last executing test programs: 4m21.364915528s ago: executing program 2 (id=70): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b"], 0x68}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000600000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) 4m20.872062406s ago: executing program 2 (id=72): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xc, 0x15, 0x0, 0x0, @u64=0x30}]}]}, 0x30}}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x3, &(0x7f0000000200)=0x6, 0x5) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000001080)="2b97", 0x2}], 0x3, 0x0, 0xfffffffe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) 4m20.545657592s ago: executing program 2 (id=73): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) 4m19.77661913s ago: executing program 2 (id=76): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f00000013c0)={0x50, 0x0, r1, {0x7, 0x2b, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) write$FUSE_INIT(r2, 0x0, 0x3c) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x2, &(0x7f0000000080)={0x0}) r5 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) listen(r5, 0xff) fadvise64(r3, 0x94, 0x6e, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000) 4m19.33817407s ago: executing program 2 (id=78): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22ffff) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x80a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x50, 0xffffffffffffffff, 0xb932b000) (async) clock_gettime(0x4, &(0x7f0000000040)) (async) mmap$fb(&(0x7f000031a000/0x3000)=nil, 0x3000, 0x8, 0x117012, 0xffffffffffffffff, 0xd6000) (async) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x20) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) (async) lseek(r2, 0x8000003, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103802, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="a95c55bcc7cb4a9362a5ce533229c8ee", 0x20) flock(r0, 0x8) (async) syncfs(r1) 4m19.136050482s ago: executing program 2 (id=81): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x9, 0x200000, 0x7}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xffffff83, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x41) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1fd}, 0xe) writev(r1, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x33) r2 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f00000000c0)={0x4000, 0x5, 0x0, 0x8, 0x0, 0x2080, 0x6ae0}) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setreuid(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 4m18.459352399s ago: executing program 32 (id=81): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x9, 0x200000, 0x7}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xffffff83, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x41) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1fd}, 0xe) writev(r1, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x33) r2 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f00000000c0)={0x4000, 0x5, 0x0, 0x8, 0x0, 0x2080, 0x6ae0}) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setreuid(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 3m43.219005397s ago: executing program 3 (id=281): getrusage(0xfe, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x14, 0x1c, 0x1, 0x0, 0x2, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0) r2 = getpid() waitid(0x2, r2, &(0x7f0000000100), 0x1, 0x0) write$P9_RVERSION(r0, &(0x7f00000000c0)={0x13, 0x65, 0xffff, 0x9, 0x6, '9P2000'}, 0x13) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) 3m42.923978962s ago: executing program 3 (id=283): r0 = socket(0x40000000015, 0x5, 0x0) r1 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabh\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)r\xdc\x17\x99J\xaeE\xbdt\xe2L^2\xca\x8f\x1cZ\x84\xe3\xe6\x86iC\xcc\xa9\xbf\xeb\x92\r \xa86\x82\xc3\xa8\xf1\xb4\x0f\x9b\x88\x0f\xc8U\x99;\x9c\x17\xfc7\xdd\xd6\x8e%4\x17~\x9d\xe1\a\x00\x00\x00\xa5\x8fG\\\xd8\x80\x15\xcaw\x7f\xac\x063\xbaE\x11\xcc~Q\xcb/\x8bv\xf2B_\xc5\x8d\xb3\xdd\xbd\x1e\xde\x19\xb5\xc4\xcf%p\x89\xa2\xda\xc7', 0x2) r2 = fanotify_init(0x8, 0x1000) r3 = dup(r1) fanotify_mark(r2, 0x201, 0x48001038, r3, 0x0) ftruncate(r3, 0x1) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) 3m42.536647889s ago: executing program 3 (id=285): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000, 0x400, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r0, r1) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) 3m42.215962664s ago: executing program 3 (id=287): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f00004a3000/0x3000)=nil, 0x3000, 0x3000001, 0x20011, r0, 0xf648a000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000091) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) 3m41.336786376s ago: executing program 3 (id=292): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2, 0xaa9]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time={0x4, 0x1f91b19e}, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick=0x64, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0xfc, 0x0, 0x0, 0xfe, @time, {0xfe}, {}, @connect}], 0xc4) read$snapshot(r1, 0x0, 0xffffffbf) read$FUSE(r1, &(0x7f0000000b80)={0x2020}, 0x2020) 3m40.330551953s ago: executing program 3 (id=296): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) open(&(0x7f0000000180)='./file0\x00', 0x440, 0xc2) (async) open(&(0x7f0000000180)='./file0\x00', 0x440, 0xc2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0xeeee8000}}, "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", "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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=fsc']) (async) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=fsc']) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x3, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x480}, 0xc0881) setuid(0xee01) socket$key(0xf, 0x3, 0x2) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) socket(0x2, 0x2, 0x1) (async) r8 = socket(0x2, 0x2, 0x1) bind$unix(r8, &(0x7f0000000000)=@abs, 0x6e) bind$unix(r8, &(0x7f0000000000)=@abs, 0x6e) keyctl$session_to_parent(0x12) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) sendfile(r7, r7, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) (async) sendfile(r7, r7, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) bind$bt_hci(r8, &(0x7f0000000200)={0x1f, 0x2, 0x1}, 0x6) 3m36.011417195s ago: executing program 0 (id=313): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000001400"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0x8040) 3m35.371841784s ago: executing program 0 (id=315): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x71) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f0000000280)={0xc, 0xffffffffffffffd1, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f0000000180)=@sg0, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) (async) creat(&(0x7f0000000140)='./file0\x00', 0x71) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f0000000280)={0xc, 0xffffffffffffffd1, 0x0, 0x0, 0x0, 0x0}) (async) mount(&(0x7f0000000180)=@sg0, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) (async) 3m35.267942377s ago: executing program 0 (id=317): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000480)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2, 0xaa9]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time={0x4, 0x1f91b19e}, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick=0x64, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0xfc, 0x0, 0x0, 0xfe, @time, {0xfe}, {}, @connect}], 0xc4) read$snapshot(r1, 0x0, 0xffffffbf) read$FUSE(r1, &(0x7f0000000b80)={0x2020}, 0x2020) 3m34.276708488s ago: executing program 0 (id=318): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x70}}, 0x48) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x39f, 0x0) fallocate(r4, 0x1, 0x9, 0x81) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90a, 0x78, '\x00', @string=&(0x7f0000000040)=0x4}}) socket$l2tp(0x2, 0x2, 0x73) r6 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)='uid', &(0x7f0000000100)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b"], 0x68}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) 3m33.55201569s ago: executing program 0 (id=319): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) (async) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x16, "3ca7fd5ad5b80f2699b9b8158c4e345c5164843a8cc3"}, &(0x7f0000000040)=0x1e) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r1, 0x4}, &(0x7f00000000c0)=0x8) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) 3m33.295207914s ago: executing program 0 (id=321): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) r0 = geteuid() mount$overlay(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x8082, &(0x7f0000000140)={[{@volatile}, {@index_off}, {@redirect_dir_off}, {@uuid_auto}, {@userxattr}], [{@seclabel}, {@subj_role={'subj_role', 0x3d, 'msdos\x00'}}, {@subj_user={'subj_user', 0x3d, '&+):!%@^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/rnullb0\x00'}}, {@euid_lt={'euid<', r0}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}]}) 3m33.072618043s ago: executing program 33 (id=321): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) r0 = geteuid() mount$overlay(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x8082, &(0x7f0000000140)={[{@volatile}, {@index_off}, {@redirect_dir_off}, {@uuid_auto}, {@userxattr}], [{@seclabel}, {@subj_role={'subj_role', 0x3d, 'msdos\x00'}}, {@subj_user={'subj_user', 0x3d, '&+):!%@^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/rnullb0\x00'}}, {@euid_lt={'euid<', r0}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}]}) 3m23.680380175s ago: executing program 34 (id=296): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) open(&(0x7f0000000180)='./file0\x00', 0x440, 0xc2) (async) open(&(0x7f0000000180)='./file0\x00', 0x440, 0xc2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0xeeee8000}}, "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", "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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=fsc']) (async) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=fsc']) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x3, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x480}, 0xc0881) setuid(0xee01) socket$key(0xf, 0x3, 0x2) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) socket(0x2, 0x2, 0x1) (async) r8 = socket(0x2, 0x2, 0x1) bind$unix(r8, &(0x7f0000000000)=@abs, 0x6e) bind$unix(r8, &(0x7f0000000000)=@abs, 0x6e) keyctl$session_to_parent(0x12) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) sendfile(r7, r7, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) (async) sendfile(r7, r7, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) bind$bt_hci(r8, &(0x7f0000000200)={0x1f, 0x2, 0x1}, 0x6) 2m42.573548981s ago: executing program 6 (id=592): syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x8, 0x0, 0x0, 0xea2}) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x240, 0x108, 0x37}, 0x18) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000001c0)=""/4096) 2m40.181450587s ago: executing program 6 (id=604): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x5) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ntfs3\x00', 0x1200053, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) close(r1) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000d80)) socket$packet(0x11, 0x2, 0x300) r4 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000080)={0x0, r4}) setsockopt$inet_tcp_int(r4, 0x6, 0x0, &(0x7f0000000080)=0x7, 0x4) 2m40.035929294s ago: executing program 6 (id=607): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x61340, 0x0) prctl$PR_GET_ENDIAN(0x13, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) keyctl$invalidate(0x15, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000a40)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r3, 0x3}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r4, 0x3, {0x0, 0x1, 0x3}, 0xfe}, 0x18) close(r5) timer_create(0x3, 0x0, &(0x7f0000000300)) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r6, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) r7 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r7, 0xc0844123, &(0x7f0000002fc0)) unshare(0x40000000) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) fsopen(&(0x7f00000000c0)='hfs\x00', 0x1) timer_settime(r8, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r8) madvise(&(0x7f0000794000/0x2000)=nil, 0x2000, 0x19) 2m39.803851244s ago: executing program 6 (id=609): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x74, 0x0, 0x0, 0x1}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r0, r0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$FS_IOC_GETVERSION(r2, 0xc040ff0b, &(0x7f0000000180)) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r5, @ANYBLOB="0800c300741300000800c40001"], 0x30}, 0x1, 0x0, 0x0, 0x40002}, 0x0) mount(&(0x7f0000000000)=@md0, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1c01, 0x0) 2m39.720763983s ago: executing program 6 (id=610): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2010, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) statx(r0, &(0x7f0000000780)='./file0\x00', 0x2000, 0x10, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000740)=@nullb, r2, 0x0) socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) creat(&(0x7f0000001380)='./file0\x00', 0x4) syz_usb_connect$uac1(0x5, 0xfe, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xec, 0x3, 0x1, 0x40, 0x80, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfffb, 0x60}, [@selector_unit={0x8, 0x24, 0x5, 0x2, 0x3, "73917c"}, @mixer_unit={0xb, 0x24, 0x4, 0x1, 0x8, "b0911eaad018"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x303, 0x6, 0x3, 0x2}, @mixer_unit={0x5, 0x24, 0x4, 0x4, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0x1, 0x40, "c629"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x9, 0x2, 0x0, 0x8, "788c8207fcaf"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8b, 0x4, 0x83, 0x0, 'PNF', "ac28"}, @as_header={0x7, 0x24, 0x1, 0x35, 0x2, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x0, 0x7a}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x75, 0x2, 0x4, 0x1, "b850"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x6, 0x2, 0x4, {0x7, 0x25, 0x1, 0x2, 0xff, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1, 0x1, 0x8, 0x25, "7aba4a9b"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xbde0, 0x1, 0x0, "5e5858c7fbe59d7ea6"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x2, 0x9, 0x4, "d8fe"}, @as_header={0x7, 0x24, 0x1, 0xe, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x2, 0x7, 0xfd, {0x7, 0x25, 0x1, 0x80, 0x9, 0x9}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x1, 0x6, 0xff, 0xfd, 0xff, 0xff}, 0x10, &(0x7f0000000080)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x45, 0xe, 0x10, 0x7, 0x89}]}, 0xa, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xab8ab8d1c3d51deb}}, {0x73, &(0x7f0000000280)=@string={0x73, 0x3, "377198398eb15c4be8cb0085475df5fad769ef2b186bc7014397acfcf05de430994becd36952b54ce3155408cb3804bb31f2af0459c2d94985937b3f6fc8e08f29ef8a8381643c7256ba4719a34ff62560250d5ac8877a0fea7772cbfd96889047dc8023d1611ab8a86715d2c2d24cb053"}}, {0x76, &(0x7f0000000300)=@string={0x76, 