last executing test programs: 24m5.30320203s ago: executing program 32 (id=418): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{}, 'syz0\x00', 0x52}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1ac) 15m16.693614435s ago: executing program 1 (id=3936): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0x40000000015, 0x5, 0x0) getpeername$inet(r1, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4, 0x0, 0x9, 0x5, 0x0, 0x70bd2b, 0x25dfdbfe, [@sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70fd25, 0x3506}, @sadb_x_nat_t_type={0x1, 0x14, 0xad}]}, 0x28}, 0x1, 0x7}, 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x1008, 0x0) 15m16.451319445s ago: executing program 1 (id=3938): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@md0, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='affs\x00', 0x224003, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', &(0x7f0000001480), 0x4000) newfstatat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', &(0x7f0000001500), 0x2000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001580)) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000015c0)) read$FUSE(r0, &(0x7f0000001600)={0x2020}, 0x2020) gettid() fstat(r0, &(0x7f0000003640)) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359c", 0x34000}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c"], 0x30}], 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r3, 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0x45809000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, &(0x7f0000000080), 0x0, 0x24020804, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10) setregid(0x0, r3) fcntl$getownex(r0, 0x10, &(0x7f00000036c0)) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) stat(&(0x7f0000005740)='./file0\x00', &(0x7f0000005780)) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r6, &(0x7f0000000440)={0x2, 0x0, {&(0x7f0000003f80)=""/4093, 0x100d, 0x0, 0x3, 0x2}}, 0x53) write$vhost_msg_v2(r6, &(0x7f0000000000)={0x2, 0x0, {&(0x7f0000000200)=""/152, 0x98, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r6, &(0x7f00000002c0)={0x2, 0x0, {&(0x7f0000000180)=""/123, 0x7b, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r6, &(0x7f0000000a00)={0x2, 0x0, {&(0x7f0000000540)=""/215, 0xd7, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r6, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000880)=""/142, 0xffffff32, 0x0, 0x0, 0x3}}, 0x48) 15m16.330483651s ago: executing program 1 (id=3939): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x84}) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x3, 0x0, [@sadb_sa={0x2, 0x1, 0x4d2, 0xe9, 0x3, 0xbf, 0x2, 0x80000001}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d3}, @sadb_lifetime={0x4, 0x2, 0xc, 0x40, 0x0, 0xfffffffffffffff3}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d6}]}, 0x60}}, 0x44) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x3a}) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000380)={r6, @in6={{0xa, 0x4e22, 0x4, @empty, 0xc}}, 0x0, 0x2}, &(0x7f0000000340)=0x90) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000000c0)={r6}, &(0x7f00000001c0)=0x8) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r2, 0x7dfff000) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 15m16.195113701s ago: executing program 1 (id=3940): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003240)=""/106, 0x6a}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f00000035c0)=""/76, 0x4c}], 0x6}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x405}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'}) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r7, 0x40046f41, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x949902, 0x0) ioctl$PTP_PEROUT_REQUEST2(r9, 0x40383d0c, &(0x7f0000000080)={{0x0, 0x3}, {0x0, 0x10}, 0xfffffffd, 0x6}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1, 0x1000000}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f00000002c0)=0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file1\x00'}) ioctl$EXT4_IOC_MIGRATE(r10, 0x6609) openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x10000008, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0xc000, 0x0) mount(&(0x7f00000000c0)=@filename='\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2010, 0x0) 15m16.003404458s ago: executing program 1 (id=3941): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x1) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000000280)={0x28, 0x2, 0x0, {0x5, 0x5, 0x3}}, 0x28) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x3b1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi4\x00', 0x8000, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7f67, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f00000003c0)={0x0, 0x0, {0x0, 0x0, 0x201e, 0x0, 0x9, 0xc}}) timer_delete(r2) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r7, 0x45809000) ioctl$COMEDI_BUFCONFIG(r5, 0x8020640d, &(0x7f0000000080)={0x7f, 0xc2e, 0xb9f, 0x4}) r8 = socket$kcm(0x10, 0x2, 0x0) madvise(&(0x7f000081a000/0xa000)=nil, 0xa000, 0x12) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0xffffffffffffffef, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$COMEDI_BUFCONFIG(r5, 0x8020640d, &(0x7f00000003c0)={0x0, 0x0, 0x3, 0x82}) 15m13.539321989s ago: executing program 1 (id=3955): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2271, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x13, r1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x42601, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000030000004523660087bf39eb7a3bdf5cda6be2349fa0"]) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000000000000003"], 0x14}], 0x1}, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r5, 0x104, 0x4, &(0x7f0000001bc0)=0x1, 0x4) mmap(&(0x7f000010d000/0x3000)=nil, 0x3000, 0x3000002, 0x8010, r3, 0x2000) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2271, 0x0) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x13, r1, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x42601, 0x0) (async) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000030000004523660087bf39eb7a3bdf5cda6be2349fa0"]) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000000000000003"], 0x14}], 0x1}, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) setsockopt$rose(r5, 0x104, 0x4, &(0x7f0000001bc0)=0x1, 0x4) (async) mmap(&(0x7f000010d000/0x3000)=nil, 0x3000, 0x3000002, 0x8010, r3, 0x2000) (async) 14m58.515938359s ago: executing program 33 (id=3955): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2271, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x13, r1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x42601, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000030000004523660087bf39eb7a3bdf5cda6be2349fa0"]) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000000000000003"], 0x14}], 0x1}, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r5, 0x104, 0x4, &(0x7f0000001bc0)=0x1, 0x4) mmap(&(0x7f000010d000/0x3000)=nil, 0x3000, 0x3000002, 0x8010, r3, 0x2000) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2271, 0x0) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x13, r1, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x42601, 0x0) (async) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000030000004523660087bf39eb7a3bdf5cda6be2349fa0"]) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000000000000003"], 0x14}], 0x1}, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) setsockopt$rose(r5, 0x104, 0x4, &(0x7f0000001bc0)=0x1, 0x4) (async) mmap(&(0x7f000010d000/0x3000)=nil, 0x3000, 0x3000002, 0x8010, r3, 0x2000) (async) 7m29.41700773s ago: executing program 4 (id=6886): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000080)=""/94, 0x5e) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) (async) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) 7m29.360018379s ago: executing program 4 (id=6887): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fadvise64(r0, 0x80, 0x8, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r2, 0x89f1, &(0x7f0000000000)) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES32=r2], 0x7c}}, 0xc015) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000600000000000000000000000a00000a9c78000000060a0b040000010000000000020000004c000480480001800a000100696e6e657200000038ea02800800024000000084080003400000000708000440000000310800f43f00000000140005800c0001007061696c6f616400040002800900010073797a30000000008900020073797a0a0000000014000000110001e9ffffffffffffff000300000a38760af1649c5f56998912679919d91c52ddafe694920c4cf38f2ff05d1974b932fed82f6a06ce492cb2d5e5d38483de4a36d1e835799a6fe3443f29cf409c24258ffcf2f2cf4cdd1d357b81974c5e2093dc96d1396602ee62ae92aa61cc66550a000000"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f000d", 0x12}, {&(0x7f0000000100)="051ae2", 0x3}], 0x2) (async) r5 = socket$caif_stream(0x25, 0x1, 0x4) ppoll(&(0x7f0000000040)=[{r5, 0xa021}], 0x1, &(0x7f0000000080), 0x0, 0x0) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20a00, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$llc(r7, &(0x7f0000000140)={0x1a, 0x17, 0x1, 0xf8, 0xf, 0xe0, @multicast}, 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r6, 0x45809000) (async) r8 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r8, &(0x7f0000000180)={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) 7m29.163835312s ago: executing program 4 (id=6888): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') pread64(r0, &(0x7f0000033240)=""/102385, 0x18ff1, 0x41e) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x29202, 0x0) write(r1, &(0x7f0000000000)="fb196dec69a10b22", 0x8) 7m29.141866343s ago: executing program 4 (id=6889): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x270743, 0x0) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x6000) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x1, 0x5001) sendfile(r0, r0, 0x0, 0x7ffff000) 7m29.005403573s ago: executing program 4 (id=6891): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000000)=0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0xfffffffffffffffe, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x1], 0x80a0000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f00000001c0)=0x100) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2, 0xd8, 0x1, 0x2, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0x0, 0x10, 0xa, 0x1, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$rds(r4, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_map={0x24, 0x114, 0x3, {{0x0}, 0x0, 0xd}}], 0x30, 0x8004}, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000001900), 0x0, 0x40) ioctl$I2C_RETRIES(r9, 0x701, 0xfffffffffffffff8) pwritev(r8, &(0x7f0000000a00), 0x1046, 0x1000, 0x10) ioctl$EVIOCGSND(r8, 0x8040451a, &(0x7f00000000c0)=""/24) 7m28.523915031s ago: executing program 4 (id=6895): r0 = socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001e0021002bbd7000000000000a000000050000000000000008000880"], 0x24}}, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) (async) listen(r0, 0x0) r2 = syz_usb_connect(0x0, 0x68, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x80}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x13, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x800000, &(0x7f0000000140)) listen(r0, 0x802) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) 7m13.491003609s ago: executing program 34 (id=6895): r0 = socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001e0021002bbd7000000000000a000000050000000000000008000880"], 0x24}}, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) (async) listen(r0, 0x0) r2 = syz_usb_connect(0x0, 0x68, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x80}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x13, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x800000, &(0x7f0000000140)) listen(r0, 0x802) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) 6m51.506748909s ago: executing program 3 (id=7099): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='squashfs\x00', 0x248012, 0x0) 6m51.471053677s ago: executing program 3 (id=7100): creat(&(0x7f0000000140)='./file0\x00', 0x71) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x212000, 0x0) 6m51.334264065s ago: executing program 3 (id=7103): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\b'], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000020}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x724, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x25, 0x9}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xae}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x81) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB='@\x00='], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000640)={0x20, 0x13, 0x1, "e8"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000280)={0x20, 0x1, 0x3, "e4e4aa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m49.024616855s ago: executing program 3 (id=7111): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000840)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x2, 0x0, 0x0, 0xffffbffd, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x778, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55], [0x0, 0x0, 0x0, 0x0, 0x2, 0xbd8f, 0x0, 0x4, 0x0, 0xfffffffd, 0xff, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x80000000, 0x0, 0x10001, 0x810, 0x6, 0x7b6, 0x0, 0x800000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2000000], [0x4, 0x2000, 0xace6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8f4]}, 0x45c) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi4\x00', 0x8000, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x2010, r1, 0x45809000) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x20, 0x0, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone3(0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x100000001) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xee00, 0xee00}}, './file0\x00'}) ioctl$RTC_VL_READ(r5, 0x80047013, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x80000000, &(0x7f0000000300)) futex(&(0x7f0000000000), 0x9, 0x0, 0x0, &(0x7f0000048000)=0x20003, 0xfffffffd) 6m45.450967744s ago: executing program 3 (id=7124): r0 = socket(0x2b, 0x801, 0x1) mmap(&(0x7f000087d000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f000087cf79)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x0, 0x0, "0000000000000099010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be4f28860000000000000000ffe300"}, 0xd8) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000000d0a010e00000000000093c201000000"], 0x14}}, 0x0) (async) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x705200, 0x0) (async, rerun: 32) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB="dc010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d42b000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001c96000000000000000480001"], 0x1dc}}, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000002a00), r4) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, 0x4, 0x6, 0x5, 0x0, 0x0, {0x802ec853adcdbed2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01042abd7b00fbdbdf250600000008000100", @ANYRES32, @ANYBLOB="08000e"], 0x34}, 0x1, 0x0, 0x0, 0xd1}, 0x4040884) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) (async) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x101200, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r9, 0x84, 0x80, 0x0, &(0x7f0000000000)) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000380)={0x9, 0xffffffffffffffff, 0x80000}) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r7, 0xa04, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48000}, 0xc010) (async) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) (async, rerun: 32) pidfd_getfd(r2, r11, 0x0) (rerun: 32) 6m45.197976821s ago: executing program 3 (id=7128): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20900, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='FROZEN\x00', 0x7) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0xc0884123, 0x40944f9c780000) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x810, r0, 0xd8238000) r5 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000001640)={&(0x7f00000000c0)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)="1c97d369bc9477ee5827b7a944fc51c87ca15c8b822e853dca6c79fd910e2cbae20e7ea42f7bcd8af452decc159c48529867d21904faf76c1329d028e86b5cc20e1c096fa11d548b813a4c0e138cb07673c56f26bcbf18c823cc220ca570113032adf866bffeae050bd6de5a931470d154c0101e3dcbf086cf5678a1612598e72acce2641e65a73080d00c5e272c823e83b9f2d74b4f29596505f1863154d90ebe", 0xa1}, {&(0x7f00000002c0)="f33e1d361d03451f29287d5384bc5973ade859d9e6f395d9cd7c0fec1cb9dc7551b5c143fb81631d65bbe3e770bdf4dc2e8888637b05b4b9", 0x38}, {&(0x7f0000000300)="c4bcc729be0efa69d53df210707b884e82717f822d959fef6c24b79ead2d9768bfaec6037df4fe93d3e29941eaf2dfe401c0cefc1ac65cde814481fbad851aa1fb50f9883bdc2ed25f1ba9ef8f774418394eb6dd2ccb8843491fa038d5414eff497d4527958d6cd53a909e54e775ff322e7cec5bf2459827b3a03270f1ba3b2a49d3cd967232753a418f4538329b39bafd7d956fc85efb9075c40b8dfeea8475e4fa52fa3d0a10e9b1af7086dc570fea63ba786e68256ceb594eecb0b59880cd897558b7250c69470adcd51baf1fea2ef9366355fae59b0f233bb40176c984a89ab42f4b681575b211d93c9f3b9988a7e92b21a7", 0xf4}], 0x3, &(0x7f0000000440)=[{0xc8, 0x107, 0x8, "958ecff370e96c4210436da87637ce187eeda3cd1678fce531cf61914a70cbb57c783ac88502fc0abbea2e6f452b902f1b65a76d04cb9fe5002850a3e832edec4df6335e4cf53a2939c70f78ba49e624a3c2fee57c4eee0dfac503dc60be1f3a3e2d75dc6197819794e67023e66a7b1c1d7886b805649a75696c397210a5a04fc64f551886bd867fda58dbb5ee0c04a7ea305918a0b8b305ae0843ca41c8f49d0cfb3a9f442c8585c8a3d8a39a33d70d4ccc6bff38027c"}, {0xf8, 0x109, 0xf, "108579f76d939bfbc44249f7414fe57e74e424316ad6ffe1c01f311b60a72eca15f993a01afa1a0f958b3a55fc5ac44d883405fb816752dd00613170d2b50d86c55eac97cadfeccd91fb8bad627087651a429943d24802c99ffd4f458cfbae26970b33ae1ae877ef8bbac8c34f72d6ece7b0dedce2fd50c4fceb5417ace8f8dbf922c60e9a666445b55ecb195ea942d261e6d459b52fed805c5fae0ea2eccc810cdfe5242cff0b367e64af4191bac15a0a7b5003a64e33949ebb4f292ae320f57ab799387d0fab562c52f4a6611dc2691b74643ecb00d50661d08f0755a0736b36477317ceae9d"}, {0x1010, 0x6, 