660] /dev/rnullb0: Can't open blockdev [ 437.663766][T15660] /dev/rnullb0: Can't open blockdev [ 437.690652][T15660] /dev/rnullb0: Can't open blockdev [ 437.702063][T15660] /dev/rnullb0: Can't open blockdev [ 437.717310][T15660] /dev/rnullb0: Can't open blockdev [ 437.722970][ T43] m920x_read = error: -19 [ 437.727333][ T43] dvb-usb: error while querying for an remote control event. [ 437.746114][T15660] /dev/rnullb0: Can't open blockdev [ 437.760537][T15660] /dev/rnullb0: Can't open blockdev [ 437.776865][T15660] /dev/rnullb0: Can't open blockdev [ 437.786930][T15660] /dev/rnullb0: Can't open blockdev [ 437.801368][T15660] /dev/rnullb0: Can't open blockdev [ 437.808666][T15660] /dev/rnullb0: Can't open blockdev [ 437.815708][T15667] /dev/rnullb0: Can't open blockdev [ 437.822595][T15660] /dev/rnullb0: Can't open blockdev [ 437.845443][T15660] /dev/rnullb0: Can't open blockdev [ 437.854891][ T43] m920x_read = error: -19 [ 437.879972][ T43] dvb-usb: error while querying for an remote control event. [ 437.888443][T15660] /dev/rnullb0: Can't open blockdev [ 437.910974][T15660] /dev/rnullb0: Can't open blockdev [ 437.917729][T15660] /dev/rnullb0: Can't open blockdev [ 437.950451][T15660] /dev/rnullb0: Can't open blockdev [ 437.956538][T15660] /dev/rnullb0: Can't open blockdev [ 437.967090][ T43] usb 5-1: USB disconnect, device number 99 [ 437.996406][ T927] m920x_read = error: -19 [ 438.000896][ T927] dvb-usb: error while querying for an remote control event. [ 438.002143][T15671] /dev/rnullb0: Can't open blockdev [ 438.015497][T15660] /dev/rnullb0: Can't open blockdev [ 438.044266][T15660] /dev/rnullb0: Can't open blockdev [ 438.058646][T15660] /dev/rnullb0: Can't open blockdev [ 438.109780][ T927] m920x_read = error: -19 [ 438.114222][ T927] dvb-usb: error while querying for an remote control event. [ 438.147525][T15681] /dev/rnullb0: Can't open blockdev [ 438.266015][ T43] m920x_read = error: -19 [ 438.272769][ T43] dvb-usb: error while querying for an remote control event. [ 438.326978][T15690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2370'. [ 438.404842][ T43] m920x_read = error: -19 [ 438.409275][ T43] dvb-usb: error while querying for an remote control event. [ 438.507152][T15696] /dev/rnullb0: Can't open blockdev [ 438.539821][ T43] m920x_read = error: -19 [ 438.544224][ T43] dvb-usb: error while querying for an remote control event. [ 438.549697][T15695] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 438.672986][ T43] m920x_read = error: -19 [ 438.688044][ T43] dvb-usb: error while querying for an remote control event. [ 438.839824][ T43] m920x_read = error: -19 [ 438.844243][ T43] dvb-usb: error while querying for an remote control event. [ 438.898756][ T43] IPVS: starting estimator thread 0... [ 438.974354][T15722] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2378'. [ 438.979871][ T43] m920x_read = error: -19 [ 438.995787][ T43] dvb-usb: error while querying for an remote control event. [ 439.009951][T15720] IPVS: using max 25 ests per chain, 60000 per kthread [ 439.126156][T15725] netlink: 46 bytes leftover after parsing attributes in process `syz.0.2377'. [ 439.151262][ T43] m920x_read = error: -19 [ 439.155672][ T43] dvb-usb: error while querying for an remote control event. [ 439.166735][T15725] /dev/rnullb0: Can't open blockdev [ 439.294592][ T43] m920x_read = error: -19 [ 439.307227][ T43] dvb-usb: error while querying for an remote control event. [ 439.370555][T15742] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 439.429961][ T927] m920x_read = error: -19 [ 439.434516][ T927] dvb-usb: error while querying for an remote control event. [ 439.550564][ T5943] m920x_read = error: -19 [ 439.560613][ T5943] dvb-usb: error while querying for an remote control event. [ 439.572675][T15750] syzkaller1: entered promiscuous mode [ 439.578463][T15750] syzkaller1: entered allmulticast mode [ 439.589798][ T43] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 439.689862][ T5943] m920x_read = error: -19 [ 439.694280][ T5943] dvb-usb: error while querying for an remote control event. [ 439.754737][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.789421][ T43] usb 1-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 439.810570][ T5943] m920x_read = error: -19 [ 439.814985][ T5943] dvb-usb: error while querying for an remote control event. [ 439.822912][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.845707][ T43] usb 1-1: config 0 descriptor?? [ 439.939847][ T5943] m920x_read = error: -19 [ 439.944553][ T5943] dvb-usb: error while querying for an remote control event. [ 440.059889][ T5943] m920x_read = error: -19 [ 440.064514][ T5943] dvb-usb: error while querying for an remote control event. [ 440.104087][T15777] bond0: entered promiscuous mode [ 440.111018][T15777] bond_slave_0: entered promiscuous mode [ 440.116958][T15777] bond_slave_1: entered promiscuous mode [ 440.123281][T15777] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 440.132378][T15777] bond0: entered allmulticast mode [ 440.137542][T15777] bond_slave_0: entered allmulticast mode [ 440.143495][T15777] bond_slave_1: entered allmulticast mode [ 440.157520][T15777] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 440.189780][ T927] m920x_read = error: -19 [ 440.194241][ T927] dvb-usb: error while querying for an remote control event. [ 440.259081][T15785] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2387'. [ 440.271233][T15785] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2387'. [ 440.293061][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 440.299130][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 440.316531][ T43] usb 1-1: USB disconnect, device number 119 [ 440.328434][ T7090] m920x_read = error: -19 [ 440.333679][ T7090] dvb-usb: error while querying for an remote control event. [ 440.391947][ T5943] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 440.404603][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.449809][ T927] m920x_read = error: -19 [ 440.460304][ T927] dvb-usb: error while querying for an remote control event. [ 440.570836][ T927] m920x_read = error: -19 [ 440.575380][ T927] dvb-usb: error while querying for an remote control event. [ 440.597524][ T5943] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.619755][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 440.636195][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 440.668855][ T5943] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 440.685020][ T5943] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 440.699058][ T5943] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 440.708635][ T5943] usb 3-1: Manufacturer: syz [ 440.721268][ T927] m920x_read = error: -19 [ 440.729665][ T927] dvb-usb: error while querying for an remote control event. [ 440.743731][ T5943] usb 3-1: config 0 descriptor?? [ 440.782561][T15813] vivid-001: disconnect [ 440.839942][ T927] m920x_read = error: -19 [ 440.844380][ T927] dvb-usb: error while querying for an remote control event. [ 440.969795][ T927] m920x_read = error: -19 [ 440.974410][ T927] dvb-usb: error while querying for an remote control event. [ 441.019748][ T5943] rc_core: IR keymap rc-hauppauge not found [ 441.025894][ T5943] Registered IR keymap rc-empty [ 441.033486][ T5943] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 