0x3, "1f0a51033e10083705e93976753d763e25a729bbeebe61c539cfbf6ba9d4716900046342f2adc8cc36d5ce59406ea4171a1266b16de5b633da3257d8cc5108eb370098c982b24357f4fa249ba2d77e70c8fe3b6125b777765c8efda212be74dbc61ccb610bad4e6ce6e72b7617cfcb49e5906269"}}, {0xd6, &(0x7f0000000380)=@string={0xd6, 0x3, "9b1608d15849e82adac598627a03305fe98f1479ea329c5f9ed858d23780bae8d6fc70ef53a1acecab1219d7dbb5070141689c29122205e143fe3a509c4758437d964c5c60b4e90b0516acfa6816cafe90964294ee63fb80dd82f797d2616bc9da801a142b931e3a5bb5512723e80434e8f44d07f120c000b8ac432de878fd2d564fdf071d6da833bd6b37a429e75770ca19a09ff9248941e38bbf3baffc82f14f84889b5f06581821d15cd29d1dfe15be273bd4dfe6d0c159cb5e27902c6f61c5c1b98a7e88332bda479a08d98e7a791058d1e3"}}, {0xc9, &(0x7f0000000480)=@string={0xc9, 0x3, "d896ee9a267482919fa0a0b07394829cd05a7bcea765d2d11d007115e9ae82ec404228194347b12d4ebbe452ba19da55c8a8a4c4c96510c0f2f7ec38f785525481c66986fa2f1b553995a32aa588a4964c024d41975ed240cf73a91f45726d1f370a6f0e56925b4da8e91f5ddc56bc9b8eeee2e45703eb4aa2c724ef2c66547f2b413a190bd79622d359333f4d9b2c24af6abedfc8159a004b1854a2dcef692327b6d76e80deff0c52e3781f5ce7c1435058401d455c2dc7a23cb3716f23f517d2bf407062ec12"}}, {0x30, &(0x7f0000000580)=@string={0x30, 0x3, "bbfed3c77607feaa77dd121a3e0f0c1cc343ca6fdb187575ed142376e435969c6660dfacd03d2a2526b5ffa9a141"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x40c}}]}) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0) 2m39.451187994s ago: executing program 6 (id=611): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x5}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40080) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x9088800}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3a}, @IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x65}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) (async) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000580)={0x0, &(0x7f0000000300)=[@code={0xa, 0x6e, {"b9800000c00f3235000100000f30410f01780a66b872008ee066b804018ed00f015cea0066b80f018ed8b9f1020000b800800000ba000000000f3044a5c744240000180000c7442402d1c3e1cfc7442406000000000f011424440fc72f"}}, @cpuid={0x14, 0x18, {0xbef, 0x3}}, @uexit={0x0, 0x18, 0xffffffff}, @wr_crn={0x46, 0x20, {0x0, 0x3d2480000000000}}, @uexit={0x0, 0x18, 0xffffffffffffffff}, @wrmsr={0x1e, 0x20, {0xb84, 0xfffffffffffff800}}, @code={0xa, 0x42, {"430f015e000f79bc23a2c98f170f18de66f2420f2a5577f30f09f20f7c16f3470f0936f2430f01f826673e0f01ca0f0131"}}, @rdmsr={0x32, 0x18, {0x482}}, @wr_crn={0x46, 0x20, {0x8, 0x9}}, @uexit={0x0, 0x18, 0x1}, @code={0xa, 0x64, {"66410f38814497fcc744240004000000c74424020e000000c7442406000000000f011c24f36736640f001d00000000440f019cb0f79f0000460f01ca26f30f09420f0936816019de000000f20f5f4600c1c0aa"}}, @wr_crn={0x46, 0x20, {0x3, 0x9}}, @cpuid={0x14, 0x18, {0x2, 0x5}}, @uexit={0x0, 0x18, 0x6}, @wrmsr={0x1e, 0x20, {0x988, 0xfff}}], 0x25c}) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000600)=@arm64_fp={0x604000000010006e, &(0x7f00000005c0)=0x9}) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r3 = fcntl$dupfd(r0, 0x0, r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000840)={&(0x7f0000000640), 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x15c, 0x0, 0x402, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x8001}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1185}, {0x6, 0x11, 0xe}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x12}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x9}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) (async) setxattr$incfs_size(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), &(0x7f0000000900)=0x7, 0x8, 0x0) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000980)={0x1e4, r1, 0x20, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x89b}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x578}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x639a}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10000000}, {0x6, 0x11, 0x8001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7f}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8000}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x3ff}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x2000000}, 0x20000014) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000e40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c40)={0x184, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x80000001}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x8001}, {0x8, 0x15, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xffffab69}, {0x6, 0x11, 0xab4e}, {0x8, 0x15, 0x2ceb}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7d}, {0x6, 0x11, 0x8001}, {0x8, 0x15, 0x520f}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xdc8}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x1}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000e80), 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40880}, 0x2) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$NFC_CMD_DISABLE_SE(r5, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000806}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x14, r6, 0x400, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x40000010) (async) connect$inet(r3, &(0x7f0000001140)={0x2, 0x4e21, @remote}, 0x10) (async, rerun: 64) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000001180)={0x3}) (rerun: 64) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000011c0)={0x0, 0x0, r3}) (async, rerun: 32) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240), r0) (rerun: 32) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000001500)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001280)={0x20c, r7, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd85}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1fb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4ff}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xabc1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xef}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff57}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000040) (async, rerun: 32) r8 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x9) (rerun: 32) ioctl$TIOCL_GETKMSGREDIRECT(r8, 0x541c, &(0x7f0000001540)) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000001580)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x44, 0x3, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0xe4) (async) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000001700)) (async, rerun: 64) r10 = accept4(r3, &(0x7f0000001740)=@caif=@rfm, &(0x7f00000017c0)=0x80, 0x0) (rerun: 64) close_range(r10, r4, 0x0) ioctl$PPPIOCSMRRU(r9, 0x4004743b, &(0x7f0000001800)=0xc) 2m39.206962328s ago: executing program 35 (id=611): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x5}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40080) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x9088800}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3a}, @IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x65}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) (async) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000580)={0x0, &(0x7f0000000300)=[@code={0xa, 0x6e, {"b9800000c00f3235000100000f30410f01780a66b872008ee066b804018ed00f015cea0066b80f018ed8b9f1020000b800800000ba000000000f3044a5c744240000180000c7442402d1c3e1cfc7442406000000000f011424440fc72f"}}, @cpuid={0x14, 0x18, {0xbef, 0x3}}, @uexit={0x0, 0x18, 0xffffffff}, @wr_crn={0x46, 0x20, {0x0, 0x3d2480000000000}}, @uexit={0x0, 0x18, 0xffffffffffffffff}, @wrmsr={0x1e, 0x20, {0xb84, 0xfffffffffffff800}}, @code={0xa, 0x42, {"430f015e000f79bc23a2c98f170f18de66f2420f2a5577f30f09f20f7c16f3470f0936f2430f01f826673e0f01ca0f0131"}}, @rdmsr={0x32, 0x18, {0x482}}, @wr_crn={0x46, 0x20, {0x8, 0x9}}, @uexit={0x0, 0x18, 0x1}, @code={0xa, 0x64, {"66410f38814497fcc744240004000000c74424020e000000c7442406000000000f011c24f36736640f001d00000000440f019cb0f79f0000460f01ca26f30f09420f0936816019de000000f20f5f4600c1c0aa"}}, @wr_crn={0x46, 0x20, {0x3, 0x9}}, @cpuid={0x14, 0x18, {0x2, 0x5}}, @uexit={0x0, 0x18, 0x6}, @wrmsr={0x1e, 0x20, {0x988, 0xfff}}], 0x25c}) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000600)=@arm64_fp={0x604000000010006e, &(0x7f00000005c0)=0x9}) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r3 = fcntl$dupfd(r0, 0x0, r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000840)={&(0x7f0000000640), 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x15c, 0x0, 0x402, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x8001}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1185}, {0x6, 0x11, 0xe}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x12}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x9}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) (async) setxattr$incfs_size(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), &(0x7f0000000900)=0x7, 0x8, 0x0) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000980)={0x1e4, r1, 0x20, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x89b}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x578}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x639a}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10000000}, {0x6, 0x11, 0x8001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7f}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8000}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x3ff}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x2000000}, 0x20000014) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000e40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c40)={0x184, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x80000001}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x8001}, {0x8, 0x15, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xffffab69}, {0x6, 0x11, 0xab4e}, {0x8, 0x15, 0x2ceb}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7d}, {0x6, 0x11, 0x8001}, {0x8, 0x15, 0x520f}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xdc8}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x1}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000e80), 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40880}, 0x2) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$NFC_CMD_DISABLE_SE(r5, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000806}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x14, r6, 0x400, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x40000010) (async) connect$inet(r3, &(0x7f0000001140)={0x2, 0x4e21, @remote}, 0x10) (async, rerun: 64) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000001180)={0x3}) (rerun: 64) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000011c0)={0x0, 0x0, r3}) (async, rerun: 32) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240), r0) (rerun: 32) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000001500)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001280)={0x20c, r7, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd85}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1fb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4ff}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xabc1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xef}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff57}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000040) (async, rerun: 32) r8 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x9) (rerun: 32) ioctl$TIOCL_GETKMSGREDIRECT(r8, 0x541c, &(0x7f0000001540)) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000001580)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x44, 0x3, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0xe4) (async) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000001700)) (async, rerun: 64) r10 = accept4(r3, &(0x7f0000001740)=@caif=@rfm, &(0x7f00000017c0)=0x80, 0x0) (rerun: 64) close_range(r10, r4, 0x0) ioctl$PPPIOCSMRRU(r9, 0x4004743b, &(0x7f0000001800)=0xc) 5.714654872s ago: executing program 7 (id=1538): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) (async) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x50) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) (async) recvfrom$inet6(r3, &(0x7f0000000300)=""/218, 0xda, 0x120, 0x0, 0x0) (async) read$FUSE(r2, &(0x7f0000000840)={0x2020}, 0x2020) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) (async) shutdown(r2, 0x1) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r5 = socket(0x11, 0x3, 0x0) mmap(&(0x7f0000731000/0x1000)=nil, 0x1000, 0x2, 0x812, r5, 0x0) (async) setresuid(r4, r4, 0x0) (async) getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000180)) (async) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0), 0x80, &(0x7f00000001c0)={[{@quota}, {@uid={'uid', 0x3d, r4}}, {@size={'size', 0x3d, [0x32, 0x25, 0x65, 0x39, 0x70, 0x25, 0x32, 0x74, 0x70, 0x0]}}, {@quota}], [{@uid_eq={'uid', 0x3d, r6}}, {@dont_appraise}]}) 5.55214063s ago: executing program 7 (id=1540): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') read$alg(r0, &(0x7f0000000e80)=""/4096, 0x1000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x93771000) 4.845263062s ago: executing program 7 (id=1548): set_mempolicy(0x8000, &(0x7f0000000040)=0x20000000fff, 0x5) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x1, 0xb5, 0xe1, 0x45, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)={0x40, 0x11, 0x26, {0x26, 0xf, "8314b31b99079618c6a2095e27cfbf586e638ddde18d2255f110d8814673319707579ed3"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, &(0x7f0000000180)={0x0, 0xf, 0x138, {0x5, 0xf, 0x138, 0x6, [@ssp_cap={0x20, 0x10, 0xa, 0x10, 0x5, 0x9, 0xf000, 0x4, [0xc000, 0xff6f, 0xcf, 0xc028, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x74, "7b0fb51a2d2cb8ef1995804e2418cd7a"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x9, 0x3, 0xc2f, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "2b53c4f9c572ba08e3d5a60a94864d6d"}, @generic={0xd6, 0x10, 0x4, "df3e6ff72bd39cf36dbd6dff130855e8ea71c67d2344900bae9a58dc6c67fd01c35b38236d2b24866fba91dab88aaf9313ee52de6d593e3ec902c73d9846d936c0e4fa8b5b602680ffffa396bb38753b543f4cfe717f8eaece3031e8f0785a335032aeeb69c19b1cbe410481e2bebddc67df8525e1b506976cdbd7da9dfdc35eb5ce30ef6ab96bee5b2ca20af03c195db61e338ef4fc54ca39def2cb05b9d7138e8bc3ecf830a55a2a59d9cf49445a5b6d9b7765313eb1b33b41e2f7a7425589755ca2df21483298501cb162e6b1cdc7565f7b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x6, 0xf, 0x630}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x2, 0x5, 0x3a, "90f31663", "dd20ab9a"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x60, 0x5, 0x7, 0x2, 0x8, 0x87c4}}}, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x20, 0x31, 0x28, "1be494bb464a55ebad69a010fb6057062c73f0343adea0855a6760d4485824f8f665e978f8491ad3"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x60, 0x8, [0xf0]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x66af}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "dd08"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000640)={0x40, 0x13, 0x6, @random="0e8d7a3a5ab2"}, &(0x7f0000000680)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "e20e"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000740)={0x40, 0x1c, 0x1}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x5}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x3}}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) r3 = openat$apparmor_task_exec(0xffffff9c, &(0x7f0000000a40), 0x2, 0x0) write$apparmor_exec(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x5708e000) syz_open_dev$usbfs(&(0x7f0000000080), 0x240, 0x418380) 3.079374753s ago: executing program 1 (id=1557): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='cifs\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b07"], 0xec) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000380)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, r3, &(0x7f0000000100)='./file0\x00') ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)=0x0) mount$fuse(0x0, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000), 0x202000, &(0x7f0000000600)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x600}}, {@blksize}, {@allow_other}], [{@subj_type={'subj_type', 0x3d, 'upperdir'}}, {@permit_directio}, {@obj_type={'obj_type', 0x3d, '/%!