last executing test programs: 17m58.38546759s ago: executing program 32 (id=241): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000008c0)=""/150, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/76, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x406, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x8, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0, 0xeeee0000}) 17m53.565149925s ago: executing program 33 (id=266): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0), 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB='nr_blocks=-4']) (async) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0), 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB='nr_blocks=-4']) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10) (async) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000a80)={0x5c, @multicast2, 0x4e24, 0x0, 'none\x00', 0x4, 0xb6bc, 0x7}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000a80)={0x5c, @multicast2, 0x4e24, 0x0, 'none\x00', 0x4, 0xb6bc, 0x7}, 0x2c) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r4, &(0x7f00000000c0)='./mnt\x00', r4, 0x0, 0x177) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@sndinfo={0x20, 0x84, 0x2, {0xc5e, 0x4, 0x1, 0x168c240b, r5}}], 0x20, 0xc005}], 0x1, 0x10) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={r5, 0x6}, 0x8) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x2, 0x8001020, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="40030800000008ee2c0f9880d5e5"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000100000908000240000000050900010073797a300000000028000000000a03000000000000000000010000090900010073797a30000000000800024000000010"], 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x4000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f00000000c0)={'wlan1\x00', @random="0134010100bf"}) ppoll(&(0x7f0000000100)=[{r8, 0x4}, {r8, 0x1080}], 0x2, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x3a0]}, 0x8) (async) ppoll(&(0x7f0000000100)=[{r8, 0x4}, {r8, 0x1080}], 0x2, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x3a0]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x22052, r0, 0x2000) 17m32.324784244s ago: executing program 34 (id=443): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f00000000c0)={0xb, {0x4, 0x3, 0x3375, 0x3fe}, {0x0, 0x2, 0x1, 0x1000}, {0x9}}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r1, 0xd6baf000) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000200)={0xf0, 0x360, 0xf0, 0x4b0, 0xa15d, 0x0, 0x4, 0x1, {0x528a5432, 0x1ff, 0x1}, {0x5, 0x8}, {0x5, 0x1ff, 0x1000}, {0x1, 0xa5, 0x1}, 0x1, 0x1, 0x7, 0x10001, 0x0, 0x1, 0xfffffffd, 0x0, 0x9, 0x6, 0x1, 0x1, 0x8, 0x4, 0x2, 0xa}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 16m3.478445795s ago: executing program 35 (id=1343): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0) write$P9_RSTATu(r0, &(0x7f00000007c0)={0x23b, 0x7d, 0x0, {{0x500, 0xfa, 0x0, 0x0, {}, 0x0, 0x2, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1f, '\xcf\xc2m\xd7\xc5\x00\xf0\\n_*p\xe82\xd6-\x88Dn&\xd3\x05%\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x23b) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x12, r2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x7, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) set_mempolicy(0x4003, &(0x7f0000000200)=0x8000000007, 0x5fff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_open_procfs(0x0, &(0x7f00000001c0)='attr/sockcreate\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r5, 0x106, 0x1, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r3, 0x5708e000) 13m57.149890126s ago: executing program 36 (id=2615): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x8ee4a000) memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x40100) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1358, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) syz_usb_connect$uac1(0x2, 0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000106b1d010140000102030109028c00030156c0020904000000010100000a24010101bb0201021124060104050700090008000300020003052405060f0c24020203120250800009010b24060502020a004ef1000904010000010200000904010101010200000905010920009301050725010005480f090402000001020000090402010101020000090582"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x8ee4a000) (async) memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x40100) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x1358, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) (async) syz_usb_connect$uac1(0x2, 0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000106b1d010140000102030109028c00030156c0020904000000010100000a24010101bb0201021124060104050700090008000300020003052405060f0c24020203120250800009010b24060502020a004ef1000904010000010200000904010101010200000905010920009301050725010005480f090402000001020000090402010101020000090582"], 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) 13m29.234015116s ago: executing program 37 (id=2863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000048000a20000000000a01010000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000008000b4000000002040004800900010073797a300000000008000a4000000006"], 0x7c}}, 0x0) 9m49.168926795s ago: executing program 38 (id=4900): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}, {@cachetag={'cachetag', 0x3d, '\x14\xe2\xc3\x11\xe2\xcb\x86\xc8-Hs\xc6\xafm\xdc{\xdeU#\xebp7-\x9f\xb8\xf3A\xb2CX\xd3//\xdd28+\x9dS\"\x9bm\x19\xd0K4a\xe6\xfb\xdb\xf7\xe4K\xb5\xc8\x94_\a\xe61\x91\xe4<@\xc37+\x9c\xb2\xe8E=T\xd5\xb1\'\xc3w\f\'\xd4\x97\xf8\xba\xe8\xa0\n\x8d\xc7\xc9\x7f\xa8\x1d\x88\xa3\x17\xca\xa5e\x7fYj\x82Z\xe9K\xa0T\\\x87u\x8coL\a|\xc8f^\x01\x04\xe4\x8e\x0f\xfe\x16\xa7G\xd4\xa1\xef\xc5\xa7k\x1dE\xb0\x9d!i\x99\\^\\]G?E+\xcd}\xf7i\xe2\xa2\x8dEW\xab\xdc\x8c\xe9Y\xb1\xc8\xc4\x97!\xbc\xf4\xef\xc9\x03v\xf3 \xb2\xc5\xd5\xf0$\xa0KD5\xf4\x9c\xe1\r\xc4\xa0\xd1\'\xadC\xb7Z\f[t\xd1\xadYk\x90vU#\xebp7-\x9f\xb8\xf3A\xb2CX\xd3//\xdd28+\x9dS\"\x9bm\x19\xd0K4a\xe6\xfb\xdb\xf7\xe4K\xb5\xc8\x94_\a\xe61\x91\xe4<@\xc37+\x9c\xb2\xe8E=T\xd5\xb1\'\xc3w\f\'\xd4\x97\xf8\xba\xe8\xa0\n\x8d\xc7\xc9\x7f\xa8\x1d\x88\xa3\x17\xca\xa5e\x7fYj\x82Z\xe9K\xa0T\\\x87u\x8coL\a|\xc8f^\x01\x04\xe4\x8e\x0f\xfe\x16\xa7G\xd4\xa1\xef\xc5\xa7k\x1dE\xb0\x9d!i\x99\\^\\]G?E+\xcd}\xf7i\xe2\xa2\x8dEW\xab\xdc\x8c\xe9Y\xb1\xc8\xc4\x97!\xbc\xf4\xef\xc9\x03v\xf3 \xb2\xc5\xd5\xf0$\xa0KD5\xf4\x9c\xe1\r\xc4\xa0\xd1\'\xadC\xb7Z\f[t\xd1\xadYk\x90v0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000180)={r1, &(0x7f0000000100)=""/65}) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'rose0\x00', 0x200}) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) 5m58.830139932s ago: executing program 1 (id=6817): getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x6, &(0x7f0000000140)=0x2) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x1000001, 0x6100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000300", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x2000000000002]}}) 5m58.820107775s ago: executing program 1 (id=6818): r0 = socket(0x28, 0x6, 0x0) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x4, 0x4, 0x7, 0x9, 0x57e, 0x8, 0x2, 0x28e8, 0x7, 0x9, 0xff, 0x7ffc, 0x805, 0x74a, 0x80000001, 0x7, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff8000, 0x91, 0xffffffff, 0x1, 0x400, 0x2, 0x3, 0x8, 0x8, 0xa2, 0x3, 0x7, 0xfff, 0x4, 0xffffffff, 0x4e6, 0xb13, 0xff, 0x1a5a, 0x10, 0x0, 0x4, 0x4, 0x8b, 0xffffff00, 0x8, 0x224, 0xa, 0x6, 0x9, 0x98f, 0x3d, 0x80000001, 0xfffffff8, 0x2b6395a6, 0x5510, 0x4, 0x9, 0x5, 0x7, 0x7f, 0x5, 0xaf97, 0x0, 0x1, 0x3ff, 0x5, 0x9dc, 0x0, 0x80b1, 0x80, 0x80000001, 0x9, 0x7, 0x3, 0x4, 0x9, 0x1, 0xd640, 0x7, 0x8, 0x3, 0x1, 0x11, 0x9, 0x401, 0x4, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x7, 0x1, 0x4, 0x7fff, 0x8, 0x3, 0x400d07, 0x3, 0x6, 0x2000009, 0xfffffffc, 0x7, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x350d, 0x4, 0x7fff, 0x80, 0x103, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0x3, 0x3ff, 0x3, 0x1, 0x3, 0x7]}}) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x40, 0x0, 0x0, 0x57, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000180)={0x0, 0x6, 0xffff37a4}) (async) getsockopt$sock_cred(r0, 0x1, 0x31, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=0x0}}) (async) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000140)={0x3, "8ff2a5b4bae03bd7382f550f125d5e9e934364675eac5912b8cac7633c4b1281", 0x1, 0x8, 0x1, 0xf900, 0x10020, 0x2}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmmsg(r3, &(0x7f0000008b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000052) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r4, 0x7dfff000) 5m58.782162528s ago: executing program 1 (id=6819): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0xe, 0x0, 0x0, 0x0, @tick=0xdd, {0x4, 0xfc}, {}, @raw32={[0x4, 0xf7c8, 0x72f]}}, {0x0, 0x0, 0x0, 0x0, @time={0x80f, 0x94}, {0x0, 0x4}, {0x3}, @result}, {0x0, 0x0, 0x0, 0x0, @time={0xfffffffc}, {}, {}, @raw32={[0xffff1efe, 0xffff5ca5, 0x7e]}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x80}, {}, {}, @connect={{0x80, 0x6}, {0x3, 0x72}}}], 0x70) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000180)={{0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="b6097db05b90ec058135e463b2e6cf07689785516a2417e87aadcd1a9a3fc36ebf1731026bc0955050bb18", 0x2b) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000140)="3751f02b82f73ccfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd1478a576d9456136ab5f15493d175754e4b666e989869d01d418adc376ca22d8077c1b54bea92b5977a41d70ebcc4735ce6c012a5fe5ab7fef98e864216699a235d615ded3292397894b34a794bc14a2edfdc6978c0c97bcb02de69264d", 0x81}, {&(0x7f0000002600)="6fd8f2937fedf4884807ea89ca30f6f399d2ee10d72680b136744b49d925faef1e138defcc894937b60d6035b2ce015d7a807bf42ad43670b859682e1f06e3", 0x3f}, {&(0x7f0000000400)="c7", 0x1}], 0x3) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x14, r4, 0x813, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8880}, 0x4004080) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {0x2, 0x5, 0x3, 0xffff}, 0x28, [0x0, 0x7, 0x72, 0xd, 0x8, 0x6, 0x2, 0x4, 0x7, 0x1, 0x2, 0x8, 0xa54e, 0x2, 0x780, 0x1, 0x8, 0x4da, 0xf7e, 0x9c, 0xbb, 0x10000, 0x1, 0x4, 0x1, 0x400, 0x5, 0x80, 0x100, 0x9, 0x6, 0x6, 0x1, 0x4, 0xc7c, 0x9, 0x1, 0x80, 0x0, 0x2, 0x9, 0x8, 0x7ff, 0x3, 0xffffffff, 0x918, 0x8, 0x0, 0x10000, 0x7fffffff, 0x7, 0x7, 0x8, 0x8, 0x5, 0x3, 0xd7, 0x7ff, 0xff, 0x7fff, 0x2, 0xa, 0x6, 0x8], [0x100, 0x1ff, 0x9, 0x96150f0, 0x126, 0x3, 0x1000, 0x98b, 0x7, 0x7, 0xe1, 0x0, 0xff, 0x6, 0x3, 0x6, 0xfffffffd, 0x1657, 0x72a7d162, 0x5a90, 0x975c, 0x2, 0x7fffffff, 0x1, 0x7fff, 0x495, 0x92ce, 0xff, 0x6, 0x6, 0xffff8001, 0x101, 0x6, 0x0, 0x7, 0x8, 0x3bb, 0x1, 0xa54, 0x2, 0xd6, 0xffffffff, 0xdcaf, 0x6, 0x9, 0xfffffff6, 0x6, 0xffff, 0x4, 0x7fffffff, 0x1, 0x11fb, 0x9d5, 0x5, 0x7, 0x4, 0x1, 0x101, 0xfe, 0x5, 0x5, 0x0, 0x4, 0x9], [0x8, 0x9, 0x6, 0x3, 0x7, 0xfffffffc, 0xfffffa9b, 0xa, 0x9, 0x10001, 0x7, 0xcd, 0x4, 0x5, 0x0, 0x6, 0x9487, 0xb, 0xfff, 0x7, 0x2, 0x8, 0xf389, 0x6, 0x4, 0x80000000, 0x10001, 0xd2f8, 0x3, 0x5, 0xf9, 0x5, 0x4, 0x7, 0x2, 0x5, 0x841, 0x13, 0x95, 0x2, 0x1ff, 0x7ff, 0x4, 0x40, 0x80000000, 0x7, 0x2, 0x3ff, 0x1, 0x5, 0x8001, 0x3, 0x8, 0x1, 0x0, 0x9, 0x7, 0x0, 0x401, 0x82, 0xfffff678, 0x45a8, 0x4, 0x7e1], [0x5, 0x1, 0x1, 0x9d8, 0x80000000, 0x0, 0x5, 0x10, 0x4, 0xec, 0x2, 0xd, 0x8, 0xc, 0xbca7, 0x4, 0x3, 0x2, 0x9, 0x4, 0x6, 0x1000, 0x7b, 0xdb17, 0xf, 0x7, 0x4, 0x7, 0x7, 0x3ff, 0x388, 0x2, 0xfffffff7, 0x81, 0x4, 0xa4b3, 0xdab, 0x1, 0x2, 0x1, 0x1ff, 0x5, 0x81, 0x8, 0x0, 0x82, 0x4, 0xc, 0x4, 0x8000, 0x1, 0x7, 0x3, 0xffffffff, 0x3, 0x8, 0x8, 0x4, 0x4, 0x80000000, 0x4, 0x6, 0x400, 0x3]}, 0x45c) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c0002800800034000000000000000000000004000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000540)='./file0/file0\x00', 0x0, 0x216f088, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x206d0d1, 0x0) r7 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000000c0)='nsdelegate', &(0x7f0000000140)='&)\x00', 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) 5m58.658147231s ago: executing program 1 (id=6820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a30f5ff0000400003800800014000000000080002400000fbff2b0003801400010067656e65766530"], 0x110}}, 0x0) 5m58.470137438s ago: executing program 1 (id=6826): getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x6, &(0x7f0000000140)=0x2) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x1000001, 0x6100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000500", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x2000000000002]}}) 5m58.389780355s ago: executing program 40 (id=6826): getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x6, &(0x7f0000000140)=0x2) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x1000001, 0x6100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000500", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x2000000000002]}}) 5m1.174665445s ago: executing program 3 (id=7408): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="120086dd0000120000000000000060ec97000f982c00fb8000000000000000000000000000aaff02000000000000000000000000000129"], 0xfce) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r3) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x68240, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000600)=0x65) mmap(&(0x7f000016b000/0x3000)=nil, 0x3000, 0x4, 0x810, r3, 0xd6bb2000) r5 = socket(0x28, 0x5, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x18, 0x209, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x4, 0x8}]}, 0x20}}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, 0x0, &(0x7f0000000100)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$kcm(0x29, 0x0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x3, 0x3, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20004000, &(0x7f0000000180)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 5m1.086118329s ago: executing program 3 (id=7409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e65766530"], 0x110}, 0x1, 0xfffffff5}, 0x0) 5m1.018038364s ago: executing program 3 (id=7410): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b0010000100001000000000000000000fc010000000000000000000000000500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000080"], 0x1b0}}, 0x0) 5m1.017746874s ago: executing program 3 (id=7411): mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) socket$inet6_sctp(0xa, 0x5, 0x84) write$UHID_INPUT(r1, &(0x7f0000000600)={0x9, {"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", 0x1000}}, 0x1006) r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10, 0x80800) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x894b, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x9}}, './cgroup\x00'}) r5 = msgget$private(0x0, 0x7fc) msgrcv(r5, 0x0, 0x0, 0x2, 0x1000) msgrcv(r5, 0xffffffffffffffff, 0x0, 0x0, 0x1000) msgsnd(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="03"], 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f00000001c0)={0x5, 0x18, '\x00', 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0]}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x1410, 0x200, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x44) 5m0.182311535s ago: executing program 3 (id=7412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000680900010073797a300000000034000000030a010100000000000000000100000008000b4000000002040004800900010073797a300000000008000a4000000006"], 0x7c}}, 0x0) 4m59.930412361s ago: executing program 3 (id=7413): pidfd_send_signal(0xffffffffffffffff, 0x2d, 0x0, 0x0) (async, rerun: 64) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) (async) fadvise64(r0, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) 4m59.801164898s ago: executing program 41 (id=7413): pidfd_send_signal(0xffffffffffffffff, 0x2d, 0x0, 0x0) (async, rerun: 64) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) (async) fadvise64(r0, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) 3m52.988822992s ago: executing program 2 (id=7841): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000100ff6b4e3076bbc0b48652ab06a8e96f550fdd52222bef9eca2ef6fcbf4bd5", @ANYRES16=r3, @ANYBLOB="010029bd7000fcdbdf25070000000400018008000400ffffffff04000680"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x4008000) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x1, 0xb, 0x1040e, 0x1, 0xb, 0xd, 0x1, 0x5, 0x0, 0x3, 0x2, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d0003"], 0xac}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000340)={0x5, 0x1, 0x8000}) r6 = memfd_secret(0x80000) readahead(r6, 0x7, 0x0) r7 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r7, 0x402, 0x8000003d) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000240)={0xfffffff, 0x50, 0x5, r7, 0x0, &(0x7f0000000200)={0x0, 0x0, '\x00', @p_u16=&(0x7f00000001c0)=0x5}}) sendfile(r5, r0, 0x0, 0x7ffffffffffffffc) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000080)={0x0, 0x9, 0x0, '\x00', &(0x7f0000000040)=0x9}) 3m52.042965497s ago: executing program 2 (id=7852): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, 0x0) 3m52.041860487s ago: executing program 2 (id=7853): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) (async) r2 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='ethtool\x00', &(0x7f00000000c0)='ethtool\x00', 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r4, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x73}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x2) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x54719dc46f70e798, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8800) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x68}, @void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_1\x00'}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x4ae15bb5cc820353}, 0x4000004) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r7) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xc4, r8, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r9 = accept4(r7, &(0x7f0000000740)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000007c0)=0x80, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r9) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r7, &(0x7f0000000900)={&(0x7f0000000800), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r11, 0x8, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4040800) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), r0) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r12, 0x800, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0), r7) sendmsg$TIPC_NL_NET_SET(r13, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xa4, r14, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async) r15 = open$dir(&(0x7f0000000c40)='./file0\x00', 0x50040, 0x5a53d9462144a354) fchmodat(r15, &(0x7f0000000c80)='./file0\x00', 0x0) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000cc0)={0x5, 0x7, 0x308, 0x4, 0x4, 0x5, 0xfffffffa, 0x392, 0x0}, &(0x7f0000000d00)=0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000d40)={r16, 0x7}, &(0x7f0000000d80)=0x8) r17 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000e00), r13) sendmsg$WG_CMD_SET_DEVICE(r13, &(0x7f0000001e80)={&(0x7f0000000dc0), 0xc, &(0x7f0000001e40)={&(0x7f0000000e40)={0xfdc, r17, 0x100, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0xfb0, 0x8, 0x0, 0x1, [{0x69c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x698, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2b}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x14}}, {0x5, 0x3, 0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}]}]}, {0x1e0, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x1b8, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x42}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}}]}, {0x490, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x2, @remote, 0x7}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xee, @dev={0xfe, 0x80, '\x00', 0xe}, 0x4}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0xeb0}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8000}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ALLOWEDIPS={0x3b8, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0x7}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x39e7}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}, {0x284, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x244, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0xfdc}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000002100)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001f00)={0x1c0, r1, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x24, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff00}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x160, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x158, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x17}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'A/\'<,\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x1b, 0x2, '\x1d\'%!.&/\\^-]({*.