441.059856][ T5943] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 441.089850][ T43] m920x_read = error: -19 [ 441.094596][ T43] dvb-usb: error while querying for an remote control event. [ 441.105504][ T5943] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 441.136172][ T5943] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input64 [ 441.153628][ T5943] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 441.181723][ T5943] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 441.189291][T15821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2392'. [ 441.202447][ T5943] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 441.239841][ T43] m920x_read = error: -19 [ 441.244313][ T43] dvb-usb: error while querying for an remote control event. [ 441.252309][ T5943] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 441.279737][ T5943] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 441.299735][ T5943] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 441.319813][ T5943] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 441.339832][ T5943] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 441.359998][ T5943] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 441.368023][T15827] /dev/rnullb0: Can't open blockdev [ 441.379962][ T43] m920x_read = error: -19 [ 441.384579][ T5943] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 441.394546][ T43] dvb-usb: error while querying for an remote control event. [ 441.423414][ T5943] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 441.433902][ T5943] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 441.510767][ T5943] m920x_read = error: -19 [ 441.515325][ T5943] dvb-usb: error while querying for an remote control event. [ 441.597053][T15811] vivid-001: reconnect [ 441.650440][ T43] m920x_read = error: -19 [ 441.659781][ T43] dvb-usb: error while querying for an remote control event. [ 441.678965][T15843] ceph: Path missing in source [ 441.790645][ T43] m920x_read = error: -19 [ 441.799030][ T43] dvb-usb: error while querying for an remote control event. [ 441.929768][ T43] m920x_read = error: -19 [ 441.934451][ T43] dvb-usb: error while querying for an remote control event. [ 441.990228][T15854] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 442.069934][ T43] m920x_read = error: -19 [ 442.074390][ T43] dvb-usb: error while querying for an remote control event. [ 442.214165][ T43] m920x_read = error: -19 [ 442.220589][ T43] dvb-usb: error while querying for an remote control event. [ 442.293927][T15869] /dev/rnullb0: Can't open blockdev [ 442.316715][T15862] ALSA: mixer_oss: invalid OSS volume '' [ 442.329889][ T43] m920x_read = error: -19 [ 442.342590][ T43] dvb-usb: error while querying for an remote control event. [ 442.492119][ T43] m920x_read = error: -19 [ 442.513351][ T43] dvb-usb: error while querying for an remote control event. [ 442.554682][T15881] netlink: 'syz.0.2401': attribute type 1 has an invalid length. [ 442.572691][T15881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2401'. [ 442.611982][T15884] virtio-fs: tag not found [ 442.628508][T15881] /dev/rnullb0: Can't open blockdev [ 442.660078][ T43] m920x_read = error: -19 [ 442.679772][ T43] dvb-usb: error while querying for an remote control event. [ 442.730877][T15887] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.2402'. [ 442.834279][ T43] m920x_read = error: -19 [ 442.870469][ T43] dvb-usb: error while querying for an remote control event. [ 443.000262][ T43] m920x_read = error: -19 [ 443.008186][ T43] dvb-usb: error while querying for an remote control event. [ 443.037947][ T30] audit: type=1326 audit(1752072916.531:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15773 comm="syz.2.