/%&!\xaf.#&\xdd-'}}, {@euid_lt={'euid<', r5}}]}}) chdir(&(0x7f00000003c0)='./bus\x00') mknod$loop(&(0x7f0000000080)='./file2\x00', 0x1000, 0x1) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x8d, 0xc9, 0x5}}}, 0x7) 2.84005868s ago: executing program 1 (id=1559): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000001400"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000020000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) 2.839588757s ago: executing program 5 (id=1560): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x40010, r0, 0xf648b000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) 2.680546694s ago: executing program 4 (id=1562): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) getsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x151342, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030302c757365725f69e78e5bd8af20fdd6bf643d000000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB="fefcf202fc51061c11c2d3a310684ce01c2f3e2964f31c102e2d383ee62f49b40a190135630b8ad712bc90c5542d84cbad87b0870d02d9bc000190bc828415a18c42e50bac80c287dc76b771206821ac74efab8fd84c"]) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000100)={0x28, 0x3, 0x0, {0x6, 0x7, 0x0, 'user_id'}}, 0x28) sendfile(r1, r1, 0x0, 0x7ffff000) 2.496058793s ago: executing program 4 (id=1563): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='gfs2\x00', 0x200000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10g\x91\xdeeH\xe5+\xf0\x05\x00\x00\x00\x00\x00\x00\x00', 0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000008, 0x8010, r0, 0x81d8a000) accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10, 0xc00) 2.299543345s ago: executing program 4 (id=1564): r0 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x23fffff}) mremap(&(0x7f00003c8000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f000024a000/0x1000)=nil) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xc3', 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) 2.227580216s ago: executing program 1 (id=1565): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) creat(&(0x7f0000000080)='./file0\x00', 0xac) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 2.059692615s ago: executing program 4 (id=1566): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xbb, 0x129432e6, 0xcb, 0x5, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x7fe, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0x4, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x6, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x200000c8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000100)="8512e6cdc4e9ff11644851bc3a678b3b1cf99dea40b913b53c6d159a0365fc23b73198c8baeecead9d136e54be70b50b78616ccc3691d79149f38a8598994e1a8081ba62584e076f8367df3706ef6660992a9e058c60e9ea08b779d4c1843e2a964da4e074b4f2f27f55374abfb8b190f97f16ef2955c3f46783a9f218c7697f1359d0bd7449dafebbef4e05e56d9e36173217fea9ce1d783df7ee341825abe34301481153906fffffef2c07918915b106937b20f9d615cdcb511c69ff3c0d0cbc74abb3d79d64d7af5e31b0362dc2", 0xcf) 2.059312676s ago: executing program 1 (id=1567): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = inotify_init1(0x800) r4 = fcntl$dupfd(r2, 0x406, r3) connect$pppl2tp(r4, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x2, 0x4, 0x3, {0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2b9d}}}, 0x3a) (async) setsockopt$inet_mtu(r4, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendfile(r5, r5, 0x0, 0x7ffff000) 1.96332928s ago: executing program 5 (id=1568): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x119801, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf6486000) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc1) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r2}, 0x0) landlock_restrict_self(r1, 0x5) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.844137993s ago: executing program 5 (id=1569): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x7}}]}, 0x50}}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005a000d"], 0x1c}], 0x1}, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) setsockopt(0xffffffffffffffff, 0x3, 0x6, &(0x7f0000000700)="37557bf476e57e3ff487bcca92e2688783c7ffb106450c5928c0b26a8e08fbb2e3deb24243c76131", 0x28) pselect6(0x40, &(0x7f0000000100)={0x0, 0x2, 0x2, 0xe, 0x9, 0x80, 0x3ff, 0x40}, &(0x7f0000000140)={0x8001, 0x5, 0xa, 0x7d1, 0x8ec, 0x3, 0x8, 0x9}, &(0x7f00000001c0)={0x9, 0xe5fa, 0x0, 0xfff, 0x7b, 0x0, 0x800, 0x4}, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000280)={&(0x7f0000000240)={[0xc]}, 0x8}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r6, 0xc0905664, &(0x7f0000000ac0)={0x0, 0x0, '\x00', @bt={0x6, 0x5, 0x8, 0xe, 0x6f7, 0x0, 0xe, 0xd}}) sendmsg$OSF_MSG_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80b000000050104000000000000000003000080540201"], 0xbb8}, 0x1, 0x0, 0x0, 0x2000}, 0x4004040) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0xa8083) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1fb, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000440)={0xffff, 0x1, 0x6}) dup(r4) close_range(r2, 0xffffffffffffffff, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x5, 0x4) 1.630013238s ago: executing program 5 (id=1570): socket$kcm(0x11, 0xa, 0x300) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x8000) r1 = memfd_secret(0x80000) write$tun(r1, &(0x7f0000000000)={@void, @void, @x25={0x0, 0x5, 0x23, "6a0eb3b6b65df0de4dcd2fa73a45cac3c2ee47e56922c45e2b102f7119dc749cfcf651f3ba7aa5342f1e167f326bf8f4bf"}}, 0x34) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) 1.577123417s ago: executing program 5 (id=1571): set_mempolicy(0x1, &(0x7f0000000000)=0x3, 0x3) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000640), 0xb0200, 0x0) close(r3) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r2, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}], 0x1}, 0x4}], 0x2, 0x102, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) fcntl$lock(r5, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3b5, 0x1fd}) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f00000000c0)) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000600)={&(0x7f00000004c0)=[{0x3a, 0x8810, 0xe8, &(0x7f0000000300)="28edfdabc9a3a0cfd6032cd61c62213e22e7a27b196907d91bcf41787410761cbf9a5b8e1c900764bb8d991f2c547244fcdf9f2361023e51b6d1279d0c9b5a4e1145b479b91be9a4cd212a3b015b8756956c2c24220ea328a84b82ecef75198266c384f481176989e7893fa84abc096a37fbe6b9426bb508cb10cc5b28ce41e9c8361bead966a95c4e356737b1a904d8881a1e787d214972ff40cfc28f929caee70e3ade70388050eb0d9b53ddaa4a1be20a68098851b59cb9c6ac399c6e2c2d37e3f7a6ae28a0094dde516031b88e52698a35d4adb4469c4818d438ec14fb794f176cf7c0a2cdea"}, {0x5, 0x0, 0x26, &(0x7f0000000180)="82317a5088b998133d85c9845879cb13f803dea73a677e859578451f6e80654dca65b3386b1c"}, {0x7c, 0x1200, 0x1c, &(0x7f00000001c0)="a4554c442a3322bfedb9bcdf965bb4860f3dabc768a2f9adb013a1c8"}, {0xffff, 0x1000, 0xa0, &(0x7f0000000400)="af34e250b2be9699c785296554fd489a1761689fa60f938bc8768cfe33b161e6b99f149a264c64f7e8662361bbecf4fc9fa428e00f6178572a0036a8c04bcbf18488fd8120104e794082015d58316d1dca5fe70a44ea6e3c587802eccf322efc2cd14de39e0daa37b6726e220f101299c22770190a8b2b2d4c4c2ed835d1748c1828ea75c55c21833fcfa9e058dfba54b931c2ede17f9cc54fa2c37f5b47e168"}], 0x4}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000840)={0x1, 0x0, @ioapic={0x6000, 0x2, 0x80000000, 0xc6, 0x0, [{0xf, 0xe3, 0x81, '\x00', 0x2}, {0x7, 0x2, 0xf9}, {0x26, 0x3, 0x0, '\x00', 0xd}, {0x38, 0x8, 0x9, '\x00', 0xfa}, {0x0, 0x5, 0x1, '\x00', 0x5}, {0xa8, 0x5, 0xff, '\x00', 0xd1}, {0x4, 0x2, 0x9, '\x00', 0x8b}, {0x7, 0x3, 0x6d, '\x00', 0xb0}, {0x1, 0x9, 0x8, '\x00', 0x3}, {0x3, 0xe7, 0x1, '\x00', 0x2}, {0x0, 0x40, 0x6, '\x00', 0x2}, {0x2, 0x20, 0x1, '\x00', 0x1}, {0x80, 0x4, 0x6, '\x00', 0x1}, {0x38, 0x5, 0xfd, '\x00', 0xac}, {0x8, 0x2, 0x5, '\x00', 0x89}, {0x4, 0x9, 0x2, '\x00', 0xf}, {0x8, 0x80, 0xc0, '\x00', 0x8}, {0x0, 0x9, 0x3, '\x00', 0xed}, {0x6, 0xb, 0xe, '\x00', 0x3}, {0x4, 0x3, 0xc7, '\x00', 0x80}, {0x3, 0x0, 0x8, '\x00', 0x8}, {0x4d, 0xff, 0xff, '\x00', 0xb4}, {0x3, 0x7, 0x8, '\x00', 0xff}, {0x3, 0x4, 0x6, '\x00', 0xf2}]}}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x15, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r8, 0x5420, &(0x7f0000000080)=0x6) ioctl$TIOCPKT(r8, 0x5420, &(0x7f0000001540)=0x6) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 1.072309126s ago: executing program 1 (id=1572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="cc000000210001000000000004000000ff010000000000e4ff0e101e434cbb00000000000401fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff0200000000000000000000000000010a010100000000000000000000000000fc0100000000000000000000000000010a0101000000000000000000000000003c000000000000000a000a002c0013007f000001000000000000000000000000e0000001000000000000000000000000000000000a000000"], 0xcc}}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="cc000000210001000000000004000000ff010000000000e4ff0e101e434cbb00000000000401fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff0200000000000000000000000000010a010100000000000000000000000000fc0100000000000000000000000000010a0101000000000000000000000000003c000000000000000a000a002c0013007f000001000000000000000000000000e0000001000000000000000000000000000000000a000000"], 0xcc}}, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x1b) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x7) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='sysfs\x00', 0x1224800, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./cgroup\x00', 0x2) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1c, &(0x7f0000000140), &(0x7f0000000200)=0x4) (async) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1c, &(0x7f0000000140), &(0x7f0000000200)=0x4) 808.055355ms ago: executing program 7 (id=1573): creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) 701.114909ms ago: executing program 7 (id=1574): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000180)={0x0, 0x0}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fadvise64(r1, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r1, 0xa4717000) 599.489576ms ago: executing program 1 (id=1575): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x66082, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f0000000140)=0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000005b3f550eae94f88e00652b00000a58000000060a0b040000000000000000020000002c0004802800018008000100666962001c0002800800034000000038080001400000001408000240000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmsg$IPSET_CMD_TEST(r4, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0xd0, 0xb, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0xa8, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x1ff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3ff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80000001}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40000000}, 0x80c1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000040)={r7, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x4, 0x3, 0x8, 0x8, 0x9, 0x8, 0x4, 0x8, 0xffffffffffffffff, 0x8, 0x6, 0x99e, 0xfff, 0xc5, 0x9]}, &(0x7f0000000140)=0xfc) (async) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={r3, 0x400}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000) 351.888779ms ago: executing program 4 (id=1576): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000000c0)=0x8) (async, rerun: 32) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='hostfs\x00', 0x0, 0x0) (async, rerun: 32) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) (async) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) (async, rerun: 32) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000440)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8) (rerun: 32) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@acquire={0x298, 0x17, 0x200, 0x70bd27, 0x25dfdbfd, {{@in=@multicast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1f}, {@in6=@empty, @in6=@mcast2, 0x4e22, 0x0, 0x4e21, 0x422, 0x2, 0x50, 0xa0, 0x0, 0x0, 0xee01}, {{@in6=@mcast2, @in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4e24, 0x2, 0x4e21, 0x0, 0xa, 0xe0, 0x80, 0x21, 0x0, r4}, {0xc75, 0xfffffffffffffffd, 0x8, 0x8, 0xffffffffffffff97, 0x400, 0x2, 0x3}, {0xffffffffffffff5b, 0x9c, 0xfffffffffffffffd, 0x4}, 0x68, 0x6e6bb9, 0x2, 0x0, 0x3}, 0x6, 0xa, 0x48ae, 0x70bd2c}, [@coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x1b}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd28, 0xa6}}, @algo_comp={0x139, 0x3, {{'lzjh\x00'}, 0x788, "2270f9957f07be59044e5669bd74008f48bfaf0b101cba2ddd28b1b2c264a453d1252042a6b2db5a12c7454229ca9d13abe992befd65f358d7bf91952ac91f8250a6291f7560c6c58a94d58cf835d7b5627eed789883ddbe5bd6a7428e76516cd82f97a5e73d9794c828d637f5a2d2daca3f77ccd844f5e691021a30853765b43ef6b4af9f4f2aa6c2a35c14407d77788b88b8c5e0604dbb5f7057c7cd08eb0715c57f8d590bcff6c6d7d66a861002f9f9bb08c95c70be4bfb468e10c4735ac0c97e9742bb263f1c9c4473fce92dce5f276108419dcc033a6ff22e91c838cc35cebe3da018d3bb3a94af121423c98c49d7"}}, @tfcpad={0x8, 0x16, 0x7}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9}]}, 0x298}}, 0xc090) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0xa, &(0x7f0000000080)=[{0x6e, 0x8a, 0x9}, {0x9, 0x1, 0x3, 0x5}, {0x2, 0x0, 0x77, 0xe}, {0xbba, 0x2, 0x6, 0x7}, {0x2, 0xa, 0x2, 0x9}, {0xc, 0x48, 0x80, 0x2}, {0x8, 0xc, 0x5, 0x2}, {0x3, 0x1, 0x8, 0xa8a4}, {0x3, 0x6, 0x8, 0x36b}, {0x8, 0x2, 0x10, 0x1}]}) 325.713766ms ago: executing program 5 (id=1577): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e770a00000000000000930606f9000000000f000000000600"}}) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) (async) write$P9_RVERSION(r2, &(0x7f0000000040)=ANY=[], 0x15) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20090c4, 0x0) 107.394036ms ago: executing program 4 (id=1578): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010014000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000b000000080026000816"], 0x40}}, 0x0) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000440)={0x3}) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000000)={0x7}) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f00000001c0), 0x95) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r9, 0x6, 0xb, 0x0, &(0x7f0000000100)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r7, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x1d9080, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r10, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1400000, 0x74}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) 0s ago: executing program 7 (id=1579): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x6, 0x2, [0xff81, 