{&#{]@\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'macvlan0\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x24, 0x2, '\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20x0}) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000080)=@rnullb, r0, &(0x7f00000002c0)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0xffffffff80802840}}, 0x50) r3 = gettid() syz_open_procfs(r3, &(0x7f0000000040)='timerslack_ns\x00') r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0x1e, 0xa, 0x4, 0x0, 0x89, {}, {0x5, 0x8, 0xc1, 0x6a, 0x5a, 0x5, "a8ed9837"}, 0xfff, 0x2, {&(0x7f00000000c0)=[{0x0, 0x8000, {0x0}, 0xa}, {0x9fb, 0x200d4, {0x0}, 0xfff}]}, 0x5}) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, r2, {{0x7292, 0x80000001, 0x1, r3}}}, 0x28) 2m2.505888944s ago: executing program 7 (id=9038): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbtty_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="043e0b06"], 0xe) 2m2.475122456s ago: executing program 7 (id=9040): getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x6, &(0x7f0000000140)=0x2) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x1000001, 0x6100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000002000", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x2000000000002]}}) 2m2.374099557s ago: executing program 7 (id=9042): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0x6388f000) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xc4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m2.162624929s ago: executing program 7 (id=9047): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000ec0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x11000000, 0x7, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}]}}}], 0x18}}], 0x1, 0x8004) 2m1.541948484s ago: executing program 7 (id=9056): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r0, &(0x7f000000e2c0)=[{&(0x7f000000bf80)=""/147, 0x93}], 0x1, 0x4000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x80) syz_usb_connect(0x3, 0x36, &(0x7f00000021c0)=ANY=[@ANYRESHEX=r1, @ANYBLOB="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"], 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4000000000a, 0x5}, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000980)=ANY=[@ANYBLOB='Cpids'], 0x1f) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) getpid() ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000002c0)={0x6, 0x40000080, 0x1}) r6 = gettid() rt_tgsigqueueinfo(0x0, r6, 0x2a, &(0x7f0000000080)={0x21, 0x15, 0x2}) dup3(r2, r2, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffff9]}, 0x8) read(r7, &(0x7f0000000740)=""/377, 0x179) r8 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="907b22", 0x3, 0xffffffffffffffff) keyctl$revoke(0x3, r8) keyctl$read(0xb, r8, &(0x7f00000018c0)=""/41, 0x29) sendfile(r5, r5, 0x0, 0x7ffff000) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) 2m1.36556059s ago: executing program 43 (id=9056): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r0, &(0x7f000000e2c0)=[{&(0x7f000000bf80)=""/147, 0x93}], 0x1, 0x4000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x80) syz_usb_connect(0x3, 0x36, &(0x7f00000021c0)=ANY=[@ANYRESHEX=r1, @ANYBLOB="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"], 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4000000000a, 0x5}, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000980)=ANY=[@ANYBLOB='Cpids'], 0x1f) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) getpid() ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000002c0)={0x6, 0x40000080, 0x1}) r6 = gettid() rt_tgsigqueueinfo(0x0, r6, 0x2a, &(0x7f0000000080)={0x21, 0x15, 0x2}) dup3(r2, r2, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffff9]}, 0x8) read(r7, &(0x7f0000000740)=""/377, 0x179) r8 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="907b22", 0x3, 0xffffffffffffffff) keyctl$revoke(0x3, r8) keyctl$read(0xb, r8, &(0x7f00000018c0)=""/41, 0x29) sendfile(r5, r5, 0x0, 0x7ffff000) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) 1m30.678030762s ago: executing program 8 (id=9408): capset(&(0x7f0000000040)={0x20080522}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 1m30.626516611s ago: executing program 8 (id=9409): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m30.441371922s ago: executing program 8 (id=9413): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000ec0), 0x0, 0x8004) 1m30.330042376s ago: executing program 8 (id=9414): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000001c0)={'veth1_vlan\x00'}) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@uexit={0x0, 0x18, 0x3b8f}, @rdmsr={0x32, 0x18, {0x8c3}}, @cpuid={0x14, 0x18, {0x4, 0x8}}, @wr_crn={0x46, 0x20, {0x8, 0xe}}, @cpuid={0x14, 0x18, {0x8, 0xd}}, @uexit={0x0, 0x18, 0xfff}, @uexit={0x0, 0x18, 0x80}, @rdmsr={0x32, 0x18, {0xae9}}], 0xc8}) ioctl$KVM_SMI(r2, 0xaeb7) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f00000020c0)=""/4055, &(0x7f0000001080)=0xfd7) r3 = accept$phonet_pipe(r1, &(0x7f0000000200), &(0x7f00000003c0)=0x10) bind$phonet(r3, &(0x7f0000000400)={0x23, 0x1, 0x8, 0x7}, 0x10) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="043e0b06"], 0xe) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) 1m30.308887319s ago: executing program 8 (id=9416): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000ec0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x1c, 0xff97, 0x7, {[@cipso={0x86, 0xc, 0x2, [{0x2, 0x6, "00da81b2"}]}]}}}], 0x20}}], 0x1, 0x8004) 1m30.034249101s ago: executing program 8 (id=9418): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000ec0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}]}}}], 0x18, 0x29000000}}], 0x1, 0x8004) 1m29.741707755s ago: executing program 44 (id=9418): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000ec0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}]}}}], 0x18, 0x29000000}}], 0x1, 0x8004) 5.379553944s ago: executing program 6 (id=10198): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_G_PHYS_ADDR(r0, 0x80026101, &(0x7f0000000040)) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000102, 0x0, 0x0) 3.636000662s ago: executing program 4 (id=10206): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r1, @ANYBLOB="cd3e00000000020000000100000a0800020005000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd2679204"], 0x114}}, 0x0) 3.603961799s ago: executing program 4 (id=10207): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000040)) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000180)={@pptp={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x2b}}}, {&(0x7f0000000080)=""/141, 0x8d}, &(0x7f0000000140), 0x40}, 0xa0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000240)={0x2, 0x0, [{0x2e6, 0x0, 0x6}, {0x29c, 0x0, 0xb}]}) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f00000002c0)={0x9, 0x10, '\x00', 0x1, &(0x7f0000000280)=[0x0, 0x0]}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x3}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000380)={r2, 0x1, 0x0, 0x9, 0x10001}, &(0x7f00000003c0)=0x18) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000400)={r2, 0xb619, 0x20, 0x5, 0x4}, &(0x7f0000000440)=0x18) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000480), 0x22000) fchdir(r3) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000004c0)={r2, 0x6, 0x30, 0x4, 0xfffffffffffffffe}, &(0x7f0000000500)=0x18) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000540)={0x0, 0x0, r0}) socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000580)="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", 0x1000, 0x810, &(0x7f0000001580)={0xa, 0x4e20, 0xfffffff1, @local, 0x19}, 0x1c) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f00000015c0), &(0x7f0000001600)=0x4) write$cgroup_subtree(r0, &(0x7f0000001640)={[{0x2d, 'blkio'}, {0x2d, 'freezer'}, {0x2d, 'perf_event'}, {0x2d, 'devices'}, {0x2d, 'hugetlb'}, {0x2b, 'cpu'}, {0x2d, 'net_cls'}, {0x0, 'rdma'}]}, 0x42) sendto$ax25(r0, &(0x7f00000016c0)="1179334d39968ae62315e6f2eb23d1393d2299a315e584a75a312c69ecab94b9b120e6b2e08d7ae14dc385db02f2448fef01bad0337cca28b4974ab69b28852e08315f98503131f74e121164945561fdaf81edd33dfd20cb98b810199d01e9775dfbd544b484c62b88d1f1c6a2fc6a7848ce63f91c57134b8ad595d2045de32e145fa933566da3a01a6b35c2e2fcf5c7aa874c4286710ce554daf0018e293d663968b8d4eabad76923c498725de4620339acbf493da1788b7e089624513418eea38b53254ca283481bae3c5eec43626395aecb0f8413d768644f", 0xda, 0x20000851, &(0x7f00000017c0)={{0x3, @default}, [@null, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001840)=0x2) write$fb(r0, &(0x7f0000001880)="efc9dd044a9f9375b9335d9cebbe48e3a77183ddaa658fceef6fe1128ff5146e418015fe4f35dc05823c746ca80537863abba1321e125eaaefd9347a22e6d39364fddbd826daae70b9ea56635bdeb260427c0d7dd92322e0198d6023474af2fe6b425c3a32e6a1d24de6142da62dca60ee081ee726daf288a3dcb33737aeea4790e6d14c28159835a4f3d11319f82cd7f1e0d625f577e61d2c37947fe8e437483369842ae4f02a40dc56d5e899eb03aff560f4f5333d4290c4ca533df84d77766cbd4234ea9eaabc27cda7734d877f742648a61dde12d2286a17e474c892c817e44c5c26386c1f33ad6eac0d489aea2df143c047", 0xf4) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000001980)=0x1) ioctl$KVM_GET_TSC_KHZ_cpu(r0, 0xaea3) splice(r3, &(0x7f00000019c0)=0x6, r0, &(0x7f0000001a00), 0x6, 0x1) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000001a40), 0x10c04, 0x0) fcntl$setstatus(r4, 0x4, 0x8000) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000001a80)={0x7, 0xdddd1000, 0x8, r0, 0x9}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SDREQ(r5, &(0x7f0000001d80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001b40)={0x1e8, r6, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x160, 0x13, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [{0x5, 0x1, '^'}, {0xa, 0x1, ']@:,}+'}, {0xe, 0x1, '/dev/vcsa\x00'}, {0xe, 0x1, '/dev/vcsa\x00'}, {0x4}]}, {0x4c, 0x0, 0x0, 0x1, [{0xe, 0x1, '/dev/vcsa\x00'}, {0xb, 0x1, 'net_cls'}, {0x4}, {0x12, 0x1, '/dev/qrtr-tun\x00'}, {0x5, 0x1, '\x00'}, {0x4}, {0x5, 0x1, '\x00'}]}, {0x50, 0x0, 0x0, 0x1, [{0x12, 0x1, '/dev/qrtr-tun\x00'}, {0xe, 0x1, 'perf_event'}, {0x4}, {0x5, 0x1, '/'}, {0x8, 0x1, '^\\^$'}, {0x6, 0x1, '%\\'}, {0x4}, {0x5, 0x1, '.'}]}, {0x50, 0x0, 0x0, 0x1, [{0x4}, {0xe, 0x1, '+[[&-#^<\x95!'}, {0x5, 0x1, '['}, {0xe, 0x1, '/dev/vcsa\x00'}, {0x17, 0x1, ')w+&.![$$-\\],)@!+}-'}, {0x5, 0x1, '$'}]}, {0x34, 0x0, 0x0, 0x1, [{0xb, 0x1, 'net_cls'}, {0x5, 0x1, '/'}, {0x4}, {0x4}, {0xb, 0x1, 'hugetlb'}, {0x6, 0x1, '.+'}]}]}, @NFC_ATTR_LLC_SDP={0x6c, 0x13, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [{0xf, 0x1, '/dev/audio\x00'}, {0x12, 0x1, '/dev/qrtr-tun\x00'}, {0xe, 0x1, 'perf_event'}, {0x8, 0x1, 'rdma'}, {0xb, 0x1, 'net_cls'}]}, {0x18, 0x0, 0x0, 0x1, [{0xb, 0x1, 'devices'}, {0x7, 0x1, '*B{'}]}, {0x4}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x2004c044}, 0x20040040) sendto$inet(r0, &(0x7f0000001dc0)="071865cfa0017b17293e5109fc1d808a9ecface2a2b9d3d3fa262d7959db3565fb373bd2cd865fe52fdac79e10a5582090c249455a83447508f5e736040a93a5a0d304cdf965434129e6d1d6fd4860c5524c3459adf214fa03aa058f27b75eb61390078da76b5e71918617e4699098267cf9b2227fba80ec4d0c5cad4a02df221afdd7829e0ef096ae71c66f0f09e549", 0x90, 0x20080, &(0x7f0000001e80)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 3.530194809s ago: executing program 4 (id=10209): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8000000000000001c826dfcc228290300000000000000000000e7ff00"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r3) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x8003a, [0x8000, 0xc95a, 0xf, 0x401, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff, 0x6, 0x5, 0x7, 0x5, 0x6, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x400006, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x80, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x86, 0x2, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x7, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x3a1, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0xd, 0x1, 0xfe000000, 0x8, 0xfffff274, 0x4, 0x9, 0x3, 0x3, 0x80000000, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x3, 0x9, 0x5, 0x7fff, 0xfffffffc, 0x5, 0xb, 0x4, 0x800005, 0x5, 0x10002, 0x8001ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x4, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0xb, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x4, 0xfffffffa, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807fb, 0xb43, 0x80a2ed, 0x4, 0x40000025], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0xd, 0x4183, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x10, 0x1, 0x2000002, 0x0, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x4, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x87, 0x4, 0x5, 0x803, 0xd7, 0x1fe, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000140)=0x5) ptrace(0x10, r0) ptrace$cont(0x19, r0, 0xd, 0x4) mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nfs\x00', 0x3204811, 0x0) r6 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r6, {0x3ff}}, './cgroup\x00'}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r11, 0x4008ae61, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) r13 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r13, 0x84, 0x71, &(0x7f0000000340)={r12, 0x18}, &(0x7f0000000380)=0xf) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000280)=ANY=[@ANYRES32=r12, @ANYBLOB="090049004ad8680f747a356b72217adadc4a3ed96bda1695ad7bc0f91249b72ae431c134500769d77c96f182f242a53beffa2396737d075a909bac6a071ca9bf1e703cd6647675980af23367f9"], 0x51) 3.419189239s ago: executing program 4 (id=10212): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) r2 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x4, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000140)={{0x7, 0x3, 0x8001, 0xfffffffd, 'syz1\x00', 0x1}, 0x0, 0x20000000, 0x4, r1, 0x1, 0x3, 'syz0\x00', &(0x7f0000000100)=['/dev/vmci\x00'], 0xa}) 3.241180516s ago: executing program 4 (id=10214): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xc8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000000)=@e={0xff, 0xa, 0x6, 0x0, @SEQ_CONTROLLER=0xfe, 0x2, 0x8, 0x8b}) (async, rerun: 32) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "186856f3"}}) (async, rerun: 32) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 2.35046044s ago: executing program 6 (id=10215): mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000000080)='ocfs2\x00', 0x291082, 0x0) (async) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) (async, rerun: 64) ioctl$SNDCTL_TMR_STOP(r0, 0x5403) (async) r2 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x20, 0x11, 0x5, "974fe2667b"}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) pivot_root(&(0x7f0000000140)='./cgroup\x00', &(0x7f00000001c0)='./file0\x00') (async, rerun: 64) syz_usb_control_io(r2, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000800)={0x0, 0x17}, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x20, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)={0x40, 0x1c, 0x1, 0xf7}, &(0x7f0000000cc0)={0x40, 0x1e, 0x1, 0xf8}, 0x0}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'statistic\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "4cb4fc4ba7906e8f58c2052fade1bc2c62cdeb7521cf85ee"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) faccessat(r0, &(0x7f00000000c0)='./cgroup\x00', 0xe1) 2.290381106s ago: executing program 6 (id=10216): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r1, @ANYBLOB="cd3e0000000002000000010000000800020003000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd2679204"], 0x114}}, 0x0) 2.289240026s ago: executing program 6 (id=10217): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000280)={0x1, 0x0, 0x0}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000200)={0x0, 0xfffe, 0x20}, &(0x7f00000001c0)=0x18) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000300)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x6, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000340)="f5c815cd16", 0x5}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000840000000500000000000000c0050000200000000000000084000000020000000a0001000200000005000000", @ANYRES32=0x0, @ANYBLOB="180000005db65ede9efc8926740400000000840000000000"], 0x50, 0x44800}, 0x48040) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000002b000701feffffff00000000037c00000c0001800100000001000000100002800c0001"], 0x30}, 0x1, 0x0, 0x0, 0x404c001}, 0x8010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x8355ad3d9efaaa3c, 0x2) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x2, 0x2ccd95, 0x49bfa}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000240)={0x48, 0x6, r6, 0x0, r7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x22052, r1, 0x2000) 2.1361871s ago: executing program 6 (id=10218): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0) set_mempolicy(0x4, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00009da000/0x3000)=nil, 0x3000, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x22052, r0, 0x2000) 1.868186508s ago: executing program 6 (id=10225): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_G_PHYS_ADDR(r0, 0x80026101, &(0x7f0000000040)) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000102, 0x0, 0x0) 1.789949099s ago: executing program 9 (id=10226): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf002001000000000000000000000000000120010000000000000000000000000001000000004e2100020a0000206c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) getsockopt$inet_int(r0, 0x0, 0xf, 0x0, &(0x7f0000000240)) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000100)=0x3) (async, rerun: 32) getpeername$inet6(r2, 0x0, 0x0) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x17}, "559aee7058b5c7fbf42a40b796e6eaec50c4566fb9699e"}}, 0x1a) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000b, 0x30, 0xffffffffffffffff, 0x5a410000) 1.789694806s ago: executing program 5 (id=10227): mount(&(0x7f0000000100)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='pipefs\x00', 0x808000, 0x0) 1.785300469s ago: executing program 5 (id=10228): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r1, @ANYBLOB="cd3e0000000002000000010000000800020006000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd2679204"], 0x114}}, 0x0) 1.752069104s ago: executing program 9 (id=10229): r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) (async) readv(r0, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000019080)='net/wireless\x00') (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x4880, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{0xb, 0x7, 0xcc, 0xfffffffa}, {0x21e3, 0x9, 0xff, 0x4}, {0x4, 0x9, 0x8f, 0x3a5}, {0x2, 0x5, 0x4, 0xfff}, {0xfff8, 0x3, 0x8, 0x1}, {0x453f, 0xb, 0xc6, 0xff}, {0x8, 0x91, 0x9, 0x1}]}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRESOCT=r3, @ANYBLOB="0b0a301a115c8183f6bd2a4b4b8202ab56e2968b439b082047a82cadb67cb00c353d7dc78dd112b56f3ca9d9858f1843f97f4d33bc46fa97415256d803bafe1f47e32108b37d5f91178877b8bd3dbe97d6a37eb178ce8ab15463b96b4f8e0a6d0becf8bac81069a09acc15a3121a6fbf33905c982ea0137e2066c9f4b47cb541298851ce858ca61ed49aa5ef74a6e50bc92536e7124e78802fa6b96a7f6b2be7e63abde58538c2e55ec200a1eb001c252ea95fd22781355426944ef1a4ee2bad6c6558a595a1311c08aebb6c6a5733446fe5d5e9"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2040) ioctl$BLKRASET(r1, 0x1262, &(0x7f0000000080)) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xc) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119edabebbb1, 0x20011, r1, 0xd56d9000) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0341, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000440)={'virt_wifi0\x00', 0x1}) (async) r7 = syz_init_net_socket$ax25(0x3, 0x0, 0x81105055e07d6237) ioctl$sock_ax25_SIOCADDRT(r7, 0x890b, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) (async) ioctl$TUNSETDEBUG(r8, 0x400454c9, &(0x7f0000000140)=0x4) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="a3000000", @ANYRES16=0x0, @ANYBLOB="080326bd7000fddbdf25030000000800040003000000050005000200000014000100fe880000000000000000000000000101050006000500000005000500030000000c000400050000000d00000018000400040000000000000008000000ff0f0000ff0f0000"], 0x6c}, 0x1, 0x0, 0x0, 0x4008000}, 0x406c004) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) (async) write$cgroup_devices(r8, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close_range(r6, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_SET_DEBUGREGS(r5, 0x4080aea2, &(0x7f0000000000)={[0xe6f48000, 0x4000, 0xeeee0000, 0x4000], 0x6, 0x0, 0x6}) 202.816287ms ago: executing program 4 (id=10230): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) syz_emit_vhci(&(0x7f0000005dc0)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}}}, 0xb) r1 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000940)={0x1, [{0x0, 0xc8, 0xc, &(0x7f0000000200)="528400cb056b282e1b1718559b9116c4172db8abbf0f9f0953"}, {0x3, 0x130, 0x101, &(0x7f0000000240)="3baf57902a61811980e7570c000ae941f6365794c4bdb49d4ed509cf3603ad9a847958d1127f"}, {0x2, 0x508, 0x7, &(0x7f0000000280)="439d63a443d5813ed26138b20b394a9add6300528fce32a959f5f36f7ace8f03efb92aeb8ab612c4aed0fdc7e9a7ce2febc58acc6248a1de589f4c6e1b2584465042bb986d7b498553e8c20e81bd9150eedd8f8f4e89b0c247fb99f9528f71433c245ae9f73fa503c1567173de6f83d35e49706cee45144381eb7221ddb5d6abcfd27fb44c18bb5f901ba303998d7b3e26dc0658dc844b46b7ca15239357b94b38"}, {0x1, 0x0, 0xd, &(0x7f0000000340)}, {0x2, 0x8000, 0x3, &(0x7f0000001180)="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"}, {0x1, 