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262c98e929 code=0x7fc00000 [ 443.049743][ T5912] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 443.139792][ T43] m920x_read = error: -19 [ 443.143116][ T10] usb 3-1: USB disconnect, device number 3 [ 443.144265][ T43] dvb-usb: error while querying for an remote control event. [ 443.251386][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 443.290027][ T43] m920x_read = error: -19 [ 443.292940][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.294433][ T43] dvb-usb: error while querying for an remote control event. [ 443.355423][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.383080][ T5912] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 443.388598][T15912] vivid-000: disconnect [ 443.404831][ T43] m920x_read = error: -19 [ 443.409782][ T43] dvb-usb: error while querying for an remote control event. [ 443.418610][ T5912] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 443.468935][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.519713][ T5943] m920x_read = error: -19 [ 443.522827][ T5912] usb 1-1: config 0 descriptor?? [ 443.525383][ T5943] dvb-usb: error while querying for an remote control event. [ 443.670159][ T5943] m920x_read = error: -19 [ 443.674582][ T5943] dvb-usb: error while querying for an remote control event. [ 443.713029][T15919] syz.4.2405: attempt to access beyond end of device [ 443.713029][T15919] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 443.720564][T15920] /dev/rnullb0: Can't open blockdev [ 443.727857][T15919] syz.4.2405: attempt to access beyond end of device [ 443.727857][T15919] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 443.745333][T15919] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 443.746149][T15918] nbd4: detected capacity change from 0 to 8589934592 [ 443.755958][T15919] ------------[ cut here ]------------ [ 443.768226][T15919] WARNING: fs/buffer.c:1125 at bdev_getblk+0x580/0x660, CPU#1: syz.4.2405/15919 [ 443.777665][T15919] Modules linked in: [ 443.778629][T15920] /dev/rnullb0: Can't open blockdev [ 443.781924][T15919] CPU: 1 UID: 0 PID: 15919 Comm: syz.4.2405 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 443.781953][T15919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 443.781968][T15919] RIP: 0010:bdev_getblk+0x580/0x660 [ 443.782000][T15919] Code: 26 fb ff ff e8 a1 0c 78 ff 48 c7 c7 e0 26 ba 8b 48 c7 c6 c6 70 cd 8d 4c 89 fa 4c 89 e9 e8 c8 b0 df fe eb bd e8 81 0c 78 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89 [ 443.782020][T15919] RSP: 0018:ffffc900036976b0 EFLAGS: 00010293 [ 443.782044][T15919] RAX: ffffffff8247efaf RBX: ffff888023110018 RCX: ffff88802d613c00 [ 443.782062][T15919] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 443.782078][T15919] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff8217434d [ 443.782093][T15919] R10: 0000000000000406 R11: 0000000000000000 R12: ffff888023110968 [ 443.782108][T15919] R13: ffff888023110000 R14: 0000000000000200 R15: 1ffff11004622003 [ 443.782126][T15919] FS: 00007f71c53d56c0(0000) GS:ffff88812589f000(0000) knlGS:0000000000000000 [ 443.782145][T15919] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 443.782162][T15919] CR2: 0000200000004a00 CR3: 0000000061cac000 CR4: 00000000003526f0 [ 443.782189][T15919] Call Trace: [ 443.834669][T15920] /dev/rnullb0: Can't open blockdev [ 443.840632][T15919] [ 443.840646][T15919] ? __pfx__udf_err+0x10/0x10 [ 443.840681][T15919] ? __bread_gfp+0x216/0x3c0 [ 443.906341][T15920] /dev/rnullb0: Can't open blockdev [ 443.909140][T15919] __bread_gfp+0x89/0x3c0 [ 