0x40]}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={r2, 0x5}, 0x8) (async) close(r1) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) (async) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)='d', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4c841) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080)={r4, 0x8}, &(0x7f00000000c0)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000802ff00000008900ef178000000e09460154da5442e69b0e48ff4bbe0e8645b1bf02a2861997be58cbb24641f9043f21a60651b33000abc9cb2a0298530eaec2ca1ca10e9f9a0c08abbf64fcaa0b923441c33b91620498a8cee23d46e783aa488bbec2c21e5820f4ce20d259f67dc9aebeec0dfa465252581740c57680932b503ccddcc1f8339f2987c5f336b207bb3046490e167c6776b4d0048f318e53b155ae0f6587e4e0b876f9a39", @ANYRES32=r5], 0x20, 0x4c004}], 0x1, 0x10) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={r4, 0x5, 0xb, 0xf7d}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x31, 0x0, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 260.629431][ T5899] usb 6-1: reset high-speed USB device number 25 using dummy_hcd [ 260.804778][ T5899] usb 6-1: device firmware changed [ 260.812281][ T43] usb 5-1: No LPM exit latency info found, disabling LPM. [ 260.832004][ T5860] usb 6-1: USB disconnect, device number 25 [ 260.839451][ T43] usb 5-1: config 3 has an invalid interface number: 140 but max is 1 [ 260.860069][ T43] usb 5-1: config 3 has an invalid interface number: 211 but max is 1 [ 260.869029][ T43] usb 5-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 260.880709][ T43] usb 5-1: config 3 has no interface number 0 [ 260.892058][ T43] usb 5-1: config 3 has no interface number 1 [ 260.902618][ T43] usb 5-1: config 3 interface 140 altsetting 64 endpoint 0x6 has invalid maxpacket 1023, setting to 0 [ 260.921350][ T43] usb 5-1: config 3 interface 140 altsetting 64 endpoint 0x5 has invalid maxpacket 1024, setting to 8 [ 260.941255][ T43] usb 5-1: config 3 interface 140 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 260.957067][ T43] usb 5-1: config 3 interface 140 altsetting 64 endpoint 0x4 has invalid maxpacket 1032, setting to 8 [ 260.969725][ T43] usb 5-1: config 3 interface 140 altsetting 64 endpoint 0x2 has an invalid bInterval 25, changing to 4 [ 260.986779][ T43] usb 5-1: config 3 interface 140 altsetting 64 endpoint 0x2 has invalid maxpacket 8, setting to 0 [ 260.997902][ T43] usb 5-1: config 3 interface 140 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 8 [ 261.014600][ T5850] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 261.015109][ T5860] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 261.038672][ T43] usb 5-1: config 3 interface 140 altsetting 64 endpoint 0xF has invalid maxpacket 16, setting to 0 [ 261.088720][ T43] usb 5-1: config 3 interface 140 altsetting 64 endpoint 0xD is Bulk; changing to Interrupt [ 261.108786][ T9238] /dev/rnullb0: Can't open blockdev [ 261.152123][ T43] usb 5-1: config 3 interface 140 altsetting 64 endpoint 0xD has invalid wMaxPacketSize 0 [ 261.192978][ T43] usb 5-1: config 3 interface 140 altsetting 64 has a duplicate endpoint with address 0x2, skipping [ 261.218510][ T43] usb 5-1: config 3 interface 140 altsetting 64 endpoint 0x8 has invalid maxpacket 32, setting to 8 [ 261.256109][ T43] usb 5-1: config 3 interface 140 altsetting 64 has a duplicate endpoint with address 0x5, skipping [ 261.268051][ T43] usb 5-1: config 3 interface 140 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 261.282003][ T5860] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.289866][ T9247] /dev/rnullb0: Can't open blockdev [ 261.307578][ T5860] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 261.316982][ T43] usb 5-1: config 3 interface 140 altsetting 64 endpoint 0xB has invalid maxpacket 32, setting to 8 [ 261.331958][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.346324][ T5860] usb 6-1: config 0 descriptor?? [ 261.351407][ T43] usb 5-1: config 3 interface 140 altsetting 64 endpoint 0x1 has invalid maxpacket 64, setting to 8 [ 261.362609][ T43] usb 5-1: config 3 interface 140 altsetting 64 endpoint 0x9 has invalid maxpacket 16, setting to 8 [ 261.378995][ T43] usb 5-1: config 3 interface 211 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 261.390030][ T43] usb 5-1: config 3 interface 211 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 261.412077][ T43] usb 5-1: config 3 interface 211 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 261.425883][ T43] usb 5-1: config 3 interface 211 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 261.438015][ T43] usb 5-1: config 3 interface 211 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 261.459809][ T43] usb 5-1: config 3 interface 211 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 261.462958][ T10] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 261.478183][ T43] usb 5-1: config 3 interface 211 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 261.478214][ T43] usb 5-1: config 3 interface 140 has no altsetting 0 [ 261.478234][ T43] usb 5-1: config 3 interface 211 has no altsetting 0 [ 261.481956][ T43] usb 5-1: New USB device found, idVendor=1066, idProduct=0500, bcdDevice=5d.4d [ 261.503745][ T9249] /dev/rnullb0: Can't open blockdev [ 261.516990][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.530271][ T43] usb 5-1: Product: Ñ [ 261.534426][ T43] usb 5-1: Manufacturer: à š [ 261.539369][ T43] usb 5-1: SerialNumber: ç± [ 261.679181][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 261.694808][ T10] usb 8-1: too many configurations: 129, using maximum allowed: 8 [ 261.705360][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.721101][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.734883][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.752795][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.789771][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.801337][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.816974][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.819352][ T5860] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 261.831192][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.855995][ T10] usb 8-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=ce.6f [ 261.866208][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.877872][ T10] usb 8-1: Product: syz [ 261.882386][ T10] usb 8-1: Manufacturer: syz [ 261.887966][ T10] usb 8-1: SerialNumber: syz [ 261.895555][ T5860] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0017/input/input26 [ 261.899447][ T10] usb 8-1: config 0 descriptor?? [ 261.934213][ T43] usb 5-1: USB disconnect, device number 49 [ 261.943561][ T10] quatech2 8-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 262.028323][ T9224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.036508][ T5860] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 262.038504][ T9224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.156486][ T9243] /dev/rnullb0: Can't open blockdev [ 262.175227][ T10] usb 8-1: qt2_attach - failed to power on unit: -71 [ 262.194206][ T9224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.197346][ T10] quatech2 8-1:0.0: probe with driver quatech2 failed with error -71 [ 262.257706][ T10] usb 8-1: USB disconnect, device number 15 [ 262.258906][ T9224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.292883][ T9260] netlink: 24 bytes leftover after parsing attributes in process `syz.1.908'. [ 262.514699][ T43] usb 6-1: USB disconnect, device number 26 [ 262.745598][ T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 262.936547][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 262.959817][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 262.973421][ T10] usb 2-1: config 1 interface 0 altsetting 126 bulk endpoint 0x1 has invalid maxpacket 16 [ 263.002302][ T10] usb 2-1: config 1 interface 0 altsetting 126 bulk endpoint 0x82 has invalid maxpacket 64 [ 263.032613][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 263.048711][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 263.059898][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.059951][ T9278] /dev/rnullb0: Can't open blockdev [ 263.072714][ T10] usb 2-1: Product: syz [ 263.080501][ T10] usb 2-1: Manufacturer: syz [ 263.109051][ T10] usb 2-1: SerialNumber: syz [ 263.129263][ T9266] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 263.166503][ T9266] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 263.258081][ T9287] /dev/rnullb0: Can't open blockdev [ 263.473682][ T9297] /dev/rnullb0: Can't open blockdev [ 263.601961][ T5914] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 263.639817][ T9266] kAFS: unparsable volume name [ 263.779583][ T10] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 49 if 0 alt 126 proto 2 vid 0x0525 pid 0xA4A8 [ 263.806096][ T5914] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 263.828137][ T5914] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 263.838617][ T10] usb 2-1: USB disconnect, device number 49 [ 263.845575][ T5914] usb 5-1: config 220 has an invalid descriptor of length 235, skipping remainder of the config [ 263.872770][ T10] usblp0: removed [ 263.878471][ T5914] usb 5-1: config 220 has no interface number 2 [ 263.893331][ T5914] usb 5-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 8 [ 263.911067][ T5914] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 263.946711][ T5914] usb 5-1: config 220 interface 0 has no altsetting 0 [ 263.956300][ T5914] usb 5-1: config 220 interface 76 has no altsetting 0 [ 263.963792][ T5914] usb 5-1: config 220 interface 1 has no altsetting 0 [ 263.984163][ T5914] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 263.999017][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.008295][ T5914] usb 5-1: Product: syz [ 264.012538][ T5914] usb 5-1: Manufacturer: syz [ 264.017159][ T5914] usb 5-1: SerialNumber: syz [ 264.286979][ T5914] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 264.293698][ T5914] usb 5-1: No valid video chain found. [ 264.307594][ T5914] usb 5-1: selecting invalid altsetting 0 [ 264.340572][ T5914] usb 5-1: selecting invalid altsetting 0 [ 264.364886][ T5914] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 264.397432][ T5914] usb 5-1: USB disconnect, device number 50 [ 264.478794][ T10] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 264.681962][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 264.715140][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 264.743479][ T10] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 264.772597][ T10] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 264.799933][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.815232][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.826135][ T10] usb 8-1: Product: syz [ 264.842394][ T10] usb 8-1: Manufacturer: syz [ 264.860093][ T10] usb 8-1: SerialNumber: syz [ 264.883546][ T9312] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 264.891419][ T9331] /dev/rnullb0: Can't open blockdev [ 265.024379][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.5.934'. [ 265.112428][ T9312] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 265.121274][ T5854] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 265.126519][ T9312] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 265.131306][ T5854] Bluetooth: hci0: Injecting HCI hardware error event [ 265.146884][ T5850] Bluetooth: hci0: hardware error 0x00 [ 265.183258][ T5899] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 265.375824][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 265.384045][ T5899] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 265.396082][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.406900][ T5899] usb 5-1: config 0 has no interface number 0 [ 265.419022][ T5899] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 265.425575][ T9346] /dev/rnullb0: Can't open blockdev [ 265.428115][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.450323][ T5899] usb 5-1: Product: syz [ 265.454533][ T5899] usb 5-1: Manufacturer: syz [ 265.459178][ T5899] usb 5-1: SerialNumber: syz [ 265.474542][ T5899] usb 5-1: config 0 descriptor?? [ 265.492672][ T5899] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 265.499315][ T5899] usb 5-1: No valid video chain found. [ 265.576916][ T9312] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 265.584270][ T9312] /dev/rnullb0: Can't open blockdev [ 265.593848][ T10] cdc_ncm 8-1:1.0: failed GET_NTB_PARAMETERS [ 265.606573][ T10] cdc_ncm 8-1:1.0: bind() failure [ 265.630076][ T10] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 265.647759][ T10] cdc_ncm 8-1:1.1: bind() failure [ 265.662002][ T10] usb 8-1: USB disconnect, device number 16 [ 265.681260][ T5900] hid (null): global environment stack underflow [ 265.741118][ T5900] hid-generic 0ABE:80000000:0008.0018: global environment stack underflow [ 265.756461][ T5900] hid-generic 0ABE:80000000:0008.0018: item 0 0 1 11 parsing failed [ 265.776435][ T5900] hid-generic 0ABE:80000000:0008.0018: probe with driver hid-generic failed with error -22 [ 265.975360][ T5899] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 266.085942][ T10] usb 5-1: USB disconnect, device number 51 [ 266.136792][ T5899] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.150624][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 266.162148][ T9355] /dev/rnullb0: Can't open blockdev [ 266.172411][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 266.183814][ T5899] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 266.199010][ T5899] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 266.227453][ T5899] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 266.273872][ T5899] usb 2-1: Manufacturer: syz [ 266.322099][ T5899] usb 2-1: config 0 descriptor?? [ 266.392294][ T9359] /dev/rnullb0: Can't open blockdev [ 266.569860][ T9365] /dev/rnullb0: Can't open blockdev [ 266.628018][ T9366] /dev/rnullb0: Can't open blockdev [ 266.690719][ T5899] rc_core: IR keymap rc-hauppauge not found [ 266.701033][ T5899] Registered IR keymap rc-empty [ 266.721326][ T5899] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 266.756608][ T5899] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 266.806821][ T5899] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 266.878498][ T5899] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input27 [ 266.907512][ T5899] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 266.938795][ T9380] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 266.969771][ T5899] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 266.975006][ T9380] CIFS mount error: No usable UNC path provided in device string! [ 266.975006][ T9380] [ 266.987673][ T9380] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 267.000898][ T5899] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 267.032755][ T5899] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 267.078605][ T5899] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 267.122367][ T5899] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 267.170472][ T5899] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 267.208259][ T5899] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 267.236589][ T5899] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 267.246513][ T9387] /dev/rnullb0: Can't open blockdev [ 267.266054][ T9389] syz.4.949 (9389) used obsolete PPPIOCDETACH ioctl [ 