0x170, 0x6, &(0x7f0000000380)="c1575d53569ff31f350fdca3db5464dd6cffafcf8c135567f65eab7d405aee2a46796d28ad8c95bc996449b11aa3"}, {0x0, 0x40, 0x4, &(0x7f00000003c0)="69c94cfdf431e6c6"}, {0x3, 0x3b0, 0x2a, &(0x7f0000000400)="172125243ac6e3271df19b90e0c0f49cc9fefe468c7ba653c444af1c5385beed6a392c7b726c282e9ba540f45fd6be7f5e861c812069bd816b6b3111ab35fa01a657f5810127d1e3fa251e551c2334f60d2bf5f1f4a7144c6d996e20b007eb76be71b16d13dad77ca1614ccb1d163aa391330c45f421"}, {0x1, 0x3f0, 0x1, &(0x7f0000000480)="cf5705d6129b264f4a6f183ff7d38c6c7d99cd858d4bcd2997a600d7476d716e0cd5be62c128331c8c3fc78d97f542466c887caf8c6fddfe32d47cb234a34b539f19d713416ba6cdcf22f5c2526eed8da11832a9229382b591a0f4048a3bf0fb70affcfd0014b8a02b63cfb47a0aa1d59d072fedee1e2156be447e98a89e"}, {0x1, 0x28, 0x1ff, &(0x7f0000000500)="b2a417d255"}, {0x2, 0x2d0, 0x80, &(0x7f0000000540)="bb2ddd089097abc24b42e6636c8d79562f370b5d124bb5ea0fdc01086fd4572b5aebb455e844069d3ee3f53efb8bf909cf85aa7387e1341f37bfffcf9d1242cd307b93286a917d64b52909b7fd175ca9b4481df53b9a9375a309"}, {0x2, 0x1b0, 0xffffffe1, &(0x7f00000005c0)="3b871e15c83294d682e14a815f1dc99c96fa51a1eb23ca09646005878d0c660a524a7914313942182aa3995645162c77cfe6b23a1bf2"}, {0x1, 0x588, 0x1, &(0x7f0000000600)="1233f13a5b90c1e6a94379f889b725546d2ad7e579ab0a4153fc8d566d130babfd0607a0fc71445b42874dd1a3b4b923225c85126815ad8a3379a2e420e3b228f285a76dd05a7b067ef94e7fe69ee576f327f4b63d261b447f8737b28d55c6a1204b22e5c1cc0b35013bcf53fb751df57c9415dde1d09c3c2981baa2dfbe4e7fa1fdf946ce9f59643a723cc541de727170f3fe2911dbebd2aa2921ba98c714e55ac82a359c3acd998bdae406cd1dbe5213"}, {0x2, 0x7a8, 0x3e, &(0x7f00000006c0)="ad398c29a20a1077e42d169e76576c2ec90697960dc5a41b9f04a19a3fa256e30eccda320a0fa0d1ae968ad5156d324de182d889656227740ec376cbf7bd7ede786f1ccd0668f35518d822803fc7f8bd52e919c5cfb9c0164e1b97b397606129377a1f522e61d31f48aff751a520780fb3af0110566fc666072710affe9d441237400ce90a42d9246ded19eef6576ace5b90bf1e24b24e9b18ef17c9c5fbe52b143965d6467c3126fe65b2629c16e9c220683b58715b609202bde029b37a70c7b0a1efcd998df7c1a86b5dc2d15f90ef57a2b0a9d2671ffd0b4f79008aa9eb5c1dd23617b79a11c8ff1f426c14df1fac16cfa1fbae"}, {0x2, 0x2b0, 0xffffff81, &(0x7f00000007c0)="8130f3bb2257d2be95ad696f5863bcf9dc35d318faede7880f1c2ea8d38f8daefeaaa8ea3d32a0a3e3d990c03dce869fc2bc2df905fd8d384f62dcebd5a09938404adb5df30ff3d53c90d91e201bd6a8a31aa1b2aba3"}, {0x0, 0x7a8, 0x0, &(0x7f0000000840)="0e7d1cef5fc1edcaf41e8a86b65066a1355f56886861dbafcedc881344d57f200b2851e82bb404d33817ad6a74f0861aefae3fa6f06c6835f32db3903dd2fc6bb90398882d1e63ef892a151019b6241a653b1b8f1d51e41a91b2b970a9e99af0052fa2ba0bf6d59bff29b9050573fe776db6c7d007a19d5a6dc945f0d869206a6552d6ac2be2170a704faab14e1c8507bdd92012e246ae1ffa731e8077e9bfa0f148d7b7b102ee1f45ee7dc349b3636b54aa41cfa7f401fce0504631833ebd852412d20de69379c16c16e94b6625a387eaa67549923e08536c027429b8c148ad83fb2222a73f89b7da597354cf03b638ae97b60927"}]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r4, &(0x7f00000003c0)=@ret_submit={{0x3, 0x1, 0x0, 0x1, 0x4}, 0x1000, 0x41, 0x5, 0x0, 0xfffffffd, 0x0, "63aabd332185c98e2091fadcd0e494002fb88df7bf1775dc8040cee8627067a872218da96423717a741e35b3d2b3ce00bb0f42f4f47fa5698252c604ab39422c08"}, 0x71) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000340)=0x7, &(0x7f0000000b00)=0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) 202.707517ms ago: executing program 9 (id=10231): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x84882, 0x0) r0 = syz_socket_connect_nvme_tcp() symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r1, 0x33, &(0x7f0000000040)={0xfffffffd, 0xb, 0xab8}, 0x0) mmap(&(0x7f00001aa000/0x4000)=nil, 0x4000, 0x1000001, 0x13, r0, 0x2c39000) 200.307314ms ago: executing program 5 (id=10238): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b0010000100001000000000000000000fc010000000000000000000000000000fff000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000080"], 0x1b0}}, 0x0) 126.329885ms ago: executing program 9 (id=10232): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000500)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/73, 0x49, 0x1, 0x40}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 120.251295ms ago: executing program 5 (id=10233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000034000000030a010100070000000000000100000008000b4000000002040004800900010073797a300000000008000a4000000006"], 0x7c}}, 0x0) 87.726701ms ago: executing program 5 (id=10234): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, &(0x7f00000000c0)) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="cec21ecb139abb087bd8858cfa722a693ec30823e0e65d7c3b05fc578d7afb8b4c78cc5a2b7684282c658364739b6e735a0095122406e09b56e58a430faac6b10b4e4f02cef4471280974985f9692ae193cc295fb34356c4058c88e8863ef49106448e980a4e20b0e9e207874fdcdcea212793", 0x73, 0x6, &(0x7f0000000140)={r5, r6+10000000}) read$msr(r4, &(0x7f0000034000)=""/102386, 0x18ff2) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) 34.320869ms ago: executing program 9 (id=10235): r0 = socket(0x15, 0x5, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x20) (async) getsockname$l2tp6(r0, 0x0, &(0x7f0000000100)) (async) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x600, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000000c0)) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) (async, rerun: 64) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (rerun: 64) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000200)={0xf020000, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x7fff, '\x00', @value64=0x2}}) (async, rerun: 32) fcntl$getownex(r3, 0x10, &(0x7f0000000180)) (async, rerun: 32) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x990a5f, 0x695, '\x00', @p_u8=0x0}}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) (async) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 32) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064d0, &(0x7f0000000140)={0x0}) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000680)="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", 0xfa}], 0x1) 21.149939ms ago: executing program 5 (id=10236): creat(&(0x7f0000001380)='./file0\x00', 0x12c) (async) creat(&(0x7f0000001380)='./file0\x00', 0x12c) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) socket$kcm(0x2, 0xa, 0x2) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a5600442900fe8000000000000000000000000000aaff45"], 0x82) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) (async) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r7, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r7, 0x0) ftruncate(r7, 0xa) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000185000/0x3000)=nil, 0x3000, &(0x7f0000000240)=""/68) (async) mincore(&(0x7f0000185000/0x3000)=nil, 0x3000, &(0x7f0000000240)=""/68) preadv(r6, &(0x7f0000002580)=[{&(0x7f00000013c0)=""/4102, 0x1006}], 0x1, 0x80000001, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f29, 0x80000002, 0x10000, 0x4, 0x0, 0x2, 0x8, 0x7, 0xa, 0x10000100, 0x2, 0x1, 0x1, 0x9, 0x8, 0x101, 0x0, 0x1a449, 0x18003, 0x40000003, 0x2, 0xcaa7, 0x0, 0x8, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) socket$inet(0x2, 0x801, 0x0) (async) r8 = socket$inet(0x2, 0x801, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r8, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 0s ago: executing program 9 (id=10237): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x20011, r0, 0xf648d000) madvise(&(0x7f00002a7000/0x1000)=nil, 0x1000, 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020081000c00050004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) kernel console output (not intermixed with test programs): .496314][ T5946] pwc: recv_control_msg error -71 req 02 val 2400 [ 1098.503780][ T5946] pwc: recv_control_msg error -71 req 02 val 2600 [ 1098.510680][ T5946] pwc: recv_control_msg error -71 req 02 val 2900 [ 1098.517535][ T5946] pwc: recv_control_msg error -71 req 02 val 2800 [ 1098.524472][ T5946] pwc: recv_control_msg error -71 req 04 val 1100 [ 1098.531779][ T5946] pwc: recv_control_msg error -71 req 04 val 1200 [ 1098.539821][ T5946] pwc: Registered as video103. [ 1098.545674][ T5946] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input65 [ 1098.556746][ T3287] binder: 3285:3287 ioctl c0306201 0 returned -14 [ 1098.571419][ T5946] usb 5-1: USB disconnect, device number 62 [ 1098.576260][ T3287] binder: 3285:3287 ioctl c0306201 2000000000c0 returned -11 [ 1098.686076][ T3292] netlink: 40 bytes leftover after parsing attributes in process `syz.9.9723'. [ 1098.737568][ T10] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1098.880505][ T10] usb 6-1: device descriptor read/64, error -71 [ 1099.061352][ T3312] FAULT_INJECTION: forcing a failure. [ 1099.061352][ T3312] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.074739][ T3312] CPU: 0 UID: 0 PID: 3312 Comm: syz.9.9732 Not tainted syzkaller #0 PREEMPT(full) [ 1099.074764][ T3312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1099.074775][ T3312] Call Trace: [ 1099.074782][ T3312] [ 1099.074789][ T3312] dump_stack_lvl+0x189/0x250 [ 1099.074815][ T3312] ? __pfx____ratelimit+0x10/0x10 [ 1099.074834][ T3312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1099.074855][ T3312] ? __pfx__printk+0x10/0x10 [ 1099.074876][ T3312] ? fs_reclaim_acquire+0x7d/0x100 [ 1099.074893][ T3312] ? rcu_is_watching+0x15/0xb0 [ 1099.074911][ T3312] ? __pfx___might_resched+0x10/0x10 [ 1099.074929][ T3312] ? lock_acquire+0x5f/0x360 [ 1099.074945][ T3312] should_fail_ex+0x414/0x560 [ 1099.074969][ T3312] should_failslab+0xa8/0x100 [ 1099.074985][ T3312] __kmalloc_cache_noprof+0x70/0x3a0 [ 1099.075007][ T3312] ? ip_setup_cork+0x299/0x9a0 [ 1099.075023][ T3312] ? ipv4_mtu+0x4b2/0x5c0 [ 1099.075045][ T3312] ip_setup_cork+0x299/0x9a0 [ 1099.075062][ T3312] ip_append_data+0x13b/0x190 [ 1099.075078][ T3312] ? __pfx_udplite_getfrag+0x10/0x10 [ 1099.075097][ T3312] udp_sendmsg+0x3d5/0x2170 [ 1099.075118][ T3312] ? __pfx_udplite_getfrag+0x10/0x10 [ 1099.075136][ T3312] ? __pfx_udp_sendmsg+0x10/0x10 [ 1099.075151][ T3312] ? tomoyo_write_log2+0x250/0x910 [ 1099.075174][ T3312] ? tomoyo_supervisor+0x4b2/0x1480 [ 1099.075204][ T3312] ? rcu_is_watching+0x15/0xb0 [ 1099.075221][ T3312] ? get_random_u32+0x155/0x940 [ 1099.075239][ T3312] ? rcu_is_watching+0x15/0xb0 [ 1099.075255][ T3312] ? get_random_u32+0x155/0x940 [ 1099.075274][ T3312] ? get_random_u32+0x155/0x940 [ 1099.075290][ T3312] ? get_random_u32+0x155/0x940 [ 1099.075307][ T3312] ? get_random_u32+0x4df/0x940 [ 1099.075326][ T3312] ? __pfx_get_random_u32+0x10/0x10 [ 1099.075346][ T3312] udpv6_sendmsg+0xbf0/0x24b0 [ 1099.075370][ T3312] ? udp_lib_get_port+0x164b/0x1b10 [ 1099.075386][ T3312] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1099.075413][ T3312] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1099.075431][ T3312] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1099.075451][ T3312] ? inet_send_prepare+0x1b9/0x270 [ 1099.075470][ T3312] ? inet_send_prepare+0x1b9/0x270 [ 1099.075488][ T3312] ? inet6_sendmsg+0xe4/0x120 [ 1099.075509][ T3312] __sock_sendmsg+0xe5/0x270 [ 1099.075529][ T3312] ____sys_sendmsg+0x52d/0x830 [ 1099.075552][ T3312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1099.075577][ T3312] ? import_iovec+0x74/0xa0 [ 1099.075596][ T3312] ___sys_sendmsg+0x21f/0x2a0 [ 1099.075619][ T3312] ? __pfx____sys_sendmsg+0x10/0x10 [ 1099.075653][ T3312] ? __fget_files+0x2a/0x420 [ 1099.075671][ T3312] ? __fget_files+0x3a0/0x420 [ 1099.075693][ T3312] __sys_sendmmsg+0x227/0x430 [ 1099.075716][ T3312] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1099.075740][ T3312] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1099.075767][ T3312] ? ksys_write+0x22a/0x250 [ 1099.075782][ T3312] ? __pfx_ksys_write+0x10/0x10 [ 1099.075796][ T3312] __x64_sys_sendmmsg+0xa0/0xc0 [ 1099.075814][ T3312] do_syscall_64+0xfa/0xfa0 [ 1099.075831][ T3312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.075843][ T3312] ? clear_bhb_loop+0x60/0xb0 [ 1099.075857][ T3312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.075870][ T3312] RIP: 0033:0x7fad3398ebe9 [ 1099.075883][ T3312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1099.075894][ T3312] RSP: 002b:00007fad3484a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1099.075910][ T3312] RAX: ffffffffffffffda RBX: 00007fad33bb5fa0 RCX: 00007fad3398ebe9 [ 1099.075920][ T3312] RDX: 0000000000000001 RSI: 0000200000000ec0 RDI: 0000000000000003 [ 1099.075929][ T3312] RBP: 00007fad3484a090 R08: 0000000000000000 R09: 0000000000000000 [ 1099.075938][ T3312] R10: 0000000000008004 R11: 0000000000000246 R12: 0000000000000001 [ 1099.075946][ T3312] R13: 00007fad33bb6038 R14: 00007fad33bb5fa0 R15: 00007ffff47a47c8 [ 1099.075961][ T3312] [ 1099.448360][ C0] vkms_vblank_simulate: vblank timer overrun [ 1099.461683][ T10] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1099.480883][ T3314] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9733'. [ 1099.494789][ T3316] /dev/rnullb0: Can't open blockdev [ 1099.597978][ T10] usb 6-1: device descriptor read/64, error -71 [ 1099.708603][ T10] usb usb6-port1: attempt power cycle [ 1099.953650][ T3333] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1100.047646][ T10] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1100.078392][ T10] usb 6-1: device descriptor read/8, error -71 [ 1100.090042][ T3337] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9743'. [ 1100.291500][ T3342] loop7: detected capacity change from 0 to 7 [ 1100.300768][ T3342] loop7: [POWERTEC] p1 [ 1100.327570][ T10] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1100.354329][T30127] udevd[30127]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1100.380066][ T10] usb 6-1: device descriptor read/8, error -71 [ 1100.498464][ T10] usb usb6-port1: unable to enumerate USB device [ 1100.553099][ T3362] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9752'. [ 1100.561908][ T3359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1100.641659][ T51] Bluetooth: hci6: unexpected event for opcode 0x0c7b [ 1100.867592][ T43] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1101.020908][ T43] usb 10-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 1101.030714][ T43] usb 10-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1101.042093][ T43] usb 10-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 1101.053745][ T43] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1101.065751][ T43] usb 10-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1101.078899][ T43] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1101.088084][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.301392][ T3368] /dev/rnullb0: Can't open blockdev [ 1101.307377][ T43] ath6kl: Failed to submit usb control message: -71 [ 1101.314634][ T43] ath6kl: unable to send the bmi data to the device: -71 [ 1101.321988][ T43] ath6kl: Unable to send get target info: -71 [ 1101.328604][ T43] ath6kl: Failed to init ath6kl core: -71 [ 1101.334757][ T43] ath6kl_usb 10-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1101.345534][ T43] usb 10-1: USB disconnect, device number 6 [ 1101.443203][ T3386] __nla_validate_parse: 1 callbacks suppressed [ 1101.443215][ T3386] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9761'. [ 1101.807584][ T5905] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1101.918759][ T3421] netlink: 'syz.9.9772': attribute type 12 has an invalid length. [ 1101.947704][ T5905] usb 6-1: device descriptor read/64, error -71 [ 1101.962406][ T3421] program syz.9.9772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1102.187540][ T5905] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1102.327737][ T5905] usb 6-1: device descriptor read/64, error -71 [ 1102.449029][ T5905] usb usb6-port1: attempt power cycle [ 1102.529935][ T3434] 8021q: VLANs not supported on ip_vti0 [ 1102.609185][ T3441] Option 'TXƮ' to dns_resolver key: bad/missing value [ 1102.663116][ T3447] Invalid logical block size (2) [ 1102.799227][ T5905] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1102.829726][ T5905] usb 6-1: device descriptor read/8, error -71 [ 1102.861537][ T3453] netlink: 'syz.4.9787': attribute type 8 has an invalid length. [ 1102.871409][ T3453] /dev/rnullb0: Can't open blockdev [ 1102.918170][ T10] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1103.088047][ T5905] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1103.096880][ T10] usb 10-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 1103.107090][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.116479][ T5905] usb 6-1: device descriptor read/8, error -71 [ 1103.123690][ T10] usb 10-1: config 0 descriptor?? [ 1103.147643][T15148] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1103.228237][ T5905] usb usb6-port1: unable to enumerate USB device [ 1103.317576][T15148] usb 5-1: Using ep0 maxpacket: 16 [ 1103.324293][T15148] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.335081][T15148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1103.346250][T15148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1103.366118][ T10] kaweth 10-1:0.0: Firmware present in device. [ 1103.372432][T15148] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1103.382961][T15148] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1103.397222][T15148] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1103.406297][T15148] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1103.415317][T15148] usb 5-1: Manufacturer: syz [ 1103.421499][T15148] usb 5-1: config 0 descriptor?? [ 1103.548518][ T10] kaweth 10-1:0.0: Statistics collection: 0 [ 1103.554462][ T10] kaweth 10-1:0.0: Multicast filter limit: 0 [ 1103.560577][ T10] kaweth 10-1:0.0: MTU: 0 [ 1103.564929][ T10] kaweth 10-1:0.0: Read MAC address 00:00:00:00:00:00 [ 1103.751080][ T10] kaweth 10-1:0.0: probe with driver kaweth failed with error -5 [ 1103.764860][ T10] usb 10-1: USB disconnect, device number 7 [ 1104.227815][T15148] rc_core: IR keymap rc-hauppauge not found [ 1104.234841][T15148] Registered IR keymap rc-empty [ 1104.240482][T15148] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1104.267666][T15148] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1104.290233][T15148] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1104.304226][ T3459] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9789'. [ 1104.314192][T15148] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input66 [ 1104.328917][T15148] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1104.358034][T15148] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1104.377556][T15148] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1104.398581][T15148] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1104.417631][T15148] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1104.434600][ T3463] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4243739199 (8487478398 ns) > initial count (2409167910 ns). Using initial count to start timer. [ 1104.453443][T15148] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1104.478140][T15148] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1104.497750][T15148] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1104.518131][T15148] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1104.538594][T15148] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1104.572720][T15148] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1104.602535][T15148] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1104.621381][T15148] usb 5-1: USB disconnect, device number 63 [ 1104.776953][ T3473] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 1105.173823][ T3478] program syz.4.9796 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1105.514892][ T3489] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9798'. [ 1106.230571][ T10] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 1106.254743][ T3515] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9809'. [ 1106.362369][ T3519] netlink: 'syz.5.9811': attribute type 3 has an invalid length. [ 1106.372916][ T3519] netlink: 3 bytes leftover after parsing attributes in process `syz.5.9811'. [ 1106.406646][ T10] usb 10-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1106.417355][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.435181][ T10] usb 10-1: Product: syz [ 1106.448343][ T10] usb 10-1: Manufacturer: syz [ 1106.453204][ T10] usb 10-1: SerialNumber: syz [ 1106.464828][ T10] usb 10-1: config 0 descriptor?? [ 1106.797620][ T5946] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1106.937850][ T5946] usb 6-1: device descriptor read/64, error -71 [ 1107.177559][ T5946] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1107.327666][ T5946] usb 6-1: device descriptor read/64, error -71 [ 1107.437714][ T5946] usb usb6-port1: attempt power cycle [ 1107.777561][ T5946] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1107.790605][ T3544] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9819'. [ 1107.810450][ T5946] usb 6-1: device descriptor read/8, error -71 [ 1107.897890][T15148] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1108.047701][T15148] usb 5-1: Using ep0 maxpacket: 32 [ 1108.056787][T15148] usb 5-1: config 0 has an invalid interface number: 112 