0x10000, "75a525007919f2997c54537362f96c0e3c0d9b2f660e6e7ae24ee5dbb52ca8ac2c989f048cb5ff6d92ca0fe558b1e91e66c1b00f317dfada2e98f617f729108a0865268818f91a001e504f550258991db7abf2ee2e34104c952a4a2475ab324905e5b78fa26512c91523bb28ad72838aa41fa763b1e88a2b497bf050a90b321b57eacfeaedb80f6262777fbd3e015d62f0b61e9c8c5d85923d42ce90f1e05f6dd4ed09d0324e233e82aeec7935434a531769f99c95f6932dc68c90909a9785dccb55fc619d81ef2f65be09f489e00c785abf907da2d9c94b7f458f8a8efa45567f39a55f4e3e5f40e0f4575020b611af8e7792104dc0aab6b4aa179e58e88436801294b279f97a2e94406fc9c6889da81f0a8c96235f846db699cdd92c685e0683a679d5a176b30fc9a89d3bf33cea2f2c06f07ab97ac104147dfb69fef96a9c2414c9f4d97345ee783b9330b63b55960fd008ff2bb32df10e6a1dba553a5a161a922a8b5d76e8e24515ee3134fb2429b69980b254e4ae0a0a6408399d9196b5f57a1e8924d119a58cf1aaba66a29ed3365204de8079f3655fbd3ccc46720759e45808fc9dee8ff564f3505456508cf738b3dad7622ed9d0a1f336529378dd8d255f6cc23c9246d8bac13bb727a6cb33f6b4ccebec5749b27fd794f5dc39bfe95b571054798d2ee1f8683e6b83b0c054f1e69eea14ac0a789e8a362ab1078b6a65bd64126cac6eb859a07798ab37cea963801eca30dea8bcbf4e01cad342d8a14e6e3e2035deafae9899bac354e30296839251d001f46a5971e66b075768a128fa2cdbf6db890ac859b5f0669f456c826bd2b262b0e7cd4731cc25bb36ddc3cb3c35d081191d4da94661de7fb3c1489623b5c19099ccf0cb302bf1a45edda851c2569d0d67545141d41a4a61eb87b0fc76a68a50071eac483d8208a1e3772da7395dda1dd89a7911b6ae133e25df90bf04d7473731ad3a2520af18c6ff889992ddef437c3d75f7eff35c1ce3c4170381adcdc31eabc6be9054aa12e4c25ac1231ec59ebaa4fcbaac2afe95d3f7399bb09f79f49cb2fe206c24c6f82f4be31d9442fbb7d13938eb8d278b036c6efc5ba2d45e5afa0900da3545e9311230301399fe5fe2bb4b1f0d0d7ac8438aabe0bb3260dfebe0f9fe2a2ff3272348bd993a81d029f29f0f60344a4dc8368cbd681730a08d3d29b68640be737054484f247bed94ff842b5b2b156188a195ec43d386e3d5c8ccf4e19d8b0343133b0be811c8cc3d9c8a63074cdcba73cd66e4e1480dd457b3d05787295866becf83485a5524d411409a63c34c0d2483d1b3bfdd390e3c77415c05d1058c877cd36969797ff5ab512e62a5ad1a90803b0fe04dc124b2502b5ea19760ec7f0253fc96b9755bcdf8fccb57e7efc46b4a82ff657987612df77523a41f3397621a6a67cbdc45ff938009a776918a42f4855f741a4e7fd8db55481cd319ff12098c805ddd96e54b8a81024020968c4fd994f780a158b8fc630a4ecb4ace1395d28de50fbe20c46bc9168a7034656e28e022973193a7f97dee2c676e13074c19d9d3d584f3e89348d27ded059faad6253e995feb09ff801ecdde6eb3cab50a03e7d5b0896b692e1c74d45113e801d3914c239cfed78fefeaa84c5f8e6d8c5872a64da1ded5bd4d8371080133aaace192f2b11cae36238dc7d78fa7c3a34b4b90943ff0a98cea9da1044a7248c376231fafd2e95b531d2bc216196113bffc719ee5c0ab2cb33e2a6a7574a6c96b09ebb22d541c9e5e81412558449e861b5e069b0da9cd8aa049f0b40866554f407cbaada918c97da6f0bcd6be975750dea83fc5681535783a1ad7196ab8458b98108ff602fde89d40a2aee8cc374ec55ecb5d4ae02d3f0a6463b2791f81d0ed85efcacd41fd8c7be2b65a5f1b69907e0ce6648f9404e88f61de8a171230271f3f4c3f37a6005fd8f061e4efeba6db47ffa9aab05b848390fd3a2f93b8cb3e506e15d51810629df414174ae94fd5b33df4e200fdc0404bc0479429296c7975512e7ced8cbdf416d86b922665b311953e5c61322150662270f7864709b56c8f2ceffe7661f21ce08695cfbe2384d9123e3ca514af23f3e624663b2ff38f53b5ec77c7494d58598e12109587373fcc287721f3334319ec24a0e6b8d665fa698538eadfab14bf917a814a7e82fef180a8b1551281463526eb32e71f6fb28110c5baf68cc2cf45a32415c5fc3e896a9616e722f9fc0ef855fa7e57b5fd7be0c903a6ad4d90c895622ca583ebc5e07195a4740cb9862de7ab64575728b5ede02510061097295915f47903dee0b7656d5a4cfa393f5f49c4275e3d6fd6ad6e70ede7fbde8bf88345520424e9b536939e0697891f81aaa8a5f6725c14d9821400d945e8a3620ae01f5772de6841121755d4e789597a95c760927809c0fedbf8e2a01635e8338670bab0512c6f77a414e8241f5ae1f9025d36a3a64cefc4ec33f8d6edfb3f103760d2c0f1bdb45625d840eee22278cf39ef9af93863d05d18f8404000d223028525f5359b5bc37480aef4a22c288435703f53b03a066be720874963c86c27783131191f813e5012e186cbe22485b6672aa890f0cfd854ef66b3fe116082f00dac2a6215f358ff98db55bf7e4f1e04b4e99e7162edcdee74a0cd47c6e4e5f0c6673045b0290a4714ff74843776efaf505c916e4a6cb31db6f9221eb2e5e50bc8356146acc59edf1dbe7aa6bfb345c73bd6d9b1845d69889c2f56156ef31c78ea4feca5317154126e399e7d905852cf07f29ee508e7d3bdf25824477df327d698b23cc7bf6a696ba5eec79fbde815de93e3e2f53d414f669f0b5ce026758e6fb71113c0d497bb633aae3b08ac13e1dd400df7a01e803952dd809251b540109f665cf6e3b0d1a3f5f6c2cb0ad57f5d335623d68c17a692e10a7d351a84ce1c27fa96625c3336d0d6290ba4605ba205123b285524ff43e87a7f0671da81ce9b4c00b482011e03df6ddb27a580268881752451c61687b5da10d6fdd6bf45b739feafc8a930ebe3374c7173914ef0783af8720c9d5631e3102ab7c680844af16c7b7120a134936031b05c4064b8349908de07d62eb7412b1c54dd999f43a965609358046c3cde29e0554d7da1ebbae2ffd6fe1737970a88c97dc85c19c38e9768eaf86107925e0bc6b47558c57f93782c6635e2766426fdd93f18145eb486b9c7a1d7162835f9612a059d32a96277af94101a5fb7093230ac94e64eae154e94b644e8202d4f13fde87a64f5d566393e998a342dbd895cba92a2d1eea56c200b6890bac7de87de44150a861f665939deb0152a58cc0603802694c25c037b4e57e115499cfa1515bdf83ea057465fbca3476b86f04f7c3a81d33d85d468e681f9ac83fb4946fcb2e2784e9184f278ec6d3b6e6eef1c596af24f1f6cf8bcf4165da0b32aa325bcd77033230c3d9263a8d0a8d3a61ab092036bb421160f3e7518b68a158b323944ab992bb53033581d92c86a147df676ce29ab1855f51bc468cf9fd3c53e2f5ce8c114d0dd7c3ce050397e46b8468acf52fe12297cae977778657883f49c97292329c5dcf7fe92ba1d68cb800278b0c7ad9263eac735f347185694277e5f0605e97b87431bcd84cc3e6da163be3786053537e6badbd2893c53596014323d71f57cf3c5263790988e625436e9fb749cbc1cc82daab415e3ff8ccfc74e68273d18a09ebfe36042fe65af8e30352122403d19964f0fd6be32a8fca0cc42aec77dd4004ddd77c90051de3d65df2c02a7d2d65ea244c483ccc69f764708953605d14c50903bc8792a115918961b6fdcdb7fc72500bfeab32a7d181332441ca888281cce95e3d98f49bc9065fd9a2cae675149c0f985aa02b207f29ed5ccc619dd262661b261f78ac88669b5e1099845d2db858dcbd23f88a4fdc12b42a6fab8d8e8bf62b230c285bc1250ab116d578bcbcb4f6a4e4619ba909dd66483c85fd907e4eda5d773b83744d6de01fb556b2696969e0f7244040b77e7485ad5d68b5c1f3f196441fd9b2f349808d0cb85c74a15b4d61b7acd053e4bef4d141b1bd8c0129dd1b57ef23248e7bf46773c64d768c7df474ad14a54caaff013b34445751d42509050167ec974cb9498e23b3a5777dc840630bbdf8048b8a5bdfe48cd6fe6c98659b4a2b84e4aa23220d855f81ebf8ed1d750d0b7d08ad52d8ca76f7830b878d694dde3f8fe8b0a71ddd4b77aafa298d8a4564f68215f63b1a2125eaa1d28f8ae4efba272d43b86a480de0b113b3509fa80915401806482847a7f1281bcc2e8f8985cfdfff54bc636616afbeb79a0d2897bc3ce6651d995fb8769629c83e3bd040ffa037afb4aede9bb692ceddddcd07db31651f0c8ad53093faea1ce1ba955f27e5f2442218148583782d81b8fd2e6ef9118766a7a49c7ab116e494f7963e23ed700e057c403d1060cb5e09c1e5071da4b631868b9683b2ed79c0c64e2376fcdc8c2d21465224f7b2f8154a703aca44886c736d15a9cfe08e8f1424f6d94e9d201faf5e11710e14608123532c9e48286a221e14d6d642ea1bfefa0a36046fca7727510b41812893bdd1ad8a49a53f9b5ef2a2cf3cebcbdb36d7ea0fa2977206cd8f233c63222b042ef08f18badc5fbce0cf04067f5a002261bc8e7a1474006564a10cd1c7aab75db9c119b815e9841b01e981ce8b220c8de4994ae189302c9ee5711a7a7f69a95256185038f4aea3407c50980ae7cae52e0879035f307ba02f6df6578497a9033bdbe20b83913ee85db804a3163cac57f09837a28d2d367baa552434939ef365b185723dba1da452f31a82646fa1155a0a76a8f7e3f7525355e8022d7d19ffe3f1a30d2f1778b79ce0ddc3a06d720dc0997d60457e00323ebbeadc7c5d1018f3507d9b3770a9a8248c0ee7bc8fa2063ff2e5a242e0df3db81543c2014149554237419fc53780c282544f243c0647ec7039cee22604dc1dda3890605a9f6679a515695a8b8f77205fc269d94d2b30feac86e4038d66171774b5482aea98fb197d322ff71c00560d612dea71bc89da650d801830b8acb3ad76ed68d01911b73bd91a6b2000e5ebb2cda6e44a779c9065a4b3838c02f21b843988202687c54ea0353d2be93a1712811b583883367f8adfc15ae3dd1a275fcfce61d377e4a27ae90fbe0737f65a273a6f0366820aa9a128432e381babf5e84984a3e2baca14245ff3e5b10967d5b1c45a2e875d1139f7ef3077ec8d2a00d21e06c4c6c007d285868344119ae20e6b2ea127dd623323f1bc83b46752203f16e7cc020c0cfd28dfef1690ce43bc04c5d65b5ccb85488ce7cd183fb10256036b07bf5ee06c4582587cd43321e43c963fa662529513cd7049266a23948d8f8258c5bd8fd209375e9c4f030d180756a9f45f4fdee7664fc16f3df3993129f14214b5d7d8554b7cfe0af2f8bb61c5cb0241f348c5d01baf45fd73171fe2452fb38d6db99b360786eabebb79c3a40294bdce7b311a57343cf71f4ec296e9aa634e9b22e67ff94554fe2a323d8b1bfd853000d3eac04b65467fc48776e45742297f9a53c95484710c8a035a8aa9368854a0a49b99f0f48ab5a1df197dfc5ec468984161f3c814eed1b8e30b1b0c59f800bb4fba7bbec979e6348edd772b8bb4281f44e6d8f64c01f5d227577e0936950c4dd369dae694707cae4e29e99d49c627b367292c335ef8f2628ccbcebb4ce029debb07e88d2290d9b7802906519377523cd86e624d2f1160ed894c76d7bedbfe293a8d51cc679e98d954dc41f8bf5ae82"}], 0x11d0}, 0x20000004) 6m30.108549742s ago: executing program 35 (id=7128): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20900, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='FROZEN\x00', 0x7) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0xc0884123, 0x40944f9c780000) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x810, r0, 0xd8238000) r5 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000001640)={&(0x7f00000000c0)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)="1c97d369bc9477ee5827b7a944fc51c87ca15c8b822e853dca6c79fd910e2cbae20e7ea42f7bcd8af452decc159c48529867d21904faf76c1329d028e86b5cc20e1c096fa11d548b813a4c0e138cb07673c56f26bcbf18c823cc220ca570113032adf866bffeae050bd6de5a931470d154c0101e3dcbf086cf5678a1612598e72acce2641e65a73080d00c5e272c823e83b9f2d74b4f29596505f1863154d90ebe", 0xa1}, {&(0x7f00000002c0)="f33e1d361d03451f29287d5384bc5973ade859d9e6f395d9cd7c0fec1cb9dc7551b5c143fb81631d65bbe3e770bdf4dc2e8888637b05b4b9", 0x38}, {&(0x7f0000000300)="c4bcc729be0efa69d53df210707b884e82717f822d959fef6c24b79ead2d9768bfaec6037df4fe93d3e29941eaf2dfe401c0cefc1ac65cde814481fbad851aa1fb50f9883bdc2ed25f1ba9ef8f774418394eb6dd2ccb8843491fa038d5414eff497d4527958d6cd53a909e54e775ff322e7cec5bf2459827b3a03270f1ba3b2a49d3cd967232753a418f4538329b39bafd7d956fc85efb9075c40b8dfeea8475e4fa52fa3d0a10e9b1af7086dc570fea63ba786e68256ceb594eecb0b59880cd897558b7250c69470adcd51baf1fea2ef9366355fae59b0f233bb40176c984a89ab42f4b681575b211d93c9f3b9988a7e92b21a7", 0xf4}], 0x3, &(0x7f0000000440)=[{0xc8, 0x107, 0x8, "958ecff370e96c4210436da87637ce187eeda3cd1678fce531cf61914a70cbb57c783ac88502fc0abbea2e6f452b902f1b65a76d04cb9fe5002850a3e832edec4df6335e4cf53a2939c70f78ba49e624a3c2fee57c4eee0dfac503dc60be1f3a3e2d75dc6197819794e67023e66a7b1c1d7886b805649a75696c397210a5a04fc64f551886bd867fda58dbb5ee0c04a7ea305918a0b8b305ae0843ca41c8f49d0cfb3a9f442c8585c8a3d8a39a33d70d4ccc6bff38027c"}, {0xf8, 0x109, 0xf, "108579f76d939bfbc44249f7414fe57e74e424316ad6ffe1c01f311b60a72eca15f993a01afa1a0f958b3a55fc5ac44d883405fb816752dd00613170d2b50d86c55eac97cadfeccd91fb8bad627087651a429943d24802c99ffd4f458cfbae26970b33ae1ae877ef8bbac8c34f72d6ece7b0dedce2fd50c4fceb5417ace8f8dbf922c60e9a666445b55ecb195ea942d261e6d459b52fed805c5fae0ea2eccc810cdfe5242cff0b367e64af4191bac15a0a7b5003a64e33949ebb4f292ae320f57ab799387d0fab562c52f4a6611dc2691b74643ecb00d50661d08f0755a0736b36477317ceae9d"}, {0x1010, 0x6, 0x10000, "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"}], 0x11d0}, 0x20000004) 4m24.783608498s ago: executing program 6 (id=7973): ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000080)={0xeeee0000, 0x14000, 0x8}) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x24, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1d}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xdc39c000) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 4m24.766595503s ago: executing program 6 (id=7974): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') readlink(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000400)=""/66, 0x42) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') 4m24.68536586s ago: executing program 6 (id=7975): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24044888) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000340)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f00000002c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r9, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x200440d4) r13 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r14 = dup(r13) write$6lowpan_enable(r14, 0x0, 0x0) r15 = socket$alg(0x26, 0x5, 0x0) r16 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r16, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r16, 0x404c4701, &(0x7f0000000040)={0x28000000, 0x4, 0x3, 0x400000, 0x14, "3eccd800001f0000001f001000000004010100"}) ioctl$VT_GETSTATE(r16, 0x5603, &(0x7f0000000100)={0x3, 0x3132, 0x6}) bind$alg(r15, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r15, 0x117, 0x1, &(0x7f0000000000)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee6617", 0x21) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="07ef28bd7000fcffffff08000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) 4m23.687790468s ago: executing program 6 (id=7978): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da09"], 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r1, 0x0, 0xd1, &(0x7f0000000000)=0xffffffff, 0x4) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x84000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="e1ffffffffff0700000bf901cb17ffbd2300aa178100f0ff0019"], 0x12) r3 = syz_open_dev$vim2m(&(0x7f00000007c0), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000900)={0x1, @pix={0x6, 0x8, 0x3631564e, 0x4, 0x5, 0x7, 0x6, 0x9, 0x1, 0x0, 0x2, 0x6}}) r4 = creat(&(0x7f0000001380)='./file0\x00', 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x5c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000180)="11f1268a6f6af6c9cf18ce29e85ae378071dbc9f089e0801bf209c9fff1a34534ebff2f0079c5a42f72880fdf3dbb684b3c20b46592fa3b8ba23b254c167fbec498b0b5e56cffa5b6b3f2ca4d551c6928d35653d763ca29cac227634762619581f54a0829134a96df392", 0x6a}, {&(0x7f0000000280)="8c26b82e831431cde2ded622f10f828f1b0b049d3a88c08e1f01b0ef4394f8bdbe61e2507cae84b5d3b52dda841635882b875d32dc2da6733a7c457e031bc2445d93c6c891de2fbcc5ed57694bbc90c1b63bb2e8393eee50dd7aa5727234e5618993be1f82a7a7e84a89bfac540cbbefd823594876f0e4e46755779a5a73c917806c3e825a497a15789a56316e78a5a4cae0f20c3ac386c751321de14f55586b820c628d289f75826c9ed0712458e3064c1fbbea67fba0b9319167e6cd77da2dd86a4f448738e9ad70be71dd4066e01588f72672c61539dbe44184805b7588", 0xdf}], 0x2, &(0x7f00000003c0)=[@ip_retopts={{0x94, 0x0, 0x7, {[@rr={0x7, 0x17, 0xcf, [@loopback, @empty, @local, @private=0xa010101, @remote]}, @ssrr={0x89, 0xb, 0xbc, [@loopback, @multicast1]}, @rr={0x7, 0x1b, 0x2d, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @remote, @private=0xa010100, @empty]}, @timestamp={0x44, 0x14, 0x20, 0x0, 0x0, [0x80, 0x3, 0x9, 0x1000]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0x18, [@multicast1, @multicast2, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @timestamp_addr={0x44, 0x14, 0x7b, 0x1, 0x7, [{@private=0xa010102, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0xb0}, 0x80) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) 4m21.362316474s ago: executing program 6 (id=7992): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x80d80, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, &(0x7f00000001c0)=0x10, 0x80000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x7ff}}, './cgroup\x00'}) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000300)={0x1, 0x2}) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) shutdown(r4, 0x1) ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106401, &(0x7f0000000340)={0x58, 0x0}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x400, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x211b03, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2000}) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f00000001c0)) openat$incfs(r5, &(0x7f0000000100)='.pending_reads\x00', 0x4000, 0x3f) syncfs(r0) 4m20.42658651s ago: executing program 6 (id=7996): r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) keyctl$setperm(0x5, r0, 0x20a1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$netlink(0x10, 0x3, 0x15) keyctl$revoke(0x3, r0) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) listxattr(&(0x7f0000000100)='./cgroup\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="28012bbd7000fbdbdf256900000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) (async) ioctl$SNAPSHOT_FREE(r1, 0x3305) (async) keyctl$setperm(0x5, r0, 0x20a1000) (async) creat(&(0x7f0000000080)='./file0\x00', 0x2) (async) socket$netlink(0x10, 0x3, 0x15) (async) keyctl$revoke(0x3, r0) (async) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) (async) listxattr(&(0x7f0000000100)='./cgroup\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="28012bbd7000fbdbdf256900000008000300", @ANYRES32=r5, @ANYBLOB="0c009900f7ffffff780000000a00060008021100000100000500d2000c0000000600d400000000000500d300000000000500d200020000000500d200080000000a00060008021100000000000500d20008000000c3ff8ed052229046bd05112eaf07396deafeedd56b6ecef4609e28755be40c576d815e7c8a39c464f0faccff7b2a978c45841c75005f13351c1c7701ede553e349d4d4926d5958e8de739386c33666025245007f0599129559d7e2c5bf5293a655fca46baf2646a3a105dfb4bbb3f536b062f008add53c58193a9de09467067711523e9394521ad3fa796de00fcb98ef9f46c4f751bba07de2e8bebd7cea897563dcf725bf2aebbe4999e3825ed753ca4edc30e9"], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) (async) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) (async) 4m4.539202864s ago: executing program 36 (id=7996): r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) keyctl$setperm(0x5, r0, 0x20a1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$netlink(0x10, 0x3, 0x15) keyctl$revoke(0x3, r0) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) listxattr(&(0x7f0000000100)='./cgroup\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="28012bbd7000fbdbdf256900000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) (async) ioctl$SNAPSHOT_FREE(r1, 0x3305) (async) keyctl$setperm(0x5, r0, 0x20a1000) (async) creat(&(0x7f0000000080)='./file0\x00', 0x2) (async) socket$netlink(0x10, 0x3, 0x15) (async) keyctl$revoke(0x3, r0) (async) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) (async) listxattr(&(0x7f0000000100)='./cgroup\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="28012bbd7000fbdbdf256900000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) (async) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) (async) 3m56.764749915s ago: executing program 8 (id=8108): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) 3m56.611586081s ago: executing program 8 (id=8110): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x200000000000000}, 0x0) 3m56.395477795s ago: executing program 8 (id=8113): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="000200001000130726bd70000000000000000000000000000000ffffe0000002ac14141b0000000000000000000000004e23000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x200}, 0x1, 0x0, 0x0, 0xc0}, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) 3m56.251545845s ago: executing program 8 (id=8114): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000280)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@host}) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x2021040, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7004fcdbdf739500000008000300", @ANYRES32=r2, @ANYBLOB="0a000600505050505050000008003500000000000a0034000101010101010000080026"], 0x44}}, 0x20000880) creat(&(0x7f0000000240)='./file0\x00', 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4}, 0x18) r5 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000080)='\x00', 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r6, &(0x7f0000000fc0)={'syz1\x00', {0x6, 0x8001, 0x0, 0x529}, 0x26, [0xf5, 0x8, 0x80000001, 0x2, 0x202, 0xffffffff, 0x8e, 0x9, 0x9, 0x4, 0x0, 0x9, 0x7, 0x1, 0xfffffffe, 0x38, 0xffffff7f, 0xac, 0x5, 0x1443, 0x0, 0xea7, 0x1, 0x9be4bf38, 0x0, 0x20002, 0xc, 0x9, 0xc, 0x6, 0x84, 0xd3, 0x8001, 0x3, 0x2001, 0xb, 0x2, 0x5f84, 0xfffffffe, 0xc1e, 0x9da, 0x939a, 0x8000, 0x1, 0x5c, 0x8, 0x7f, 0x3, 0xf2b, 0x1, 0x6, 0xfffffffa, 0xffff, 0x8, 0x7, 0x6, 0xffffff7e, 0xf3, 0x9, 0xd2, 0x8001, 0x5, 0x53, 0x1], [0x5, 0x2, 0xd91, 0x8, 0x401, 0x8, 0x1, 0x5, 0xfffffffe, 0x40a89, 0xffb, 0xffffff4b, 0x1, 0x2, 0x0, 0x0, 0x8, 0x8, 0xffffffff, 0x405, 0x2, 0x9, 0x5, 0x5, 0xd, 0xa, 0x8001, 0x9, 0xa, 0x5, 0xf, 0xb2cf, 0x1, 0x200, 0xec, 0x9, 0x100, 0x9, 0x9, 0x10001, 0x1, 0x865f, 0x8ec5, 0x3, 0x802, 0x7, 0x3, 0x29e3, 0xce, 0x40b4e5, 0x20000, 0x200, 0x5, 0x4, 0xff, 0x9, 0x1d, 0x3, 0x10000, 0xa, 0x26, 0x2, 0x6, 0xad], [0x4343fe9f, 0xfffffffd, 0x101, 0xffffffff, 0x7f, 0x8, 0x3, 0x3, 0xc, 0x0, 0xcb06, 0xfffeffff, 0x4, 0x37, 0x5, 0x80003, 0xc8, 0xc, 0x8000, 0x2, 0xdf9e, 0x40005, 0x8, 0xa, 0x3, 0x7, 0x401, 0x5, 0x5, 0x2, 0x3, 0x2, 0x1, 0x0, 0x10000004, 0x911, 0x7, 0x8000, 0x31c1, 0x8, 0xb, 0x4, 0x2, 0x1f83, 0x9, 0x1, 0x2, 0xd, 0x7, 0x402, 0x9, 0xffff, 0x400, 0x80000000, 0x0, 0xb, 0x80, 0xf, 0x8, 0x8, 0x9, 0x6, 0x4, 0xfffffdad], [0x27b, 0x6, 0x6, 0x10, 0x7, 0x4009, 0x8, 0xff, 0x7fffffff, 0xe012, 0xfffffffa, 0x8, 0xffff7bfb, 0xffffffff, 0x401, 0x100, 0x2, 0x0, 0xb, 0x8, 0x3, 0x5, 0xfffffc00, 0x91, 0x9, 0x4, 0x80000000, 0x2, 0xa, 0x27, 0x400, 0x70, 0x9, 0xffc, 0x400002, 0xc, 0xffffffff, 0x49, 0x80088, 0x10, 0x5, 0x9a2, 0x81, 0xf011, 0x400, 0x103000, 0x8, 0x5, 0x4, 0xfffffffe, 0xb, 0x1, 0xc3, 0x9, 0x807ff, 0x1, 0x3, 0xfffffc02, 0x3, 0xb, 0x5, 0x8, 0xa, 0xfffffff7]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffb, 0x2000}], 0x1, &(0x7f0000000100)) sendmsg$can_j1939(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x16, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000024c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@debug={'debug', 0x3d, 0x10000000000001}}], [], 0x6b}}) syz_open_dev$video4linux(&(0x7f0000000080), 0x20000000000, 0x0) 3m56.053971661s ago: executing program 8 (id=8117): creat(&(0x7f0000001380)='./file0\x00', 0x4) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320757365723a747275737464643a203030303030342000000000000000000001feffff0000"], 0x32, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0) 3m55.384177454s ago: executing program 8 (id=8121): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x800000000000000}, 0x0) 3m54.719446419s ago: executing program 37 (id=8121): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x800000000000000}, 0x0) 26.947371226s ago: executing program 9 (id=9379): r0 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, 0x0, &(0x7f0000000040)) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r4, 0x40}, 0x8) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r6, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf"}) ioctl$TIOCGPGRP(r6, 0x5437, 0x0) 2.800799696s ago: executing program 0 (id=9493): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55f8, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe13, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc6]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1b) 2.599641295s ago: executing program 5 (id=9494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'erspan0\x00'}}]}]}, 0x28}}, 0x0) 2.255965549s ago: executing program 5 (id=9495): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 2.255533291s ago: executing program 7 (id=9496): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) setsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000180)=0x80009, 0x4) 2.223117661s ago: executing program 2 (id=9497): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000003d000701080000000000000004"], 0x4c}}, 0xc000) 2.163701786s ago: executing program 0 (id=9498): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = dup(r0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000000)={0x0, 0x0}) 2.09230498s ago: executing program 0 (id=9499): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000070100800c0001"], 0x114}], 0x1}, 0x0) 2.065168543s ago: executing program 5 (id=9500): syz_usb_connect(0x0, 0x24, 0x0, 0x0) 1.967862215s ago: executing program 2 (id=9501): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="80fd02000040", 0x42}], 0x1, 0x0, 0xc87) 1.96763136s ago: executing program 7 (id=9502): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) writev(r0, &(0x7f0000000c40)=[{&(0x7f00000005c0)="c21cfb", 0x3}], 0x1) 1.910983715s ago: executing program 0 (id=9503): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1a066042, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="5001000000000000000000000000000006000000000000000600000000000000060000000000000006000000000000000500224142068a286f9c2b5b2769a20000ffffffff0900000000a0000003400000000000000e0100000000000004000000000000000000000000000000080000000000000000010000030000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0300000007000000000000000400000000000000000003000000000008"], 0x0, 0x0, 0x0}) 1.846829232s ago: executing program 7 (id=9504): r0 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x70) 1.751478663s ago: executing program 7 (id=9505): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r4) 1.714384611s ago: executing program 2 (id=9506): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[]) 1.558358299s ago: executing program 2 (id=9507): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, &(0x7f0000000380)="c75f16175bb69c4013d0479f629c0ba46ff8ac8dc98098b878545ed70bb5bc1bacf36b28b91a23b1365fa8e67059f7c1fc1ade5eb855207f7066f96bdafb14234e8d9afeee1f3fd22e4b4fe5a61f4afde21805ae5206b87bb22d882df14583a3e6616fce86827ba486d004155a4450ce7bc978b14dadd17103787da46b699548021f41884a83569757da03e5194f8d83c3"}}, &(0x7f0000000100)) fsetxattr$trusted_overlay_opaque(r1, 0x0, &(0x7f0000000280), 0x2, 0x3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 627.84004ms ago: executing program 7 (id=9508): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 446.76669ms ago: executing program 0 (id=9509): openat$urandom(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = epoll_create(0x10001) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socket$vsock_stream(0x28, 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) 425.974578ms ago: executing program 5 (id=9510): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010003000000002a90a02700000000813e"], 0x0}, 0x0) 127.732522ms ago: executing program 2 (id=9511): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000070100800c0001"], 0x114}], 0x1}, 0x0) 51.572113ms ago: executing program 2 (id=9512): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0xfffe, 0x3, @loopback, 0x7}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(0xffffffffffffffff) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000680)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000340)='./cgroup\x00', &(0x7f0000002100), 0x280440c, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000093c0)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r5, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ntfs3\x00', 0x2208004, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000080)=0x80) sendto$inet6(r0, &(0x7f0000000240), 0x0, 0x24008844, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 0s ago: executing program 7 (id=9513): r0 = syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff9909", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) write$char_usb(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): trol message: -71 [ 1483.071283][T26447] ath6kl: unable to send the bmi data to the device: -71 [ 1483.081217][T26447] ath6kl: Unable to send get target info: -71 [ 1483.091698][T26447] ath6kl: Failed to init ath6kl core: -71 [ 1483.100649][T26447] ath6kl_usb 8-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1483.117405][ T1253] /dev/rnullb0: Can't open blockdev [ 1483.121699][T26447] usb 8-1: USB disconnect, device number 93 [ 1483.128841][T26446] usb 10-1: new full-speed USB device number 47 using dummy_hcd [ 1483.314402][T26446] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.327575][T26446] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1483.339183][T26446] usb 10-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 1483.348632][T26446] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.356840][T26446] usb 10-1: Product: syz [ 1483.361113][T26446] usb 10-1: Manufacturer: syz [ 1483.366472][T26446] usb 10-1: SerialNumber: syz [ 1483.374284][T26446] usb 10-1: config 0 descriptor?? [ 1483.564671][ T1257] NILFS (rnullb0): couldn't find nilfs on the device [ 1483.731609][ T1263] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 1483.748769][ T1263] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 1483.865110][ T1267] FAULT_INJECTION: forcing a failure. [ 1483.865110][ T1267] name failslab, interval 1, probability 0, space 0, times 0 [ 1483.878990][ T1267] CPU: 0 UID: 0 PID: 1267 Comm: syz.2.8714 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 1483.879020][ T1267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1483.879032][ T1267] Call Trace: [ 1483.879041][ T1267] [ 1483.879050][ T1267] dump_stack_lvl+0x189/0x250 [ 1483.879084][ T1267] ? __pfx____ratelimit+0x10/0x10 [ 1483.879110][ T1267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1483.879136][ T1267] ? __pfx__printk+0x10/0x10 [ 1483.879167][ T1267] ? __pfx___might_resched+0x10/0x10 [ 1483.879191][ T1267] ? fs_reclaim_acquire+0x7d/0x100 [ 1483.879227][ T1267] should_fail_ex+0x414/0x560 [ 1483.879264][ T1267] should_failslab+0xa8/0x100 [ 1483.879285][ T1267] __kmalloc_noprof+0xcb/0x4f0 [ 1483.879312][ T1267] ? ovl_get_index_name+0x8f/0x1c0 [ 1483.879345][ T1267] ovl_get_index_name+0x8f/0x1c0 [ 1483.879376][ T1267] ovl_nlink_end+0x4ec/0xc90 [ 1483.879417][ T1267] ? __pfx_ovl_nlink_end+0x10/0x10 [ 1483.879460][ T1267] ovl_do_remove+0xd1f/0xeb0 [ 1483.879498][ T1267] ? __pfx_ovl_do_remove+0x10/0x10 [ 1483.879526][ T1267] ? down_write+0x162/0x1f0 [ 1483.879553][ T1267] ? __pfx_down_write+0x10/0x10 [ 1483.879585][ T1267] ? bpf_lsm_inode_unlink+0x9/0x20 [ 1483.879612][ T1267] vfs_unlink+0x391/0x650 [ 1483.879644][ T1267] do_unlinkat+0x345/0x560 [ 1483.879672][ T1267] ? __pfx_do_unlinkat+0x10/0x10 [ 1483.879701][ T1267] ? getname_flags+0x1e5/0x540 [ 1483.879729][ T1267] __x64_sys_unlink+0x47/0x50 [ 1483.879749][ T1267] do_syscall_64+0xfa/0x3b0 [ 1483.879772][ T1267] ? lockdep_hardirqs_on+0x9c/0x150 [ 1483.879797][ T1267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.879817][ T1267] ? clear_bhb_loop+0x60/0xb0 [ 1483.879842][ T1267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.879861][ T1267] RIP: 0033:0x7f89b4d8e929 [ 1483.879880][ T1267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1483.879897][ T1267] RSP: 002b:00007f89b5c50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 1483.879919][ T1267] RAX: ffffffffffffffda RBX: 00007f89b4fb5fa0 RCX: 00007f89b4d8e929 [ 1483.879934][ T1267] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 1483.879946][ T1267] RBP: 00007f89b5c50090 R08: 0000000000000000 R09: 0000000000000000 [ 1483.879959][ T1267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1483.879971][ T1267] R13: 0000000000000000 R14: 00007f89b4fb5fa0 R15: 00007ffd591ed658 [ 1483.880005][ T1267] [ 1483.880035][ T1267] overlayfs: cleanup index of '/file1' failed (-12) [ 1484.253290][ T1282] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1484.260720][ T1282] VFS: Can't find a romfs filesystem on dev rnullb0. [ 1484.260720][ T1282] [ 1484.290506][T17240] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1484.388140][ T1293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8719'. [ 1484.455178][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.511892][T17240] Bluetooth: hci2: unexpected cc 0x0403 length: 9 > 1 [ 1484.520710][T17240] Bluetooth: hci2: unexpected event for opcode 0x0403 [ 1485.270621][ T1312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1485.285446][ T1312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1485.517514][T26446] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 1485.682626][T26446] usb 8-1: Using ep0 maxpacket: 32 [ 1485.700746][T26446] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1485.722778][T26446] usb 8-1: can't read configurations, error -61 [ 1485.882515][T26446] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 1485.938224][ T5907] usb 10-1: USB disconnect, device number 47 [ 1486.052669][T26446] usb 8-1: Using ep0 maxpacket: 32 [ 1486.070567][T26446] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1486.099449][T26446] usb 8-1: can't read configurations, error -61 [ 1486.107041][T26446] usb usb8-port1: attempt power cycle [ 1486.122072][ T1323] FAULT_INJECTION: forcing a failure. [ 1486.122072][ T1323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1486.141911][ T1323] CPU: 1 UID: 0 PID: 1323 Comm: syz.9.8727 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 1486.141941][ T1323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1486.141965][ T1323] Call Trace: [ 1486.141974][ T1323] [ 1486.141984][ T1323] dump_stack_lvl+0x189/0x250 [ 1486.142018][ T1323] ? __pfx____ratelimit+0x10/0x10 [ 1486.142045][ T1323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1486.142072][ T1323] ? __pfx__printk+0x10/0x10 [ 1486.142114][ T1323] should_fail_ex+0x414/0x560 [ 1486.142150][ T1323] _copy_to_user+0x31/0xb0 [ 1486.142180][ T1323] simple_read_from_buffer+0xe1/0x170 [ 1486.142217][ T1323] proc_fail_nth_read+0x1df/0x250 [ 1486.142252][ T1323] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1486.142279][ T1323] ? rw_verify_area+0x2a6/0x4d0 [ 1486.142297][ T1323] ? __lock_acquire+0xab9/0xd20 [ 1486.142315][ T1323] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1486.142341][ T1323] vfs_read+0x200/0x980 [ 1486.142366][ T1323] ? __pfx___mutex_lock+0x10/0x10 [ 1486.142392][ T1323] ? __pfx_vfs_read+0x10/0x10 [ 1486.142412][ T1323] ? __fget_files+0x2a/0x420 [ 1486.142441][ T1323] ? __fget_files+0x3a0/0x420 [ 1486.142462][ T1323] ? __fget_files+0x2a/0x420 [ 1486.142494][ T1323] ksys_read+0x145/0x250 [ 1486.142517][ T1323] ? __pfx_ksys_read+0x10/0x10 [ 1486.142543][ T1323] ? do_syscall_64+0xbe/0x3b0 [ 1486.142574][ T1323] do_syscall_64+0xfa/0x3b0 [ 1486.142595][ T1323] ? lockdep_hardirqs_on+0x9c/0x150 [ 1486.142618][ T1323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.142636][ T1323] ? clear_bhb_loop+0x60/0xb0 [ 1486.142659][ T1323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.142676][ T1323] RIP: 0033:0x7f262038d33c [ 1486.142693][ T1323] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1486.142709][ T1323] RSP: 002b:00007f2621143030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1486.142730][ T1323] RAX: ffffffffffffffda RBX: 00007f26205b5fa0 RCX: 00007f262038d33c [ 1486.142744][ T1323] RDX: 000000000000000f RSI: 00007f26211430a0 RDI: 0000000000000004 [ 1486.142756][ T1323] RBP: 00007f2621143090 R08: 0000000000000000 R09: 0000000000000000 [ 1486.142767][ T1323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1486.142779][ T1323] R13: 0000000000000000 R14: 00007f26205b5fa0 R15: 00007ffc38e37178 [ 1486.142811][ T1323] [ 1486.653106][T26446] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 1486.673556][T26446] usb 8-1: Using ep0 maxpacket: 32 [ 1486.681602][T26446] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1486.690210][T26446] usb 8-1: can't read configurations, error -61 [ 1486.784717][T26447] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 1486.822694][T26446] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 1486.857223][T26446] usb 8-1: Using ep0 maxpacket: 32 [ 1486.866327][T26446] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1486.891426][T26446] usb 8-1: can't read configurations, error -61 [ 1486.901903][T26446] usb usb8-port1: unable to enumerate USB device [ 1486.959721][T26447] usb 3-1: config 0 has an invalid interface number: 93 but max is 0 [ 1486.967975][T26447] usb 3-1: config 0 has no interface number 0 [ 1486.981400][T26447] usb 3-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 1486.990890][T26447] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.012357][T26447] usb 3-1: Product: syz [ 1487.016606][T26447] usb 3-1: Manufacturer: syz [ 1487.021232][T26447] usb 3-1: SerialNumber: syz [ 1487.034540][T26447] usb 3-1: config 0 descriptor?? [ 1487.228440][ T1350] sctp: [Deprecated]: syz.5.8736 (pid 1350) Use of int in max_burst socket option deprecated. [ 1487.228440][ T1350] Use struct sctp_assoc_value instead [ 1487.247176][T26447] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 1487.253884][T21101] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1487.268536][T26447] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1487.287438][T26447] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 1487.313334][T26447] usb 3-1: media controller created [ 1487.328127][T26447] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1487.407863][ T1356] qnx4: no qnx4 filesystem (no root dir). [ 1487.417606][T26447] DVB: Unable to find symbol dib7000p_attach() [ 1487.429303][T26447] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 1487.440177][T26447] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1487.446406][T21101] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1487.453006][T26447] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 1487.467042][T21101] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1487.467074][T21101] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1487.467095][T21101] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1487.467141][T21101] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1487.467164][T21101] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.479139][T21101] usb 10-1: config 0 descriptor?? [ 1487.526944][T26447] usb 3-1: media controller created [ 1487.536145][T26447] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1487.569474][T26447] dib0700: the master dib7090 has to be initialized first [ 1487.597128][T26447] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 1487.732566][T26447] rc_core: IR keymap rc-dib0700-rc5 not found [ 1487.748976][T26447] Registered IR keymap rc-empty [ 1487.757870][T26447] dvb-usb: could not initialize remote control. [ 1487.766271][T26447] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 1487.814463][T21101] hdpvr 10-1:0.0: firmware version 0x0 dated [ 1487.814487][T21101] hdpvr 10-1:0.0: untested firmware, the driver might not work. [ 1487.996338][ T5907] usb 3-1: USB disconnect, device number 52 [ 1488.016666][T21101] hdpvr 10-1:0.0: device init failed [ 1488.029820][T21101] hdpvr 10-1:0.0: probe with driver hdpvr failed with error -12 [ 1488.058555][T21101] usb 10-1: USB disconnect, device number 48 [ 1488.106368][ T5907] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 1488.283430][ T55] block nbd0: Possible stuck request ffff8880254a5080: control (read@0,1024B). Runtime 210 seconds [ 1488.300254][ T55] block nbd0: Possible stuck request ffff8880254a5240: control (read@1024,1024B). Runtime 210 seconds [ 1488.311578][ T55] block nbd0: Possible stuck request ffff8880254a5400: control (read@2048,1024B). Runtime 210 seconds [ 1488.323494][ T55] block nbd0: Possible stuck request ffff8880254a55c0: control (read@3072,1024B). Runtime 210 seconds [ 1488.525393][T17240] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1488.535495][T17240] Bluetooth: hci2: Injecting HCI hardware error event [ 1488.545536][ T5173] Bluetooth: hci2: hardware error 0x00 [ 1488.963691][T26447] usb 10-1: new low-speed USB device number 49 using dummy_hcd [ 1489.058336][ T1403] Can't find a SQUASHFS superblock on rnullb0 [ 1489.069770][ T1403] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8749'. [ 1489.147453][T26447] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1489.179321][T26447] usb 10-1: config 0 has no interface number 0 [ 1489.186452][T26447] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1489.212420][T26447] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1489.242618][T26447] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1489.255033][T26447] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.283575][T26447] usb 10-1: config 0 descriptor?? [ 1489.311444][ T1390] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1489.326177][ T1409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8751'. [ 1489.326864][ T1406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1489.346346][ T1409] NILFS (rnullb0): couldn't find nilfs on the device [ 1489.363118][T26447] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1489.377446][ T1410] NILFS (rnullb0): couldn't find nilfs on the device [ 1489.389943][ T1406] /dev/rnullb0: Can't open blockdev [ 1489.591774][ T1412] hfs: can't find a HFS filesystem on dev rnullb0 [ 1489.592587][ T1390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1489.628442][ T1390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1489.657372][ T1412] XFS (rnullb0): Invalid superblock magic number [ 1489.701976][T26447] usb 10-1: USB disconnect, device number 49 [ 1489.875266][T26446] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 1490.046649][T26446] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1490.057258][T26446] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1490.073954][T26446] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1490.086356][T26446] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1490.106609][T26446] usb 8-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1490.117601][T26446] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1490.223374][ T5907] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1490.338372][T26446] usb 8-1: config 0 descriptor?? [ 1490.412707][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 1490.435969][ T5907] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1490.458460][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.467215][ T5907] usb 3-1: Product: syz [ 1490.472952][ T5907] usb 3-1: Manufacturer: syz [ 1490.477783][ T5907] usb 3-1: SerialNumber: syz [ 1490.485702][ T1439] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 1490.501300][ T5907] usb 3-1: config 0 descriptor?? [ 1490.509352][ T1439] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 1490.563091][ T5173] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1490.631286][T26446] hdpvr 8-1:0.0: unexpected answer of status request, len -71 [ 1490.656803][T26446] hdpvr 8-1:0.0: device init failed [ 1490.662161][T26437] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1490.678785][T26446] hdpvr 8-1:0.0: probe with driver hdpvr failed with error -12 [ 1490.694846][T26446] usb 8-1: USB disconnect, device number 98 [ 1490.800017][T26437] usb 10-1: Using ep0 maxpacket: 16 [ 1490.807019][T26437] usb 10-1: config 5 has an invalid interface number: 168 but max is 0 [ 1490.823253][T26437] usb 10-1: config 5 has no interface number 0 [ 1490.843770][T26437] usb 10-1: config 5 interface 168 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1490.854292][T26437] usb 10-1: config 5 interface 168 has no altsetting 0 [ 1490.869354][T26437] usb 10-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 1490.884701][T26437] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.893354][T26437] usb 10-1: Product: syz [ 1490.904297][T26437] usb 10-1: Manufacturer: syz [ 1490.910595][T26437] usb 10-1: SerialNumber: syz [ 1490.931616][ T1437] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1491.104415][ T5907] peak_usb 3-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 1491.114929][ T5907] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 1491.122210][ T5907] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 1491.256411][ T5907] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 1491.329728][ T3026] Bluetooth: hci1: Frame reassembly failed (-84) [ 1491.367894][ T1450] ALSA: mixer_oss: invalid OSS volume '00000000000000000004' [ 1491.438060][ T1455] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1491.678175][ T1459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1491.693758][ T1459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1491.726895][ T5907] usb 3-1: USB disconnect, device number 53 [ 1492.137870][ T5907] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 1492.312321][ T5907] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1492.324671][ T5907] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1492.336895][T26437] pn533_usb 10-1:5.168: NFC: Could not find bulk-in or bulk-out endpoint [ 1492.352141][ T5907] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1492.362375][T26437] usb 10-1: USB disconnect, device number 50 [ 1492.378407][ T5907] usb 3-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.40 [ 1492.388249][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.398789][ T5907] usb 3-1: Product: 锎⤟竇㰂둹㵥áˆë½¹îž¤ê•»î¯¸ë™§ë ïƒì¬‹å³–ᄒ憑䰞慉羆ìµë„¦ç‚µç‡“䡡꽃랧ë£ã²è•»ë«´ê½â«´ï®¸ê¸’묻ﱌ먬迷ë¢ï¸†êŒá£§ì¥¦à´ è¹µäŒç¾‹ï·¿ì¢Šì‰ºâª…ꇄ섔鞆巼畨ꈶ䅴舡닾㺚ã¤è¥Œà¹éŠ²å»—ä¨æ½¶í‚½ [ 1492.422555][ C0] vkms_vblank_simulate: vblank timer overrun [ 1492.435078][ T5907] usb 3-1: Manufacturer: è“•é´ï–žÓ¾é„­éª”䠰﵄é¤í‰¹ë’šê›žâšã®«ï„ǀ惓幤緶㵱㽥듪気ﶪê§êœžé“„å¡ì“šà¢”è•áŒŠï§é–¸é¸ëœ—厼拞ç“㭄쇰äµä ²ç¤†î‰ƒæ´›à«»ï±•ë³©é‚˜å–•á£«å·žã¹¯á€†êžŒíŒ‹å™‡ìšêŽœç„•ì£¦é›µî®¸ï‡‡ä±ƒê¯’䕎虚㨱핖ఀ◙ [ 1492.458633][ C0] vkms_vblank_simulate: vblank timer overrun [ 1492.465381][ T5907] usb 3-1: SerialNumber: ê²ë¸Šå§•îˆ§ã€“⾦ﺮãžà«­éŒ­ç¾â¦™é‡—愄ఄ⇦Ķ䉰è¸î©²ä¶‚ [ 1492.480820][ T1465] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1492.488692][ T1465] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1492.504549][ T30] audit: type=1326 audit(1492.733:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1458 comm="syz.7.8767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1fd8e929 code=0x7fc00000 [ 1492.536646][ T30] audit: type=1326 audit(1492.733:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1458 comm="syz.7.8767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc1fd8e929 code=0x7fc00000 [ 1492.559263][ T30] audit: type=1326 audit(1492.733:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1458 comm="syz.7.8767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1fd8e929 code=0x7fc00000 [ 1492.596965][ T30] audit: type=1326 audit(1492.733:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1458 comm="syz.7.8767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1fd8e929 code=0x7fc00000 [ 1492.618944][ C0] vkms_vblank_simulate: vblank timer overrun [ 1492.625809][ T30] audit: type=1326 audit(1492.733:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1458 comm="syz.7.8767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1fd8e929 code=0x7fc00000 [ 1492.659848][ T30] audit: type=1326 audit(1492.733:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1458 comm="syz.7.8767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1fd8e929 code=0x7fc00000 [ 1492.682956][ T30] audit: type=1326 audit(1492.733:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1458 comm="syz.7.8767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1fd8e929 code=0x7fc00000 [ 1492.705447][ T30] audit: type=1326 audit(1492.733:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1458 comm="syz.7.8767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1fd8e929 code=0x7fc00000 [ 1492.733271][ T30] audit: type=1326 audit(1492.733:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1458 comm="syz.7.8767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1fd8e929 code=0x7fc00000 [ 1492.759981][ T30] audit: type=1326 audit(1492.733:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1458 comm="syz.7.8767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1fd8e929 code=0x7fc00000 [ 1492.885736][T26437] usb 8-1: new low-speed USB device number 99 using dummy_hcd [ 1492.921230][ T5907] usbhid 3-1:1.0: can't add hid device: -71 [ 1492.927462][ T5907] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1492.939610][ T5907] usb 3-1: USB disconnect, device number 54 [ 1493.050112][T26437] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1493.058447][T26437] usb 8-1: config 0 has no interface number 0 [ 1493.064663][T26437] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1493.075922][T26437] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1493.087349][T26437] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1493.096674][T26437] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.111486][T26437] usb 8-1: config 0 descriptor?? [ 1493.117482][ T1467] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1493.129723][T26437] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1493.140713][ T24] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1493.300435][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 1493.307977][ T24] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1493.319132][ T24] usb 10-1: config 0 has no interface number 0 [ 1493.325744][ T5173] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1493.347842][ T24] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1493.358989][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.373619][ T24] usb 10-1: Product: syz [ 1493.373656][ T5907] usb 8-1: USB disconnect, device number 99 [ 1493.378608][ T24] usb 10-1: Manufacturer: syz [ 1493.389480][ T24] usb 10-1: SerialNumber: syz [ 1493.406732][ T24] usb 10-1: config 0 descriptor?? [ 1493.439520][ T24] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1493.776214][T26437] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 1493.880353][ T24] gspca_spca1528: reg_w err -71 [ 1493.885366][ T24] spca1528 10-1:0.1: probe with driver spca1528 failed with error -71 [ 1493.951001][ T24] usb 10-1: USB disconnect, device number 51 [ 1493.965558][T26437] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 1494.003836][T26437] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.025489][T26437] usb 3-1: Product: syz [ 1494.029727][T26437] usb 3-1: Manufacturer: syz [ 1494.047184][T26437] usb 3-1: SerialNumber: syz [ 1494.065905][T26437] usb 3-1: config 0 descriptor?? [ 1494.963357][ T1498] FAT-fs (rnullb0): bogus number of reserved sectors [ 1494.970930][ T1498] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1495.309563][ T24] usb 8-1: new high-speed USB device number 100 using dummy_hcd [ 1495.475311][T26446] usb 10-1: new low-speed USB device number 52 using dummy_hcd [ 1495.485463][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1495.495488][ T24] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1495.505571][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1495.515391][ T24] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1495.526698][ T24] usb 8-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1495.535808][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.546533][ T24] usb 8-1: config 0 descriptor?? [ 1495.633599][T26446] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1495.642180][T26446] usb 10-1: config 0 has no interface number 0 [ 1495.648426][T26446] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1495.659731][T26446] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1495.670723][T26446] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1495.680168][T26446] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.692422][T26446] usb 10-1: config 0 descriptor?? [ 1495.699622][ T1510] raw-gadget.4 gadget.9: fail, usb_ep_enable returned -22 [ 1495.722436][T26446] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1495.818169][ T24] hdpvr 8-1:0.0: unexpected answer of status request, len -71 [ 1495.827340][ T24] hdpvr 8-1:0.0: device init failed [ 1495.835035][ T24] hdpvr 8-1:0.0: probe with driver hdpvr failed with error -12 [ 1495.846413][ T24] usb 8-1: USB disconnect, device number 100 [ 1495.929632][T26446] usb 10-1: USB disconnect, device number 52 [ 1496.713359][ T5907] usb 3-1: USB disconnect, device number 55 [ 1496.789073][ T5173] Bluetooth: hci6: command 0x0406 tx timeout [ 1496.904072][ T1532] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1496.913878][ T1532] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1496.933926][ T1532] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1496.953859][ T1532] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1497.011211][ T1532] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1497.023605][ T1532] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1497.030204][ T24] usb 8-1: new high-speed USB device number 101 using dummy_hcd [ 1497.030319][ T1532] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1497.048457][ T1532] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1497.218347][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 1497.233711][ T24] usb 8-1: config 0 has an invalid interface number: 150 but max is 0 [ 1497.253370][ T24] usb 8-1: config 0 has an invalid interface number: 112 but max is 0 [ 1497.266048][ T24] usb 8-1: config 0 has an invalid interface number: 3 but max is 0 [ 1497.277445][ T24] usb 8-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 1497.295173][ T24] usb 8-1: config 0 has no interface number 0 [ 1497.308719][ T24] usb 8-1: config 0 has no interface number 1 [ 1497.326743][ T24] usb 8-1: config 0 has no interface number 2 [ 1497.335311][ T24] usb 8-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1497.351784][ T1552] sctp: [Deprecated]: syz.5.8795 (pid 1552) Use of int in maxseg socket option. [ 1497.351784][ T1552] Use struct sctp_assoc_value instead [ 1497.352665][ T24] usb 8-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 1497.384470][ T24] usb 8-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 1497.399448][ T1555] hpfs: Bad magic ... probably not HPFS [ 1497.403364][ T24] usb 8-1: config 0 interface 150 has no altsetting 0 [ 1497.411208][ T1552] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8795'. [ 1497.413306][T26447] usb 10-1: new low-speed USB device number 53 using dummy_hcd [ 1497.438468][ T24] usb 8-1: config 0 interface 112 has no altsetting 0 [ 1497.461341][ T24] usb 8-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 1497.476495][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.489522][ T24] usb 8-1: config 0 descriptor?? [ 1497.521317][ T1559] vxfs: WRONG superblock magic 00000000 at 1 [ 1497.527535][ T1559] vxfs: WRONG superblock magic 00000000 at 8 [ 1497.534466][ T1559] vxfs: can't find superblock. [ 1497.564968][T10725] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 1497.623733][T26447] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1497.656067][T26447] usb 10-1: config 0 has no interface number 0 [ 1497.663269][T26447] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1497.681400][T26447] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1497.692594][T26447] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1497.702056][T26447] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.714835][T26447] usb 10-1: config 0 descriptor?? [ 1497.735875][ T1546] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1497.750738][T10725] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 1497.768088][T10725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.779290][T26447] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1497.784767][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.150/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 1497.797081][T10725] usb 3-1: Product: syz [ 1497.841766][T10725] usb 3-1: Manufacturer: syz [ 1497.846549][T10725] usb 3-1: SerialNumber: syz [ 1497.856288][T10725] usb 3-1: config 0 descriptor?? [ 1497.984823][T26447] usb 10-1: USB disconnect, device number 53 [ 1499.061765][T17240] Bluetooth: hci6: command 0x0406 tx timeout [ 1499.061785][ T5173] Bluetooth: hci5: command 0x0406 tx timeout [ 1499.146910][T17240] Bluetooth: hci3: command 0x0c1a tx timeout [ 1499.541978][ T1573] netlink: 2384 bytes leftover after parsing attributes in process `syz.9.8801'. [ 1499.553769][ T1573] Mount JFS Failure: -22 [ 1499.560753][ T1573] netlink: 2384 bytes leftover after parsing attributes in process `syz.9.8801'. [ 1499.898933][ T24] usb 8-1: string descriptor 0 read error: -71 [ 1499.955324][ T24] usb 8-1: USB disconnect, device number 101 [ 1500.421123][T10725] usb 10-1: new low-speed USB device number 54 using dummy_hcd [ 1500.553323][ T24] usb 3-1: USB disconnect, device number 56 [ 1500.602185][T10725] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1500.621725][T10725] usb 10-1: config 0 has no interface number 0 [ 1500.628018][T10725] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1500.646032][T10725] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1500.659379][T10725] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1500.664357][ T1609] 9pnet_fd: Insufficient options for proto=fd [ 1500.670198][T10725] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.697584][T10725] usb 10-1: config 0 descriptor?? [ 1500.703497][ T1600] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1500.714664][T26447] usb 8-1: new high-speed USB device number 102 using dummy_hcd [ 1500.744809][T10725] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1500.919952][ T1618] /dev/rnullb0: Can't open blockdev [ 1500.921991][T26447] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1500.945347][T26437] usb 10-1: USB disconnect, device number 54 [ 1500.961515][T26447] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1500.992573][T26447] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1501.029119][T26447] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1501.062363][T26447] usb 8-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1501.063242][ T1622] /dev/rnullb0: Can't open blockdev [ 1501.082875][T26447] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.110084][T26447] usb 8-1: config 0 descriptor?? [ 1501.243105][ T1627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8818'. [ 1501.266849][T17240] Bluetooth: hci5: command 0x0406 tx timeout [ 1501.267715][ T5173] Bluetooth: hci6: command 0x0406 tx timeout [ 1501.287957][ T1627] hpfs: Bad magic ... probably not HPFS [ 1501.340891][T26447] hdpvr 8-1:0.0: firmware version 0x0 dated [ 1501.347112][T26447] hdpvr 8-1:0.0: untested firmware, the driver might not work. [ 1501.358870][ T5173] Bluetooth: hci3: command 0x0c1a tx timeout [ 1501.445443][ T1632] netlink: 'syz.2.8819': attribute type 7 has an invalid length. [ 1501.567477][T26447] hdpvr 8-1:0.0: device init failed [ 1501.572940][T26447] hdpvr 8-1:0.0: probe with driver hdpvr failed with error -12 [ 1501.590913][ T1632] : entered promiscuous mode [ 1501.614289][T26447] usb 8-1: USB disconnect, device number 102 [ 1501.955260][ T1643] kvm: pic: non byte write [ 1502.287693][T26447] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 1502.436297][T26447] usb 3-1: device descriptor read/64, error -71 [ 1502.702816][T26447] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 1502.846554][ T1671] omfs: Invalid superblock (0) [ 1502.853622][T26447] usb 3-1: device descriptor read/64, error -71 [ 1502.865809][ T1671] cgroup2: Unknown parameter 'perf_event' [ 1502.958030][ T5907] usb 8-1: new high-speed USB device number 103 using dummy_hcd [ 1502.969853][T26447] usb usb3-port1: attempt power cycle [ 1503.119375][ T5907] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1503.132542][ T5907] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1503.142003][ T5907] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.153836][ T5907] usb 8-1: config 0 descriptor?? [ 1503.174250][ T5907] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1503.214825][ T1677] tipc: Started in network mode [ 1503.219882][ T1677] tipc: Node identity 321df9bbf4bf, cluster identity 4711 [ 1503.230885][ T1677] tipc: Enabled bearer , priority 0 [ 1503.240941][ T1677] tipc: Disabling bearer [ 1503.341270][T26447] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 1503.376780][T26447] usb 3-1: device descriptor read/8, error -71 [ 1503.474114][ T5907] usb 8-1: USB disconnect, device number 103 [ 1503.484786][ T5173] Bluetooth: hci6: command 0x0406 tx timeout [ 1503.575955][ T5173] Bluetooth: hci3: command 0x0c1a tx timeout [ 1503.660970][T26447] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 1503.704080][T26447] usb 3-1: device descriptor read/8, error -71 [ 1503.822528][T26447] usb usb3-port1: unable to enumerate USB device [ 1503.999672][ T1683] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 11 [ 1505.008625][ T1704] misc userio: No port type given on /dev/userio [ 1505.014884][ T1705] No buffer was provided with the request [ 1505.519556][ T1725] FAT-fs (rnullb0): bogus number of reserved sectors [ 1505.548290][ T1725] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1505.602611][ T1725] loop3: detected capacity change from 0 to 1 [ 1505.630371][ T1725] Dev loop3: unable to read RDB block 1 [ 1505.643222][ T1725] loop3: unable to read partition table [ 1505.649954][ T1725] loop3: partition table beyond EOD, truncated [ 1505.692720][ T1725] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1505.727827][ T1732] hfs: can't find a HFS filesystem on dev rnullb0 [ 1505.778601][ T1736] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 1506.545371][ T1752] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8860'. [ 1506.560602][ T1752] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8860'. [ 1506.570435][ T1752] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8860'. [ 1507.056454][ T1771] netlink: 312 bytes leftover after parsing attributes in process `syz.2.8867'. [ 1507.515802][ T1783] syz.7.8870: attempt to access beyond end of device [ 1507.515802][ T1783] nbd7: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1507.544461][ T1783] EXT4-fs (nbd7): unable to read superblock [ 1508.500174][ T1812] Mount JFS Failure: -22 [ 1509.445512][T26447] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1509.541845][T21101] usb 10-1: new full-speed USB device number 57 using dummy_hcd [ 1509.661016][T26447] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1509.687755][T26447] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1509.706667][T26447] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1509.726936][T26447] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1509.749551][T21101] usb 10-1: config 2 has an invalid interface number: 233 but max is 0 [ 1509.753940][T26447] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1509.777862][T21101] usb 10-1: config 2 has no interface number 0 [ 1509.790211][T26447] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.795204][T21101] usb 10-1: config 2 interface 233 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1509.825455][T26447] usb 3-1: config 0 descriptor?? [ 1509.831814][T21101] usb 10-1: config 2 interface 233 altsetting 7 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1509.869383][T21101] usb 10-1: config 2 interface 233 has no altsetting 0 [ 1509.887349][T21101] usb 10-1: New USB device found, idVendor=10c4, idProduct=813f, bcdDevice=82.dd [ 1509.904286][T21101] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.923876][T21101] usb 10-1: Product: syz [ 1509.933756][T21101] usb 10-1: Manufacturer: syz [ 1509.947638][T21101] usb 10-1: SerialNumber: syz [ 1509.966303][T21101] usb 10-1: rejected 1 configuration due to insufficient available bus power [ 1509.987439][T21101] usb 10-1: no configuration chosen from 1 choice [ 1510.069536][T26447] hdpvr 3-1:0.0: firmware version 0x0 dated [ 1510.077611][T26447] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 1510.135108][ T1832] hfs: can't find a HFS filesystem on dev rnullb0 [ 1510.291911][T26447] hdpvr 3-1:0.0: device init failed [ 1510.297299][T26447] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 1510.307302][ T1837] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 1510.315408][ T1837] UDF-fs: Scanning with blocksize 4096 failed [ 1510.325582][T26447] usb 3-1: USB disconnect, device number 61 [ 1510.759694][T26444] usb 8-1: new low-speed USB device number 104 using dummy_hcd [ 1510.873433][ T1843] gfs2: not a GFS2 filesystem [ 1510.880388][ T1844] gfs2: not a GFS2 filesystem [ 1510.905020][T26444] usb 8-1: device descriptor read/64, error -71 [ 1511.093641][ T1852] netlink: 'syz.2.8897': attribute type 1 has an invalid length. [ 1511.167931][T26444] usb 8-1: new low-speed USB device number 105 using dummy_hcd [ 1511.219408][ T1852] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 1511.326681][T26444] usb 8-1: device descriptor read/64, error -71 [ 1511.428779][ T1863] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 1511.437993][ T1863] UDF-fs: Scanning with blocksize 4096 failed [ 1511.445409][T26444] usb usb8-port1: attempt power cycle [ 1511.602440][ T1865] netlink: 