267.274388][ T5899] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 267.328307][ T9385] /dev/rnullb0: Can't open blockdev [ 267.342771][ T5850] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 267.346819][ T5899] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 267.420663][ T5899] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 267.751349][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.5.951'. [ 267.889198][ T5900] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 267.908409][ T9410] netlink: 24 bytes leftover after parsing attributes in process `syz.7.954'. [ 268.050547][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.074115][ T5900] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 268.094794][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.136962][ T5900] usb 5-1: config 0 descriptor?? [ 268.424024][ T9422] /dev/rnullb0: Can't open blockdev [ 268.534199][ T9426] /dev/rnullb0: Can't open blockdev [ 268.591588][ T5900] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 268.634801][ T5900] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0019/input/input28 [ 268.861871][ T9398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.915719][ T9398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.936572][ T5914] usb 2-1: USB disconnect, device number 50 [ 268.970014][ T5900] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 269.027965][ T9398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.038973][ T9398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.249889][ T9433] /dev/rnullb0: Can't open blockdev [ 269.273659][ T9433] binder: binder_mmap: 9432 200000001000-20000000b000 bad vm_flags failed -1 [ 269.293671][ T5900] usb 5-1: USB disconnect, device number 52 [ 269.649178][ T9449] /dev/rnullb0: Can't open blockdev [ 269.789281][ T9456] /dev/rnullb0: Can't open blockdev [ 269.896696][ T9458] syz.5.970: attempt to access beyond end of device [ 269.896696][ T9458] loop5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 269.924006][ T9458] syz.5.970: attempt to access beyond end of device [ 269.924006][ T9458] loop5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 269.971034][ T9458] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 269.988169][ T9458] syz.5.970: attempt to access beyond end of device [ 269.988169][ T9458] loop5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 270.032186][ T9458] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 270.043848][ T9458] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 270.055567][ T9458] UDF-fs: Scanning with blocksize 512 failed [ 270.067807][ T9458] syz.5.970: attempt to access beyond end of device [ 270.067807][ T9458] loop5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 270.106968][ T9458] syz.5.970: attempt to access beyond end of device [ 270.106968][ T9458] loop5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 270.194727][ T9458] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 270.228045][ T9458] syz.5.970: attempt to access beyond end of device [ 270.228045][ T9458] loop5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 270.247207][ T9458] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 270.248602][ T9470] syzkaller1: entered promiscuous mode [ 270.258104][ T9458] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 270.271156][ T9458] UDF-fs: Scanning with blocksize 1024 failed [ 270.279753][ T9458] syz.5.970: attempt to access beyond end of device [ 270.279753][ T9458] loop5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 270.283179][ T9470] syzkaller1: entered allmulticast mode [ 270.297236][ T9458] syz.5.970: attempt to access beyond end of device [ 270.297236][ T9458] loop5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 270.343422][ T9458] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 270.373675][ T9458] syz.5.970: attempt to access beyond end of device [ 270.373675][ T9458] loop5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 270.387271][ T9458] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 270.410825][ T5900] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 270.451255][ T9458] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 270.469444][ T9458] UDF-fs: Scanning with blocksize 2048 failed [ 270.476751][ T9458] syz.5.970: attempt to access beyond end of device [ 270.476751][ T9458] loop5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 270.490110][ T9458] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 270.546686][ T9458] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 270.598033][ T9458] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 270.606987][ T9481] /dev/rnullb0: Can't open blockdev [ 270.607575][ T5900] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.630268][ T9458] UDF-fs: Scanning with blocksize 4096 failed [ 270.639242][ T5900] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 270.655968][ T9458] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 270.675892][ T5900] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 270.687356][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.696247][ T5900] usb 2-1: Product: syz [ 270.710111][ T5900] usb 2-1: Manufacturer: syz [ 270.720728][ T5900] usb 2-1: SerialNumber: syz [ 270.734600][ T5900] usb 2-1: config 0 descriptor?? [ 272.105591][ T9497] /dev/rnullb0: Can't open blockdev [ 272.224859][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.300722][ T9502] /dev/rnullb0: Can't open blockdev [ 272.309266][ T9502] /dev/rnullb0: Can't open blockdev [ 272.315911][ T9502] /dev/rnullb0: Can't open blockdev [ 272.322345][ T9502] /dev/rnullb0: Can't open blockdev [ 272.328552][ T9502] /dev/rnullb0: Can't open blockdev [ 272.335650][ T9502] /dev/rnullb0: Can't open blockdev [ 272.341946][ T9502] /dev/rnullb0: Can't open blockdev [ 272.348419][ T9502] /dev/rnullb0: Can't open blockdev [ 272.354521][ T9502] /dev/rnullb0: Can't open blockdev [ 272.361226][ T9502] /dev/rnullb0: Can't open blockdev [ 272.368767][ T9502] /dev/rnullb0: Can't open blockdev [ 272.374806][ T9502] /dev/rnullb0: Can't open blockdev [ 272.381099][ T9502] /dev/rnullb0: Can't open blockdev [ 272.386815][ T9502] /dev/rnullb0: Can't open blockdev [ 272.393159][ T9502] /dev/rnullb0: Can't open blockdev [ 272.401611][ T9502] /dev/rnullb0: Can't open blockdev [ 272.407574][ T9502] /dev/rnullb0: Can't open blockdev [ 272.413726][ T9502] /dev/rnullb0: Can't open blockdev [ 272.419752][ T9502] /dev/rnullb0: Can't open blockdev [ 272.426500][ T9502] /dev/rnullb0: Can't open blockdev [ 272.433176][ T9502] /dev/rnullb0: Can't open blockdev [ 272.439134][ T9502] /dev/rnullb0: Can't open blockdev [ 272.442085][ T5899] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 272.446167][ T9502] /dev/rnullb0: Can't open blockdev [ 272.458995][ T9502] /dev/rnullb0: Can't open blockdev [ 272.485968][ T9502] /dev/rnullb0: Can't open blockdev [ 272.491964][ T9502] /dev/rnullb0: Can't open blockdev [ 272.513315][ T9502] /dev/rnullb0: Can't open blockdev [ 272.519893][ T9506] /dev/rnullb0: Can't open blockdev [ 272.520011][ T9502] /dev/rnullb0: Can't open blockdev [ 272.545555][ T9502] /dev/rnullb0: Can't open blockdev [ 272.563101][ T9502] /dev/rnullb0: Can't open blockdev [ 272.587380][ T9502] /dev/rnullb0: Can't open blockdev [ 272.601361][ T9502] /dev/rnullb0: Can't open blockdev [ 272.607646][ T9502] /dev/rnullb0: Can't open blockdev [ 272.614003][ T9502] /dev/rnullb0: Can't open blockdev [ 272.621599][ T9502] /dev/rnullb0: Can't open blockdev [ 272.627598][ T9502] /dev/rnullb0: Can't open blockdev [ 272.633429][ T9502] /dev/rnullb0: Can't open blockdev [ 272.640406][ T9502] /dev/rnullb0: Can't open blockdev [ 272.645292][ T5899] usb 8-1: Using ep0 maxpacket: 16 [ 272.646811][ T9502] /dev/rnullb0: Can't open blockdev [ 272.656229][ T5899] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.656254][ T5899] usb 8-1: config 0 has no interfaces? [ 272.659594][ T5899] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 272.667620][ T9502] /dev/rnullb0: Can't open blockdev [ 272.678058][ T5899] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 272.682147][ T9502] /dev/rnullb0: Can't open blockdev [ 272.686446][ T5899] usb 8-1: Product: syz [ 272.704721][ T5899] usb 8-1: Manufacturer: syz [ 272.705456][ T9502] /dev/rnullb0: Can't open blockdev [ 272.714246][ T5899] usb 8-1: SerialNumber: syz [ 272.715913][ T9502] /dev/rnullb0: Can't open blockdev [ 272.730334][ T9502] /dev/rnullb0: Can't open blockdev [ 272.732243][ T5899] usb 8-1: config 0 descriptor?? [ 272.743092][ T9502] /dev/rnullb0: Can't open blockdev [ 272.755429][ T9502] /dev/rnullb0: Can't open blockdev [ 272.761494][ T9502] /dev/rnullb0: Can't open blockdev [ 272.768890][ T9502] /dev/rnullb0: Can't open blockdev [ 272.775733][ T9502] /dev/rnullb0: Can't open blockdev [ 272.781521][ T9502] /dev/rnullb0: Can't open blockdev [ 272.788503][ T9502] /dev/rnullb0: Can't open blockdev [ 272.794257][ T9502] /dev/rnullb0: Can't open blockdev [ 272.800265][ T9502] /dev/rnullb0: Can't open blockdev [ 272.806665][ T9502] /dev/rnullb0: Can't open blockdev [ 272.812502][ T9502] /dev/rnullb0: Can't open blockdev [ 272.819490][ T9502] /dev/rnullb0: Can't open blockdev [ 272.825294][ T9502] /dev/rnullb0: Can't open blockdev [ 272.831724][ T9502] /dev/rnullb0: Can't open blockdev [ 272.839167][ T9502] /dev/rnullb0: Can't open blockdev [ 272.845150][ T9502] /dev/rnullb0: Can't open blockdev [ 272.852949][ T9502] /dev/rnullb0: Can't open blockdev [ 272.860178][ T9502] /dev/rnullb0: Can't open blockdev [ 272.866336][ T9502] /dev/rnullb0: Can't open blockdev [ 272.872488][ T9502] /dev/rnullb0: Can't open blockdev [ 272.878210][ T9502] /dev/rnullb0: Can't open blockdev [ 272.971817][ T5860] usb 8-1: USB disconnect, device number 17 [ 273.000439][ T9511] /dev/rnullb0: Can't open blockdev [ 273.188952][ T9513] /dev/rnullb0: Can't open blockdev [ 273.316230][ T5900] usb 2-1: USB disconnect, device number 51 [ 273.564946][ T5860] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 273.719153][ T5860] usb 6-1: device descriptor read/64, error -71 [ 273.992107][ T5860] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 274.166210][ T5860] usb 6-1: device descriptor read/64, error -71 [ 274.286084][ T5860] usb usb6-port1: attempt power cycle [ 274.386211][ T9535] syzkaller1: entered promiscuous mode [ 274.392164][ T9535] syzkaller1: entered allmulticast mode [ 274.415972][ T9535] /dev/rnullb0: Can't open blockdev [ 274.676329][ T5860] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 274.720062][ T5860] usb 6-1: device descriptor read/8, error -71 [ 274.986408][ T5860] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 275.030608][ T5860] usb 6-1: device descriptor read/8, error -71 [ 275.158605][ T5860] usb usb6-port1: unable to enumerate USB device [ 275.190877][ T5850] Bluetooth: hci2: unexpected event for opcode 0x2035 [ 275.504693][ T9560] netlink: 57 bytes leftover after parsing attributes in process `syz.1.1005'. [ 275.581162][ T5860] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 275.746157][ T5860] usb 8-1: Using ep0 maxpacket: 16 [ 275.762515][ T5860] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.782972][ T5860] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 275.815546][ T5860] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 275.829115][ T5860] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 275.848343][ T5860] usb 8-1: Product: syz [ 275.853016][ T5860] usb 8-1: Manufacturer: syz [ 275.857653][ T5860] usb 8-1: SerialNumber: syz [ 275.885334][ T5860] usb 8-1: config 0 descriptor?? [ 276.114100][ T43] usb 8-1: USB disconnect, device number 18 [ 276.632253][ T9567] comedi comedi3: pcl816: I/O port conflict (0x4f27,16) [ 276.652996][ T9567] /dev/rnullb0: Can't open blockdev [ 276.686250][ T983] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 276.799403][ T9572] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 276.861952][ T9577] /dev/rnullb0: Can't open blockdev [ 276.907195][ T983] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.928552][ T983] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 276.953467][ T983] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 276.975043][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.018584][ T983] usb 2-1: config 0 descriptor?? [ 277.038102][ T9579] /dev/rnullb0: Can't open blockdev [ 277.078449][ T9584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1014'. [ 277.185442][ T9581] delete_channel: no stack [ 277.190268][ T9581] delete_channel: no stack [ 277.245862][ T983] Bluetooth: Can't get state to change to load ram patch err [ 277.272446][ T983] Bluetooth: Loading patch file failed [ 277.294506][ T983] ath3k 2-1:0.0: probe with driver ath3k failed with error -121 [ 277.465407][ T9565] hugetlbfs: Unknown parameter 'ÜizeÔhqg³¾"~¡H“8$rû7îµh4%ïg¬â£žn("' [ 277.507088][ T9565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.531328][ T9565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.627442][ T10] usb 2-1: USB disconnect, device number 52 [ 278.232299][ T30] audit: type=1326 audit(2000000041.839:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9599 comm="syz.7.1020" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f62db98e9a9 code=0x0 [ 278.333040][ T5907] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 278.524954][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 278.541651][ T5907] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.546949][ T5860] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 278.552248][ T5907] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 278.584307][ T5907] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 278.593983][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 278.602276][ T5907] usb 5-1: Product: syz [ 278.606500][ T5907] usb 5-1: Manufacturer: syz [ 278.612192][ T5907] usb 5-1: SerialNumber: syz [ 278.619604][ T5907] usb 5-1: config 0 descriptor?? [ 278.706683][ T5860] usb 2-1: device descriptor read/64, error -71 [ 278.835023][ T983] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 278.848711][ T5907] usb 5-1: USB disconnect, device number 53 [ 278.963649][ T5860] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 278.995282][ T983] usb 6-1: device descriptor read/64, error -71 [ 279.124209][ T5860] usb 2-1: device descriptor read/64, error -71 [ 279.203086][ T9613] /dev/rnullb0: Can't open blockdev [ 279.254502][ T983] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 279.262566][ T5860] usb usb2-port1: attempt power cycle [ 279.412400][ T983] usb 6-1: device descriptor read/64, error -71 [ 279.419354][ T9622] /dev/rnullb0: Can't open blockdev [ 279.487225][ T5850] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 279.496992][ T5850] Bluetooth: hci2: Injecting HCI hardware error event [ 279.506362][ T5850] Bluetooth: hci2: hardware error 0x00 [ 279.541876][ T983] usb usb6-port1: attempt power cycle [ 279.644461][ T5860] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 279.682773][ T5860] usb 2-1: device descriptor read/8, error -71 [ 279.878765][ T9628] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1030'. [ 279.919969][ T983] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 279.947289][ T5860] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 279.959152][ T983] usb 6-1: device descriptor read/8, error -71 [ 279.979560][ T5860] usb 2-1: device