but max is 0 [ 1108.057563][ T5946] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1108.065133][T15148] usb 5-1: config 0 has no interface number 0 [ 1108.080767][T15148] usb 5-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=91.32 [ 1108.089082][ T5946] usb 6-1: device descriptor read/8, error -71 [ 1108.089877][T15148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.103975][T15148] usb 5-1: Product: syz [ 1108.108167][T15148] usb 5-1: Manufacturer: syz [ 1108.112752][T15148] usb 5-1: SerialNumber: syz [ 1108.119233][T15148] usb 5-1: config 0 descriptor?? [ 1108.127232][T15148] gspca_main: conex-2.14.0 probing 0572:0041 [ 1108.199059][ T5946] usb usb6-port1: unable to enumerate USB device [ 1108.545186][T15148] usb 5-1: USB disconnect, device number 64 [ 1108.999098][T15148] usb 10-1: USB disconnect, device number 8 [ 1109.152654][ T3559] /dev/rnullb0: Can't open blockdev [ 1109.231683][ T3565] FAULT_INJECTION: forcing a failure. [ 1109.231683][ T3565] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.244431][ T3565] CPU: 1 UID: 0 PID: 3565 Comm: syz.4.9833 Not tainted syzkaller #0 PREEMPT(full) [ 1109.244460][ T3565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1109.244468][ T3565] Call Trace: [ 1109.244474][ T3565] [ 1109.244479][ T3565] dump_stack_lvl+0x189/0x250 [ 1109.244499][ T3565] ? __pfx____ratelimit+0x10/0x10 [ 1109.244512][ T3565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1109.244525][ T3565] ? __pfx__printk+0x10/0x10 [ 1109.244540][ T3565] ? __pfx___might_resched+0x10/0x10 [ 1109.244551][ T3565] ? lock_acquire+0x5f/0x360 [ 1109.244560][ T3565] should_fail_ex+0x414/0x560 [ 1109.244574][ T3565] should_failslab+0xa8/0x100 [ 1109.244584][ T3565] __kmalloc_noprof+0xcb/0x4b0 [ 1109.244598][ T3565] ? kfree+0x4d/0x440 [ 1109.244610][ T3565] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1109.244624][ T3565] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1109.244636][ T3565] ? tomoyo_domain+0xd9/0x130 [ 1109.244650][ T3565] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1109.244659][ T3565] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1109.244669][ T3565] ? lock_release+0x4b/0x3e0 [ 1109.244678][ T3565] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1109.244689][ T3565] ? rcu_is_watching+0x15/0xb0 [ 1109.244700][ T3565] ? lock_release+0x4b/0x3e0 [ 1109.244708][ T3565] ? vfs_write+0x956/0xb30 [ 1109.244718][ T3565] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1109.244736][ T3565] ? __fget_files+0x3a0/0x420 [ 1109.244747][ T3565] ? __fget_files+0x2a/0x420 [ 1109.244758][ T3565] security_file_ioctl+0xcb/0x2d0 [ 1109.244769][ T3565] __se_sys_ioctl+0x47/0x170 [ 1109.244783][ T3565] do_syscall_64+0xfa/0xfa0 [ 1109.244796][ T3565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.244806][ T3565] ? clear_bhb_loop+0x60/0xb0 [ 1109.244816][ T3565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.244826][ T3565] RIP: 0033:0x7f2c2378ebe9 [ 1109.244835][ T3565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1109.244844][ T3565] RSP: 002b:00007f2c219f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1109.244855][ T3565] RAX: ffffffffffffffda RBX: 00007f2c239b5fa0 RCX: 00007f2c2378ebe9 [ 1109.244863][ T3565] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1109.244869][ T3565] RBP: 00007f2c219f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1109.244875][ T3565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1109.244881][ T3565] R13: 00007f2c239b6038 R14: 00007f2c239b5fa0 R15: 00007fff488db6c8 [ 1109.244891][ T3565] [ 1109.244897][ T3565] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1109.293704][ T3566] /dev/rnullb0: Can't open blockdev [ 1109.664089][ T3573] loop7: detected capacity change from 0 to 7 [ 1109.675283][T30127] loop7: [POWERTEC] p1 [ 1109.694211][ T3573] loop7: [POWERTEC] p1 [ 1109.776625][T30127] udevd[30127]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1109.811608][T30127] udevd[30127]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1110.080352][ T3590] netlink: 'syz.9.9836': attribute type 21 has an invalid length. [ 1110.088452][ T3590] netlink: 128 bytes leftover after parsing attributes in process `syz.9.9836'. [ 1110.097642][ T3590] netlink: 'syz.9.9836': attribute type 4 has an invalid length. [ 1110.105434][ T3590] netlink: 3 bytes leftover after parsing attributes in process `syz.9.9836'. [ 1110.128084][T15148] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1110.189785][ T1893] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1110.290196][ T3593] FAULT_INJECTION: forcing a failure. [ 1110.290196][ T3593] name failslab, interval 1, probability 0, space 0, times 0 [ 1110.303117][ T3593] CPU: 1 UID: 0 PID: 3593 Comm: syz.9.9837 Not tainted syzkaller #0 PREEMPT(full) [ 1110.303133][ T3593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1110.303140][ T3593] Call Trace: [ 1110.303144][ T3593] [ 1110.303148][ T3593] dump_stack_lvl+0x189/0x250 [ 1110.303168][ T3593] ? __pfx____ratelimit+0x10/0x10 [ 1110.303181][ T3593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1110.303194][ T3593] ? __pfx__printk+0x10/0x10 [ 1110.303208][ T3593] ? __pfx___might_resched+0x10/0x10 [ 1110.303219][ T3593] ? lock_acquire+0x5f/0x360 [ 1110.303229][ T3593] should_fail_ex+0x414/0x560 [ 1110.303242][ T3593] should_failslab+0xa8/0x100 [ 1110.303252][ T3593] __kmalloc_noprof+0xcb/0x4b0 [ 1110.303266][ T3593] ? tomoyo_encode+0x28b/0x550 [ 1110.303280][ T3593] tomoyo_encode+0x28b/0x550 [ 1110.303295][ T3593] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1110.303308][ T3593] ? tomoyo_domain+0xd9/0x130 [ 1110.303321][ T3593] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1110.303331][ T3593] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1110.303341][ T3593] ? lock_release+0x4b/0x3e0 [ 1110.303350][ T3593] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1110.303361][ T3593] ? rcu_is_watching+0x15/0xb0 [ 1110.303371][ T3593] ? lock_release+0x4b/0x3e0 [ 1110.303379][ T3593] ? vfs_write+0x956/0xb30 [ 1110.303389][ T3593] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1110.303408][ T3593] ? __fget_files+0x3a0/0x420 [ 1110.303419][ T3593] ? __fget_files+0x2a/0x420 [ 1110.303430][ T3593] security_file_ioctl+0xcb/0x2d0 [ 1110.303440][ T3593] __se_sys_ioctl+0x47/0x170 [ 1110.303454][ T3593] do_syscall_64+0xfa/0xfa0 [ 1110.303467][ T3593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.303476][ T3593] ? clear_bhb_loop+0x60/0xb0 [ 1110.303487][ T3593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.303496][ T3593] RIP: 0033:0x7fad3398ebe9 [ 1110.303506][ T3593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1110.303514][ T3593] RSP: 002b:00007fad3484a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1110.303526][ T3593] RAX: ffffffffffffffda RBX: 00007fad33bb5fa0 RCX: 00007fad3398ebe9 [ 1110.303533][ T3593] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1110.303539][ T3593] RBP: 00007fad3484a090 R08: 0000000000000000 R09: 0000000000000000 [ 1110.303545][ T3593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1110.303551][ T3593] R13: 00007fad33bb6038 R14: 00007fad33bb5fa0 R15: 00007ffff47a47c8 [ 1110.303561][ T3593] [ 1110.303572][ T3593] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1110.317837][T15148] usb 6-1: Using ep0 maxpacket: 16 [ 1110.567066][T15148] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.577352][T15148] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1110.589293][ T1893] usb 5-1: Invalid ep0 maxpacket: 9 [ 1110.594870][T15148] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1110.604583][T15148] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1110.614400][T15148] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1110.628985][T15148] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1110.638267][T15148] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1110.646256][T15148] usb 6-1: Manufacturer: syz [ 1110.657827][T15148] usb 6-1: config 0 descriptor?? [ 1110.737950][ T1893] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1110.888089][ T1893] usb 5-1: Invalid ep0 maxpacket: 9 [ 1110.893576][ T1893] usb usb5-port1: attempt power cycle [ 1110.947669][ T5905] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1111.113427][ T5905] usb 10-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1111.122725][ T5905] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.132448][ T5905] usb 10-1: Product: syz [ 1111.136714][ T5905] usb 10-1: Manufacturer: syz [ 1111.141526][ T5905] usb 10-1: SerialNumber: syz [ 1111.147335][ T5905] usb 10-1: config 0 descriptor?? [ 1111.155018][ T5905] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1111.251432][ T1893] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1111.279467][ T1893] usb 5-1: Invalid ep0 maxpacket: 9 [ 1111.417825][ T1893] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1111.461073][ T1893] usb 5-1: Invalid ep0 maxpacket: 9 [ 1111.471306][ T1893] usb usb5-port1: unable to enumerate USB device [ 1111.507873][T15148] rc_core: IR keymap rc-hauppauge not found [ 1111.513939][T15148] Registered IR keymap rc-empty [ 1111.524041][T15148] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1111.547642][T15148] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1111.575412][T15148] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1111.598386][T15148] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input67 [ 1111.620174][T15148] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1111.661361][T15148] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1111.669313][ T5905] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1111.677052][ T5905] sq905c 10-1:0.0: Get version command failed [ 1111.684035][ T5905] sq905c 10-1:0.0: probe with driver sq905c failed with error -110 [ 1111.692407][T15148] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1111.717714][T15148] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1111.770320][T15148] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1111.797739][T15148] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1111.835345][T15148] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1111.857663][T15148] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1111.878926][T15148] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1111.908278][T15148] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1111.943321][T15148] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1111.953291][T15148] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1111.977837][T15148] usb 6-1: USB disconnect, device number 100 [ 1112.907678][ T5905] usb 6-1: new low-speed USB device number 101 using dummy_hcd [ 1113.090926][ T5905] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1113.103744][ T5905] usb 6-1: config 179 has no interface number 0 [ 1113.110968][ T5905] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1113.124578][ T5905] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1113.134746][ T5905] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1113.150951][ T5905] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 1113.164082][ T5905] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1113.185328][ T5905] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1113.198694][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.213813][ T3623] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1113.231737][ T5905] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1113.249474][ T5905] xpad 6-1:179.65: probe with driver xpad failed with error -90 [ 1113.433501][ T5946] usb 6-1: USB disconnect, device number 101 [ 1113.567545][ T43] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1113.715332][ T5946] usb 10-1: USB disconnect, device number 9 [ 1113.737777][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 1113.744259][ T43] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 1113.755448][ T43] usb 5-1: config 0 has no interface number 0 [ 1113.765631][ T43] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1113.776728][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.788304][ T43] usb 5-1: Product: syz [ 1113.792482][ T43] usb 5-1: Manufacturer: syz [ 1113.797069][ T43] usb 5-1: SerialNumber: syz [ 1113.809834][ T43] usb 5-1: config 0 descriptor?? [ 1114.027541][ T43] radio-si470x 5-1:0.35: this is not a si470x device. [ 1114.221287][ T3629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1114.240576][ T3629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.252730][ T3629] netlink: 'syz.4.9850': attribute type 1 has an invalid length. [ 1114.260705][ T3629] netlink: 208 bytes leftover after parsing attributes in process `syz.4.9850'. [ 1114.271956][ T3629] netlink: 'syz.4.9850': attribute type 1 has an invalid length. [ 1114.280470][ T3629] netlink: 'syz.4.9850': attribute type 2 has an invalid length. [ 1114.292488][ T43] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 1114.311180][ T43] usb 5-1: USB disconnect, device number 69 [ 1114.363902][ T3635] /dev/rnullb0: Can't open blockdev [ 1114.371959][ T3637] /dev/rnullb0: Can't open blockdev [ 1114.499505][ T3649] /dev/rnullb0: Can't open blockdev [ 1114.652255][ T3656] syzkaller1: entered promiscuous mode [ 1114.657862][ T3656] syzkaller1: entered allmulticast mode [ 1114.747617][ T43] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1114.772803][ T3658] FAULT_INJECTION: forcing a failure. [ 1114.772803][ T3658] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.788239][ T3658] CPU: 0 UID: 0 PID: 3658 Comm: syz.9.9860 Not tainted syzkaller #0 PREEMPT(full) [ 1114.788264][ T3658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1114.788276][ T3658] Call Trace: [ 1114.788283][ T3658] [ 1114.788291][ T3658] dump_stack_lvl+0x189/0x250 [ 1114.788318][ T3658] ? __pfx____ratelimit+0x10/0x10 [ 1114.788337][ T3658] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1114.788359][ T3658] ? __pfx__printk+0x10/0x10 [ 1114.788378][ T3658] ? rcu_is_watching+0x15/0xb0 [ 1114.788398][ T3658] ? __pfx___might_resched+0x10/0x10 [ 1114.788416][ T3658] ? lock_acquire+0x5f/0x360 [ 1114.788434][ T3658] should_fail_ex+0x414/0x560 [ 1114.788458][ T3658] should_failslab+0xa8/0x100 [ 1114.788476][ T3658] __kmalloc_noprof+0xcb/0x4b0 [ 1114.788497][ T3658] ? security_task_alloc+0x4d/0x360 [ 1114.788515][ T3658] ? perf_event_init_task+0x12d/0x4b0 [ 1114.788537][ T3658] security_task_alloc+0x4d/0x360 [ 1114.788556][ T3658] copy_process+0x1530/0x3c00 [ 1114.788581][ T3658] ? copy_process+0x97f/0x3c00 [ 1114.788603][ T3658] ? __pfx_copy_process+0x10/0x10 [ 1114.788622][ T3658] ? __raw_spin_lock_init+0x45/0x100 [ 1114.788645][ T3658] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1114.788668][ T3658] vhost_task_create+0x1c4/0x290 [ 1114.788688][ T3658] ? arch_stack_walk+0xfc/0x150 [ 1114.788708][ T3658] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1114.788731][ T3658] ? __pfx_vhost_task_create+0x10/0x10 [ 1114.788753][ T3658] ? __pfx_vhost_task_fn+0x10/0x10 [ 1114.788777][ T3658] ? kasan_save_track+0x4f/0x80 [ 1114.788799][ T3658] kvm_mmu_post_init_vm+0x14c/0x300 [ 1114.788817][ T3658] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 1114.788838][ T3658] ? __mutex_trylock_common+0x153/0x260 [ 1114.788858][ T3658] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1114.788877][ T3658] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1114.788896][ T3658] ? rcu_is_watching+0x15/0xb0 [ 1114.788921][ T3658] ? trace_contention_end+0x39/0x120 [ 1114.788939][ T3658] ? __mutex_lock+0x335/0x1350 [ 1114.788965][ T3658] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 1114.788985][ T3658] ? rcu_is_watching+0x15/0xb0 [ 1114.789002][ T3658] ? lock_release+0x4b/0x3e0 [ 1114.789018][ T3658] ? get_task_pid+0x22/0x310 [ 1114.789040][ T3658] kvm_vcpu_ioctl+0x95c/0xe90 [ 1114.789059][ T3658] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1114.789075][ T3658] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1114.789105][ T3658] ? __fget_files+0x3a0/0x420 [ 1114.789123][ T3658] ? __fget_files+0x2a/0x420 [ 1114.789142][ T3658] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1114.789164][ T3658] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1114.789180][ T3658] __se_sys_ioctl+0xf9/0x170 [ 1114.789202][ T3658] do_syscall_64+0xfa/0xfa0 [ 1114.789223][ T3658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.789240][ T3658] ? clear_bhb_loop+0x60/0xb0 [ 1114.789258][ T3658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.789275][ T3658] RIP: 0033:0x7fad3398ebe9 [ 1114.789291][ T3658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1114.789307][ T3658] RSP: 002b:00007fad3484a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1114.789327][ T3658] RAX: ffffffffffffffda RBX: 00007fad33bb5fa0 RCX: 00007fad3398ebe9 [ 1114.789341][ T3658] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1114.789353][ T3658] RBP: 00007fad3484a090 R08: 0000000000000000 R09: 0000000000000000 [ 1114.789365][ T3658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1114.789376][ T3658] R13: 00007fad33bb6038 R14: 00007fad33bb5fa0 R15: 00007ffff47a47c8 [ 1114.789395][ T3658] [ 1115.141726][ C0] vkms_vblank_simulate: vblank timer overrun [ 1115.195001][ T3663] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1115.229091][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 1115.235768][ T43] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1115.244073][ T43] usb 6-1: config 0 has no interface number 0 [ 1115.266531][ T43] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1115.284118][ T43] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 1115.286541][ T3669] /dev/rnullb0: Can't open blockdev [ 1115.299982][ T43] usb 6-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 1115.300007][ T43] usb 6-1: Product: syz [ 1115.300022][ T43] usb 6-1: Manufacturer: syz [ 1115.300034][ T43] usb 6-1: SerialNumber: syz [ 1115.320018][ T43] usb 6-1: config 0 descriptor?? [ 1115.587617][T15148] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1115.755033][T15148] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1115.768831][T15148] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.776997][T15148] usb 10-1: Product: syz [ 1115.781425][T15148] usb 10-1: Manufacturer: syz [ 1115.786167][T15148] usb 10-1: SerialNumber: syz [ 1115.792485][T15148] usb 10-1: config 0 descriptor?? [ 1115.911787][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1115.920935][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.002507][T15148] usb 10-1: USB disconnect, device number 10 [ 1116.214760][ T3673] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9866'. [ 1116.414757][ T3686] FAULT_INJECTION: forcing a failure. [ 1116.414757][ T3686] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.428832][ T3686] CPU: 1 UID: 0 PID: 3686 Comm: syz.4.9871 Not tainted syzkaller #0 PREEMPT(full) [ 1116.428858][ T3686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1116.428878][ T3686] Call Trace: [ 1116.428885][ T3686] [ 1116.428893][ T3686] dump_stack_lvl+0x189/0x250 [ 1116.428921][ T3686] ? __pfx____ratelimit+0x10/0x10 [ 1116.428944][ T3686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1116.428966][ T3686] ? __pfx__printk+0x10/0x10 [ 1116.428989][ T3686] ? fs_reclaim_acquire+0x7d/0x100 [ 1116.429007][ T3686] ? __pfx___might_resched+0x10/0x10 [ 1116.429025][ T3686] ? lock_acquire+0x5f/0x360 [ 1116.429042][ T3686] should_fail_ex+0x414/0x560 [ 1116.429065][ T3686] should_failslab+0xa8/0x100 [ 1116.429082][ T3686] kmem_cache_alloc_node_noprof+0x76/0x390 [ 1116.429104][ T3686] ? alloc_vmap_area+0x26a/0x1490 [ 1116.429129][ T3686] alloc_vmap_area+0x26a/0x1490 [ 1116.429155][ T3686] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1116.429176][ T3686] ? __kasan_kmalloc+0x93/0xb0 [ 1116.429198][ T3686] ? __kmalloc_cache_node_noprof+0x220/0x3a0 [ 1116.429220][ T3686] ? __get_vm_area_node+0x13f/0x300 [ 1116.429242][ T3686] ? copy_process+0x54b/0x3c00 [ 1116.429260][ T3686] __get_vm_area_node+0x1f8/0x300 [ 1116.429285][ T3686] __vmalloc_node_range_noprof+0x301/0x12f0 [ 1116.429301][ T3686] ? copy_process+0x54b/0x3c00 [ 1116.429318][ T3686] ? rcu_is_watching+0x15/0xb0 [ 1116.429337][ T3686] ? percpu_ref_get_many+0x19/0x140 [ 1116.429356][ T3686] ? percpu_ref_get_many+0x19/0x140 [ 1116.429376][ T3686] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1116.429393][ T3686] ? memcpy_and_pad+0x48/0x80 [ 1116.429416][ T3686] __vmalloc_node_noprof+0xc2/0x110 [ 1116.429431][ T3686] ? copy_process+0x54b/0x3c00 [ 1116.429446][ T3686] ? copy_process+0x54b/0x3c00 [ 1116.429463][ T3686] dup_task_struct+0x3e7/0x860 [ 1116.429477][ T3686] copy_process+0x54b/0x3c00 [ 1116.429493][ T3686] ? __pfx_copy_process+0x10/0x10 [ 1116.429506][ T3686] ? __raw_spin_lock_init+0x45/0x100 [ 1116.429519][ T3686] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1116.429533][ T3686] vhost_task_create+0x1c4/0x290 [ 1116.429546][ T3686] ? arch_stack_walk+0xfc/0x150 [ 1116.429558][ T3686] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1116.429573][ T3686] ? __pfx_vhost_task_create+0x10/0x10 [ 1116.429585][ T3686] ? __pfx_vhost_task_fn+0x10/0x10 [ 1116.429599][ T3686] ? kasan_save_track+0x4f/0x80 [ 1116.429614][ T3686] kvm_mmu_post_init_vm+0x14c/0x300 [ 1116.429624][ T3686] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 1116.429636][ T3686] ? __mutex_trylock_common+0x153/0x260 [ 1116.429649][ T3686] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1116.429660][ T3686] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1116.429670][ T3686] ? rcu_is_watching+0x15/0xb0 [ 1116.429680][ T3686] ? trace_contention_end+0x39/0x120 [ 1116.429691][ T3686] ? __mutex_lock+0x335/0x1350 [ 1116.429707][ T3686] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 1116.429718][ T3686] ? rcu_is_watching+0x15/0xb0 [ 1116.429728][ T3686] ? lock_release+0x4b/0x3e0 [ 1116.429736][ T3686] ? get_task_pid+0x22/0x310 [ 1116.429755][ T3686] kvm_vcpu_ioctl+0x95c/0xe90 [ 1116.429765][ T3686] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1116.429774][ T3686] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1116.429792][ T3686] ? __fget_files+0x3a0/0x420 [ 1116.429803][ T3686] ? __fget_files+0x2a/0x420 [ 1116.429814][ T3686] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1116.429828][ T3686] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1116.429836][ T3686] __se_sys_ioctl+0xf9/0x170 [ 1116.429851][ T3686] do_syscall_64+0xfa/0xfa0 [ 1116.429864][ T3686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.429876][ T3686] ? clear_bhb_loop+0x60/0xb0 [ 1116.429887][ T3686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.429896][ T3686] RIP: 0033:0x7f2c2378ebe9 [ 1116.429906][ T3686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1116.429914][ T3686] RSP: 002b:00007f2c219f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1116.429926][ T3686] RAX: ffffffffffffffda RBX: 00007f2c239b5fa0 RCX: 00007f2c2378ebe9 [ 1116.429933][ T3686] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1116.429939][ T3686] RBP: 00007f2c219f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1116.429946][ T3686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1116.429952][ T3686] R13: 00007f2c239b6038 R14: 00007f2c239b5fa0 R15: 00007fff488db6c8 [ 1116.429962][ T3686] [ 1116.430049][ T3686] warn_alloc: 2 callbacks suppressed [ 1116.430058][ T3686] syz.4.9871: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1116.892484][ T3686] CPU: 0 UID: 0 PID: 3686 Comm: syz.4.9871 Not tainted syzkaller #0 PREEMPT(full) [ 1116.892510][ T3686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1116.892521][ T3686] Call Trace: [ 1116.892528][ T3686] [ 1116.892536][ T3686] dump_stack_lvl+0x189/0x250 [ 1116.892565][ T3686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1116.892587][ T3686] ? __pfx__printk+0x10/0x10 [ 1116.892607][ T3686] ? lock_release+0x4b/0x3e0 [ 1116.892625][ T3686] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1116.892646][ T3686] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1116.892667][ T3686] warn_alloc+0x214/0x310 [ 1116.892683][ T3686] ? rcu_is_watching+0x15/0xb0 [ 1116.892703][ T3686] ? __pfx_warn_alloc+0x10/0x10 [ 1116.892720][ T3686] ? kfree+0x18e/0x440 [ 1116.892739][ T3686] ? __get_vm_area_node+0x13f/0x300 [ 1116.892761][ T3686] ? copy_process+0x54b/0x3c00 [ 1116.892780][ T3686] ? __get_vm_area_node+0x211/0x300 [ 1116.892805][ T3686] __vmalloc_node_range_noprof+0x326/0x12f0 [ 1116.892821][ T3686] ? rcu_is_watching+0x15/0xb0 [ 1116.892846][ T3686] ? percpu_ref_get_many+0x19/0x140 [ 1116.892865][ T3686] ? percpu_ref_get_many+0x19/0x140 [ 1116.892885][ T3686] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1116.892903][ T3686] ? memcpy_and_pad+0x48/0x80 [ 1116.892925][ T3686] __vmalloc_node_noprof+0xc2/0x110 [ 1116.892941][ T3686] ? copy_process+0x54b/0x3c00 [ 1116.892962][ T3686] ? copy_process+0x54b/0x3c00 [ 1116.892980][ T3686] dup_task_struct+0x3e7/0x860 [ 1116.893000][ T3686] copy_process+0x54b/0x3c00 [ 1116.893028][ T3686] ? __pfx_copy_process+0x10/0x10 [ 1116.893048][ T3686] ? __raw_spin_lock_init+0x45/0x100 [ 1116.893070][ T3686] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1116.893093][ T3686] vhost_task_create+0x1c4/0x290 [ 1116.893113][ T3686] ? arch_stack_walk+0xfc/0x150 [ 1116.893132][ T3686] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1116.893155][ T3686] ? __pfx_vhost_task_create+0x10/0x10 [ 1116.893178][ T3686] ? __pfx_vhost_task_fn+0x10/0x10 [ 1116.893202][ T3686] ? kasan_save_track+0x4f/0x80 [ 1116.893224][ T3686] kvm_mmu_post_init_vm+0x14c/0x300 [ 1116.893242][ T3686] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 1116.893262][ T3686] ? __mutex_trylock_common+0x153/0x260 [ 1116.893283][ T3686] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1116.893302][ T3686] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1116.893319][ T3686] ? rcu_is_watching+0x15/0xb0 [ 1116.893337][ T3686] ? trace_contention_end+0x39/0x120 [ 1116.893355][ T3686] ? __mutex_lock+0x335/0x1350 [ 1116.893382][ T3686] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 1116.893402][ T3686] ? rcu_is_watching+0x15/0xb0 [ 1116.893420][ T3686] ? lock_release+0x4b/0x3e0 [ 1116.893435][ T3686] ? get_task_pid+0x22/0x310 [ 1116.893458][ T3686] kvm_vcpu_ioctl+0x95c/0xe90 [ 1116.893476][ T3686] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1116.893491][ T3686] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1116.893545][ T3686] ? __fget_files+0x3a0/0x420 [ 1116.893564][ T3686] ? __fget_files+0x2a/0x420 [ 1116.893583][ T3686] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1116.893603][ T3686] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1116.893619][ T3686] __se_sys_ioctl+0xf9/0x170 [ 1116.893642][ T3686] do_syscall_64+0xfa/0xfa0 [ 1116.893663][ T3686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.893686][ T3686] ? clear_bhb_loop+0x60/0xb0 [ 1116.893709][ T3686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.893726][ T3686] RIP: 0033:0x7f2c2378ebe9 [ 1116.893748][ T3686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1116.893763][ T3686] RSP: 002b:00007f2c219f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1116.893783][ T3686] RAX: ffffffffffffffda RBX: 00007f2c239b5fa0 RCX: 00007f2c2378ebe9 [ 1116.893795][ T3686] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1116.893806][ T3686] RBP: 00007f2c219f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1116.893817][ T3686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1116.893834][ T3686] R13: 00007f2c239b6038 R14: 00007f2c239b5fa0 R15: 00007fff488db6c8 [ 1116.893853][ T3686] [ 1116.893994][ T3686] Mem-Info: [ 1117.152494][ T43] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 1117.157332][ T3686] active_anon:9478 inactive_anon:0 isolated_anon:0 [ 1117.157332][ T3686] active_file:18208 inactive_file:46848 isolated_file:0 [ 1117.157332][ T3686] unevictable:2345 dirty:113 writeback:0 [ 1117.157332][ T3686] slab_reclaimable:14278 slab_unreclaimable:110224 [ 1117.157332][ T3686] mapped:38208 shmem:1379 pagetables:2027 [ 1117.157332][ T3686] sec_pagetables:0 bounce:0 [ 1117.157332][ T3686] kernel_misc_reclaimable:0 [ 1117.157332][ T3686] free:1241230 free_pcp:31836 free_cma:0 [ 1117.162715][ T43] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1117.176594][ T3686] Node 0 active_anon:37912kB inactive_anon:0kB active_file:72832kB inactive_file:187260kB unevictable:7844kB isolated(anon):0kB isolated(file):0kB mapped:152832kB dirty:452kB writeback:0kB shmem:3980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:13900kB pagetables:7948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1117.208244][ T43] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1117.215038][ T3686] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1117.229038][ T43] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 1117.252585][ T3686] Node 0 [ 1117.369813][ T43] usb 6-1: USB disconnect, device number 102 [ 1117.400859][ T3686] DMA free:15356kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1117.512924][ T3686] lowmem_reserve[]: 0 2495 2496 2496 2496 [ 1117.524054][ T3686] Node 0 DMA32 free:1097156kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37668kB inactive_anon:0kB active_file:72832kB inactive_file:194292kB unevictable:1544kB writepending:452kB present:3129332kB managed:2555588kB mlocked:20kB bounce:0kB free_pcp:70604kB local_pcp:35984kB free_cma:0kB [ 1117.562620][ T3686] lowmem_reserve[]: 0 0 1 1 1 [ 1117.570199][ T30] audit: type=1326 audit(1756446722.782:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3690 comm="syz.9.9873" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad3398ebe9 code=0x0 [ 1117.592418][ T3686] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1068kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1117.625307][ T3686] lowmem_reserve[]: 0 0 0 0 0 [ 1117.630309][ T3686] Node 1 Normal free:3850004kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:57396kB local_pcp:30888kB free_cma:0kB [ 1117.664373][ T3686] lowmem_reserve[]: 0 0 0 0 0 [ 1117.669283][ T3686] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 1117.685402][ T3686] Node 0 DMA32: 7081*4kB (UME) 5483*8kB (UME) 1538*16kB (UME) 1541*32kB (UME) 972*64kB (UM) 353*128kB (UME) 194*256kB (UME) 72*512kB (UME) 19*1024kB (UM) 13*2048kB (UME) 173*4096kB (UM) = 1094716kB [ 1117.725332][ T3686] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1117.737396][ T3686] Node 1 Normal: 216*4kB (UME) 53*8kB (UME) 56*16kB (UME) 148*32kB (UME) 69*64kB (UME) 34*128kB (UME) 18*256kB (UME) 12*512kB (M) 10*1024kB (UME) 4*2048kB (UM) 929*4096kB (M) = 3850056kB [ 1117.761421][ T3700] loop7: detected capacity change from 0 to 7 [ 1117.770876][ T3700] loop7: [POWERTEC] p1 [ 1117.792822][ T3686] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1117.802808][ T3686] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1117.812478][ T3686] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1117.819891][T30127] udevd[30127]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1117.828270][ T3686] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1117.850439][ T3686] 68465 total pagecache pages [ 1117.855194][ T3706] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 1117.869331][ T3686] 5 pages in swap cache [ 1117.873873][ T3686] Free swap = 124976kB [ 1117.879019][ T3686] Total swap = 124996kB [ 1117.883435][ T3686] 2097051 pages RAM [ 1117.887284][ T3686] 0 pages HighMem/MovableOnly [ 1117.892406][ T3686] 426256 pages reserved [ 1117.896722][ T3686] 0 pages cma reserved [ 1118.396571][ T3717] loop7: detected capacity change from 0 to 7 [ 1118.414513][T30127] loop7: [POWERTEC] p1 [ 1118.424175][ T3717] loop7: [POWERTEC] p1 [ 1118.444695][ T3721] netlink: 96 bytes leftover after parsing attributes in process `syz.6.9885'. [ 1118.480255][T30127] udevd[30127]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1118.570106][T30127] udevd[30127]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1118.639462][ T5905] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1118.767566][ T43] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1118.797584][ T5905] usb 10-1: Using ep0 maxpacket: 16 [ 1118.804460][ T5905] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.815317][ T5905] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1118.826693][ T5905] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1118.836579][ T5905] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1118.849642][ T5905] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1118.864278][ T5905] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1118.875835][ T5905] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1118.884031][ T5905] usb 10-1: Manufacturer: syz [ 1118.890241][ T5905] usb 10-1: config 0 descriptor?? [ 1118.931131][ T43] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1118.942476][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.954913][ T43] usb 6-1: Product: syz [ 1118.964570][ T43] usb 6-1: Manufacturer: syz [ 1118.970632][ T43] usb 6-1: SerialNumber: syz [ 1118.988349][ T43] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1119.005402][ T2153] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1119.424820][ T3725] hfs: can't find a HFS filesystem on dev md0 [ 1119.433520][ T3725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1119.443871][ T3725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1119.454192][ T1893] usb 6-1: USB disconnect, device number 103 [ 1119.697536][ T5905] rc_core: IR keymap rc-hauppauge not found [ 1119.703565][ T5905] Registered IR keymap rc-empty [ 1119.709335][ T5905] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1119.727901][ T5905] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1119.748868][ T5905] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1119.762247][ T5905] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input68 [ 1119.776584][ T5905] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1119.797605][ T5905] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1119.818463][ T5905] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1119.838411][ T5905] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1119.847797][ T5962] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1119.857631][ T5905] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1119.877586][ T5905] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1119.898771][ T5905] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1119.917595][ T5905] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1119.937614][ T5905] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1119.957648][ T5905] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1119.979475][ T5905] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 1119.988583][ T5905] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1120.011075][ T5962] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1120.025404][ T3755] loop7: detected capacity change from 0 to 7 [ 1120.032519][ T5962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1120.044526][ T3755] loop7: [POWERTEC] p1 [ 1120.084057][ T5962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1120.090500][ T5905] usb 10-1: USB disconnect, device number 11 [ 1120.097403][ T1895] udevd[1895]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1120.127691][ T5962] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1120.143669][ T5962] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1120.189241][ T5962] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1120.197393][ T5962] usb 5-1: Manufacturer: syz [ 1120.203664][ T5962] usb 5-1: config 0 descriptor?? [ 1120.231897][ T2153] usb 6-1: Service connection timeout for: 256 [ 1120.240107][ T2153] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1120.249587][ T2153] ath9k_htc: Failed to initialize the device [ 1120.256249][ T1893] usb 6-1: ath9k_htc: USB layer deinitialized [ 1120.420828][ T5962] appleir 0003:05AC:8243.002F: unknown main item tag 0x0 [ 1120.590677][ T5962] appleir 0003:05AC:8243.002F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1120.605937][ T5962] usb 5-1: USB disconnect, device number 70 [ 1120.702769][ T3773] fido_id[3773]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1121.329519][ T3796] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1121.554636][ T3802] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9911'. [ 1121.572215][ T3804] syzkaller1: entered promiscuous mode [ 1121.578110][ T3804] syzkaller1: entered allmulticast mode [ 1121.587045][ T3804] /dev/rnullb0: Can't open blockdev [ 1121.848563][ T3810] loop7: detected capacity change from 0 to 7 [ 1121.872975][ T3810] loop7: [POWERTEC] p1 [ 1121.969789][T30127] udevd[30127]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1122.511667][ T3840] /dev/rnullb0: Can't open blockdev [ 1122.654858][ T3847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.674267][ T3847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1122.886252][ T3851] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1122.887559][ T5962] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1122.892660][ T3851] : renamed from pim6reg1 [ 1122.978649][ C1] vkms_vblank_simulate: vblank timer overrun [ 1123.167787][ T5962] usb 5-1: Using ep0 maxpacket: 32 [ 1123.187147][ T5962] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1123.201388][ T5962] usb 5-1: config 0 has no interface number 0 [ 1123.244143][ T5962] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1123.253707][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.263640][ T5962] usb 5-1: Product: syz [ 1123.268360][ T5962] usb 5-1: Manufacturer: syz [ 1123.273033][ T5962] usb 5-1: SerialNumber: syz [ 1123.285624][ T5962] usb 5-1: config 0 descriptor?? [ 1123.298928][ T5962] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1123.307956][ T5962] usb 5-1: selecting invalid altsetting 1 [ 1123.313715][ T5962] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1123.324403][ T5962] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1123.342109][ T5962] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1123.352865][ T5962] usb 5-1: media controller created [ 1123.373286][ T5962] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1123.527826][ T3847] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1123.541503][ T5962] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1123.553167][ T5962] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1123.568489][ T5962] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1123.634406][ T5962] usb 5-1: USB disconnect, device number 71 [ 1124.067608][ T5962] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 1124.159495][T15148] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1124.197669][ T5962] usb 10-1: device descriptor read/64, error -71 [ 1124.317629][T15148] usb 6-1: Using ep0 maxpacket: 16 [ 1124.324646][T15148] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.335804][T15148] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1124.345647][T15148] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1124.358535][T15148] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1124.367722][T15148] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.379630][T15148] usb 6-1: config 0 descriptor?? [ 1124.437608][ T5962] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 1124.567688][ T5962] usb 10-1: device descriptor read/64, error -71 [ 1124.678802][ T5962] usb usb10-port1: attempt power cycle [ 1124.788993][T15148] shield 0003:0955:7214.0030: unknown main item tag 0x0 [ 1124.796111][T15148] shield 0003:0955:7214.0030: unknown main item tag 0x0 [ 1124.803231][T15148] shield 0003:0955:7214.0030: unknown main item tag 0x0 [ 1124.810338][T15148] shield 0003:0955:7214.0030: unknown main item tag 0x0 [ 1124.818774][T15148] shield 0003:0955:7214.0030: unknown main item tag 0x0 [ 1124.826988][T15148] input: HID 0955:7214 Haptics as /devices/virtual/input/input69 [ 1124.846763][T15148] shield 0003:0955:7214.0030: Registered Thunderstrike controller [ 1124.854866][T15148] shield 0003:0955:7214.0030: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 1125.017978][ T5962] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 1125.038126][ T5962] usb 10-1: device descriptor read/8, error -71 [ 1125.093696][ T3871] netlink: 'syz.5.9936': attribute type 2 has an invalid length. [ 1125.101791][ T3871] netlink: 244 bytes leftover after parsing attributes in process `syz.5.9936'. [ 1125.116758][ T1893] shield 0003:0955:7214.0030: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1125.135046][ T5925] usb 6-1: USB disconnect, device number 104 [ 1125.144121][ T1893] shield 0003:0955:7214.0030: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1125.159530][ T1893] shield 0003:0955:7214.0030: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1125.171599][ T1893] shield 0003:0955:7214.0030: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1125.223625][ T30] audit: type=1326 audit(1756446730.432:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3890 comm="syz.4.9941" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c2378ebe9 code=0x0 [ 1125.245927][ C1] vkms_vblank_simulate: vblank timer overrun [ 1125.317657][ T5962] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 1125.338165][ T5962] usb 10-1: device descriptor read/8, error -71 [ 1125.457564][ T5962] usb usb10-port1: unable to enumerate USB device [ 1126.007775][ T5925] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1126.082206][ T2308] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 1126.161991][ T3911] /dev/rnullb0: Can't open blockdev [ 1126.167745][ T5925] usb 6-1: Using ep0 maxpacket: 16 [ 1126.175484][ T5925] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1126.189767][ T5925] usb 6-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 1126.198897][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.210169][ T5925] usb 6-1: config 0 descriptor?? [ 1126.276490][ T3914] /dev/rnullb0: Can't open blockdev [ 1126.547754][ T1893] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1126.699308][ T1893] usb 5-1: config 3 has an invalid interface number: 254 but max is 2 [ 1126.707697][ T1893] usb 5-1: config 3 has 1 interface, different from the descriptor's value: 3 [ 1126.716610][ T1893] usb 5-1: config 3 has no interface number 0 [ 1126.722782][ T1893] usb 5-1: config 3 interface 254 altsetting 1 