428 bytes leftover after parsing attributes in process `syz.2.8901'. [ 1511.612833][ T1865] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8901'. [ 1511.811250][T26444] usb 8-1: new low-speed USB device number 106 using dummy_hcd [ 1511.850520][T26444] usb 8-1: device descriptor read/8, error -71 [ 1512.148941][T26444] usb 8-1: new low-speed USB device number 107 using dummy_hcd [ 1512.181794][T26444] usb 8-1: device descriptor read/8, error -71 [ 1512.300432][ T1870] FAT-fs (rnullb0): bogus number of reserved sectors [ 1512.306348][T26444] usb usb8-port1: unable to enumerate USB device [ 1512.307849][ T1870] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1512.465812][ T5907] usb 10-1: USB disconnect, device number 57 [ 1512.608533][ T1877] libceph: resolve '4' (ret=-3): failed [ 1512.904290][ T1882] CUSE: info not properly terminated [ 1513.266111][ T1884] NILFS (rnullb0): couldn't find nilfs on the device [ 1513.498071][ T1891] XFS (rnullb0): Invalid superblock magic number [ 1513.670516][ T1905] IPVS: length: 1633771873 != 169912274800 [ 1513.919493][ T1916] netlink: 'syz.9.8917': attribute type 1 has an invalid length. [ 1513.944450][ T1916] netlink: 224 bytes leftover after parsing attributes in process `syz.9.8917'. [ 1514.404846][ T5907] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 1514.518912][ T1933] random: crng reseeded on system resumption [ 1514.553003][ T1933] Restarting kernel threads ... [ 1514.564998][ T1933] Done restarting kernel threads. [ 1514.580317][ T1934] syz.2.8922: attempt to access beyond end of device [ 1514.580317][ T1934] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1514.594299][ T5907] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 1514.623330][ T1934] EXT4-fs (nbd2): unable to read superblock [ 1514.639351][ T5907] usb 10-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 1514.659524][ T5907] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.672166][ T5907] usb 10-1: Product: syz [ 1514.676547][ T5907] usb 10-1: Manufacturer: syz [ 1514.692710][ T5907] usb 10-1: SerialNumber: syz [ 1514.715519][ T5907] usb 10-1: config 0 descriptor?? [ 1514.737812][ T5907] usb 10-1: Waiting for MOTU Microbook II to boot up... [ 1514.766544][ T5907] usb 10-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1514.787047][ T5907] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1514.977574][ T1927] /dev/rnullb0: Can't open blockdev [ 1514.993078][T26437] usb 10-1: USB disconnect, device number 58 [ 1515.005355][ T1943] /dev/rnullb0: Can't open blockdev [ 1515.227320][ T5907] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1515.398119][T26444] usb 8-1: new high-speed USB device number 108 using dummy_hcd [ 1515.400556][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1515.437464][ T5907] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1515.458838][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1515.479405][ T5907] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1515.500185][ T5907] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1515.519249][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.558629][ T5907] usb 3-1: config 0 descriptor?? [ 1515.596919][T26444] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1515.630445][T26444] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1515.684879][T26444] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1515.717648][T26444] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1515.752670][T26444] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1515.772241][T26444] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1515.802686][T26444] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1515.817920][ T5907] hdpvr 3-1:0.0: firmware version 0x0 dated [ 1515.827164][T26444] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1515.835989][T26444] usb 8-1: SerialNumber: syz [ 1515.841777][ T5907] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 1515.864161][T26444] usb 8-1: bad CDC descriptors [ 1516.034916][ T5907] hdpvr 3-1:0.0: device init failed [ 1516.050416][ T5907] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 1516.065443][ T5907] usb 3-1: USB disconnect, device number 62 [ 1516.274977][T26437] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 1516.424437][T26437] usb 10-1: device descriptor read/64, error -71 [ 1516.681100][T26437] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 1516.830513][T26437] usb 10-1: device descriptor read/64, error -71 [ 1516.951165][T26437] usb usb10-port1: attempt power cycle [ 1517.172578][T21101] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 1517.322336][T26437] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 1517.344729][T26437] usb 10-1: device descriptor read/8, error -71 [ 1517.352203][T21101] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1517.360831][T21101] usb 3-1: config 0 has no interface number 0 [ 1517.369317][T21101] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 1517.378549][T21101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.386691][T21101] usb 3-1: Product: syz [ 1517.391037][T21101] usb 3-1: Manufacturer: syz [ 1517.395736][T21101] usb 3-1: SerialNumber: syz [ 1517.406887][T21101] usb 3-1: config 0 descriptor?? [ 1517.414927][T21101] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 1517.611057][T26437] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 1517.633189][T26437] usb 10-1: device descriptor read/8, error -71 [ 1517.750195][T26437] usb usb10-port1: unable to enumerate USB device [ 1518.231026][T26444] usb 8-1: USB disconnect, device number 108 [ 1518.349909][ T1975] FAT-fs (rnullb0): bogus number of reserved sectors [ 1518.356808][ T1975] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1518.365721][ T1975] FAT-fs (rnullb0): bogus number of reserved sectors [ 1518.373462][ T1975] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1518.499401][ T1982] virtio-fs: tag not found [ 1518.557356][ T1984] omfs: Invalid superblock (0) [ 1518.566718][ T1986] omfs: Invalid superblock (0) [ 1519.572448][T21101] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 1519.584723][T21101] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 1519.595483][T21101] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 1519.606349][T21101] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 1519.616835][T21101] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 1519.627263][T21101] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 1519.637846][T26439] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 1519.646530][T21101] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 1519.658655][T21101] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 1519.670495][T21101] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 1519.686795][T21101] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 1519.705469][T21101] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input264 [ 1519.736772][T21101] usb 3-1: USB disconnect, device number 63 [ 1519.791636][T26439] usb 10-1: device descriptor read/64, error -71 [ 1519.792659][ T2005] syzkaller0: entered promiscuous mode [ 1519.811752][ T2005] syzkaller0: entered allmulticast mode [ 1519.824480][ T55] block nbd0: Possible stuck request ffff8880254a5080: control (read@0,1024B). Runtime 240 seconds [ 1519.835496][ T55] block nbd0: Possible stuck request ffff8880254a5240: control (read@1024,1024B). Runtime 240 seconds [ 1519.848481][ T55] block nbd0: Possible stuck request ffff8880254a5400: control (read@2048,1024B). Runtime 240 seconds [ 1519.859952][ T55] block nbd0: Possible stuck request ffff8880254a55c0: control (read@3072,1024B). Runtime 240 seconds [ 1520.054573][T26439] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 1520.237147][T26439] usb 10-1: device descriptor read/64, error -71 [ 1520.369720][T26439] usb usb10-port1: attempt power cycle [ 1520.530684][ T2014] XFS (rnullb0): Invalid superblock magic number [ 1520.754902][T26439] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 1520.786772][T26439] usb 10-1: device descriptor read/8, error -71 [ 1521.044294][T26439] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 1521.083198][T26439] usb 10-1: device descriptor read/8, error -71 [ 1521.223234][T26439] usb usb10-port1: unable to enumerate USB device [ 1523.289800][ T2036] qnx4: no qnx4 filesystem (no root dir). [ 1524.333670][ T2047] exFAT-fs (rnullb0): invalid boot record signature [ 1524.342945][ T2047] exFAT-fs (rnullb0): failed to read boot sector [ 1524.352200][ T2047] exFAT-fs (rnullb0): failed to recognize exfat type [ 1524.431253][T26439] usb 10-1: new full-speed USB device number 67 using dummy_hcd [ 1524.614462][T26439] usb 10-1: config 0 has an invalid interface number: 2 but max is 0 [ 1524.633817][T26439] usb 10-1: config 0 has no interface number 0 [ 1524.651670][T26439] usb 10-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 1524.667234][T26439] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.676912][T26439] usb 10-1: Product: syz [ 1524.681846][T26439] usb 10-1: Manufacturer: syz [ 1524.686599][T26439] usb 10-1: SerialNumber: syz [ 1524.714480][T26439] usb 10-1: config 0 descriptor?? [ 1524.737708][T26439] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 1525.017229][T26437] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1525.158766][T26437] usb 3-1: Using ep0 maxpacket: 16 [ 1525.167149][T26437] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1525.174756][T26437] usb 3-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 1525.185017][T26437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.200793][T26437] usb 3-1: config 0 descriptor?? [ 1525.421650][T26437] cypress 0003:04B4:ED81.006A: item fetching failed at offset 3/7 [ 1525.437290][T26437] cypress 0003:04B4:ED81.006A: parse failed [ 1525.446549][T26437] cypress 0003:04B4:ED81.006A: probe with driver cypress failed with error -22 [ 1525.602584][T26444] usb 3-1: USB disconnect, device number 64 [ 1525.840643][ T2072] batadv_slave_1: entered promiscuous mode [ 1525.854556][ T2072] batadv_slave_1: left promiscuous mode [ 1525.956619][ T2076] exFAT-fs (nullb0): invalid boot record signature [ 1525.964515][ T2076] exFAT-fs (nullb0): failed to read boot sector [ 1525.970806][ T2076] exFAT-fs (nullb0): failed to recognize exfat type [ 1525.981865][ T2075] exFAT-fs (nullb0): invalid boot record signature [ 1525.990029][ T2075] exFAT-fs (nullb0): failed to read boot sector [ 1525.996729][ T2075] exFAT-fs (nullb0): failed to recognize exfat type [ 1526.488489][ T5907] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1526.518174][ T2094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1526.539510][ T2094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1526.659370][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1526.671294][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1526.682342][T26439] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 1526.692566][ T5907] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1526.701919][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.710283][T26439] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 1526.723303][ T5907] usb 3-1: config 0 descriptor?? [ 1526.728453][T26439] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 1526.738946][T26439] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 1526.753978][T26439] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 1526.764352][T26439] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 1526.775353][T26439] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 1526.786079][T26439] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 1526.797228][T26439] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 1526.807852][T26439] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 1526.826239][T26439] input: xirlink-cit as /devices/platform/dummy_hcd.9/usb10/10-1/input/input265 [ 1526.857203][T26439] usb 10-1: USB disconnect, device number 67 [ 1527.160520][ T5907] usb 3-1: string descriptor 0 read error: -22 [ 1527.162304][ T2109] vxfs: WRONG superblock magic 00000000 at 1 [ 1527.174517][ T2109] vxfs: WRONG superblock magic 00000000 at 8 [ 1527.180571][ T2109] vxfs: can't find superblock. [ 1527.192642][ T2109] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8975'. [ 1527.199688][ T5907] uclogic 0003:256C:006D.006B: failed retrieving string descriptor #200: -71 [ 1527.258795][ T5907] uclogic 0003:256C:006D.006B: failed retrieving pen parameters: -71 [ 1527.282591][ T5907] uclogic 0003:256C:006D.006B: failed probing pen v2 parameters: -71 [ 1527.312589][ T5907] uclogic 0003:256C:006D.006B: failed probing parameters: -71 [ 1527.320228][ T5907] uclogic 0003:256C:006D.006B: probe with driver uclogic failed with error -71 [ 1527.357374][ T2114] FAT-fs (rnullb0): bogus number of reserved sectors [ 1527.364280][ T2114] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1527.385169][ T5907] usb 3-1: USB disconnect, device number 65 [ 1527.692527][ T2122] vxfs: WRONG superblock magic 00000000 at 1 [ 1527.719995][ T2122] vxfs: WRONG superblock magic 00000000 at 8 [ 1527.745011][ T2122] vxfs: can't find superblock. [ 1527.835161][ T5907] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1527.914814][ T2129] mkiss: ax0: crc mode is auto. [ 1527.943825][ T2127] qnx4: no qnx4 filesystem (no root dir). [ 1528.019368][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1528.039490][ T5907] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1528.070270][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1528.120110][ T5907] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1528.145157][ T5907] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1528.159797][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.180264][ T5907] usb 3-1: config 0 descriptor?? [ 1528.353477][T26437] usb 10-1: new full-speed USB device number 68 using dummy_hcd [ 1528.508995][ T5907] hdpvr 3-1:0.0: unexpected answer of status request, len -71 [ 1528.541145][ T5907] hdpvr 3-1:0.0: device init failed [ 1528.551751][ T5907] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 1528.571007][T26437] usb 10-1: config 0 has an invalid interface number: 2 but max is 0 [ 1528.590850][T26437] usb 10-1: config 0 has no interface number 0 [ 1528.598137][ T5907] usb 3-1: USB disconnect, device number 66 [ 1528.610885][T26437] usb 10-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 1528.620559][T26437] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.635113][T26437] usb 10-1: Product: syz [ 1528.647301][T26437] usb 10-1: Manufacturer: syz [ 1528.652048][T26437] usb 10-1: SerialNumber: syz [ 1528.666222][T26437] usb 10-1: config 0 descriptor?? [ 1528.691061][T26437] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 1529.165230][ T2167] hfs: can't find a HFS filesystem on dev rnullb0 [ 1529.269653][ T2169] vxfs: WRONG superblock magic 00000000 at 1 [ 1529.278355][ T2169] vxfs: WRONG superblock magic 00000000 at 8 [ 1529.288420][ T2169] vxfs: can't find superblock. [ 1529.589123][ T2182] ceph: Path missing in source [ 1529.849580][ T5907] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1530.004943][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 1530.013297][ T5907] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1530.022442][ T5907] usb 3-1: config 106 has an invalid interface number: 15 but max is 0 [ 1530.030910][ T5907] usb 3-1: config 106 has no interface number 0 [ 1530.037379][ T5907] usb 3-1: config 106 interface 15 has no altsetting 0 [ 1530.047634][ T5907] usb 3-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=56.45 [ 1530.056891][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.064973][ T5907] usb 3-1: Product: syz [ 1530.070798][ T5907] usb 3-1: Manufacturer: syz [ 1530.075555][ T5907] usb 3-1: SerialNumber: syz [ 1530.302234][ T2181] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1530.312664][ T2181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1530.324802][ T2181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1530.363622][ T5907] cdc_subset 3-1:106.15: probe with driver cdc_subset failed with error -71 [ 1530.377531][ T5907] usb 3-1: USB disconnect, device number 67 [ 1530.763081][T26437] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 1530.781393][T26437] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 1530.792553][T26437] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 1530.808564][T26437] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 1530.822463][T26437] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 1530.851075][T26437] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 1530.865916][T26437] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 1530.881716][T26437] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 1530.887347][ T2202] cgroup: Name too long [ 1530.902928][T26437] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 1530.914870][T26437] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 1530.937169][T26437] input: xirlink-cit as /devices/platform/dummy_hcd.9/usb10/10-1/input/input266 [ 1530.982189][T26437] usb 10-1: USB disconnect, device number 68 [ 1531.662651][T26437] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 1531.990661][ T2231] /dev/rnullb0: Can't open blockdev [ 1532.012972][ T2231] binder: Unknown parameter 'mode' [ 1532.406139][ T2239] Can't find a SQUASHFS superblock on rnullb0 [ 1533.073851][T26437] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1533.093750][T26437] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1533.101495][T26437] usb 10-1: can't read configurations, error -71 [ 1533.534577][T21101] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 1533.706816][T21101] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1533.720144][T21101] usb 3-1: config 0 has no interface number 0 [ 1533.730663][T21101] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 1533.741825][T21101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.751151][T21101] usb 3-1: Product: syz [ 1533.755566][T21101] usb 3-1: Manufacturer: syz [ 1533.761905][T21101] usb 3-1: SerialNumber: syz [ 1533.770271][ T2251] omfs: Invalid superblock (0) [ 1533.776607][T21101] usb 3-1: config 0 descriptor?? [ 1533.782667][ T2253] omfs: Invalid superblock (0) [ 1533.793218][T21101] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 1533.862633][ T2255] mkiss: ax0: crc mode is auto. [ 1534.186880][ T2261] vxfs: WRONG superblock magic 00000000 at 1 [ 1534.194016][ T2261] vxfs: WRONG superblock magic 00000000 at 8 [ 1534.207155][ T2261] vxfs: can't find superblock. [ 1534.280960][ T2267] /dev/rnullb0: Can't lookup blockdev [ 1535.049072][ T2276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1535.181622][ T2278] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1535.684940][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1535.684960][ T30] audit: type=1326 audit(1533.835:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2282 comm="syz.9.