descriptor read/8, error -71 [ 280.097332][ T5860] usb usb2-port1: unable to enumerate USB device [ 280.224812][ T983] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 280.259800][ T983] usb 6-1: device descriptor read/8, error -71 [ 280.379950][ T9639] /dev/rnullb0: Can't open blockdev [ 280.387933][ T983] usb usb6-port1: unable to enumerate USB device [ 280.456909][ T9642] /dev/rnullb0: Can't open blockdev [ 280.848415][ T5900] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 281.015821][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 281.022604][ T5900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.033196][ T5900] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 281.044697][ T5900] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 281.055345][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 281.063684][ T5900] usb 5-1: Product: syz [ 281.067971][ T5900] usb 5-1: Manufacturer: syz [ 281.072735][ T5900] usb 5-1: SerialNumber: syz [ 281.080564][ T5900] usb 5-1: config 0 descriptor?? [ 281.309270][ T983] usb 5-1: USB disconnect, device number 54 [ 281.579590][ T9663] /dev/rnullb0: Can't open blockdev [ 281.710761][ T5850] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 281.757127][ T9667] /dev/rnullb0: Can't open blockdev [ 282.020550][ T9673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1045'. [ 282.101125][ T9673] /dev/rnullb0: Can't open blockdev [ 282.213161][ T983] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 282.407998][ T983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.432083][ T983] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 282.461351][ T983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.503490][ T983] usb 6-1: config 0 descriptor?? [ 282.758414][ T5860] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 282.929453][ T5860] usb 2-1: Using ep0 maxpacket: 32 [ 282.942168][ T5860] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 282.952563][ T5860] usb 2-1: config 0 has no interface number 0 [ 282.960351][ T9693] /dev/rnullb0: Can't open blockdev [ 282.969500][ T983] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 282.983645][ T5860] usb 2-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=a8.3c [ 282.999473][ T983] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.001A/input/input29 [ 283.022709][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.036366][ T5860] usb 2-1: Product: syz [ 283.040580][ T5860] usb 2-1: Manufacturer: syz [ 283.056252][ T5860] usb 2-1: SerialNumber: syz [ 283.085931][ T5860] usb 2-1: config 0 descriptor?? [ 283.329337][ T5860] mos7840 2-1:0.186: required endpoints missing [ 283.485488][ T5936] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 283.518444][ T9672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.567331][ T983] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 283.588551][ T9672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.617491][ T43] usb 2-1: USB disconnect, device number 57 [ 283.657654][ T9672] /dev/rnullb0: Can't open blockdev [ 283.699277][ T5936] usb 8-1: Using ep0 maxpacket: 16 [ 283.711656][ T5936] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 283.757111][ T983] usb 6-1: USB disconnect, device number 35 [ 283.767746][ T5936] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 283.799298][ T5936] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 283.816968][ T5936] usb 8-1: Product: syz [ 283.838136][ T5936] usb 8-1: Manufacturer: syz [ 283.852898][ T5936] usb 8-1: SerialNumber: syz [ 283.873262][ T5936] usb 8-1: config 0 descriptor?? [ 283.909398][ T9700] fido_id[9700]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 284.115931][ T983] usb 8-1: USB disconnect, device number 19 [ 284.259061][ T9708] /dev/rnullb0: Can't open blockdev [ 284.575546][ T9714] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 284.906806][ T9720] syzkaller1: entered promiscuous mode [ 284.912961][ T9720] syzkaller1: entered allmulticast mode [ 285.311447][ T9733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.390548][ T5854] Bluetooth: hci3: command 0x040f tx timeout [ 285.432663][ T9735] /dev/rnullb0: Can't open blockdev [ 285.471442][ T9739] /dev/rnullb0: Can't open blockdev [ 285.480370][ T9740] Invalid source name [ 285.487684][ T9740] UBIFS error (pid: 9740): cannot open "usrquota", error -22 [ 285.563758][ T9744] tmpfs: Bad value for 'mpol' [ 285.586367][ T9744] /dev/rnullb0: Can't open blockdev [ 285.694286][ T9748] netlink: 'syz.1.1075': attribute type 29 has an invalid length. [ 285.736746][ T9754] /dev/rnullb0: Can't open blockdev [ 286.307731][ T983] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 286.480963][ T983] usb 5-1: Using ep0 maxpacket: 16 [ 286.512491][ T983] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 286.544433][ T983] usb 5-1: config 0 has no interface number 0 [ 286.556173][ T983] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 286.574971][ T983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.593508][ T983] usb 5-1: Product: syz [ 286.598692][ T983] usb 5-1: Manufacturer: syz [ 286.603329][ T983] usb 5-1: SerialNumber: syz [ 286.618407][ T983] usb 5-1: config 0 descriptor?? [ 286.628204][ T983] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 286.737799][ T9780] /dev/rnullb0: Can't open blockdev [ 286.791535][ T5907] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 286.895675][ T5900] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 286.965684][ T5907] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.977288][ T5907] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 286.987337][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.998407][ T5907] usb 2-1: config 0 descriptor?? [ 287.008681][ T5907] pwc: Askey VC010 type 2 USB webcam detected. [ 287.073061][ T5900] usb 6-1: config 0 has an invalid interface number: 9 but max is 0 [ 287.099550][ T5900] usb 6-1: config 0 has no interface number 0 [ 287.106240][ T5900] usb 6-1: config 0 interface 9 altsetting 132 endpoint 0x6 has invalid wMaxPacketSize 0 [ 287.141710][ T5900] usb 6-1: config 0 interface 9 altsetting 132 has an endpoint descriptor with address 0x31, changing to 0x1 [ 287.194806][ T5900] usb 6-1: config 0 interface 9 altsetting 132 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 287.224841][ T5900] usb 6-1: config 0 interface 9 has no altsetting 0 [ 287.242455][ T5900] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 287.256080][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.278706][ T5900] usb 6-1: Product: syz [ 287.282913][ T9765] /dev/rnullb0: Can't open blockdev [ 287.292970][ T983] gspca_spca1528: reg_w err -71 [ 287.306359][ T5900] usb 6-1: Manufacturer: syz [ 287.332705][ T5900] usb 6-1: SerialNumber: syz [ 287.345762][ T983] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 287.349267][ T5900] usb 6-1: config 0 descriptor?? [ 287.373944][ T983] usb 5-1: USB disconnect, device number 55 [ 287.378441][ T9795] ./file0: Can't lookup blockdev [ 287.438708][ T5907] pwc: recv_control_msg error -32 req 02 val 2b00 [ 287.452939][ T5907] pwc: recv_control_msg error -32 req 02 val 2700 [ 287.469586][ T5907] pwc: recv_control_msg error -32 req 02 val 2c00 [ 287.480607][ T5907] pwc: recv_control_msg error -32 req 04 val 1000 [ 287.490697][ T5907] pwc: recv_control_msg error -32 req 04 val 1300 [ 287.500389][ T5907] pwc: recv_control_msg error -32 req 04 val 1400 [ 287.513971][ T5907] pwc: recv_control_msg error -32 req 02 val 2000 [ 287.586255][ T9778] /dev/rnullb0: Can't open blockdev [ 287.611365][ T5900] ftdi_sio 6-1:0.9: FTDI USB Serial Device converter detected [ 287.637259][ T5900] usb 6-1: Detected SIO [ 287.641544][ T5900] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 6 [ 287.662141][ T5900] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 287.691681][ T5900] usb 6-1: USB disconnect, device number 36 [ 287.703384][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1094'. [ 287.722315][ T5900] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 287.752775][ T9776] /dev/rnullb0: Can't open blockdev [ 287.753564][ T5900] ftdi_sio 6-1:0.9: device disconnected [ 287.767205][ T5907] pwc: recv_control_msg error -71 req 04 val 1500 [ 287.776608][ T5907] pwc: recv_control_msg error -71 req 02 val 2500 [ 287.800376][ T5907] pwc: recv_control_msg error -71 req 02 val 2400 [ 287.816050][ T5907] pwc: recv_control_msg error -71 req 02 val 2600 [ 287.828753][ T5907] pwc: recv_control_msg error -71 req 02 val 2900 [ 287.847623][ T5907] pwc: recv_control_msg error -71 req 02 val 2800 [ 287.854908][ T5907] pwc: recv_control_msg error -71 req 04 val 1100 [ 287.862059][ T5907] pwc: recv_control_msg error -71 req 04 val 1200 [ 287.890460][ T5907] pwc: Registered as video103. [ 287.903012][ T5907] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input30 [ 287.966235][ T5907] usb 2-1: USB disconnect, device number 58 [ 287.972718][ T9804] netlink: 'syz.4.1095': attribute type 25 has an invalid length. [ 288.675684][ T9817] /dev/rnullb0: Can't open blockdev [ 288.738854][ T9815] /dev/rnullb0: Can't open blockdev [ 288.893228][ T9825] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1103'. [ 289.054944][ T9837] /dev/rnullb0: Can't open blockdev [ 289.078146][ T9839] /dev/rnullb0: Can't open blockdev [ 289.232472][ T9842] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1108'. [ 289.254911][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1110'. [ 289.317533][ T9849] /dev/rnullb0: Can't open blockdev [ 289.442005][ T9855] /dev/rnullb0: Can't open blockdev [ 289.545132][ T9860] /dev/rnullb0: Can't open blockdev [ 289.652860][ T9867] /dev/rnullb0: Can't open blockdev [ 289.702146][ T9870] /dev/rnullb0: Can't open blockdev [ 289.766005][ T9871] /dev/rnullb0: Can't open blockdev [ 289.787993][ T9873] /dev/rnullb0: Can't open blockdev [ 289.828277][ T9878] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode [ 289.835887][ T9878] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode [ 289.999880][ T9883] /dev/rnullb0: Can't open blockdev [ 290.666343][ T9900] /dev/rnullb0: Can't open blockdev [ 290.912842][ T9911] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 290.922891][ T9912] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 291.452663][ T9920] /dev/rnullb0: Can't open blockdev [ 291.492167][ T9923] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 291.730123][ T983] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 291.911780][ T983] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.932758][ T983] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 291.942756][ T983] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.956012][ T983] usb 8-1: config 0 descriptor?? [ 292.022431][ T9937] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1139'. [ 292.397156][ T983] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 292.434240][ T983] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.001B/input/input31 [ 292.552061][ T5936] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 292.638486][ T9919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.683093][ T9919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.752705][ T983] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 292.861656][ T9919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.932026][ T9919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.974651][ T5914] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 293.143582][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.277938][ T5914] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 293.312572][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.321156][ T5907] usb 8-1: USB disconnect, device number 20 [ 293.346822][ T5914] usb 5-1: config 0 descriptor?? [ 293.804219][ T5914] hid_parser_main: 124 callbacks suppressed [ 293.804246][ T5914] wacom 0003:056A:0331.001C: unknown main item tag 0x2 [ 294.006976][ T9935] /dev/rnullb0: Can't open blockdev [ 294.030321][ T5914] usb 5-1: USB disconnect, device number 56 [ 294.062682][ T9960] Malformed UNC in devname [ 294.062682][ T9960] [ 294.121322][ T9960] CIFS: VFS: Malformed UNC in devname [ 294.468516][ T9976] ./cgroup: Can't lookup blockdev [ 295.032871][ T5900] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 295.214254][ T5900] usb 8-1: Using ep0 maxpacket: 32 [ 295.236989][ T5900] usb 8-1: config 0 has an invalid interface number: 146 but max is 0 [ 295.256532][ T5900] usb 8-1: config 0 has no interface number 0 [ 295.262730][ T5900] usb 8-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 295.296985][ T5900] usb 8-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 295.344834][ T5900] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 295.392719][ T5900] usb 8-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 295.420653][ T5900] usb 8-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 295.449737][ T5900] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 295.469507][ T5900] usb 8-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 295.479516][ T5900] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 295.499448][ T5900] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 295.523033][ T5900] usb 8-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.546511][ T5900] usb 8-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 295.572934][ T5900] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.584490][ T5900] usb 8-1: Product: syz [ 295.595714][ T5900] usb 8-1: Manufacturer: syz [ 295.602100][ T5900] usb 8-1: SerialNumber: syz [ 295.620803][ T5900] usb 8-1: config 0 descriptor?? [ 295.626882][ T9983] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 295.629670][ T9998] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1152'. [ 295.643669][ T983] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 295.648515][ T5900] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 295.663429][ T5900] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 295.811846][ T983] usb 6-1: Using ep0 maxpacket: 16 [ 295.829195][ T983] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 295.842695][ T983] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 295.853139][ T983] usb 6-1: Product: syz [ 295.865141][ T983] usb 6-1: Manufacturer: syz [ 295.878779][ T9983] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 295.879852][ T983] usb 6-1: SerialNumber: syz [ 295.885892][ T9983] /dev/rnullb0: Can't open blockdev [ 295.912486][ T983] usb 6-1: config 0 descriptor?? [ 295.946854][ T5900] usb 8-1: USB disconnect, device number 21 [ 296.143949][ T983] usb 6-1: USB disconnect, device number 37 [ 296.197199][ T5936] usb 2-1: device descriptor read/64, error -71 [ 296.453085][ T5936] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 296.496646][T10012] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1155'. [ 296.514163][T10012] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.565502][T10015] /dev/rnullb0: Can't open blockdev [ 296.616263][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.629916][ T5936] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 296.658916][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.678147][ T5936] usb 2-1: config 0 descriptor?? [ 296.845775][T10023] netlink: 'syz.7.1159': attribute type 3 has an invalid length. [ 296.865025][T10023] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1159'. [ 297.129134][ T5936] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 297.190366][ T5936] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.001D/input/input32 [ 297.342163][T10003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.352326][T10003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.420189][T10003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.444632][ T5936] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 297.452959][T10003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.670035][T10030] x_tables: duplicate underflow at hook 1 [ 297.724277][T10033] team_slave_1: entered promiscuous mode [ 297.782588][ T5900] usb 2-1: USB disconnect, device number 60 [ 297.798287][T10032] C: renamed from team_slave_0 [ 297.825223][T10034] /dev/rnullb0: Can't open blockdev [ 297.884947][T10032] netlink: 'syz.5.1161': attribute type 2 has an invalid length. [ 297.927710][T10032] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1161'. [ 298.002797][T10032] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 298.112382][T10036] /dev/rnullb0: Can't open blockdev [ 298.166886][T10038] /dev/rnullb0: Can't open blockdev [ 298.318798][T10040] /dev/rnullb0: Can't open blockdev [ 298.335590][T10042] /dev/rnullb0: Can't open blockdev [ 298.458008][T10047] nfs: Unknown parameter 'defcontext' [ 298.502550][T10051] /dev/rnullb0: Can't open blockdev [ 298.612808][ T5914] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 298.710581][T10060] /dev/rnullb0: Can't open blockdev [ 298.794360][ T5914] usb 8-1: Using ep0 maxpacket: 16 [ 298.807893][ T5914] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 298.817666][ T5914] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 298.825799][ T5914] usb 8-1: Product: syz [ 298.845851][ T5914] usb 8-1: Manufacturer: syz [ 298.867421][ T5914] usb 8-1: SerialNumber: syz [ 298.884035][ T5914] usb 8-1: config 0 descriptor?? [ 299.135609][ T5914] usb 8-1: USB disconnect, device number 22 [ 299.168149][T10072] qnx4: no qnx4 filesystem (no root dir). [ 299.457178][ T5900] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 299.465082][T10084] binder: Binderfs stats mode cannot be changed during a remount [ 299.645176][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.669195][ T5900] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 299.711470][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.736928][ T5900] usb 5-1: config 0 descriptor?? [ 299.756752][ T5914] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 299.936115][ T5914] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 299.957242][ T5914] usb 6-1: config 0 has no interface number 0 [ 299.970339][ T5914] usb 6-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 255 [ 300.015334][ T5914] usb 6-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 300.042240][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.062801][ T5914] usb 6-1: config 0 descriptor?? [ 300.095867][T10086] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 300.190237][ T5900] keytouch 0003:0926:3333.001E: fixing up Keytouch IEC report descriptor [ 300.206648][ T6594] udevd[6594]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.230273][ T5900] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001E/input/input33 [ 300.358271][ T5914] usb 6-1: USB disconnect, device number 38 [ 300.396190][T10070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.424391][ T5900] keytouch 0003:0926:3333.001E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 300.455077][T10070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.516067][T10070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.566360][T10070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.787667][T10104] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1187'. [ 300.814533][ T5860] usb 5-1: USB disconnect, device number 57 [ 301.270504][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1196'. [ 301.281540][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1196'. [ 301.371122][ T5915] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 301.464304][T10137] /dev/sg0: Can't lookup blockdev [ 301.555498][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 301.572724][ T5915] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 301.578892][T10139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.594866][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 301.599089][T10139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.616494][ T5915] usb 2-1: Product: syz [ 301.621111][ T5915] usb 2-1: Manufacturer: syz [ 301.625732][ T5915] usb 2-1: SerialNumber: syz [ 301.647394][ T5915] usb 2-1: config 0 descriptor?? [ 301.812844][T10143] /dev/rnullb0: Can't open blockdev [ 301.823254][ T5860] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 301.899507][ T983] usb 2-1: USB disconnect, device number 61 [ 301.989213][T10145] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1201'. [ 301.998662][ T5860] usb 5-1: Using ep0 maxpacket: 8 [ 302.007503][ T5860] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 302.016877][ T5860] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 302.026491][ T5860] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 302.036004][ T5860] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 302.047280][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 302.058670][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 302.086991][ T5860] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 302.292214][ T5860] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 302.313610][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.321686][ T5860] usb 5-1: Product: syz [ 302.333462][ T5860] usb 5-1: Manufacturer: syz [ 302.343787][ T5860] usb 5-1: SerialNumber: syz [ 302.351374][ T5860] usb 5-1: config 0 descriptor?? [ 302.353409][T10155] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1204'. [ 302.382310][T10155] /dev/rnullb0: Can't open blockdev [ 302.431267][ T5860] hub 5-1:0.0: bad descriptor, ignoring hub [ 302.437332][ T5860] hub 5-1:0.0: probe with driver hub failed with error -5 [ 302.451749][ T5860] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input34 [ 302.651273][T10157] netlink: 'syz.1.1205': attribute type 10 has an invalid length. [ 302.678560][T10157] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1205'. [ 302.693290][T10157] dummy0: entered promiscuous mode [ 302.726828][T10157] bridge0: port 3(dummy0) entered blocking state [ 302.731610][T10160] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 302.742586][T10160] /dev/rnullb0: Can't open blockdev [ 302.748747][T10161] /dev/rnullb0: Can't open blockdev [ 302.749142][T10157] bridge0: port 3(dummy0) entered disabled state [ 302.762800][T10157] dummy0: entered allmulticast mode [ 302.770857][T10157] bridge0: port 3(dummy0) entered blocking state [ 302.777780][T10157] bridge0: port 3(dummy0) entered forwarding state [ 302.960127][ T5915] usb 5-1: USB disconnect, device number 58 [ 303.028248][ T5900] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 303.155879][ T30] audit: type=1326 audit(2000000065.150:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10172 comm="syz.4.1209" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3720b8e9a9 code=0x0 [ 303.233725][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.251219][ T5900] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 303.277396][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.307729][ T5900] usb 6-1: config 0 descriptor?? [ 303.605863][ T5915] usb 5-1: new low-speed USB device number 59 using dummy_hcd [ 303.749296][ T5900] keytouch 0003:0926:3333.001F: fixing up Keytouch IEC report descriptor [ 303.770165][ T5900] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.001F/input/input35 [ 303.804364][ T5915] usb 5-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 303.818416][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.839005][ T5915] usb 5-1: config 0 descriptor?? [ 303.884968][ T5915] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 303.910636][ T5900] keytouch 0003:0926:3333.001F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 303.961605][T10165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.981764][T10165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.026776][T10165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.047894][T10165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.302779][T10176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1209'. [ 304.304492][ T5900] usb 6-1: USB disconnect, device number 39 [ 304.406962][ T5914] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 304.620989][ T5914] usb 8-1: Using ep0 maxpacket: 16 [ 304.639120][ T5914] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 304.657093][ T5914] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 304.667574][ T5914] usb 8-1: Product: syz [ 304.671898][ T5914] usb 8-1: Manufacturer: syz [ 304.676974][ T5914] usb 8-1: SerialNumber: syz [ 304.694499][ T5914] usb 8-1: config 0 descriptor?? [ 304.931135][ T5914] usb 8-1: USB disconnect, device number 23 [ 305.128142][T10198] /dev/rnullb0: Can't open blockdev [ 305.358201][T10202] /dev/rnullb0: Can't open blockdev [ 305.654477][T10209] /dev/rnullb0: Can't open blockdev [ 305.872117][T10216] team0: No ports can be present during mode change [ 305.903273][T10216] netlink: 196 bytes leftover after parsing attributes in process `syz.7.1223'. [ 305.958028][ T5850] Bluetooth: hci4: unexpected event 0x06 length: 5 > 3 [ 306.450266][ T5915] pwc: send_video_command error -71 [ 306.494304][ T5915] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 306.524211][ T5915] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 306.582386][ T5915] usb 5-1: USB disconnect, device number 59 [ 306.625344][T10228] /dev/rnullb0: Can't open blockdev [ 306.705434][ T5860] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 306.865888][ T5860] usb 6-1: device descriptor read/64, error -71 [ 307.058177][ T5915] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 307.122279][ T5860] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 307.222286][ T5915] usb 8-1: Using ep0 maxpacket: 16 [ 307.243249][ T5915] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 307.263596][ T5915] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 307.283208][ T5860] usb 6-1: device descriptor read/64, error -71 [ 307.290095][ T5915] usb 8-1: Product: syz [ 307.294594][ T5915] usb 8-1: Manufacturer: syz [ 307.312326][ T5915] usb 8-1: SerialNumber: syz [ 307.326623][ T5915] usb 8-1: config 0 descriptor?? [ 307.423823][ T5860] usb usb6-port1: attempt power cycle [ 307.579474][ T5914] usb 8-1: USB disconnect, device number 24 [ 307.795907][ T5860] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 307.847345][T10239] /dev/rnullb0: Can't open blockdev [ 307.855908][ T5860] usb 6-1: device descriptor read/8, error -71 [ 308.116539][ T5860] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 308.145805][ T5860] usb 6-1: device descriptor read/8, error -71 [ 308.287590][ T5860] usb usb6-port1: unable to enumerate USB device [ 308.310650][T10250] /dev/rnullb0: Can't open blockdev [ 308.714793][T10260] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1238'. [ 309.162750][T10277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1243'. [ 309.173714][T10277] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 309.182569][T10277] /dev/rnullb0: Can't open blockdev [ 309.299242][T10281] /dev/rnullb0: Can't open blockdev [ 309.517098][ T5860] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 309.663734][T10287] /dev/rnullb0: Can't open blockdev [ 309.691073][ T5860] usb 5-1: Using ep0 maxpacket: 16 [ 309.710315][ T5860] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 309.719422][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 309.731027][ T5860] usb 5-1: Product: syz [ 309.735241][ T5860] usb 5-1: Manufacturer: syz [ 309.739949][ T5860] usb 5-1: SerialNumber: syz [ 309.753509][ T5860] usb 5-1: config 0 descriptor?? [ 309.985173][ T5860] usb 5-1: USB disconnect, device number 60 [ 310.578100][T10312] /dev/rnullb0: Can't open blockdev [ 310.588910][T10312] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1255'. [ 310.630638][ T5860] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 310.654125][T10314] /dev/rnullb0: Can't open blockdev [ 310.821986][ T5860] usb 6-1: Using ep0 maxpacket: 8 [ 310.832211][ T5860] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 310.842140][ T5860] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 310.852676][ T5860] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 310.863131][ T5860] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 310.876314][ T5860] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 310.885410][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.056557][ T983] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 311.120074][ T5860] usb 6-1: GET_CAPABILITIES returned 0 [ 311.125653][ T5860] usbtmc 6-1:16.0: can't read capabilities [ 311.241397][ T983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.252533][ T983] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 311.267241][ T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.278271][ T983] usb 5-1: config 0 descriptor?? [ 311.541325][T10324] /dev/rnullb0: Can't open blockdev [ 311.555867][T10324] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 311.632891][ T5860] usb 6-1: USB disconnect, device number 44 [ 311.739112][ T983] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 311.769637][ T983] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0020/input/input36 [ 311.872794][T10333] netlink: 'syz.1.1264': attribute type 44 has an invalid length. [ 311.912536][ T983] keytouch 0003:0926:3333.