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1126.733822][ T1893] usb 5-1: config 3 interface 254 altsetting 1 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1126.744838][ T1893] usb 5-1: config 3 interface 254 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 1126.757965][ T1893] usb 5-1: config 3 interface 254 has no altsetting 0 [ 1126.769091][ T1893] usb 5-1: New USB device found, idVendor=0bda, idProduct=817f, bcdDevice=9d.4e [ 1126.778239][ T1893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.786243][ T1893] usb 5-1: Product: 蚭蒰淋嬠︰릥⎙⣆饽匇枚䋠⁛ᶪꔩ渪瓰ῧ悍ثੁ맕阗괵㾙䃤艨穯狭ⵚ堩桦鵌閲丟超懼䒱鹰룵嶖镱﹕ᓴ훵⣝眵ጂ볞䲰䒑얚酹거竝퐠닐﹨썥被奨邌麻몴蝠쁎裃助閹粜炊 [ 1126.815364][ T1893] usb 5-1: Manufacturer: ࡠ [ 1126.822025][ T1893] usb 5-1: SerialNumber:  [ 1126.831385][ T5905] usb 6-1: USB disconnect, device number 105 [ 1127.049681][ T1893] usb 5-1: USB disconnect, device number 72 [ 1127.188149][ T5925] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1127.337575][ T5925] usb 10-1: Using ep0 maxpacket: 8 [ 1127.350837][ T5925] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1127.362923][ T5925] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.382645][ T5925] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.392567][ T5925] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1127.400002][ T3924] netlink: 'syz.5.9955': attribute type 5 has an invalid length. [ 1127.407539][ T5925] usb 10-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1127.422728][ T5925] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.433849][ T5925] usb 10-1: config 0 descriptor?? [ 1127.498719][ T3929] /dev/rnullb0: Can't open blockdev [ 1127.862404][ T5925] redragon 0003:0C45:760B.0032: Fixing Redragon ASURA report descriptor. [ 1127.877869][ T30] audit: type=1326 audit(1756446733.092:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3937 comm="syz.4.9960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2378ebe9 code=0x7fc00000 [ 1127.879233][ T5925] redragon 0003:0C45:760B.0032: unknown main item tag 0x6 [ 1127.941820][ T5925] redragon 0003:0C45:760B.0032: item fetching failed at offset 7/133 [ 1127.961156][ T5925] redragon 0003:0C45:760B.0032: probe with driver redragon failed with error -22 [ 1128.005364][ T3944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9961'. [ 1128.081369][ T3920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.090464][ T3920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1128.101776][ T5962] usb 10-1: USB disconnect, device number 16 [ 1128.696665][ T3959] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9967'. [ 1128.743215][ T3963] netlink: 40 bytes leftover after parsing attributes in process `syz.9.9968'. [ 1128.756019][ T3965] netlink: 'syz.5.9966': attribute type 1 has an invalid length. [ 1128.770601][ T3965] netlink: 'syz.5.9966': attribute type 1 has an invalid length. [ 1128.856515][ T3968] FAULT_INJECTION: forcing a failure. [ 1128.856515][ T3968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1128.907644][ T3968] CPU: 1 UID: 0 PID: 3968 Comm: syz.9.9969 Not tainted syzkaller #0 PREEMPT(full) [ 1128.907672][ T3968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1128.907684][ T3968] Call Trace: [ 1128.907691][ T3968] [ 1128.907698][ T3968] dump_stack_lvl+0x189/0x250 [ 1128.907726][ T3968] ? __pfx____ratelimit+0x10/0x10 [ 1128.907748][ T3968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1128.907770][ T3968] ? __pfx__printk+0x10/0x10 [ 1128.907789][ T3968] ? __might_fault+0xb0/0x130 [ 1128.907815][ T3968] ? rcu_is_watching+0x15/0xb0 [ 1128.907834][ T3968] should_fail_ex+0x414/0x560 [ 1128.907858][ T3968] _copy_from_user+0x2d/0xb0 [ 1128.907877][ T3968] ___sys_sendmsg+0x158/0x2a0 [ 1128.907901][ T3968] ? __pfx____sys_sendmsg+0x10/0x10 [ 1128.907933][ T3968] ? __fget_files+0x2a/0x420 [ 1128.907951][ T3968] ? __fget_files+0x3a0/0x420 [ 1128.907973][ T3968] __x64_sys_sendmsg+0x19b/0x260 [ 1128.907995][ T3968] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1128.908020][ T3968] ? __pfx_ksys_write+0x10/0x10 [ 1128.908038][ T3968] ? rcu_is_watching+0x15/0xb0 [ 1128.908057][ T3968] do_syscall_64+0xfa/0xfa0 [ 1128.908076][ T3968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.908091][ T3968] ? clear_bhb_loop+0x60/0xb0 [ 1128.908109][ T3968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.908125][ T3968] RIP: 0033:0x7fad3398ebe9 [ 1128.908141][ T3968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1128.908155][ T3968] RSP: 002b:00007fad3484a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1128.908175][ T3968] RAX: ffffffffffffffda RBX: 00007fad33bb5fa0 RCX: 00007fad3398ebe9 [ 1128.908188][ T3968] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 1128.908199][ T3968] RBP: 00007fad3484a090 R08: 0000000000000000 R09: 0000000000000000 [ 1128.908210][ T3968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1128.908221][ T3968] R13: 00007fad33bb6038 R14: 00007fad33bb5fa0 R15: 00007ffff47a47c8 [ 1128.908239][ T3968] [ 1129.776616][ T3984] netlink: 'syz.5.9976': attribute type 21 has an invalid length. [ 1129.969503][ T3988] /dev/rnullb0: Can't open blockdev [ 1130.132123][ T5925] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1130.263310][ T3992] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9979'. [ 1130.407531][ T5925] usb 10-1: Using ep0 maxpacket: 16 [ 1130.421825][ T5925] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.434531][ T5925] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.455862][ T5925] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1130.469051][ T5925] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1130.478411][ T5925] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.498217][ T5925] usb 10-1: config 0 descriptor?? [ 1130.637873][ T4001] loop7: detected capacity change from 0 to 7 [ 1130.647590][ T4001] loop7: [POWERTEC] p1 [ 1130.716897][T30127] udevd[30127]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1130.910813][ T5925] shield 0003:0955:7214.0033: unknown main item tag 0x0 [ 1130.927585][ T5925] shield 0003:0955:7214.0033: unknown main item tag 0x0 [ 1130.944882][ T5925] shield 0003:0955:7214.0033: unknown main item tag 0x0 [ 1130.965142][ T5925] shield 0003:0955:7214.0033: unknown main item tag 0x0 [ 1130.983767][ T5925] shield 0003:0955:7214.0033: unknown main item tag 0x0 [ 1130.993684][ T5925] input: HID 0955:7214 Haptics as /devices/virtual/input/input70 [ 1131.027336][ T5925] shield 0003:0955:7214.0033: Registered Thunderstrike controller [ 1131.040718][ T5925] shield 0003:0955:7214.0033: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0 [ 1131.053892][ T4006] netlink: 328 bytes leftover after parsing attributes in process `syz.5.9985'. [ 1131.140149][ T3970] netlink: 'syz.9.9970': attribute type 2 has an invalid length. [ 1131.147963][ T3970] netlink: 244 bytes leftover after parsing attributes in process `syz.9.9970'. [ 1131.160055][ T5925] shield 0003:0955:7214.0033: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1131.160252][ T5962] usb 10-1: USB disconnect, device number 17 [ 1131.183011][ T5925] shield 0003:0955:7214.0033: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1131.195931][ T5925] shield 0003:0955:7214.0033: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1131.212521][ T5925] shield 0003:0955:7214.0033: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1131.229445][ T43] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1131.412020][ T43] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1131.420745][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1131.435863][ T43] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1131.445141][ T43] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1131.453205][ T43] usb 5-1: Manufacturer: syz [ 1131.454592][ T43] usb 5-1: config 0 descriptor?? [ 1131.549076][ T43] rc_core: IR keymap rc-hauppauge not found [ 1131.555154][ T43] Registered IR keymap rc-empty [ 1131.560764][ T43] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1131.574568][ T43] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input71 [ 1131.626817][ T4033] loop7: detected capacity change from 0 to 7 [ 1131.636033][ T1895] loop7: [POWERTEC] p1 [ 1131.650859][ T4033] loop7: [POWERTEC] p1 [ 1131.697158][T30127] udevd[30127]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1131.725976][T30127] udevd[30127]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1131.782505][ T4038] netlink: 40 bytes leftover after parsing attributes in process `syz.9.9996'. [ 1131.829121][ T4040] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9997'. [ 1131.872546][ T4031] rc rc0: two consecutive events of type space [ 1132.067564][ T5962] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1132.076279][ T5925] usb 5-1: USB disconnect, device number 73 [ 1132.167821][T15148] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1132.217582][ T5962] usb 10-1: Using ep0 maxpacket: 16 [ 1132.224204][ T5962] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1132.234780][ T5962] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1132.245883][ T5962] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1132.255966][ T5962] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1132.265823][ T5962] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1132.279680][ T5962] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1132.289606][ T5962] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1132.297776][ T5962] usb 10-1: Manufacturer: syz [ 1132.303547][ T5962] usb 10-1: config 0 descriptor?? [ 1132.327656][T15148] usb 6-1: Using ep0 maxpacket: 16 [ 1132.335848][T15148] usb 6-1: config 254 has an invalid interface number: 235 but max is 0 [ 1132.344746][T15148] usb 6-1: config 254 has no interface number 0 [ 1132.351316][T15148] usb 6-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1132.361483][T15148] usb 6-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1132.372767][T15148] usb 6-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1132.382947][T15148] usb 6-1: config 254 interface 235 has no altsetting 0 [ 1132.393141][T15148] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1132.402307][T15148] usb 6-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1132.410594][T15148] usb 6-1: Product: syz [ 1132.414760][T15148] usb 6-1: Manufacturer: syz [ 1132.419445][T15148] usb 6-1: SerialNumber: syz [ 1132.425895][ T4045] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1132.634770][ T4045] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1132.643680][T15148] usbtest 6-1:254.235: Linux gadget zero [ 1132.649597][T15148] usbtest 6-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt) [ 1132.847701][ T43] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1132.886323][ T4045] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1132.893416][ T4045] /dev/rnullb0: Can't open blockdev [ 1133.007594][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 1133.014764][ T43] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1133.024107][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.033615][ T43] usb 5-1: config 0 descriptor?? [ 1133.041514][ T43] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1133.108483][ T5962] rc_core: IR keymap rc-hauppauge not found [ 1133.114508][ T5962] Registered IR keymap rc-empty [ 1133.120223][ T5962] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1133.158796][ T5962] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1133.178863][ T5962] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1133.192752][ T5962] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input72 [ 1133.207089][ T5962] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1133.229881][ T5962] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1133.250257][ T5962] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1133.287775][ T5962] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1133.307580][ T5962] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1133.337723][ T5962] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1133.367761][ T5962] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1133.387704][ T5962] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1133.407580][ T5962] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1133.437692][ T5962] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1133.463240][ T5962] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 1133.471997][ T5962] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1133.483122][ T5962] usb 10-1: USB disconnect, device number 18 [ 1133.618517][ T43] gspca_sq930x: ucbus_write failed -71 [ 1133.625388][ T43] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 1133.634953][ T43] usb 5-1: USB disconnect, device number 74 [ 1133.801339][ T30] audit: type=1800 audit(1756446739.012:3894): pid=4055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.10001" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1134.047144][ T4065] FAULT_INJECTION: forcing a failure. [ 1134.047144][ T4065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1134.061833][ T4065] CPU: 1 UID: 0 PID: 4065 Comm: syz.6.10005 Not tainted syzkaller #0 PREEMPT(full) [ 1134.061861][ T4065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1134.061873][ T4065] Call Trace: [ 1134.061880][ T4065] [ 1134.061888][ T4065] dump_stack_lvl+0x189/0x250 [ 1134.061916][ T4065] ? __pfx____ratelimit+0x10/0x10 [ 1134.061935][ T4065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1134.061956][ T4065] ? __pfx__printk+0x10/0x10 [ 1134.061975][ T4065] ? __might_fault+0xb0/0x130 [ 1134.062000][ T4065] ? rcu_is_watching+0x15/0xb0 [ 1134.062019][ T4065] should_fail_ex+0x414/0x560 [ 1134.062042][ T4065] _copy_from_iter+0x1de/0x1790 [ 1134.062061][ T4065] ? rcu_is_watching+0x15/0xb0 [ 1134.062079][ T4065] ? kmem_cache_alloc_node_noprof+0x203/0x390 [ 1134.062103][ T4065] ? __pfx__copy_from_iter+0x10/0x10 [ 1134.062119][ T4065] ? __build_skb_around+0x262/0x3f0 [ 1134.062141][ T4065] ? netlink_sendmsg+0x642/0xb30 [ 1134.062160][ T4065] ? skb_put+0x11b/0x210 [ 1134.062192][ T4065] netlink_sendmsg+0x6b2/0xb30 [ 1134.062215][ T4065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1134.062236][ T4065] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1134.062257][ T4065] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1134.062276][ T4065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1134.062295][ T4065] __sock_sendmsg+0x21c/0x270 [ 1134.062314][ T4065] ____sys_sendmsg+0x505/0x830 [ 1134.062337][ T4065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1134.062361][ T4065] ? import_iovec+0x74/0xa0 [ 1134.062380][ T4065] ___sys_sendmsg+0x21f/0x2a0 [ 1134.062402][ T4065] ? __pfx____sys_sendmsg+0x10/0x10 [ 1134.062437][ T4065] ? __fget_files+0x2a/0x420 [ 1134.062456][ T4065] ? __fget_files+0x3a0/0x420 [ 1134.062478][ T4065] __x64_sys_sendmsg+0x19b/0x260 [ 1134.062501][ T4065] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1134.062526][ T4065] ? __pfx_ksys_write+0x10/0x10 [ 1134.062545][ T4065] ? rcu_is_watching+0x15/0xb0 [ 1134.062567][ T4065] do_syscall_64+0xfa/0xfa0 [ 1134.062588][ T4065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.062605][ T4065] ? clear_bhb_loop+0x60/0xb0 [ 1134.062624][ T4065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.062640][ T4065] RIP: 0033:0x7f9b1af8ebe9 [ 1134.062656][ T4065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1134.062672][ T4065] RSP: 002b:00007f9b1be99038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1134.062691][ T4065] RAX: ffffffffffffffda RBX: 00007f9b1b1b5fa0 RCX: 00007f9b1af8ebe9 [ 1134.062704][ T4065] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 1134.062716][ T4065] RBP: 00007f9b1be99090 R08: 0000000000000000 R09: 0000000000000000 [ 1134.062727][ T4065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1134.062738][ T4065] R13: 00007f9b1b1b6038 R14: 00007f9b1b1b5fa0 R15: 00007fffd07a6968 [ 1134.062757][ T4065] [ 1134.076385][ T4067] netlink: 168 bytes leftover after parsing attributes in process `syz.4.10006'. [ 1134.360897][ T4063] netlink: 'syz.9.10004': attribute type 1 has an invalid length. [ 1134.534570][ T4086] lo: entered promiscuous mode [ 1134.758810][ T4085] lo: left promiscuous mode [ 1134.964350][ T2153] usb 6-1: USB disconnect, device number 106 [ 1134.985249][ T4101] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1135.006603][ T4101] netlink: 40 bytes leftover after parsing attributes in process `syz.9.10017'. [ 1135.439142][ T5905] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1135.597976][ T5905] usb 10-1: Using ep0 maxpacket: 8 [ 1135.610583][ T5905] usb 10-1: config 0 has an invalid interface number: 150 but max is 0 [ 1135.619729][ T5905] usb 10-1: config 0 has an invalid descriptor of length 59, skipping remainder of the config [ 1135.633892][ T5905] usb 10-1: config 0 has no interface number 0 [ 1135.641658][ T5905] usb 10-1: config 0 interface 150 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1135.683007][ T5905] usb 10-1: config 0 interface 150 has no altsetting 0 [ 1135.698848][ T5905] usb 10-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 1135.709394][ T5905] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.722060][ T5905] usb 10-1: config 0 descriptor?? [ 1135.945019][ T5905] usb 10-1: USB disconnect, device number 19 [ 1136.013314][ T4116] /dev/rnullb0: Can't open blockdev [ 1136.088546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1136.715026][ T4123] loop7: detected capacity change from 0 to 7 [ 1136.742035][T30127] loop7: [POWERTEC] p1 [ 1136.750804][ T4123] loop7: [POWERTEC] p1 [ 1136.777377][T30127] udevd[30127]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1136.813544][T30127] udevd[30127]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1136.929204][ T4133] delete_channel: no stack [ 1136.933747][ T4133] delete_channel: no stack [ 1136.940208][ T4133] /dev/rnullb0: Can't open blockdev [ 1136.969378][ T4135] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10028'. [ 1136.978798][ T5962] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1137.015080][ T4140] netlink: 40 bytes leftover after parsing attributes in process `syz.9.10029'. [ 1137.117557][ T43] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1137.127645][ T5962] usb 5-1: Using ep0 maxpacket: 16 [ 1137.133893][ T5962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.144799][ T5962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.155046][ T5962] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1137.167971][ T5962] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1137.177007][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.186515][ T5962] usb 5-1: config 0 descriptor?? [ 1137.269074][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.280153][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.291751][ T43] usb 6-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 1137.300902][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.311216][ T43] usb 6-1: config 0 descriptor?? [ 1137.337609][ T5905] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1137.487503][ T5905] usb 10-1: Using ep0 maxpacket: 32 [ 1137.494272][ T5905] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 1137.502832][ T5905] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1137.512744][ T5905] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1137.521953][ T5905] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1137.531739][ T5905] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1137.541534][ T5905] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1137.554661][ T5905] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1137.563840][ T5905] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.573869][ T5905] usb 10-1: config 0 descriptor?? [ 1137.603190][ T5962] shield 0003:0955:7214.0034: unknown main item tag 0x0 [ 1137.610874][ T5962] shield 0003:0955:7214.0034: unknown main item tag 0x0 [ 1137.619497][ T5962] shield 0003:0955:7214.0034: unknown main item tag 0x0 [ 1137.626486][ T5962] shield 0003:0955:7214.0034: unknown main item tag 0x0 [ 1137.633876][ T5962] shield 0003:0955:7214.0034: unknown main item tag 0x0 [ 1137.642658][ T5962] input: HID 0955:7214 Haptics as /devices/virtual/input/input74 [ 1137.663960][ T5962] shield 0003:0955:7214.0034: Registered Thunderstrike controller [ 1137.673382][ T5962] shield 0003:0955:7214.0034: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 1137.725743][ T43] logitech 0003:046D:C623.0035: item fetching failed at offset 5/7 [ 1137.734520][ T43] logitech 0003:046D:C623.0035: parse failed [ 1137.741255][ T43] logitech 0003:046D:C623.0035: probe with driver logitech failed with error -22 [ 1137.786796][ T5905] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1137.818349][ T5905] usb 10-1: USB disconnect, device number 20 [ 1137.834836][ T5905] usblp0: removed [ 1137.839401][ T4124] netlink: 'syz.4.10023': attribute type 2 has an invalid length. [ 1137.849966][ T4124] netlink: 244 bytes leftover after parsing attributes in process `syz.4.10023'. [ 1137.862537][ T4146] /dev/rnullb0: Can't open blockdev [ 1137.863029][ T43] usb 5-1: USB disconnect, device number 75 [ 1137.874234][ T2153] shield 0003:0955:7214.0034: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1137.897567][ T2153] shield 0003:0955:7214.0034: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1137.915093][ T2153] shield 0003:0955:7214.0034: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1137.932224][ T2153] shield 0003:0955:7214.0034: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1137.960591][T15148] usb 6-1: USB disconnect, device number 107 [ 1138.081115][ T4155] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10035'. [ 1138.308022][ T5905] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1138.360705][ T4169] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10039'. [ 1138.467587][ T5905] usb 10-1: Using ep0 maxpacket: 32 [ 1138.474430][ T5905] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 1138.483541][ T5905] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1138.494323][ T5905] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1138.503777][ T5905] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1138.523932][ T5905] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1138.529431][ T4174] loop7: detected capacity change from 0 to 7 [ 1138.542303][ T4174] loop7: [POWERTEC] p1 [ 1138.546727][ T5905] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1138.562206][ T5905] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1138.572756][ T5905] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.588121][ T5905] usb 10-1: config 0 descriptor?? [ 1138.604070][T30127] udevd[30127]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1138.820747][ T5905] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1139.153362][ T5905] usb 10-1: USB disconnect, device number 21 [ 1139.181736][ T5905] usblp0: removed [ 1139.440512][ T4199] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10050'. [ 1139.457238][ T4199] FAULT_INJECTION: forcing a failure. [ 1139.457238][ T4199] name failslab, interval 1, probability 0, space 0, times 0 [ 1139.478529][ T4199] CPU: 1 UID: 0 PID: 4199 Comm: syz.5.10050 Not tainted syzkaller #0 PREEMPT(full) [ 1139.478555][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1139.478567][ T4199] Call Trace: [ 1139.478574][ T4199] [ 1139.478582][ T4199] dump_stack_lvl+0x189/0x250 [ 1139.478609][ T4199] ? __pfx____ratelimit+0x10/0x10 [ 1139.478629][ T4199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1139.478652][ T4199] ? __pfx__printk+0x10/0x10 [ 1139.478671][ T4199] ? genl_family_rcv_msg_doit+0x267/0x300 [ 1139.478690][ T4199] ? __pfx___might_resched+0x10/0x10 [ 1139.478716][ T4199] ? lock_acquire+0x5f/0x360 [ 1139.478733][ T4199] should_fail_ex+0x414/0x560 [ 1139.478756][ T4199] should_failslab+0xa8/0x100 [ 1139.478774][ T4199] kmem_cache_alloc_node_noprof+0x76/0x390 [ 1139.478797][ T4199] ? __alloc_skb+0x112/0x2d0 [ 1139.478819][ T4199] __alloc_skb+0x112/0x2d0 [ 1139.478840][ T4199] netlink_ack+0x146/0xa50 [ 1139.478857][ T4199] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1139.478872][ T4199] ? __kasan_slab_alloc+0x6c/0x80 [ 1139.478894][ T4199] ? __netlink_lookup+0xbd/0x810 [ 1139.478914][ T4199] ? rcu_is_watching+0x15/0xb0 [ 1139.478936][ T4199] netlink_rcv_skb+0x28c/0x470 [ 1139.478956][ T4199] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1139.478973][ T4199] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1139.478997][ T4199] ? lock_release+0x4b/0x3e0 [ 1139.479014][ T4199] ? down_read+0x1ad/0x2e0 [ 1139.479030][ T4199] genl_rcv+0x28/0x40 [ 1139.479045][ T4199] netlink_unicast+0x82f/0x9e0 [ 1139.479066][ T4199] ? __pfx_netlink_unicast+0x10/0x10 [ 1139.479085][ T4199] ? netlink_sendmsg+0x642/0xb30 [ 1139.479103][ T4199] ? skb_put+0x11b/0x210 [ 1139.479124][ T4199] netlink_sendmsg+0x805/0xb30 [ 1139.479147][ T4199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1139.479169][ T4199] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1139.479189][ T4199] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1139.479209][ T4199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1139.479229][ T4199] __sock_sendmsg+0x21c/0x270 [ 1139.479248][ T4199] ____sys_sendmsg+0x505/0x830 [ 1139.479271][ T4199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1139.479297][ T4199] ? import_iovec+0x74/0xa0 [ 1139.479316][ T4199] ___sys_sendmsg+0x21f/0x2a0 [ 1139.479339][ T4199] ? __pfx____sys_sendmsg+0x10/0x10 [ 1139.479373][ T4199] ? __fget_files+0x2a/0x420 [ 1139.479391][ T4199] ? __fget_files+0x3a0/0x420 [ 1139.479413][ T4199] __x64_sys_sendmsg+0x19b/0x260 [ 1139.479436][ T4199] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1139.479458][ T4199] ? __pfx_ksys_write+0x10/0x10 [ 1139.479472][ T4199] ? rcu_is_watching+0x15/0xb0 [ 1139.479486][ T4199] do_syscall_64+0xfa/0xfa0 [ 1139.479502][ T4199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.479515][ T4199] ? clear_bhb_loop+0x60/0xb0 [ 1139.479529][ T4199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.479542][ T4199] RIP: 0033:0x7f03cc78ebe9 [ 1139.479557][ T4199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1139.479572][ T4199] RSP: 002b:00007f03cd6a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1139.479591][ T4199] RAX: ffffffffffffffda RBX: 00007f03cc9b5fa0 RCX: 00007f03cc78ebe9 [ 1139.479604][ T4199] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 1139.479615][ T4199] RBP: 00007f03cd6a0090 R08: 0000000000000000 R09: 0000000000000000 [ 1139.479627][ T4199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1139.479638][ T4199] R13: 00007f03cc9b6038 R14: 00007f03cc9b5fa0 R15: 00007ffd06df9f88 [ 1139.479657][ T4199] [ 1139.833838][ T5905] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1140.018892][ T5905] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1140.027872][ T5905] usb 5-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=94.24 [ 1140.036925][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.092862][ T5905] usb 5-1: Product: syz [ 1140.097067][ T5905] usb 5-1: Manufacturer: syz [ 1140.127943][ T4207] /dev/rnullb0: Can't open blockdev [ 1140.147324][ T5905] usb 5-1: SerialNumber: syz [ 1140.171834][ T5905] usb 5-1: config 0 descriptor?? [ 1140.199039][ T4212] misc userio: Begin command sent, but we're already running [ 1140.357540][ T43] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1140.394615][ T4197] /dev/rnullb0: Can't open blockdev [ 1140.401408][ T4197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1140.414306][ T4197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1140.449566][ T2153] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1140.469572][ T5905] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1140.484663][ T5905] usb 5-1: USB disconnect, device number 76 [ 1140.507699][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 1140.514226][T30127] udevd[30127]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1140.532882][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1140.546345][ T43] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1140.562916][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.573160][ T43] usb 6-1: Product: syz [ 1140.579435][ T43] usb 6-1: Manufacturer: syz [ 1140.585421][ T43] usb 6-1: SerialNumber: syz [ 1140.590399][ T2153] usb 10-1: device descriptor read/64, error -71 [ 1140.601216][ T43] usb 6-1: config 0 descriptor?? [ 1140.612660][ T43] hub 6-1:0.0: bad descriptor, ignoring hub [ 1140.624538][ T43] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1140.634416][ T43] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input76 [ 1140.827654][ T2153] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1140.947921][ T5946] usb 6-1: USB disconnect, device number 108 [ 1140.957548][ T2153] usb 10-1: device descriptor read/64, error -71 [ 1141.070182][ T2153] usb usb10-port1: attempt power cycle [ 1141.407569][ T2153] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1141.427976][ T2153] usb 10-1: device descriptor read/8, error -71 [ 1141.487114][ T4229] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10059'. [ 1141.667572][ T2153] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1141.698276][ T2153] usb 10-1: device descriptor read/8, error -71 [ 1141.806970][ T4244] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10065'. [ 1141.817073][ T2153] usb usb10-port1: unable to enumerate USB device [ 1142.332568][ T4249] overlayfs: failed to resolve './file0/file0': -2 [ 1142.915102][ T4255] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10069'. [ 1142.926656][ T4255] FAULT_INJECTION: forcing a failure. [ 1142.926656][ T4255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1142.943484][ T4255] CPU: 1 UID: 0 PID: 4255 Comm: syz.4.10069 Not tainted syzkaller #0 PREEMPT(full) [ 1142.943508][ T4255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1142.943519][ T4255] Call Trace: [ 1142.943526][ T4255] [ 1142.943533][ T4255] dump_stack_lvl+0x189/0x250 [ 1142.943559][ T4255] ? __pfx____ratelimit+0x10/0x10 [ 1142.943579][ T4255] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1142.943600][ T4255] ? __pfx__printk+0x10/0x10 [ 1142.943623][ T4255] ? rcu_is_watching+0x15/0xb0 [ 1142.943642][ T4255] should_fail_ex+0x414/0x560 [ 1142.943665][ T4255] _copy_to_user+0x31/0xb0 [ 1142.943684][ T4255] simple_read_from_buffer+0xe1/0x170 [ 1142.943704][ T4255] proc_fail_nth_read+0x1b3/0x220 [ 1142.943726][ T4255] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1142.943747][ T4255] ? rw_verify_area+0x2a6/0x4d0 [ 1142.943764][ T4255] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1142.943785][ T4255] vfs_read+0x200/0xa30 [ 1142.943800][ T4255] ? fdget_pos+0x247/0x320 [ 1142.943820][ T4255] ? __pfx___mutex_lock+0x10/0x10 [ 1142.943841][ T4255] ? __pfx_vfs_read+0x10/0x10 [ 1142.943859][ T4255] ? __fget_files+0x3a0/0x420 [ 1142.943877][ T4255] ? __fget_files+0x2a/0x420 [ 1142.943898][ T4255] ksys_read+0x145/0x250 [ 1142.943914][ T4255] ? __pfx_ksys_read+0x10/0x10 [ 1142.943931][ T4255] ? rcu_is_watching+0x15/0xb0 [ 1142.943949][ T4255] do_syscall_64+0xfa/0xfa0 [ 1142.943969][ T4255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.943985][ T4255] ? clear_bhb_loop+0x60/0xb0 [ 1142.944003][ T4255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.944019][ T4255] RIP: 0033:0x7f2c2378d5fc [ 1142.944034][ T4255] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1142.944049][ T4255] RSP: 002b:00007f2c219f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1142.944067][ T4255] RAX: ffffffffffffffda RBX: 00007f2c239b5fa0 RCX: 00007f2c2378d5fc [ 1142.944080][ T4255] RDX: 000000000000000f RSI: 00007f2c219f60a0 RDI: 0000000000000003 [ 1142.944091][ T4255] RBP: 00007f2c219f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1142.944102][ T4255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1142.944112][ T4255] R13: 00007f2c239b6038 R14: 00007f2c239b5fa0 R15: 00007fff488db6c8 [ 1142.944130][ T4255] [ 1143.298686][ T5925] usb 6-1: new low-speed USB device number 109 using dummy_hcd [ 1143.447766][ T5925] usb 6-1: device descriptor read/64, error -71 [ 1143.458291][ T4270] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10074'. [ 1143.697982][ T5925] usb 6-1: new low-speed USB device number 110 using dummy_hcd [ 1143.848597][ T5925] usb 6-1: device descriptor read/64, error -71 [ 1143.957813][ T5925] usb usb6-port1: attempt power cycle [ 1144.085154][ T4296] netlink: 'syz.4.10081': attribute type 11 has an invalid length. [ 1144.129511][ T4300] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1144.337685][ T5925] usb 6-1: new low-speed USB device number 111 using dummy_hcd [ 1144.359400][ T5925] usb 6-1: device descriptor read/8, error -71 [ 1144.457914][ T5905] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1144.598610][ T5925] usb 6-1: new low-speed USB device number 112 using dummy_hcd [ 1144.618618][ T5925] usb 6-1: device descriptor read/8, error -71 [ 1144.625771][ T5905] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1144.636984][ T5905] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1144.647099][ T5905] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1144.658554][ T5905] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.668887][ T4300] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1144.679692][ T5905] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1144.729849][ T5925] usb usb6-port1: unable to enumerate USB device [ 1144.913827][ T2153] usb 10-1: USB disconnect, device number 26 [ 1145.104491][ T4308] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10085'. [ 1145.218014][ T4316] zonefs (loop4) ERROR: Not a zoned block device [ 1145.553141][ T4326] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1145.742217][ T4334] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10094'. [ 1145.755440][ T4338] /dev/rnullb0: Can't open blockdev [ 1145.761192][ T4337] /dev/rnullb0: Can't open blockdev [ 1146.062423][ T4348] ALSA: mixer_oss: invalid index 100000 [ 1146.117752][ T2153] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 1146.292043][ T2153] usb 5-1: not running at top speed; connect to a high speed hub [ 1146.314711][ T2153] usb 5-1: config 9 has an invalid interface number: 133 but max is 0 [ 1146.341135][ T2153] usb 5-1: config 9 has no interface number 0 [ 1146.354894][ T2153] usb 5-1: config 9 interface 133 has no altsetting 0 [ 1146.372542][ T2153] usb 5-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=93.9b [ 1146.388039][ T2153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.410382][ T2153] usb 5-1: Product: syz [ 1146.422430][ T2153] usb 5-1: Manufacturer: syz [ 1146.431515][ T2153] usb 5-1: SerialNumber: syz [ 1146.654496][ T2153] pegasus 5-1:9.133: probe with driver pegasus failed with error -71 [ 1146.683328][ T2153] usb 5-1: USB disconnect, device number 77 [ 1146.722343][ T4362] netlink: 40 bytes leftover after parsing attributes in process `syz.9.10105'. [ 1146.752358][ T4364] /dev/sg0: Can't lookup blockdev [ 1146.909618][ T4374] /dev/rnullb0: Can't open blockdev [ 1147.220604][ T4388] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10115'. [ 1147.355113][ T4396] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1147.392871][ T4398] loop7: detected capacity change from 0 to 7 [ 1147.400304][T30127] loop7: [POWERTEC] p1 [ 1147.413947][ T4398] loop7: [POWERTEC] p1 [ 1147.450222][T30127] udevd[30127]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1147.467274][T30127] udevd[30127]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1147.519108][ T43] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1147.667565][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 1147.674429][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1147.685534][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1147.695339][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1147.708369][ T43] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1147.717403][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.733189][ T43] usb 5-1: config 0 descriptor?? [ 1147.857592][ T5905] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1147.987527][ T5905] usb 6-1: device descriptor read/64, error -71 [ 1148.143222][ T43] shield 0003:0955:7214.0036: unknown main item tag 0x0 [ 1148.150348][ T43] shield 0003:0955:7214.0036: unknown main item tag 0x0 [ 1148.157320][ T43] shield 0003:0955:7214.0036: unknown main item tag 0x0 [ 1148.165441][ T43] shield 0003:0955:7214.0036: unknown main item tag 0x0 [ 1148.172501][ T43] shield 0003:0955:7214.0036: unknown main item tag 0x0 [ 1148.186276][ T43] input: HID 0955:7214 Haptics as /devices/virtual/input/input77 [ 1148.204164][ T43] shield 0003:0955:7214.0036: Registered Thunderstrike controller [ 1148.212656][ T43] shield 0003:0955:7214.0036: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 1148.237749][ T5905] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1148.346188][ T4394] netlink: 'syz.4.10116': attribute type 2 has an invalid length. [ 1148.354327][ T4394] netlink: 244 bytes leftover after parsing attributes in process `syz.4.10116'. [ 1148.366321][ T5946] shield 0003:0955:7214.0036: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1148.377936][ T5962] usb 5-1: USB disconnect, device number 78 [ 1148.386784][ T5905] usb 6-1: device descriptor read/64, error -71 [ 1148.394344][ T5946] shield 0003:0955:7214.0036: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1148.415888][ T5946] shield 0003:0955:7214.0036: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1148.427115][ T5946] shield 0003:0955:7214.0036: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1148.509932][ T5905] usb usb6-port1: attempt power cycle [ 1148.709647][ T5946] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1148.847574][ T5905] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1148.869344][ T5905] usb 6-1: device descriptor read/8, error -71 [ 1148.869678][ T5946] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1148.885557][ T5946] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.906050][ T5946] usb 10-1: config 0 descriptor?? [ 1148.919123][ T4415] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10124'. [ 1149.107659][ T5905] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1149.129621][ T5905] usb 6-1: device descriptor read/8, error -71 [ 1149.237855][ T5905] usb usb6-port1: unable to enumerate USB device [ 1150.277617][ T5905] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 1150.429550][ T5905] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1150.440606][ T5905] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1150.451360][ T5905] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1150.460517][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.469214][ T5905] usb 5-1: Product: syz [ 1150.473390][ T5905] usb 5-1: Manufacturer: syz [ 1150.478193][ T5905] usb 5-1: SerialNumber: syz [ 1150.484829][ T4427] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1150.697076][ T4427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1150.717726][ T4427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.740035][ T5905] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 1150.753912][ T5905] usb 5-1: USB disconnect, device number 79 [ 1151.035567][ T4413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1151.047885][ T4413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1151.178306][ T4413] /dev/rnullb0: Can't open blockdev [ 1151.195382][ T5946] usb 10-1: Cannot set autoneg [ 1151.208068][ T5946] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1151.229695][ T5946] usb 10-1: USB disconnect, device number 27 [ 1151.257084][ T4439] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10134'. [ 1151.301344][ T4441] /dev/rnullb0: Can't open blockdev [ 1151.357155][ T4449] syz.4.10138(4449): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1151.404210][ T30] audit: type=1326 audit(1756446756.612:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4446 comm="syz.5.10137" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f03cc78ebe9 code=0x0 [ 1151.431280][ T4452] loop7: detected capacity change from 0 to 7 [ 1151.443137][ T4452] loop7: [POWERTEC] p1 [ 1151.517223][T30127] udevd[30127]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1151.740437][ T4462] binder: BINDER_SET_CONTEXT_MGR already set [ 1151.747615][ T4462] binder: 4461:4462 ioctl 4018620d 200000004a80 returned -16 [ 1151.907734][ T5925] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1152.067713][ T5925] usb 5-1: Using ep0 maxpacket: 16 [ 1152.076135][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.090645][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1152.100964][ T5925] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1152.116934][ T5925] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1152.127248][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.139818][ T5925] usb 5-1: config 0 descriptor?? [ 1152.235195][ T4465] /dev/rnullb0: Can't open blockdev [ 1152.565007][ T5925] shield 0003:0955:7214.0037: unknown main item tag 0x0 [ 1152.573867][ T5925] shield 0003:0955:7214.0037: unknown main item tag 0x0 [ 1152.581904][ T5925] shield 0003:0955:7214.0037: unknown main item tag 0x0 [ 1152.590007][ T5925] shield 0003:0955:7214.0037: unknown main item tag 0x0 [ 1152.596988][ T5925] shield 0003:0955:7214.0037: unknown main item tag 0x0 [ 1152.606003][ T5925] input: HID 0955:7214 Haptics as /devices/virtual/input/input78 [ 1152.629701][ T5925] shield 0003:0955:7214.0037: Registered Thunderstrike controller [ 1152.641508][ T5925] shield 0003:0955:7214.0037: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 1152.766394][ T4460] netlink: 'syz.4.10141': attribute type 2 has an invalid length. [ 1152.776173][ T4460] netlink: 244 bytes leftover after parsing attributes in process `syz.4.10141'. [ 1152.791817][ T5925] shield 0003:0955:7214.0037: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1152.807063][ T10] usb 5-1: USB disconnect, device number 80 [ 1152.816174][ T5925] shield 0003:0955:7214.0037: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1152.827875][ T5925] shield 0003:0955:7214.0037: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1152.841641][ T5925] shield 0003:0955:7214.0037: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1152.941068][ T4472] netlink: 40 bytes leftover after parsing attributes in process `syz.9.10145'. [ 1153.014679][ T4478] loop7: detected capacity change from 0 to 7 [ 1153.021526][ T4478] loop7: [POWERTEC] p1 [ 1153.057025][T30127] udevd[30127]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1153.700858][ T4505] loop7: detected capacity change from 0 to 7 [ 1153.712802][T30127] loop7: [POWERTEC] p1 [ 1153.733851][ T4505] loop7: [POWERTEC] p1 [ 1153.822823][T30127] udevd[30127]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1153.869853][T30127] udevd[30127]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1153.958884][ T4513] /dev/rnullb0: Can't open blockdev [ 1154.137795][ T2153] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1154.238783][ T4527] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1154.330767][ T4534] loop7: detected capacity change from 0 to 7 [ 1154.338625][ T4534] loop7: [POWERTEC] p1 [ 1154.424090][ T2153] usb 6-1: Using ep0 maxpacket: 32 [ 1154.452499][ T2153] usb 6-1: config 0 has an invalid interface number: 211 but max is 0 [ 1154.467591][ T2153] usb 6-1: config 0 has no interface number 0 [ 1154.473718][ T2153] usb 6-1: config 0 interface 211 has no altsetting 0 [ 1154.527134][ T4537] /dev/rnullb0: Can't open blockdev [ 1154.543259][ T4540] netlink: 'syz.4.10169': attribute type 13 has an invalid length. [ 1154.552394][ T4536] Invalid logical block size (7) [ 1154.572911][T30127] udevd[30127]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1154.680278][ T2153] usb 6-1: New USB device found, idVendor=2304, idProduct=022c, bcdDevice=3c.89 [ 1154.693840][ T2153] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.718470][ T2153] usb 6-1: Product: syz [ 1154.730350][ T2153] usb 6-1: Manufacturer: syz [ 1154.740160][ T2153] usb 6-1: SerialNumber: syz [ 1154.751396][ T2153] usb 6-1: config 0 descriptor?? [ 1154.837950][ T5905] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 1154.971570][ T2153] dvb-usb: found a 'Pinnacle PCTV 2000e' in warm state. [ 1154.994567][ T2153] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1155.015668][ T2153] dvbdev: DVB: registering new adapter (Pinnacle PCTV 2000e) [ 1155.017907][ T5905] usb 5-1: not running at top speed; connect to a high speed hub [ 1155.032969][ T2153] usb 6-1: media controller created [ 1155.052451][ T5905] usb 5-1: config 4 has an invalid interface number: 114 but max is 1 [ 1155.065234][ T5905] usb 5-1: config 4 has an invalid interface number: 221 but max is 1 [ 1155.076994][ T2153] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1155.081413][ T5905] usb 5-1: config 4 has no interface number 0 [ 1155.095061][ T5905] usb 5-1: config 4 has no interface number 1 [ 1155.101589][ T5905] usb 5-1: config 4 interface 221 altsetting 4 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1155.125242][ T5905] usb 5-1: config 4 interface 221 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 1155.136263][ T5905] usb 5-1: config 4 interface 221 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1155.148941][ T5905] usb 5-1: config 4 interface 221 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 1155.160393][ T5905] usb 5-1: config 4 interface 221 altsetting 4 endpoint 0x84 has invalid maxpacket 1023, setting to 64 [ 1155.176712][ T5905] usb 5-1: config 4 interface 221 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 1155.188149][ T5905] usb 5-1: config 4 interface 221 altsetting 4 endpoint 0x86 has invalid maxpacket 983, setting to 64 [ 1155.192191][ T4510] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10159'. [ 1155.199192][ T5905] usb 5-1: config 4 interface 221 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1155.219431][ T5905] usb 5-1: config 4 interface 221 altsetting 4 endpoint 0xB has invalid maxpacket 1056, setting to 64 [ 1155.254969][ T5905] usb 5-1: config 4 interface 221 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 1155.273345][ T2153] DVB: Unable to find symbol dib7000p_attach() [ 1155.277710][ T5905] usb 5-1: config 4 interface 221 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 1155.283602][ T2153] dvb-usb: no frontend was attached by 'Pinnacle PCTV 2000e' [ 1155.301586][ T5905] usb 5-1: config 4 interface 221 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1155.309007][ T2153] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1155.322369][ T5905] usb 5-1: config 4 interface 221 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 1155.329577][ T2153] dvbdev: DVB: registering new adapter (Pinnacle PCTV 2000e) [ 1155.338618][ T5905] usb 5-1: config 4 interface 221 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1155.351640][ T2153] usb 6-1: media controller created [ 1155.362829][ T5905] usb 5-1: config 4 interface 221 has no altsetting 0 [ 1155.369174][ T2153] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1155.381006][ T5905] usb 5-1: New USB device found, idVendor=0856, idProduct=ac03, bcdDevice=8d.42 [ 1155.394037][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.404550][ T5905] usb 5-1: Product: syz [ 1155.424684][ T2153] DVB: Unable to find symbol dib7000p_attach() [ 1155.431357][ T5905] usb 5-1: Manufacturer: 㬬솻垡옯ﲶꏸ迕ஹរ㞺셇焭ɼ幔텾望䍩∦㝁罢〽䗯ㆭ措쓬Ꜵ㬧ꗂ鰀䳆䀳ꕸ젢䷧桙ꩤ蝱㒌녊ꤍ㱔꿗⪅礹ꥷ灈䇹哄왳꺇ǀ觐对⟐跳땍姎虱ᣳ豫쟙⬇웄㑸琭虁喲恉용㎫ಊ萨ꌟ埸蹥ҐἺ૔博깜ᑷ [ 1155.431391][ T5905] usb 5-1: SerialNumber: syz [ 1155.465036][ T2153] dvb-usb: no frontend was attached by 'Pinnacle PCTV 2000e' [ 1155.845703][ T5905] ftdi_sio 5-1:4.114: FTDI USB Serial Device converter detected [ 1155.877989][ T5905] ftdi_sio ttyUSB0: unknown device type: 0x8d42 [ 1155.885619][ T4573] loop7: detected capacity change from 0 to 7 [ 1155.896864][ T5905] ftdi_sio 5-1:4.221: FTDI USB Serial Device converter detected [ 1155.906086][T29153] loop7: [POWERTEC] p1 [ 1155.918713][ T5905] ftdi_sio ttyUSB1: unknown device type: 0x8d42 [ 1155.931350][ T4573] loop7: [POWERTEC] p1 [ 1155.977092][ T5905] usb 5-1: USB disconnect, device number 81 [ 1156.015639][ T5905] ftdi_sio 5-1:4.114: device disconnected [ 1156.043082][T29153] udevd[29153]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1156.095430][ T5905] ftdi_sio 5-1:4.221: device disconnected [ 1156.163318][ T1895] udevd[1895]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1156.387486][ T2153] rc_core: IR keymap rc-dib0700-rc5 not found [ 1156.393591][ T2153] Registered IR keymap rc-empty [ 1156.411114][ T2153] dvb-usb: could not initialize remote control. [ 1156.417600][ T2153] dvb-usb: Pinnacle PCTV 2000e successfully initialized and connected. [ 1156.433876][ T2153] usb 6-1: USB disconnect, device number 117 [ 1156.501345][ T2153] dvb-usb: Pinnacle PCTV 2000e successfully deinitialized and disconnected. [ 1156.688574][ T5946] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1156.719683][ T5946] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1156.824403][ T4593] /dev/rnullb0: Can't open blockdev [ 1156.846934][ T4595] netlink: 40 bytes leftover after parsing attributes in process `syz.9.10186'. [ 1156.898225][ T4590] hid-generic 0000:0000:0000.0038: pid 4590 passed too large report [ 1156.900917][ T4601] loop7: detected capacity change from 0 to 7 [ 1156.914344][ T4601] loop7: [POWERTEC] p1 [ 1156.950241][T30127] udevd[30127]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1156.973912][ T4603] genirq: Flags mismatch irq 5. 00200000 (pcl818) vs. 00200000 (dt2814) [ 1157.009836][ T4605] binder_alloc: 4604: binder_alloc_buf, no vma [ 1157.045235][ T4607] fuse: Bad value for 'fd' [ 1157.124680][ T4609] netlink: 57 bytes leftover after parsing attributes in process `syz.9.10190'. [ 1157.367538][ T5946] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1157.527512][ T5946] usb 10-1: Using ep0 maxpacket: 8 [ 1157.534109][ T5946] usb 10-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1157.554102][ T5946] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1157.561559][ T5946] usb 10-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.00 [ 1157.573794][ T5946] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.584921][ T5946] usb 10-1: config 0 descriptor?? [ 1157.718034][ T4614] /dev/rnullb0: Can't open blockdev [ 1157.817632][ T4607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1157.829489][ T4607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1158.028130][ T5962] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1158.197603][ T5962] usb 5-1: Using ep0 maxpacket: 16 [ 1158.207163][ T5962] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1158.216599][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.225641][ T5962] usb 5-1: Product: syz [ 1158.230120][ T5962] usb 5-1: Manufacturer: syz [ 1158.234846][ T5962] usb 5-1: SerialNumber: syz [ 1158.244574][ T5962] usb 5-1: config 0 descriptor?? [ 1158.377405][ T5946] usbhid 10-1:0.0: can't add hid device: -71 [ 1158.402596][ T5946] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1158.425366][ T5946] usb 10-1: USB disconnect, device number 28 [ 1158.649566][ T4632] /dev/rnullb0: Can't open blockdev [ 1158.654355][ T4633] loop7: detected capacity change from 0 to 7 [ 1158.663971][ T1895] loop7: [POWERTEC] p1 [ 1158.668480][ T5962] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1158.678515][ T5962] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1158.761344][ T4633] loop7: [POWERTEC] p1 [ 1158.767963][ T5962] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1158.775902][ T5962] usb 5-1: media controller created [ 1158.808434][ T5962] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1158.829833][ T1895] udevd[1895]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1158.871546][ T5962] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1158.882786][ T5962] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1158.930597][ T1895] udevd[1895]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1158.971504][ T4639] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1158.978053][ T4639] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1158.991431][ T4639] vhci_hcd vhci_hcd.0: Device attached [ 1159.076388][ T5925] usb 5-1: USB disconnect, device number 82 [ 1159.110354][ T5925] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1159.167584][ T5962] vhci_hcd: vhci_device speed not set [ 1159.229609][ T5962] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 1159.237538][ T5946] usb 6-1: new low-speed USB device number 118 using dummy_hcd [ 1159.390627][ T5946] usb 6-1: config index 0 descriptor too short (expected 19692, got 27) [ 1159.399942][ T5946] usb 6-1: config 216 has too many interfaces: 207, using maximum allowed: 32 [ 1159.411634][ T5946] usb 6-1: config 216 has an invalid descriptor of length 140, skipping remainder of the config [ 1159.423448][ T5946] usb 6-1: config 216 has 0 interfaces, different from the descriptor's value: 207 [ 1159.436545][ T5946] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1159.447028][ T5946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.659900][ T4649] /dev/rnullb0: Can't open blockdev [ 1159.680698][ T4640] usb 43-1: recv xbuf, 0 [ 1159.696092][ T13] vhci_hcd: stop threads [ 1159.700967][ T13] vhci_hcd: release socket [ 1159.705591][ T13] vhci_hcd: disconnect device [ 1159.744184][ T5946] usb 6-1: string descriptor 0 read error: -71 [ 1159.755634][ T5946] usb 6-1: USB disconnect, device number 118 [ 1159.767564][ T5962] vhci_hcd: vhci_device speed not set [ 1159.927526][ T5925] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1160.077626][ T5925] usb 5-1: Using ep0 maxpacket: 16 [ 1160.084629][ T5925] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 1160.093362][ T5925] usb 5-1: config 0 has no interface number 0 [ 1160.099518][ T5925] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1160.112177][ T5925] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1160.121268][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.129355][ T5925] usb 5-1: Product: syz [ 1160.133517][ T5925] usb 5-1: Manufacturer: syz [ 1160.138311][ T5925] usb 5-1: SerialNumber: syz [ 1160.145376][ T5925] usb 5-1: config 0 descriptor?? [ 1160.352511][ T5925] usbtouchscreen 5-1:0.214: Failed to read FW rev: 0 [ 1160.361111][ T5925] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 1160.397485][ T5925] usb 5-1: USB disconnect, device number 83 [ 1160.420886][ T4662] /dev/rnullb0: Can't open blockdev [ 1160.441412][ T4664] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10206'. [ 1160.608968][ T4677] /dev/rnullb0: Can't open blockdev [ 1160.742221][ T4687] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 1160.748778][ T4687] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1160.759438][ T4687] vhci_hcd vhci_hcd.0: Device attached [ 1160.938273][ T5925] vhci_hcd: vhci_device speed not set [ 1160.997526][ T5925] usb 51-1: new full-speed USB device number 2 using vhci_hcd [ 1161.007559][ T10] usb 10-1: new low-speed USB device number 29 using dummy_hcd [ 1161.017681][ T2153] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1161.097614][ T1893] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1161.159026][ T10] usb 10-1: config index 0 descriptor too short (expected 19692, got 27) [ 1161.168731][ T10] usb 10-1: config 216 has too many interfaces: 207, using maximum allowed: 32 [ 1161.171795][ T2153] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 1161.177985][ T10] usb 10-1: config 216 has an invalid descriptor of length 140, skipping remainder of the config [ 1161.190935][ T2153] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 1161.199872][ T10] usb 10-1: config 216 has 0 interfaces, different from the descriptor's value: 207 [ 1161.214217][ T2153] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1161.220693][ T10] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1161.230831][ T2153] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.238480][ T1893] usb 5-1: device descriptor read/64, error -71 [ 1161.252628][ T2153] usb 6-1: config 0 descriptor?? [ 1161.252648][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.475031][ T4688] usb 51-1: recv xbuf, 0 [ 1161.492601][ T1893] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1161.500410][ T10] usb 10-1: string descriptor 0 read error: -71 [ 1161.511583][ T3010] vhci_hcd: stop threads [ 1161.515850][ T3010] vhci_hcd: release socket [ 1161.523574][ T10] usb 10-1: USB disconnect, device number 29 [ 1161.531443][ T3010] vhci_hcd: disconnect device [ 1161.563212][ T2153] ath6kl: Failed to submit usb control message: -71 [ 1161.572714][ T2153] ath6kl: unable to send the bmi data to the device: -71 [ 1161.581947][ T2153] ath6kl: Unable to send get target info: -71 [ 1161.591878][ T2153] ath6kl: Failed to init ath6kl core: -71 [ 1161.599277][ T2153] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1161.601292][ T5925] vhci_hcd: vhci_device speed not set [ 1161.616424][ T2153] usb 6-1: USB disconnect, device number 119 [ 1161.667739][ T1893] usb 5-1: device descriptor read/64, error -71 [ 1161.771376][ T4706] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10216'. [ 1161.782316][ T1893] usb usb5-port1: attempt power cycle [ 1161.807005][ T4708] netlink: 'syz.6.10217': attribute type 1 has an invalid length. [ 1162.147522][ T1893] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1162.172581][ T1893] usb 5-1: device descriptor read/8, error -71 [ 1162.319178][ T4733] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10228'. [ 1162.427720][ T1893] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1162.450467][ T1893] usb 5-1: device descriptor read/8, error -71 [ 1162.557911][ T1893] usb usb5-port1: unable to enumerate USB device [ 1163.935105][ T4743] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1163.941655][ T4743] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1163.950522][ T4743] vhci_hcd vhci_hcd.0: Device attached [ 1163.954820][ T4747] binder: BINDER_SET_CONTEXT_MGR already set [ 1163.967886][ T4747] binder: 4746:4747 ioctl 4018620d 200000004a80 returned -16 [ 1164.105156][ T4760] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI [ 1164.117093][ T4760] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 1164.125515][ T4760] CPU: 0 UID: 0 PID: 4760 Comm: syz.5.10236 Not tainted syzkaller #0 PREEMPT(full) [ 1164.134894][ T4760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1164.137716][ T5946] vhci_hcd: vhci_device speed not set [ 1164.144946][ T4760] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 1164.155828][ T4760] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d9 85 2b f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 b8 85 2b f9 4d 8b 24 24 48 83 c3 [ 1164.175442][ T4760] RSP: 0018:ffffc90004387a40 EFLAGS: 00010206 [ 1164.181518][ T4760] RAX: 0000000000000005 RBX: ffff88806a8dc780 RCX: ffff88807d303c00 [ 1164.189495][ T4760] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88802eeb2000 [ 1164.197503][ T4760] RBP: 0000000000000000 R08: ffff88802eeb212f R09: 1ffff11005dd6425 [ 1164.205530][ T4760] R10: dffffc0000000000 R11: ffffffff88f8cd30 R12: 0000000000000028 [ 1164.207628][ T5946] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 1164.213510][ T4760] R13: dffffc0000000000 R14: ffff88802eeb2000 R15: dffffc0000000000 [ 1164.213527][ T4760] FS: 00007f03cd67f6c0(0000) GS:ffff8881257c4000(0000) knlGS:0000000000000000 [ 1164.213542][ T4760] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1164.244460][ T4760] CR2: 0000200000002588 CR3: 000000006ee10000 CR4: 00000000003526f0 [ 1164.252435][ T4760] Call Trace: [ 1164.255698][ T4760] [ 1164.258615][ T4760] pcl818_detach+0x66/0xd0 [ 1164.263017][ T4760] comedi_device_detach_locked+0x175/0x750 [ 1164.268809][ T4760] ? security_capable+0x7e/0x2e0 [ 1164.273733][ T4760] comedi_unlocked_ioctl+0xcde/0x1020 [ 1164.277543][ T5962] usb 5-1: new low-speed USB device number 88 using dummy_hcd [ 1164.279095][ T4760] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1164.292302][ T4760] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 1164.297921][ T4760] ? vfs_readv+0x25d/0x850 [ 1164.302321][ T4760] ? __pfx_vfs_readv+0x10/0x10 [ 1164.307065][ T4760] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1164.312942][ T4760] ? do_futex+0x395/0x420 [ 1164.317262][ T4760] ? __se_sys_futex+0x36f/0x400 [ 1164.322098][ T4760] ? __fget_files+0x3a0/0x420 [ 1164.326759][ T4760] ? __fget_files+0x2a/0x420 [ 1164.331334][ T4760] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1164.336272][ T4760] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1164.342063][ T4760] __se_sys_ioctl+0xf9/0x170 [ 1164.346643][ T4760] do_syscall_64+0xfa/0xfa0 [ 1164.351132][ T4760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.357185][ T4760] ? clear_bhb_loop+0x60/0xb0 [ 1164.361848][ T4760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.367740][ T4760] RIP: 0033:0x7f03cc78ebe9 [ 1164.372152][ T4760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1164.391739][ T4760] RSP: 002b:00007f03cd67f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1164.400134][ T4760] RAX: ffffffffffffffda RBX: 00007f03cc9b6090 RCX: 00007f03cc78ebe9 [ 1164.408097][ T4760] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 000000000000000d [ 1164.416048][ T4760] RBP: 00007f03cc811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1164.423999][ T4760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1164.431953][ T4760] R13: 00007f03cc9b6128 R14: 00007f03cc9b6090 R15: 00007ffd06df9f88 [ 1164.438926][ T5962] usb 5-1: config index 0 descriptor too short (expected 19692, got 27) [ 1164.439909][ T4760] [ 1164.439934][ T4760] Modules linked in: [ 1164.449364][ T5962] usb 5-1: config 216 has too many interfaces: 207, using maximum allowed: 32 [ 1164.451220][ T4760] [ 1164.451244][ C0] vkms_vblank_simulate: vblank timer overrun [ 1164.455167][ T5962] usb 5-1: config 216 has an invalid descriptor of length 140, skipping remainder of the config [ 1164.465380][ T4760] ---[ end trace 0000000000000000 ]--- [ 1164.481847][ T5962] usb 5-1: config 216 has 0 interfaces, different from the descriptor's value: 207 [ 1164.485496][ T4760] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 1164.490339][ T5962] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1164.498287][ T4760] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d9 85 2b f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 b8 85 2b f9 4d 8b 24 24 48 83 c3 [ 1164.504997][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.513225][ T4760] RSP: 0018:ffffc90004387a40 EFLAGS: 00010206 [ 1164.549297][ T4760] RAX: 0000000000000005 RBX: ffff88806a8dc780 RCX: ffff88807d303c00 [ 1164.557578][ T4760] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88802eeb2000 [ 1164.565578][ T4760] RBP: 0000000000000000 R08: ffff88802eeb212f R09: 1ffff11005dd6425 [ 1164.573894][ T4760] R10: dffffc0000000000 R11: ffffffff88f8cd30 R12: 0000000000000028 [ 1164.583416][ T4760] R13: dffffc0000000000 R14: ffff88802eeb2000 R15: dffffc0000000000 [ 1164.591656][ T4760] FS: 00007f03cd67f6c0(0000) GS:ffff8881257c4000(0000) knlGS:0000000000000000 [ 1164.600756][ T4760] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1164.607367][ T4760] CR2: 0000000000000000 CR3: 000000006ee10000 CR4: 00000000003526f0 [ 1164.615664][ T4760] Kernel panic - not syncing: Fatal exception [ 1164.622002][ T4760] Kernel Offset: disabled [ 1164.626313][ T4760] Rebooting in 86400 seconds..