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262038e929 code=0x7fc00000 [ 1535.833474][ T2295] syz.9.9038: attempt to access beyond end of device [ 1535.833474][ T2295] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1535.894610][ T2297] bridge_slave_0: mtu less than device minimum [ 1535.957211][T21101] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 1535.989260][T21101] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 1535.999885][T21101] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 1536.011464][T21101] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 1536.025384][T21101] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 1536.046483][T21101] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 1536.062816][T21101] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 1536.074733][T21101] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 1536.086576][T21101] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 1536.115135][ T2307] netlink: 'syz.9.9042': attribute type 3 has an invalid length. [ 1536.123395][T21101] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 1536.126476][T21101] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input268 [ 1536.191254][T21101] usb 3-1: USB disconnect, device number 68 [ 1536.587791][T26444] usb 10-1: new full-speed USB device number 71 using dummy_hcd [ 1536.724326][ T2329] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9051'. [ 1536.742993][ T2330] Mount JFS Failure: -22 [ 1536.750651][ T30] audit: type=1800 audit(1534.841:156): pid=2329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.9051" name="rnullb0" dev="tmpfs" ino=2629 res=0 errno=0 [ 1536.783366][T26444] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1536.816143][T26444] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1536.846526][T26444] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1536.864082][T26444] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.882350][T26444] usb 10-1: Product: syz [ 1536.901071][T26444] usb 10-1: Manufacturer: syz [ 1536.905916][T26444] usb 10-1: SerialNumber: syz [ 1536.931249][T26444] usb 10-1: config 0 descriptor?? [ 1536.958441][T26444] usb 10-1: selecting invalid altsetting 0 [ 1537.136932][T11353] udevd[11353]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 1537.180979][T26437] usb 10-1: USB disconnect, device number 71 [ 1537.588176][T26444] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 1537.771429][T26444] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1537.790735][T26444] usb 3-1: config 0 has no interface number 0 [ 1537.799794][T26444] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 1537.813561][T26444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.821800][T26444] usb 3-1: Product: syz [ 1537.828796][T26444] usb 3-1: Manufacturer: syz [ 1537.833754][T26444] usb 3-1: SerialNumber: syz [ 1537.852950][T26444] usb 3-1: config 0 descriptor?? [ 1537.863740][T26444] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 1538.045881][ T5907] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 1538.205712][ T5907] usb 10-1: Using ep0 maxpacket: 8 [ 1538.217074][ T5907] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1538.226370][ T5907] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.234735][ T5907] usb 10-1: Product: syz [ 1538.239186][ T5907] usb 10-1: Manufacturer: syz [ 1538.243889][ T5907] usb 10-1: SerialNumber: syz [ 1538.252807][ T5907] usb 10-1: config 0 descriptor?? [ 1538.262819][ T5907] gspca_main: se401-2.14.0 probing 047d:5003 [ 1538.475899][ T2351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1538.726634][ T5907] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1538.740180][ T5907] se401 10-1:0.0: probe with driver se401 failed with error -71 [ 1538.750371][ T5907] usb 10-1: USB disconnect, device number 72 [ 1539.329118][ T2357] netlink: 'syz.9.9059': attribute type 5 has an invalid length. [ 1539.339730][ T2357] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9059'. [ 1539.352808][ T2357] netlink: 'syz.9.9059': attribute type 1 has an invalid length. [ 1539.383616][ T2349] random: crng reseeded on system resumption [ 1539.847592][T26437] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 1540.007596][T26437] usb 10-1: Using ep0 maxpacket: 16 [ 1540.020034][T26437] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1540.030499][T26437] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1540.039733][T26437] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1540.048964][T26437] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.060365][T26437] usb 10-1: config 0 descriptor?? [ 1540.209283][ T2370] vxfs: WRONG superblock magic 00000000 at 1 [ 1540.215898][ T2370] vxfs: WRONG superblock magic 00000000 at 8 [ 1540.225621][ T2370] vxfs: can't find superblock. [ 1540.235190][ T2371] vxfs: WRONG superblock magic 00000000 at 1 [ 1540.241439][ T2371] vxfs: WRONG superblock magic 00000000 at 8 [ 1540.247842][ T2371] vxfs: can't find superblock. [ 1540.283874][T26437] usb 10-1: USB disconnect, device number 73 [ 1541.260040][T26444] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -110) [ 1541.284709][ T2386] 9pnet_fd: Insufficient options for proto=fd [ 1541.292036][T26444] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -32) [ 1541.327583][T26444] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -32) [ 1541.344773][T26444] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -32) [ 1541.359572][T26444] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -32) [ 1541.379210][T26444] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -32) [ 1541.407030][T26444] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -32) [ 1541.423566][T26444] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -32) [ 1541.435029][T26444] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -32) [ 1541.456770][T26444] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input269 [ 1541.622683][T26444] usb 3-1: USB disconnect, device number 69 [ 1542.007954][ T2412] /dev/rnullb0: Can't lookup blockdev [ 1542.097018][ T2419] /dev/rnullb0: Can't lookup blockdev [ 1542.301746][ T2425] FAT-fs (rnullb0): bogus number of reserved sectors [ 1542.325112][ T2425] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1542.523623][ T2434] /dev/rnullb0: Can't lookup blockdev [ 1542.531074][ T2434] afs: Unknown parameter 'permit_directio' [ 1542.628276][ T2437] FAULT_INJECTION: forcing a failure. [ 1542.628276][ T2437] name failslab, interval 1, probability 0, space 0, times 0 [ 1542.648293][ T2437] CPU: 1 UID: 0 PID: 2437 Comm: syz.9.9084 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 1542.648334][ T2437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1542.648347][ T2437] Call Trace: [ 1542.648355][ T2437] [ 1542.648374][ T2437] dump_stack_lvl+0x189/0x250 [ 1542.648408][ T2437] ? __pfx____ratelimit+0x10/0x10 [ 1542.648435][ T2437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1542.648461][ T2437] ? __pfx__printk+0x10/0x10 [ 1542.648491][ T2437] ? __pfx___might_resched+0x10/0x10 [ 1542.648517][ T2437] ? fs_reclaim_acquire+0x7d/0x100 [ 1542.648543][ T2437] should_fail_ex+0x414/0x560 [ 1542.648576][ T2437] should_failslab+0xa8/0x100 [ 1542.648597][ T2437] __kmalloc_cache_noprof+0x70/0x3d0 [ 1542.648625][ T2437] ? alloc_pipe_info+0xe9/0x4d0 [ 1542.648650][ T2437] alloc_pipe_info+0xe9/0x4d0 [ 1542.648674][ T2437] splice_direct_to_actor+0xa5d/0xcc0 [ 1542.648715][ T2437] ? __pfx_aa_file_perm+0x10/0x10 [ 1542.648735][ T2437] ? __lock_acquire+0xab9/0xd20 [ 1542.648757][ T2437] ? __pfx_direct_splice_actor+0x10/0x10 [ 1542.648779][ T2437] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1542.648813][ T2437] do_splice_direct+0x181/0x270 [ 1542.648839][ T2437] ? __pfx_do_splice_direct+0x10/0x10 [ 1542.648858][ T2437] ? common_file_perm+0x1b5/0x230 [ 1542.648886][ T2437] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1542.648911][ T2437] ? bpf_lsm_file_permission+0x9/0x20 [ 1542.648936][ T2437] ? security_file_permission+0x75/0x290 [ 1542.648963][ T2437] ? rw_verify_area+0x255/0x4d0 [ 1542.648987][ T2437] do_sendfile+0x4da/0x7e0 [ 1542.649011][ T2437] ? __pfx_vfs_write+0x10/0x10 [ 1542.649038][ T2437] ? __pfx_do_sendfile+0x10/0x10 [ 1542.649062][ T2437] ? __fget_files+0x3a0/0x420 [ 1542.649096][ T2437] __se_sys_sendfile64+0x13e/0x190 [ 1542.649124][ T2437] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1542.649155][ T2437] ? do_syscall_64+0xbe/0x3b0 [ 1542.649186][ T2437] do_syscall_64+0xfa/0x3b0 [ 1542.649210][ T2437] ? lockdep_hardirqs_on+0x9c/0x150 [ 1542.649234][ T2437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1542.649262][ T2437] ? clear_bhb_loop+0x60/0xb0 [ 1542.649285][ T2437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1542.649304][ T2437] RIP: 0033:0x7f262038e929 [ 1542.649352][ T2437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1542.649369][ T2437] RSP: 002b:00007f2621143038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1542.649391][ T2437] RAX: ffffffffffffffda RBX: 00007f26205b5fa0 RCX: 00007f262038e929 [ 1542.649405][ T2437] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1542.649417][ T2437] RBP: 00007f2621143090 R08: 0000000000000000 R09: 0000000000000000 [ 1542.649429][ T2437] R10: 000000007ffff004 R11: 0000000000000246 R12: 0000000000000001 [ 1542.649441][ T2437] R13: 0000000000000000 R14: 00007f26205b5fa0 R15: 00007ffc38e37178 [ 1542.649473][ T2437] [ 1543.036570][ T2441] tmpfs: Unknown parameter '~' [ 1543.089352][ T2441] netlink: 56 bytes leftover after parsing attributes in process `syz.7.9086'. [ 1543.121565][ T2441] vcan0: entered allmulticast mode [ 1543.934150][ T2485] FAULT_INJECTION: forcing a failure. [ 1543.934150][ T2485] name failslab, interval 1, probability 0, space 0, times 0 [ 1543.953566][ T2485] CPU: 0 UID: 0 PID: 2485 Comm: syz.9.9096 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 1543.953596][ T2485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1543.953607][ T2485] Call Trace: [ 1543.953615][ T2485] [ 1543.953633][ T2485] dump_stack_lvl+0x189/0x250 [ 1543.953665][ T2485] ? __pfx____ratelimit+0x10/0x10 [ 1543.953690][ T2485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1543.953717][ T2485] ? __pfx__printk+0x10/0x10 [ 1543.953745][ T2485] ? __pfx___might_resched+0x10/0x10 [ 1543.953769][ T2485] ? fs_reclaim_acquire+0x7d/0x100 [ 1543.953796][ T2485] should_fail_ex+0x414/0x560 [ 1543.953831][ T2485] should_failslab+0xa8/0x100 [ 1543.953853][ T2485] __kmalloc_noprof+0xcb/0x4f0 [ 1543.953881][ T2485] ? alloc_pipe_info+0x1fd/0x4d0 [ 1543.953907][ T2485] alloc_pipe_info+0x1fd/0x4d0 [ 1543.953931][ T2485] splice_direct_to_actor+0xa5d/0xcc0 [ 1543.953970][ T2485] ? __pfx_aa_file_perm+0x10/0x10 [ 1543.953989][ T2485] ? __lock_acquire+0xab9/0xd20 [ 1543.954010][ T2485] ? __pfx_direct_splice_actor+0x10/0x10 [ 1543.954031][ T2485] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1543.954063][ T2485] do_splice_direct+0x181/0x270 [ 1543.954088][ T2485] ? __pfx_do_splice_direct+0x10/0x10 [ 1543.954106][ T2485] ? common_file_perm+0x1b5/0x230 [ 1543.954134][ T2485] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1543.954159][ T2485] ? bpf_lsm_file_permission+0x9/0x20 [ 1543.954182][ T2485] ? security_file_permission+0x75/0x290 [ 1543.954209][ T2485] ? rw_verify_area+0x255/0x4d0 [ 1543.954231][ T2485] do_sendfile+0x4da/0x7e0 [ 1543.954255][ T2485] ? __pfx_vfs_write+0x10/0x10 [ 1543.954279][ T2485] ? __pfx_do_sendfile+0x10/0x10 [ 1543.954303][ T2485] ? __fget_files+0x3a0/0x420 [ 1543.954338][ T2485] __se_sys_sendfile64+0x13e/0x190 [ 1543.954364][ T2485] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1543.954383][ T2485] ? rcu_is_watching+0x15/0xb0 [ 1543.954412][ T2485] ? do_syscall_64+0xbe/0x3b0 [ 1543.954441][ T2485] do_syscall_64+0xfa/0x3b0 [ 1543.954465][ T2485] ? lockdep_hardirqs_on+0x9c/0x150 [ 1543.954486][ T2485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.954505][ T2485] ? clear_bhb_loop+0x60/0xb0 [ 1543.954525][ T2485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.954543][ T2485] RIP: 0033:0x7f262038e929 [ 1543.954566][ T2485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1543.954580][ T2485] RSP: 002b:00007f2621143038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1543.954601][ T2485] RAX: ffffffffffffffda RBX: 00007f26205b5fa0 RCX: 00007f262038e929 [ 1543.954614][ T2485] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1543.954635][ T2485] RBP: 00007f2621143090 R08: 0000000000000000 R09: 0000000000000000 [ 1543.954645][ T2485] R10: 000000007ffff004 R11: 0000000000000246 R12: 0000000000000001 [ 1543.954656][ T2485] R13: 0000000000000000 R14: 00007f26205b5fa0 R15: 00007ffc38e37178 [ 1543.954685][ T2485] [ 1544.735937][ T2490] omfs: Invalid superblock (0) [ 1544.993103][ T2506] overlayfs: failed to clone upperpath [ 1545.015630][T26437] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1545.189300][T26437] usb 3-1: Using ep0 maxpacket: 32 [ 1545.198023][T26437] usb 3-1: config 0 has an invalid interface number: 233 but max is 0 [ 1545.217498][T26437] usb 3-1: config 0 has no interface number 0 [ 1545.242184][T26437] usb 3-1: New USB device found, idVendor=1608, idProduct=0302, bcdDevice=d3.4f [ 1545.261236][T26437] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.269417][T26437] usb 3-1: Product: syz [ 1545.282770][T26437] usb 3-1: Manufacturer: syz [ 1545.287646][T26437] usb 3-1: SerialNumber: syz [ 1545.315942][T26437] usb 3-1: config 0 descriptor?? [ 1545.336776][T26437] io_ti 3-1:0.233: required endpoints missing [ 1545.550304][ T2499] netlink: 140 bytes leftover after parsing attributes in process `syz.2.9099'. [ 1545.573500][ T2499] netlink: 140 bytes leftover after parsing attributes in process `syz.2.9099'. [ 1545.614000][ T2499] netlink: 140 bytes leftover after parsing attributes in process `syz.2.9099'. [ 1545.646747][ T2499] netlink: 140 bytes leftover after parsing attributes in process `syz.2.9099'. [ 1545.655974][ T2499] netlink: 140 bytes leftover after parsing attributes in process `syz.2.9099'. [ 1545.826197][ T2548] gfs2: gfs2 mount does not exist [ 1545.907880][T26444] usb 3-1: USB disconnect, device number 70 [ 1545.910510][ T2554] FAT-fs (rnullb0): bogus number of reserved sectors [ 1545.924165][ T2554] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1546.089026][ T2563] qnx4: no qnx4 filesystem (no root dir). [ 1546.301259][ T2577] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1546.319945][ T2577] VFS: Can't find a romfs filesystem on dev rnullb0. [ 1546.319945][ T2577] [ 1546.333747][ T2578] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1546.352537][ T2578] VFS: Can't find a romfs filesystem on dev rnullb0. [ 1546.352537][ T2578] [ 1546.353518][T26444] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1546.414776][ T2584] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1546.519312][ T2588] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 1546.527559][ T2588] UDF-fs: Scanning with blocksize 4096 failed [ 1546.566626][T26444] usb 3-1: Using ep0 maxpacket: 32 [ 1546.577308][T26444] usb 3-1: config 8 has an invalid interface number: 158 but max is 0 [ 1546.590271][T26444] usb 3-1: config 8 has no interface number 0 [ 1546.602601][T26444] usb 3-1: New USB device found, idVendor=1199, idProduct=9008, bcdDevice=e9.79 [ 1546.644759][T26444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.656276][T26444] usb 3-1: Product: syz [ 1546.660794][T26444] usb 3-1: Manufacturer: syz [ 1546.666110][T26444] usb 3-1: SerialNumber: syz [ 1547.019281][ T2619] 9pnet_fd: Insufficient options for proto=fd [ 1547.147157][ T2629] /dev/rnullb0: Can't open blockdev [ 1547.411596][ T2635] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 1547.445082][ T2635] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 1547.453503][ T2633] /dev/rnullb0: Can't open blockdev [ 1547.694778][ T2651] netlink: 6032 bytes leftover after parsing attributes in process `syz.9.9136'. [ 1547.713342][ T2651] hpfs: Bad magic ... probably not HPFS [ 1547.719957][ T2652] /dev/rnullb0: Can't open blockdev [ 1547.998142][ T2664] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1548.178247][T21101] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 1548.369485][T21101] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1548.394542][T21101] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1548.431716][T21101] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1548.472712][T21101] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1548.494104][T21101] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1548.525182][T21101] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.545652][T21101] usb 10-1: config 0 descriptor?? [ 1548.647794][ T2692] netlink: 666 bytes leftover after parsing attributes in process `syz.7.9148'. [ 1548.669432][ T2692] /dev/rnullb0: Can't lookup blockdev [ 1548.701684][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.770298][T21101] hdpvr 10-1:0.0: firmware version 0x0 dated [ 1548.776671][T21101] hdpvr 10-1:0.0: untested firmware, the driver might not work. [ 1548.988319][T21101] hdpvr 10-1:0.0: device init failed [ 1548.997450][T21101] hdpvr 10-1:0.0: probe with driver hdpvr failed with error -12 [ 1549.019202][T21101] usb 10-1: USB disconnect, device number 74 [ 1549.351946][T26444] usb 3-1: USB disconnect, device number 71 [ 1549.607435][ T2700] misc userio: Invalid payload size [ 1549.651965][ T2705] FAT-fs (rnullb0): bogus number of reserved sectors [ 1549.662422][ T2705] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1549.728070][ T2707] XFS (rnullb0): Invalid superblock magic number [ 1550.053847][ T2729] /dev/rnullb0: Can't lookup blockdev [ 1550.087337][ T2731] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9157'. [ 1550.497119][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.503611][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.517452][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.524007][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.534747][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.541597][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.548594][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.555137][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.561753][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.568475][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.574855][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.580966][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.588080][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.594546][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.600814][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.607809][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.613986][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.620282][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.627604][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.633861][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.640546][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.647330][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.654028][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.661370][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.668251][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.675039][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.681608][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.687836][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.694586][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.700807][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.707734][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.714280][ T2744] hpfs: Bad magic ... probably not HPFS [ 1550.720451][ T2744] hpfs: Bad magic ... probably not HPFS [ 1551.047235][ T24] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1551.239421][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1551.268167][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1551.278147][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1551.302985][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1551.313276][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1551.324912][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.338190][ T24] usb 3-1: config 0 descriptor?? [ 1551.354858][T26437] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 1551.428852][ T55] block nbd0: Possible stuck request ffff8880254a5080: control (read@0,1024B). Runtime 270 seconds [ 1551.440071][ T55] block nbd0: Possible stuck request ffff8880254a5240: control (read@1024,1024B). Runtime 270 seconds [ 1551.451613][ T55] block nbd0: Possible stuck request ffff8880254a5400: control (read@2048,1024B). Runtime 270 seconds [ 1551.462855][ T55] block nbd0: Possible stuck request ffff8880254a55c0: control (read@3072,1024B). Runtime 270 seconds [ 1551.556616][T26437] usb 10-1: Using ep0 maxpacket: 32 [ 1551.563710][T26437] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.576895][ T24] hdpvr 3-1:0.0: firmware version 0x0 dated [ 1551.577535][T26437] usb 10-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1551.585372][ T24] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 1551.597626][T26437] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.608597][T26437] usb 10-1: Product: syz [ 1551.613557][T26437] usb 10-1: Manufacturer: syz [ 1551.618283][T26437] usb 10-1: SerialNumber: syz [ 1551.626250][T26437] usb 10-1: config 0 descriptor?? [ 1551.633737][T26437] cdc_ether 10-1:0.0: skipping garbage [ 1551.639306][T26437] usb 10-1: bad CDC descriptors [ 1551.645624][T26437] usb 10-1: unsupported MDLM descriptors [ 1551.792141][ T24] hdpvr 3-1:0.0: device init failed [ 1551.798576][ T24] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 1551.814205][ T24] usb 3-1: USB disconnect, device number 72 [ 1551.850929][ T2757] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 1551.874830][T26437] usb 10-1: USB disconnect, device number 75 [ 1552.083953][ T2774] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9168'. [ 1552.515935][ T2787] Mount JFS Failure: -22 [ 1552.526145][ T2789] Mount JFS Failure: -22 [ 1552.773803][ T2795] /dev/rnullb0: Can't lookup blockdev [ 1552.871236][ T24] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1553.043870][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1553.060726][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1553.081306][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1553.090777][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.329850][ T24] usb 3-1: GET_CAPABILITIES returned 0 [ 1553.341414][ T24] usbtmc 3-1:16.0: can't read capabilities [ 1553.551750][ T2791] exFAT-fs (rnullb0): invalid boot record signature [ 1553.558758][ T2791] exFAT-fs (rnullb0): failed to read boot sector [ 1553.565322][ T2791] exFAT-fs (rnullb0): failed to recognize exfat type [ 1553.612288][ T24] usb 3-1: USB disconnect, device number 73 [ 1554.031756][T26447] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 1554.054493][ T2858] pimreg3: entered allmulticast mode [ 1554.215457][T26447] usb 10-1: Using ep0 maxpacket: 8 [ 1554.223064][T26447] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1554.231241][T26447] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1554.252075][T26447] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1554.278147][T26447] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1554.292406][T26447] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1554.305363][ T2863] syz.2.9190: attempt to access beyond end of device [ 1554.305363][ T2863] loop2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1554.309885][T26447] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1554.319416][ T2863] MINIX-fs: unable to read superblock [ 1554.330851][T26447] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1554.343698][T26447] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1554.365693][T26447] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1554.377947][T26447] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1554.397286][T26447] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1554.405862][T26447] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1554.423434][T26447] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1554.436715][T26447] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1554.451469][T26447] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1554.472673][T26447] usb 10-1: string descriptor 0 read error: -22 [ 1554.483892][T26447] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1554.501599][T26447] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.536857][T26447] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1554.743220][T21101] usb 10-1: USB disconnect, device number 76 [ 1554.966695][ T5907] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1555.159852][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 1555.179313][ T5907] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1555.196199][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1555.220134][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1555.245422][ T5907] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1555.254711][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.274648][ T5907] usb 3-1: Product: syz [ 1555.282909][ T5907] usb 3-1: Manufacturer: syz [ 1555.293397][ T5907] usb 3-1: SerialNumber: syz [ 1555.312803][ T5907] usb 3-1: config 0 descriptor?? [ 1555.328727][ T2878] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1555.351910][ T5907] hub 3-1:0.0: bad descriptor, ignoring hub [ 1555.360216][ T5907] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1555.399078][ T5907] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input270 [ 1555.515718][ T2896] /dev/rnullb0: Can't lookup blockdev [ 1555.951889][ T2908] omfs: Invalid superblock (0) [ 1556.249594][ T5907] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 1556.310388][ T2914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1556.320207][ T2914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1556.435358][ T5907] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1556.444739][ T5907] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1556.455261][ T5907] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1556.464500][ T5907] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1556.476983][ T5208] usb 3-1: reset high-speed USB device number 74 using dummy_hcd [ 1556.482811][ T5907] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1556.499697][ T5907] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1556.509048][ T5907] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1556.517406][ T5907] usb 10-1: Product: syz [ 1556.521687][ T5907] usb 10-1: Manufacturer: syz [ 1556.532868][ T5907] cdc_wdm 10-1:1.0: skipping garbage [ 1556.538716][ T5907] cdc_wdm 10-1:1.0: skipping garbage [ 1556.545670][ T5907] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1556.551785][ T5907] cdc_wdm 10-1:1.0: Unknown control protocol [ 1556.834522][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1556.841548][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1556.851425][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1556.858167][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1556.864641][T26447] usb 10-1: USB disconnect, device number 77 [ 1556.870996][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1556.871024][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1556.871041][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1557.125793][ T2927] /dev/rnullb0: Can't open blockdev [ 1557.359298][ T24] usb 3-1: USB disconnect, device number 74 [ 1557.403900][T26447] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 1557.526950][ T2937] /dev/rnullb0: Can't lookup blockdev [ 1557.536346][ T2939] /dev/rnullb0: Can't lookup blockdev [ 1557.587200][T26447] usb 10-1: Using ep0 maxpacket: 32 [ 1557.593414][T26447] usb 10-1: too many configurations: 122, using maximum allowed: 8 [ 1557.616550][T26447] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1557.626355][T26447] usb 10-1: can't read configurations, error -61 [ 1557.778082][T26447] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 1557.959985][T26447] usb 10-1: Using ep0 maxpacket: 32 [ 1557.966257][T26447] usb 10-1: too many configurations: 122, using maximum allowed: 8 [ 1557.976867][T26447] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1557.985750][T26447] usb 10-1: can't read configurations, error -61 [ 1557.993827][T26447] usb usb10-port1: attempt power cycle [ 1558.048185][T17240] Bluetooth: hci5: unexpected event for opcode 0x204e [ 1558.387389][T26447] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 1558.412350][T26447] usb 10-1: Using ep0 maxpacket: 32 [ 1558.440651][T26447] usb 10-1: too many configurations: 122, using maximum allowed: 8 [ 1558.469635][T26447] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1558.482581][T26447] usb 10-1: can't read configurations, error -61 [ 1558.633954][T26447] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 1558.666036][T26447] usb 10-1: Using ep0 maxpacket: 32 [ 1558.672928][T26447] usb 10-1: too many configurations: 122, using maximum allowed: 8 [ 1558.698678][T26447] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1558.714185][T26447] usb 10-1: can't read configurations, error -61 [ 1558.734523][ T2970] 9pnet_fd: Insufficient options for proto=fd [ 1558.741245][T26447] usb usb10-port1: unable to enumerate USB device [ 1558.804772][ T5907] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1558.888051][ T2977] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1558.948592][ T2983] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1558.956368][ T2983] VFS: Can't find a romfs filesystem on dev rnullb0. [ 1558.956368][ T2983] [ 1559.088394][ T2990] /dev/rnullb0: Can't lookup blockdev [ 1559.502709][ T3003] binder: 3001:3003 ioctl c0046209 0 returned -22 [ 1559.630402][ T3005] vxfs: WRONG superblock magic 00000000 at 1 [ 1559.637168][ T3005] vxfs: WRONG superblock magic 00000000 at 8 [ 1559.645737][ T3005] vxfs: can't find superblock. [ 1559.860097][ T3010] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9238'. [ 1560.386669][ T5907] usb 10-1: new low-speed USB device number 82 using dummy_hcd [ 1560.550921][ T5907] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1560.568276][ T5907] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1560.578594][ T5907] usb 10-1: config 0 has no interface number 0 [ 1560.588623][ T5907] usb 10-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1560.611597][ T5907] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1560.629227][ T5907] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.629889][ T3033] /dev/rnullb0: Can't open blockdev [ 1560.650819][ T5907] usb 10-1: config 0 descriptor?? [ 1560.678520][ T5907] iowarrior 10-1:0.1: no interrupt-in endpoint found [ 1560.943657][T26439] usb 10-1: USB disconnect, device number 82 [ 1561.746806][ T3061] /dev/rnullb0: Can't open blockdev [ 1561.814069][ T3063] /dev/rnullb0: Can't open blockdev [ 1561.904832][ T24] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 1562.067056][ T24] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1562.076424][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.086934][ T24] usb 10-1: config 0 descriptor?? [ 1562.314851][ T24] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1562.413879][ T3069] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9259'. [ 1562.564345][ T3056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1562.590199][ T3056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1562.669900][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 1562.713622][ T24] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2 [ 1562.729888][ T24] [drm] Initialized udl on minor 2 [ 1562.746697][ T24] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1562.757939][ T24] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1562.770357][T26444] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1562.779179][T26444] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1562.788060][T26447] usb 3-1: new low-speed USB device number 76 using dummy_hcd [ 1562.796048][ T24] usb 10-1: USB disconnect, device number 83 [ 1562.987796][T26447] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1562.996345][T26447] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1563.006748][T26447] usb 3-1: config 0 has no interface number 0 [ 1563.013467][T26447] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1563.027712][T26447] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1563.037252][T26447] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.047688][T26447] usb 3-1: config 0 descriptor?? [ 1563.057495][T26447] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 1563.290898][ T3091] 9pnet_fd: Insufficient options for proto=fd [ 1563.291018][T26444] usb 3-1: USB disconnect, device number 76 [ 1563.321910][ T3091] /dev/rnullb0: Can't lookup blockdev [ 1563.321910][ T3093] /dev/rnullb0: Can't lookup blockdev [ 1563.429322][ T3097] netlink: 156 bytes leftover after parsing attributes in process `syz.7.9268'. [ 1563.644112][ T3104] autofs: Bad value for 'fd' [ 1563.907594][ T5907] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 1564.096643][ T5907] usb 10-1: Using ep0 maxpacket: 8 [ 1564.103314][ T3124] syzkaller1: entered allmulticast mode [ 1564.127491][ T5907] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1564.151816][ T5907] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1564.161350][ T5907] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.197066][ T5907] usb 10-1: Product: syz [ 1564.214270][ T5907] usb 10-1: Manufacturer: syz [ 1564.229563][ T5907] usb 10-1: SerialNumber: syz [ 1564.249399][ T5907] usb 10-1: config 0 descriptor?? [ 1564.313021][ T3127] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1564.374217][ T5907] rc_core: IR keymap rc-streamzap not found [ 1564.400367][ T5907] Registered IR keymap rc-empty [ 1564.413590][ T5907] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1564.434040][ T5907] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input271 [ 1564.590768][ T24] usb 10-1: USB disconnect, device number 84 [ 1564.636838][T26444] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1564.803691][T26444] usb 3-1: device descriptor read/64, error -71 [ 1565.079971][T26444] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1565.229874][T26444] usb 3-1: device descriptor read/64, error -71 [ 1565.347764][T26444] usb usb3-port1: attempt power cycle [ 1565.659316][ T3163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1565.742586][T26444] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1565.765019][T26444] usb 3-1: device descriptor read/8, error -71 [ 1565.824010][ T3166] netlink: 128 bytes leftover after parsing attributes in process `syz.7.9290'. [ 1565.835925][ T3166] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9290'. [ 1566.020660][T26444] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1566.057421][T26444] usb 3-1: device descriptor read/8, error -71 [ 1566.191844][T26444] usb usb3-port1: unable to enumerate USB device [ 1566.555005][T26439] usb 10-1: new high-speed USB device number 85 using dummy_hcd [ 1566.616689][ T3214] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9307'. [ 1566.750897][T26439] usb 10-1: Using ep0 maxpacket: 8 [ 1566.760650][T26439] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1566.802314][T26439] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1566.823368][T26439] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1566.844446][T26439] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1566.875763][T26439] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1566.884962][T26439] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.128778][T26439] usb 10-1: GET_CAPABILITIES returned 0 [ 1567.136712][T26439] usbtmc 10-1:16.0: can't read capabilities [ 1567.221176][T26439] usb 10-1: USB disconnect, device number 85 [ 1567.320338][ T5173] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1567.334418][ T5173] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1567.348548][ T5173] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1567.370402][ T5173] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1567.380608][ T5173] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1567.642047][ T3219] chnl_net:caif_netlink_parms(): no params data found [ 1567.860780][ T3219] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.868167][ T3219] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.891523][ T3219] bridge_slave_0: entered allmulticast mode [ 1567.910169][ T3219] bridge_slave_0: entered promiscuous mode [ 1567.922374][ T3219] bridge0: port 2(bridge_slave_1) entered blocking state [ 1567.937954][ T3219] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.945716][ T3219] bridge_slave_1: entered allmulticast mode [ 1567.969105][ T3219] bridge_slave_1: entered promiscuous mode [ 1568.147405][ T3219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1568.210537][ T3219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1568.439435][ T3219] team0: Port device team_slave_0 added [ 1568.480250][ T3219] team0: Port device team_slave_1 added [ 1568.704456][T26439] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1568.767512][ T3219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1568.788583][ T3219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1568.830298][ T3219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1568.876580][ T3219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1568.883597][ T3219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1568.916512][T26439] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1568.924313][ T3219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1568.970095][T26439] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1568.982730][T26444] usb 10-1: new low-speed USB device number 86 using dummy_hcd [ 1569.002941][T26439] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.021328][T26439] usb 3-1: config 0 descriptor?? [ 1569.043915][T26439] pwc: Askey VC010 type 2 USB webcam detected. [ 1569.158156][T26444] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1569.171011][T26444] usb 10-1: config 0 has no interface number 0 [ 1569.183611][ T3219] hsr_slave_0: entered promiscuous mode [ 1569.199530][ T3219] hsr_slave_1: entered promiscuous mode [ 1569.200211][T26444] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1569.207445][ T3219] debugfs: 'hsr0' already exists in 'hsr' [ 1569.222026][ T3219] Cannot create hsr debugfs directory [ 1569.241847][T26444] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1569.252444][T26444] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.264523][T26444] usb 10-1: config 0 descriptor?? [ 1569.274784][T26444] iowarrior 10-1:0.1: no interrupt-in endpoint found [ 1569.287879][T26439] pwc: send_video_command error -71 [ 1569.317894][T26439] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1569.336522][T26439] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1569.380198][T26439] usb 3-1: USB disconnect, device number 81 [ 1569.512784][T26444] usb 10-1: USB disconnect, device number 86 [ 1569.559266][ T5173] Bluetooth: hci1: command tx timeout [ 1569.847710][T26439] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1569.865952][ T3219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1569.889463][ T3219] 8021q: adding VLAN 0 to HW filter on device team0 [ 1569.929139][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1569.936399][ T3026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1569.974064][T26291] bridge0: port 2(bridge_slave_1) entered blocking state [ 1569.981325][T26291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1570.026847][T26439] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1570.066727][T26439] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1570.093635][T26439] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.126111][T26439] usb 3-1: config 0 descriptor?? [ 1570.145933][T26439] pwc: Askey VC010 type 2 USB webcam detected. [ 1570.574794][T26439] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1570.596410][T26439] pwc: recv_control_msg error -32 req 02 val 2700 [ 1570.610725][ T3259] netlink: 'syz.2.9319': attribute type 46 has an invalid length. [ 1570.628162][T26439] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1570.636171][T26439] pwc: recv_control_msg error -32 req 04 val 1000 [ 1570.659947][T26439] pwc: recv_control_msg error -32 req 04 val 1300 [ 1570.673951][ T3219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1570.693407][T26439] pwc: recv_control_msg error -32 req 04 val 1400 [ 1570.700874][T26439] pwc: recv_control_msg error -32 req 02 val 2000 [ 1570.711545][T26439] pwc: recv_control_msg error -32 req 02 val 2100 [ 1570.725269][T26439] pwc: recv_control_msg error -32 req 04 val 1500 [ 1570.732711][T26439] pwc: recv_control_msg error -32 req 02 val 2500 [ 1570.967013][T26439] pwc: recv_control_msg error -71 req 02 val 2600 [ 1570.982413][T26439] pwc: recv_control_msg error -71 req 02 val 2900 [ 1571.004247][T26439] pwc: recv_control_msg error -71 req 02 val 2800 [ 1571.024606][T26439] pwc: recv_control_msg error -71 req 04 val 1100 [ 1571.036478][T26439] pwc: recv_control_msg error -71 req 04 val 1200 [ 1571.068603][T26439] pwc: Registered as video103. [ 1571.076224][T26439] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input272 [ 1571.158629][T26439] usb 3-1: USB disconnect, device number 82 [ 1571.175927][ T3309] autofs: Unknown parameter ' (’zð<¨!Õ%„cúuᙣ«µB{(GÚ¦Ž°5úT`’Ñ. £WÃ( [ 1571.175927][ T3309] Ë]`sP¸ßl^ÍÒ„‡ÿ*ãmï‚qðeq–C' [ 1571.191401][ T3308] autofs: Unknown parameter ' (’zð<¨!