443.909185][T15919] udf_read_tagged+0xad/0xe00 [ 443.909227][T15919] udf_check_anchor_block+0x99/0x550 [ 443.935974][T15920] /dev/rnullb0: Can't open blockdev [ 443.936563][T15919] ? udf_get_last_block+0x286/0x360 [ 443.954462][T15920] /dev/rnullb0: Can't open blockdev [ 443.957210][T15919] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 443.957263][T15919] udf_load_vrs+0x96d/0xf20 [ 443.972745][ T5912] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 443.973749][T15919] ? __pfx_udf_load_vrs+0x10/0x10 [ 443.985832][T15919] ? udf_get_last_session+0x100/0x200 [ 443.988332][ T5912] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 443.991353][T15919] udf_fill_super+0x5ad/0x17a0 [ 443.991405][T15919] ? __pfx_udf_fill_super+0x10/0x10 [ 443.991432][T15919] ? set_blocksize+0x21e/0x500 [ 443.991468][T15919] ? sb_set_blocksize+0x104/0x180 [ 443.991497][T15919] ? setup_bdev_super+0x4c1/0x5b0 [ 443.991524][T15919] get_tree_bdev_flags+0x40b/0x4d0 [ 443.991547][T15919] ? __pfx_udf_fill_super+0x10/0x10 [ 444.002957][ T5912] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 444.003990][T15919] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 444.021756][T15920] /dev/rnullb0: Can't open blockdev [ 444.023983][T15919] vfs_get_tree+0x8f/0x2b0 [ 444.029335][ T5912] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 444.034383][T15919] do_new_mount+0x2a2/0x9e0 [ 444.034421][T15919] ? ns_capable+0x8a/0xf0 [ 444.034446][T15919] ? __pfx_do_new_mount+0x10/0x10 [ 444.034469][T15919] ? path_mount+0x61c/0xfe0 [ 444.034489][T15919] ? user_path_at+0x44/0x60 [ 444.034530][T15919] __se_sys_mount+0x317/0x410 [ 444.034562][T15919] ? __pfx___se_sys_mount+0x10/0x10 [ 444.034584][T15919] ? rcu_is_watching+0x15/0xb0 [ 444.034619][T15919] ? do_syscall_64+0xbe/0x3b0 [ 444.034643][T15919] ? __x64_sys_mount+0x20/0xc0 [ 444.034670][T15919] do_syscall_64+0xfa/0x3b0 [ 444.034694][T15919] ? lockdep_hardirqs_on+0x9c/0x150 [ 444.034717][T15919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.034739][T15919] ? clear_bhb_loop+0x60/0xb0 [ 444.066573][T15920] /dev/rnullb0: Can't open blockdev [ 444.070159][T15919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.070193][T15919] RIP: 0033:0x7f71c758e929 [ 444.070215][T15919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.085160][T15920] /dev/rnullb0: Can't open blockdev [ 444.088660][T15919] RSP: 002b:00007f71c53d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 444.088692][T15919] RAX: ffffffffffffffda RBX: 00007f71c77b6080 RCX: 00007f71c758e929 [ 444.088710][T15919] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 444.088727][T15919] RBP: 00007f71c7610b39 R08: 0000000000000000 R09: 0000000000000000 [ 444.088742][T15919] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 444.099135][ T5912] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 444.103730][T15919] R13: 0000000000000000 R14: 00007f71c77b6080 R15: 00007ffc7957be68 [ 444.103776][T15919] [ 444.103790][T15919] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 444.103809][T15919] CPU: 1 UID: 0 PID: 15919 Comm: syz.4.2405 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 444.103835][T15919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 444.103849][T15919] Call Trace: [ 444.103859][T15919] [ 444.103869][T15919] dump_stack_lvl+0x99/0x250 [ 444.103906][T15919] ? __asan_memcpy+0x40/0x70 [ 444.103934][T15919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.103964][T15919] ? __pfx__printk+0x10/0x10 [ 444.104018][T15919] panic+0x2e2/0x7b0 [ 444.104048][T15919] ? __pfx_panic+0x10/0x10 [ 444.104093][T15919] __warn+0x334/0x4c0 [ 444.104117][T15919] ? bdev_getblk+0x580/0x660 [ 444.104146][T15919] ? bdev_getblk+0x580/0x660 [ 444.104172][T15919] report_bug+0x2be/0x4f0 [ 444.104195][T15919] ? bdev_getblk+0x580/0x660 [ 444.104218][T15919] ? bdev_getblk+0x580/0x660 [ 444.104240][T15919] ? bdev_getblk+0x582/0x660 [ 444.104262][T15919] handle_bug+0x84/0x160 [ 444.104287][T15919] exc_invalid_op+0x1a/0x50 [ 444.104310][T15919] asm_exc_invalid_op+0x1a/0x20 [ 444.104328][T15919] RIP: 0010:bdev_getblk+0x580/0x660 [ 444.104352][T15919] Code: 26 fb ff ff e8 a1 0c 78 ff 48 c7 c7 e0 26 ba 8b 48 c7 c6 c6 70 cd 8d 4c 89 fa 4c 89 e9 e8 c8 b0 df fe eb bd e8 81 0c 78 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89 [ 444.104369][T15919] RSP: 0018:ffffc900036976b0 EFLAGS: 00010293 [ 444.104389][T15919] RAX: ffffffff8247efaf RBX: ffff888023110018 RCX: ffff88802d613c00 [ 444.104404][T15919] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 444.104417][T15919] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff8217434d [ 444.104430][T15919] R10: 0000000000000406 R11: 0000000000000000 R12: ffff888023110968 [ 444.104443][T15919] R13: ffff888023110000 R14: 0000000000000200 R15: 1ffff11004622003 [ 444.104464][T15919] ? fs_reclaim_acquire+0x7d/0x100 [ 444.104483][T15919] ? bdev_getblk+0x57f/0x660 [ 444.104511][T15919] ? __pfx__udf_err+0x10/0x10 [ 444.104536][T15919] ? __bread_gfp+0x216/0x3c0 [ 444.104565][T15919] __bread_gfp+0x89/0x3c0 [ 444.104590][T15919] udf_read_tagged+0xad/0xe00 [ 444.104626][T15919] udf_check_anchor_block+0x99/0x550 [ 444.104656][T15919] ? udf_get_last_block+0x286/0x360 [ 444.104681][T15919] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 444.104718][T15919] udf_load_vrs+0x96d/0xf20 [ 444.104758][T15919] ? __pfx_udf_load_vrs+0x10/0x10 [ 444.104781][T15919] ? udf_get_last_session+0x100/0x200 [ 444.104815][T15919] udf_fill_super+0x5ad/0x17a0 [ 444.104849][T15919] ? __pfx_udf_fill_super+0x10/0x10 [ 444.104871][T15919] ? set_blocksize+0x21e/0x500 [ 444.104901][T15919] ? sb_set_blocksize+0x104/0x180 [ 444.104926][T15919] ? setup_bdev_super+0x4c1/0x5b0 [ 444.104948][T15919] get_tree_bdev_flags+0x40b/0x4d0 [ 444.104967][T15919] ? __pfx_udf_fill_super+0x10/0x10 [ 444.105000][T15919] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 444.105030][T15919] vfs_get_tree+0x8f/0x2b0 [ 444.105052][T15919] do_new_mount+0x2a2/0x9e0 [ 444.105076][T15919] ? ns_capable+0x8a/0xf0 [ 444.105098][T15919] ? __pfx_do_new_mount+0x10/0x10 [ 444.105118][T15919] ? path_mount+0x61c/0xfe0 [ 444.105136][T15919] ? user_path_at+0x44/0x60 [ 444.105170][T15919] __se_sys_mount+0x317/0x410 [ 444.105196][T15919] ? __pfx___se_sys_mount+0x10/0x10 [ 444.105215][T15919] ? rcu_is_watching+0x15/0xb0 [ 444.105244][T15919] ? do_syscall_64+0xbe/0x3b0 [ 444.105264][T15919] ? __x64_sys_mount+0x20/0xc0 [ 444.105287][T15919] do_syscall_64+0xfa/0x3b0 [ 444.105307][T15919] ? lockdep_hardirqs_on+0x9c/0x150 [ 444.105327][T15919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.105345][T15919] ? clear_bhb_loop+0x60/0xb0 [ 444.105369][T15919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.105387][T15919] RIP: 0033:0x7f71c758e929 [ 444.105405][T15919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.105421][T15919] RSP: 002b:00007f71c53d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 444.105442][T15919] RAX: ffffffffffffffda RBX: 00007f71c77b6080 RCX: 00007f71c758e929 [ 444.105456][T15919] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 444.105469][T15919] RBP: 00007f71c7610b39 R08: 0000000000000000 R09: 0000000000000000 [ 444.105482][T15919] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 444.105495][T15919] R13: 0000000000000000 R14: 00007f71c77b6080 R15: 00007ffc7957be68 [ 444.105525][T15919] [ 444.109163][T15919] Kernel Offset: disabled