Õ%„cúuᙣ«µB{(GÚ¦Ž°5úT`’Ñ. £WÃ( [ 1571.191401][ T3308] Ë]`sP¸ßl^ÍÒ„‡ÿ*ãmï‚qðeq–C' [ 1571.327588][ T6866] udevd[6866]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1571.734378][ T3219] veth0_vlan: entered promiscuous mode [ 1571.778276][ T3219] veth1_vlan: entered promiscuous mode [ 1571.793640][ T5173] Bluetooth: hci1: command tx timeout [ 1571.843602][ T3219] veth0_macvtap: entered promiscuous mode [ 1571.870037][ T3219] veth1_macvtap: entered promiscuous mode [ 1571.916313][ T3219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1571.928932][ T3219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1572.057173][T26291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1572.078279][T26291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1572.143546][T26289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1572.165017][T26289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1572.402786][ T24] usb 10-1: new low-speed USB device number 87 using dummy_hcd [ 1572.597823][ T24] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1572.606415][ T24] usb 10-1: config 0 has no interface number 0 [ 1572.612700][ T24] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1572.623150][ T24] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1572.632394][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.644912][ T24] usb 10-1: config 0 descriptor?? [ 1572.658537][ T24] iowarrior 10-1:0.1: no interrupt-in endpoint found [ 1572.680785][T26444] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 1572.745369][T26437] usb 8-1: new high-speed USB device number 109 using dummy_hcd [ 1572.847001][T26444] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1572.858125][T26444] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1572.869747][T26444] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 64 [ 1572.873354][T26439] usb 10-1: USB disconnect, device number 87 [ 1572.881641][T26444] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1572.898626][T26444] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1572.918362][T26437] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1572.933478][T26437] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1572.942840][T26444] usb 3-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 1572.942874][T26444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.954282][T26437] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1572.978143][T26437] usb 8-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1572.983255][T26444] usb 3-1: Product: syz [ 1572.988316][T26437] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.000618][T26437] usb 8-1: Product: syz [ 1573.000664][T26444] usb 3-1: Manufacturer: syz [ 1573.005429][T26437] usb 8-1: Manufacturer: syz [ 1573.011321][T26444] usb 3-1: SerialNumber: syz [ 1573.015192][T26437] usb 8-1: SerialNumber: syz [ 1573.034704][T26437] usb 8-1: config 0 descriptor?? [ 1573.035732][T26444] usb 3-1: config 0 descriptor?? [ 1573.045019][T26437] usb 8-1: Found UVC 34.00 device syz (8086:0b5b) [ 1573.053222][ T3334] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1573.058960][T26437] usb 8-1: No valid video chain found. [ 1573.064548][T26444] iuu_phoenix 3-1:0.0: iuu_phoenix converter detected [ 1573.084821][T26444] usb 3-1: iuu_phoenix converter now attached to ttyUSB0 [ 1573.264698][ T3339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1573.276290][ T3339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1573.300275][T26444] usb 8-1: USB disconnect, device number 109 [ 1573.444355][T26437] usb 3-1: USB disconnect, device number 83 [ 1573.497626][T26437] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 1573.522609][T26437] iuu_phoenix 3-1:0.0: device disconnected [ 1573.700467][ T3348] netlink: 48 bytes leftover after parsing attributes in process `syz.9.9341'. [ 1573.717986][ T3350] netlink: 48 bytes leftover after parsing attributes in process `syz.9.9341'. [ 1573.791556][ T3355] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9342'. [ 1574.009670][ T5173] Bluetooth: hci1: command tx timeout [ 1575.364504][ T3388] kvm: pic: non byte write [ 1576.230413][ T5173] Bluetooth: hci1: command tx timeout [ 1576.426977][ T3422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9361'. [ 1576.440987][ T3422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9361'. [ 1576.451425][ T3422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9361'. [ 1578.683445][ T3456] 8021q: VLANs not supported on ipvlan1 [ 1579.212277][ T3450] [U]  [ 1580.499148][ T3476] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9381'. [ 1580.666641][ T24] usb 3-1: new low-speed USB device number 84 using dummy_hcd [ 1580.895239][ T24] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1580.916277][ T24] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1580.946334][ T24] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1580.981906][ T24] usb 3-1: string descriptor 0 read error: -22 [ 1581.001299][ T24] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1581.030267][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.066228][ T24] adutux 3-1:168.0: interrupt endpoints not found [ 1581.278072][ T5907] usb 3-1: USB disconnect, device number 84 [ 1581.714286][T26444] usb 8-1: new high-speed USB device number 110 using dummy_hcd [ 1581.885505][T26444] usb 8-1: Using ep0 maxpacket: 8 [ 1581.891504][T26444] usb 8-1: too many configurations: 10, using maximum allowed: 8 [ 1581.973800][T26444] usb 8-1: New USB device found, idVendor=00bb, idProduct=0da4, bcdDevice=6a.6b [ 1582.008141][T26444] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.133605][T26444] usb 8-1: Product: syz [ 1582.138290][T26444] usb 8-1: Manufacturer: syz [ 1582.175272][T26444] usb 8-1: SerialNumber: syz [ 1582.214371][T26444] usb 8-1: config 0 descriptor?? [ 1582.238233][ T5907] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1582.649147][ T5907] usb 3-1: Using ep0 maxpacket: 8 [ 1582.667980][T26444] usb 8-1: USB disconnect, device number 110 [ 1582.701040][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1582.719119][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1582.728951][ T5907] usb 3-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 1582.754136][T17240] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1582.765664][T17240] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1582.774974][T17240] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1582.784147][T17240] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1582.794096][T17240] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1582.835039][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.889871][ T5907] usb 3-1: config 0 descriptor?? [ 1583.139244][ T3504] chnl_net:caif_netlink_parms(): no params data found [ 1583.256628][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.264033][ T3504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.286649][ T3504] bridge_slave_0: entered allmulticast mode [ 1583.300207][ T3504] bridge_slave_0: entered promiscuous mode [ 1583.339579][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.347047][ T3504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.362922][ T3504] bridge_slave_1: entered allmulticast mode [ 1583.377904][ T3504] bridge_slave_1: entered promiscuous mode [ 1583.490851][ T3504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1583.508555][ T3504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1583.553703][ T3504] team0: Port device team_slave_0 added [ 1583.565048][ T3504] team0: Port device team_slave_1 added [ 1583.578747][ T3498] binder: BINDER_SET_CONTEXT_MGR already set [ 1583.593063][ T3498] binder: 3497:3498 ioctl 4018620d 2000000002c0 returned -16 [ 1583.603276][ T55] block nbd0: Possible stuck request ffff8880254a5080: control (read@0,1024B). Runtime 300 seconds [ 1583.615219][ T55] block nbd0: Possible stuck request ffff8880254a5240: control (read@1024,1024B). Runtime 300 seconds [ 1583.626431][ T55] block nbd0: Possible stuck request ffff8880254a5400: control (read@2048,1024B). Runtime 300 seconds [ 1583.637644][ T55] block nbd0: Possible stuck request ffff8880254a55c0: control (read@3072,1024B). Runtime 300 seconds [ 1583.649868][ T5907] usbhid 3-1:0.0: can't add hid device: -71 [ 1583.651691][ T3504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1583.667836][ T3504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1583.668883][ T5907] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1583.695797][ T3504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1583.720223][ T3504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1583.729308][ T3504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1583.732015][ T5907] usb 3-1: USB disconnect, device number 85 [ 1583.771114][ T3504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1583.850605][ T3504] hsr_slave_0: entered promiscuous mode [ 1583.859038][ T3504] hsr_slave_1: entered promiscuous mode [ 1583.865964][ T3504] debugfs: 'hsr0' already exists in 'hsr' [ 1583.871753][ T3504] Cannot create hsr debugfs directory [ 1584.024146][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1584.031431][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1584.039062][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1584.046371][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1584.134705][ T3504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1584.172852][ T3026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1584.196844][ T3026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1584.307046][ T3504] 8021q: adding VLAN 0 to HW filter on device team0 [ 1584.338608][T26293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1584.345836][T26293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1584.424365][ T3026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1584.431565][ T3026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1584.439301][ T5907] usb 8-1: new high-speed USB device number 111 using dummy_hcd [ 1584.643844][ T5907] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1584.655991][ T5907] usb 8-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1584.691531][ T5907] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.724064][ T5907] usb 8-1: config 0 descriptor?? [ 1585.025379][ T3546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9401'. [ 1585.041255][T17240] Bluetooth: hci5: command tx timeout [ 1585.226858][ T5907] uclogic 0003:5543:0042.006C: item fetching failed at offset 6/7 [ 1585.284242][ T5907] uclogic 0003:5543:0042.006C: parse failed [ 1585.335235][ T5907] uclogic 0003:5543:0042.006C: probe with driver uclogic failed with error -22 [ 1585.446624][T26446] usb 8-1: USB disconnect, device number 111 [ 1585.667552][ T3551] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1586.113082][ T3556] overlayfs: failed to get inode (-116) [ 1586.119877][ T3556] overlayfs: failed to get inode (-116) [ 1586.225968][ T3558] netlink: 444 bytes leftover after parsing attributes in process `syz.7.9405'. [ 1586.286913][ T3560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9406'. [ 1586.372255][ T3504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1586.776252][ T3573] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1586.908171][ T3576] binder: 3575:3576 ioctl c0306201 0 returned -14 [ 1586.937266][ T3576] binder: 3575:3576 ioctl c0306201 0 returned -14 [ 1586.974035][T26446] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1587.301212][T17240] Bluetooth: hci5: command tx timeout [ 1587.466558][T26446] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1587.544089][T26446] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.615215][T26446] usb 3-1: Product: syz [ 1587.626483][T26446] usb 3-1: Manufacturer: syz [ 1587.648969][T26446] usb 3-1: SerialNumber: syz [ 1587.666017][T26446] usb 3-1: config 0 descriptor?? [ 1587.794298][ T3504] veth0_vlan: entered promiscuous mode [ 1587.993405][ T3504] veth1_vlan: entered promiscuous mode [ 1588.838058][T26446] hso 3-1:0.0: Failed to find BULK IN ep [ 1588.897266][T26446] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1589.383424][ T3504] veth0_macvtap: entered promiscuous mode [ 1589.458496][ T3504] veth1_macvtap: entered promiscuous mode [ 1589.486410][T17240] Bluetooth: hci5: command tx timeout [ 1589.497416][T26446] usb 3-1: USB disconnect, device number 86 [ 1589.569906][ T3601] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9418'. [ 1589.574462][ T3504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1589.681249][ T3504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1589.969204][T26295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1589.984241][T26295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1590.124495][ T3614] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1590.173843][T26437] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1590.194814][T26295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.211162][T26295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1590.337578][ T3616] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9424'. [ 1590.377722][T26437] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1590.405077][T26437] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1590.439167][T26437] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1590.459631][T26437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.506801][ T30] audit: type=1800 audit(1585.146:157): pid=3621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9425" name="file0" dev="overlay" ino=32 res=0 errno=0 [ 1591.710173][T17240] Bluetooth: hci5: command tx timeout [ 1592.075267][ T3640] netlink: 'syz.0.9432': attribute type 1 has an invalid length. [ 1592.083289][ T3640] netlink: 244 bytes leftover after parsing attributes in process `syz.0.9432'. [ 1593.237239][ T5907] usb 3-1: USB disconnect, device number 87 [ 1593.984133][ T30] audit: type=1800 audit(1588.392:158): pid=3678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9447" name="/" dev="9p" ino=2 res=0 errno=0 [ 1593.994158][ T3678] netfs: Couldn't get user pages (rc=-14) [ 1594.468679][ T3688] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9453'. [ 1594.566884][ T3692] random: crng reseeded on system resumption [ 1594.717361][T17240] Bluetooth: hci3: hardware error 0xcf [ 1594.785785][ T3695] usb usb8: usbfs: process 3695 (syz.2.9452) did not claim interface 0 before use [ 1597.192749][T17240] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1597.826737][ T3733] loop2: detected capacity change from 0 to 7 [ 1597.837822][ T3733] Dev loop2: unable to read RDB block 7 [ 1597.843875][ T3733] loop2: unable to read partition table [ 1597.876336][ T3733] loop2: partition table beyond EOD, truncated [ 1597.902607][ T3733] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1598.192945][ T3729] syz.2.9467 (3729): drop_caches: 2 [ 1598.492639][ T3741] random: crng reseeded on system resumption [ 1599.451567][ T3741] usb usb8: usbfs: process 3741 (syz.5.9472) did not claim interface 0 before use [ 1601.752084][ T3785] random: crng reseeded on system resumption [ 1602.731511][ T3793] random: crng reseeded on system resumption [ 1603.550065][ T30] audit: type=1800 audit(1597.335:159): pid=3805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9492" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1603.846983][ T3810] input: syz0 as /devices/virtual/input/input273 [ 1603.896018][ T3813] tipc: Failed to obtain node identity [ 1603.913935][ T3813] tipc: Enabling of bearer rejected, failed to enable media [ 1604.157428][ T3820] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9497'. [ 1604.633791][ T3839] program syz.2.9506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1606.270638][ T3857] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1606.284245][ T5907] kernel read not supported for file /vga_arbiter (pid: 5907 comm: kworker/0:4) [ 1606.324855][ T3858] fuse: Bad value for 'fd' [ 1606.339150][ T3858] ------------[ cut here ]------------ [ 1606.344883][ T3858] kernel BUG at fs/buffer.c:1582! [ 1606.351478][ T3858] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1606.357768][ T3858] CPU: 1 UID: 0 PID: 3858 Comm: syz.2.9512 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 1606.369261][ T3858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1606.379447][ T3858] RIP: 0010:folio_set_bh+0x1dc/0x1e0 [ 1606.384759][ T3858] Code: 4c 89 e2 e8 a6 31 bd 02 e9 42 ff ff ff e8 5c ce 77 ff 48 89 df 48 c7 c6 e0 2e ba 8b e8 fd a6 c0 ff 90 0f 0b e8 45 ce 77 ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f [ 1606.404653][ T3858] RSP: 0018:ffffc90003cd7790 EFLAGS: 00010287 [ 1606.410825][ T3858] RAX: ffffffff8248381b RBX: ffffea00013c6a00 RCX: 0000000000080000 [ 1606.418798][ T3858] RDX: ffffc9001e8c2000 RSI: 00000000000010bf RDI: 00000000000010c0 [ 1606.426876][ T3858] RBP: dffffc0000000000 R08: ffffea00013c6a07 R09: 1ffffd4000278d40 [ 1606.434943][ T3858] R10: dffffc0000000000 R11: fffff94000278d41 R12: 0000000000000002 [ 1606.443181][ T3858] R13: 0000000000004000 R14: ffff88805d24abc8 R15: 0000000000004000 [ 1606.451156][ T3858] FS: 00007f89b5c506c0(0000) GS:ffff888125898000(0000) knlGS:0000000000000000 [ 1606.460088][ T3858] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1606.466822][ T3858] CR2: 000000110c3813a8 CR3: 000000005e0fa000 CR4: 00000000003526f0 [ 1606.474799][ T3858] DR0: 0000000000000007 DR1: 000000000000009b DR2: 00040000ffffffff [ 1606.482833][ T3858] DR3: 0000000000000009 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1606.490822][ T3858] Call Trace: [ 1606.494129][ T3858] [ 1606.497115][ T3858] folio_alloc_buffers+0x3a0/0x640 [ 1606.502251][ T3858] bdev_getblk+0x286/0x660 [ 1606.506680][ T3858] __bread_gfp+0x89/0x3c0 [ 1606.511016][ T3858] ntfs_bread+0xc2/0x1e0 [ 1606.515266][ T3858] ntfs_fill_super+0x63d/0x40b0 [ 1606.520136][ T3858] ? format_decode+0x5ee/0xe30 [ 1606.524903][ T3858] ? vsnprintf+0xe11/0xf00 [ 1606.529326][ T3858] ? __pfx_ntfs_fill_super+0x10/0x10 [ 1606.534809][ T3858] ? sb_set_blocksize+0x85/0x180 [ 1606.539748][ T3858] ? setup_bdev_super+0x4c1/0x5b0 [ 1606.544782][ T3858] get_tree_bdev_flags+0x40b/0x4d0 [ 1606.549904][ T3858] ? __pfx_ntfs_fill_super+0x10/0x10 [ 1606.555239][ T3858] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1606.560935][ T3858] vfs_get_tree+0x92/0x2b0 [ 1606.565387][ T3858] do_new_mount+0x2a2/0x9e0 [ 1606.569949][ T3858] ? ns_capable+0x8a/0xf0 [ 1606.574333][ T3858] ? __pfx_do_new_mount+0x10/0x10 [ 1606.579403][ T3858] ? path_mount+0x61c/0xfe0 [ 1606.583910][ T3858] ? user_path_at+0x44/0x60 [ 1606.588434][ T3858] __se_sys_mount+0x317/0x410 [ 1606.593141][ T3858] ? __pfx___se_sys_mount+0x10/0x10 [ 1606.598357][ T3858] ? rcu_is_watching+0x15/0xb0 [ 1606.603329][ T3858] ? do_syscall_64+0xbe/0x3b0 [ 1606.608038][ T3858] ? __x64_sys_mount+0x20/0xc0 [ 1606.612858][ T3858] do_syscall_64+0xfa/0x3b0 [ 1606.617573][ T3858] ? lockdep_hardirqs_on+0x9c/0x150 [ 1606.622785][ T3858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.628861][ T3858] ? clear_bhb_loop+0x60/0xb0 [ 1606.633545][ T3858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.639447][ T3858] RIP: 0033:0x7f89b4d8e929 [ 1606.643873][ T3858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1606.663654][ T3858] RSP: 002b:00007f89b5c50038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1606.672073][ T3858] RAX: ffffffffffffffda RBX: 00007f89b4fb5fa0 RCX: 00007f89b4d8e929 [ 1606.680050][ T3858] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000200000000140 [ 1606.688024][ T3858] RBP: 00007f89b4e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1606.695996][ T3858] R10: 0000000002208004 R11: 0000000000000246 R12: 0000000000000000 [ 1606.703966][ T3858] R13: 0000000000000000 R14: 00007f89b4fb5fa0 R15: 00007ffd591ed658 [ 1606.711950][ T3858] [ 1606.714974][ T3858] Modules linked in: [ 1606.720534][ T3858] ---[ end trace 0000000000000000 ]--- [ 1606.744219][ T3858] RIP: 0010:folio_set_bh+0x1dc/0x1e0 [ 1606.749976][ T3858] Code: 4c 89 e2 e8 a6 31 bd 02 e9 42 ff ff ff e8 5c ce 77 ff 48 89 df 48 c7 c6 e0 2e ba 8b e8 fd a6 c0 ff 90 0f 0b e8 45 ce 77 ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f [ 1606.789037][ T3858] RSP: 0018:ffffc90003cd7790 EFLAGS: 00010287 [ 1606.795851][ T3858] RAX: ffffffff8248381b RBX: ffffea00013c6a00 RCX: 0000000000080000 [ 1606.803967][ T3858] RDX: ffffc9001e8c2000 RSI: 00000000000010bf RDI: 00000000000010c0 [ 1606.937790][ T3858] RBP: dffffc0000000000 R08: ffffea00013c6a07 R09: 1ffffd4000278d40 [ 1606.949494][ T3858] R10: dffffc0000000000 R11: fffff94000278d41 R12: 0000000000000002 [ 1606.957996][ T3858] R13: 0000000000004000 R14: ffff88805d24abc8 R15: 0000000000004000 [ 1606.968780][ T3858] FS: 00007f89b5c506c0(0000) GS:ffff888125798000(0000) knlGS:0000000000000000 [ 1606.991326][ T3858] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1607.001054][ T3858] CR2: 000000110c3c825d CR3: 000000005e0fa000 CR4: 00000000003526f0 [ 1607.018125][ T3858] DR0: 0000000000000007 DR1: 000000000000009b DR2: 00040000ffffffff [ 1607.028793][ T3858] DR3: 0000000000000009 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1607.038686][ T3858] Kernel panic - not syncing: Fatal exception [ 1607.045188][ T3858] Kernel Offset: disabled [ 1607.049516][ T3858] Rebooting in 86400 seconds..