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 311.936139][T10318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.967738][T10318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.015848][T10318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.047323][T10318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.221808][ T5900] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 312.301825][ T5915] usb 5-1: USB disconnect, device number 61 [ 312.396485][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 312.424607][ T5900] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 312.442567][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 312.451193][ T5900] usb 2-1: Product: syz [ 312.455402][ T5900] usb 2-1: Manufacturer: syz [ 312.460113][ T5900] usb 2-1: SerialNumber: syz [ 312.480802][ T5900] usb 2-1: config 0 descriptor?? [ 312.499776][ T5850] Bluetooth: hci4: command 0x0406 tx timeout [ 312.799193][T10334] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1264'. [ 312.808196][T10334] netlink: 396 bytes leftover after parsing attributes in process `syz.1.1264'. [ 312.850069][ T5900] usb 2-1: USB disconnect, device number 62 [ 313.035896][T10344] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1268' sets config #511 [ 313.273006][T10350] /dev/rnullb0: Can't open blockdev [ 313.286528][T10350] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1271'. [ 313.399145][T10354] /dev/rnullb0: Can't open blockdev [ 313.595142][T10360] /dev/rnullb0: Can't open blockdev [ 313.781036][ T983] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 313.866626][T10365] /dev/rnullb0: Can't open blockdev [ 313.959914][T10370] /dev/rnullb0: Can't open blockdev [ 314.135359][ T983] usb 2-1: Using ep0 maxpacket: 16 [ 314.173360][ T983] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 314.183875][ T983] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 314.192554][ T983] usb 2-1: Product: syz [ 314.196764][ T983] usb 2-1: Manufacturer: syz [ 314.223036][ T983] usb 2-1: SerialNumber: syz [ 314.236513][ T983] usb 2-1: config 0 descriptor?? [ 314.464371][ T5860] usb 2-1: USB disconnect, device number 63 [ 314.606005][ T983] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 314.787562][ T983] usb 6-1: Using ep0 maxpacket: 16 [ 314.808357][ T983] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 314.825763][ T983] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 314.835521][ T983] usb 6-1: Product: syz [ 314.840126][ T983] usb 6-1: Manufacturer: syz [ 314.867285][ T983] usb 6-1: SerialNumber: syz [ 314.892959][ T983] usb 6-1: config 0 descriptor?? [ 314.918388][T10385] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1284'. [ 315.134716][ T5936] usb 6-1: USB disconnect, device number 45 [ 315.237374][ T983] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 315.248286][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1286'. [ 315.503147][ T983] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 315.511399][ T983] usb 8-1: config 0 has no interface number 0 [ 315.525440][ T983] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 315.540019][ T983] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 1032, setting to 1024 [ 315.563407][ T983] usb 8-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 315.578664][ T983] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.612182][ T983] usb 8-1: config 0 descriptor?? [ 315.629026][T10390] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 315.657077][T10411] /dev/rnullb0: Can't open blockdev [ 315.970982][ T5936] IPVS: starting estimator thread 0... [ 315.990191][T10423] IPVS: ip_vs_add_dest(): server weight less than zero [ 316.092954][T10424] IPVS: using max 27 ests per chain, 64800 per kthread [ 316.122027][ T5900] hid-generic 00A0:0008:0003.0022: unknown main item tag 0x0 [ 316.130498][ T983] input: HID 04d9:a055 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:04D9:A055.0021/input/input37 [ 316.149259][ T5900] hid-generic 00A0:0008:0003.0022: unknown main item tag 0x0 [ 316.176618][ T5900] hid-generic 00A0:0008:0003.0022: unknown main item tag 0x0 [ 316.209304][ T5900] hid-generic 00A0:0008:0003.0022: unknown main item tag 0x0 [ 316.217099][ T5900] hid-generic 00A0:0008:0003.0022: unknown main item tag 0x0 [ 316.236846][ T5900] hid-generic 00A0:0008:0003.0022: unknown main item tag 0x0 [ 316.258326][ T5900] hid-generic 00A0:0008:0003.0022: unknown main item tag 0x0 [ 316.281600][ T983] holtek_kbd 0003:04D9:A055.0021: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.7-1/input1 [ 316.322240][T10382] input: syz1 as /devices/virtual/input/input38 [ 316.408430][ T5900] hid-generic 00A0:0008:0003.0022: unknown main item tag 0x0 [ 316.449379][ T5900] hid-generic 00A0:0008:0003.0022: unknown main item tag 0x0 [ 316.472505][ T5900] hid-generic 00A0:0008:0003.0022: unknown main item tag 0x0 [ 316.499630][ T5900] hid-generic 00A0:0008:0003.0022: hidraw1: HID v0.05 Device [syz1] on syz0 [ 316.537656][ T983] usb 8-1: USB disconnect, device number 25 [ 316.569861][T10430] fido_id[10430]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 316.792144][T10428] /dev/rnullb0: Can't open blockdev [ 316.854127][T10433] /dev/rnullb0: Can't open blockdev [ 316.928910][T10437] /dev/rnullb0: Can't open blockdev [ 316.939750][ T30] audit: type=1326 audit(2000000078.049:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.4.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3720b8e9a9 code=0x7fc00000 [ 316.976161][ T30] audit: type=1326 audit(2000000078.049:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.4.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3720b8e9a9 code=0x7fc00000 [ 317.009739][ T30] audit: type=1326 audit(2000000078.049:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.4.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3720b8e9a9 code=0x7fc00000 [ 317.041515][ T30] audit: type=1326 audit(2000000078.049:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.4.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3720b8e9a9 code=0x7fc00000 [ 317.079973][ T30] audit: type=1326 audit(2000000078.049:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.4.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3720b8e9a9 code=0x7fc00000 [ 317.117490][ T30] audit: type=1326 audit(2000000078.049:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.4.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3720b8e9a9 code=0x7fc00000 [ 317.158541][ T30] audit: type=1326 audit(2000000078.049:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.4.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3720b8e9a9 code=0x7fc00000 [ 317.194243][ T30] audit: type=1326 audit(2000000078.049:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.4.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3720b8e9a9 code=0x7fc00000 [ 317.276662][T10443] Bluetooth: MGMT ver 1.23 [ 317.287004][ T30] audit: type=1326 audit(2000000078.049:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.4.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3720b8e9a9 code=0x7fc00000 [ 317.318536][ T30] audit: type=1326 audit(2000000078.049:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.4.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3720b8e9a9 code=0x7fc00000 [ 317.374755][ T5900] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 317.419467][T10443] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 317.459237][T10446] /dev/rnullb0: Can't open blockdev [ 317.537091][ T5900] usb 6-1: Using ep0 maxpacket: 16 [ 317.548897][ T5900] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 317.566571][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 317.682765][ T983] IPVS: starting estimator thread 0... [ 317.781594][T10452] IPVS: using max 27 ests per chain, 64800 per kthread [ 317.834240][ T5900] usb 6-1: Product: syz [ 317.838457][ T5900] usb 6-1: Manufacturer: syz [ 317.843084][ T5900] usb 6-1: SerialNumber: syz [ 317.878380][ T5900] usb 6-1: config 0 descriptor?? [ 318.121559][ T5907] usb 6-1: USB disconnect, device number 46 [ 318.371193][ T983] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 318.422601][T10462] /dev/rnullb0: Can't open blockdev [ 318.539853][ T983] usb 2-1: Using ep0 maxpacket: 16 [ 318.547529][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.561902][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.571697][ T983] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.594073][ T983] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 318.606213][ T983] usb 2-1: New USB device strings: Mfr=225, Product=0, SerialNumber=0 [ 318.614449][ T983] usb 2-1: Manufacturer: syz [ 318.626941][ T983] usb 2-1: config 0 descriptor?? [ 318.921842][T10475] /dev/rnullb0: Can't open blockdev [ 319.114867][T10481] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 319.122868][T10481] /dev/rnullb0: Can't open blockdev [ 319.128175][ T5900] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 319.293695][ T5900] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.307455][ T5900] usb 8-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 319.310349][T10460] /dev/rnullb0: Can't open blockdev [ 319.328324][T10460] overlay: Unknown parameter 'obj_user' [ 319.333968][ T5900] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.347133][T10460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.350972][ T5900] usb 8-1: config 0 descriptor?? [ 319.367869][T10460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.381046][ T983] usbhid 2-1:0.0: can't add hid device: -71 [ 319.392838][ T983] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 319.406182][ T5860] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 319.421688][ T983] usb 2-1: USB disconnect, device number 64 [ 319.460666][ T43] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 319.587779][ T5860] usb 6-1: Using ep0 maxpacket: 8 [ 319.599597][ T5860] usb 6-1: unable to get BOS descriptor or descriptor too short [ 319.608642][ T5860] usb 6-1: config 1 interface 0 has no altsetting 0 [ 319.618555][ T5860] usb 6-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 319.627792][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.636004][ T5860] usb 6-1: Product: syz [ 319.640507][ T5860] usb 6-1: Manufacturer: syz [ 319.645813][ T5860] usb 6-1: SerialNumber: syz [ 319.651247][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.663845][ T43] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 319.676783][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.698250][ T43] usb 5-1: config 0 descriptor?? [ 320.039062][T10473] /dev/rnullb0: Can't open blockdev [ 320.047028][ T5907] usb 8-1: USB disconnect, device number 26 [ 320.141994][ T43] keytouch 0003:0926:3333.0024: fixing up Keytouch IEC report descriptor [ 320.169547][ T43] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0024/input/input39 [ 320.268085][ T43] keytouch 0003:0926:3333.0024: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 320.364650][T10483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.380824][T10483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.400164][ T5900] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 320.407929][T10483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.422296][T10483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.560396][ T5900] usb 2-1: device descriptor read/64, error -71 [ 320.661398][ T5915] usb 5-1: USB disconnect, device number 62 [ 320.816963][ T5900] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 320.956017][ T5900] usb 2-1: device descriptor read/64, error -71 [ 321.078676][ T5900] usb usb2-port1: attempt power cycle [ 321.305475][T10495] can0: slcan on ttyS3. [ 321.375037][T10495] can0 (unregistered): slcan off ttyS3. [ 321.380737][T10497] trusted_key: syz.4.1320 sent an empty control message without MSG_MORE. [ 321.463264][ T5900] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 321.502118][T10495] ufs: You didn't specify the type of your ufs filesystem [ 321.502118][T10495] [ 321.502118][T10495] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 321.502118][T10495] [ 321.502118][T10495] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 321.533257][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.554251][ T5900] usb 2-1: device descriptor read/8, error -71 [ 321.576039][T10495] ufs: ufstype=old is supported read-only [ 321.592215][T10500] tmpfs: Invalid uid '0x00000000ffffffff' [ 321.600441][T10501] /dev/rnullb0: Can't open blockdev [ 321.607161][T10495] bio_check_eod: 2 callbacks suppressed [ 321.607177][T10495] syz.4.1320: attempt to access beyond end of device [ 321.607177][T10495] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 321.758660][T10508] AppArmor: change_hat: Invalid input '' [ 321.832789][ T5900] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 322.251282][ T5900] usb 2-1: device descriptor read/8, error -71 [ 322.378344][ T5900] usb usb2-port1: unable to enumerate USB device [ 322.659009][T10520] /dev/rnullb0: Can't open blockdev [ 322.941120][ T5900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 322.946618][ T5860] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input40 [ 322.981527][ T5860] usb 6-1: USB disconnect, device number 47 [ 322.982953][ T5202] bcm5974 6-1:1.0: could not read from device [ 323.938829][ T43] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 324.109931][ T43] usb 6-1: device descriptor read/64, error -71 [ 324.387950][ T43] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 324.565178][ T43] usb 6-1: device descriptor read/64, error -71 [ 324.698159][ T43] usb usb6-port1: attempt power cycle [ 325.082808][ T43] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 325.128347][ T43] usb 6-1: device descriptor read/8, error -71 [ 325.392533][ T43] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 325.434209][T10565] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1333'. [ 325.460729][T10565] /dev/rnullb0: Can't open blockdev [ 325.466737][ T43] usb 6-1: device descriptor read/8, error -71 [ 325.585980][ T43] usb usb6-port1: unable to enumerate USB device [ 325.769245][T10578] /dev/rnullb0: Can't open blockdev [ 325.858336][T10583] /dev/rnullb0: Can't open blockdev [ 326.218574][T10595] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1342'. [ 326.382099][T10600] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 326.387044][T10601] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 326.600048][T10606] cgroup: name respecified [ 326.990211][T10622] /dev/rnullb0: Can't open blockdev [ 327.178784][T10628] sctp: [Deprecated]: syz.5.1352 (pid 10628) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.178784][T10628] Use struct sctp_sack_info instead [ 327.466691][ T10] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 327.541352][ T43] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 327.668373][ T10] usb 6-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7 [ 327.677844][ T10] usb 6-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 327.704825][ T10] usb 6-1: Product: syz [ 327.709050][ T10] usb 6-1: Manufacturer: syz [ 327.724454][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.744491][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.750256][ T10] usb 6-1: SerialNumber: syz [ 327.761143][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 327.782980][T10634] /dev/rnullb0: Can't open blockdev [ 327.805859][ T10] usb 6-1: config 0 descriptor?? [ 327.827173][ T43] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 327.841352][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.855285][ T10] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 327.883416][ T10] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 327.906087][ T43] usb 2-1: config 0 descriptor?? [ 328.082190][T10628] /dev/rnullb0: Can't open blockdev [ 328.096567][ T10] usb 6-1: USB disconnect, device number 52 [ 328.204682][ T5900] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 328.364647][ T5900] usb 5-1: device descriptor read/64, error -71 [ 328.410227][ T43] plantronics 0003:047F:FFFF.0025: reserved main item tag 0xd [ 328.473532][ T43] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 328.642614][ T5900] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 328.712249][ T5915] usb 2-1: USB disconnect, device number 69 [ 328.804143][ T5900] usb 5-1: device descriptor read/64, error -71 [ 328.893369][T10669] /dev/rnullb0: Can't open blockdev [ 328.924579][ T5900] usb usb5-port1: attempt power cycle [ 329.318614][ T5900] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 329.376873][ T5900] usb 5-1: device descriptor read/8, error -71 [ 329.660084][ T5900] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 329.691160][ T5900] usb 5-1: device descriptor read/8, error -71 [ 329.712977][T10685] /dev/rnullb0: Can't open blockdev [ 329.831277][ T5900] usb usb5-port1: unable to enumerate USB device [ 329.846626][T10689] /dev/rnullb0: Can't open blockdev [ 329.861317][ T5860] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 329.922804][T10691] /dev/rnullb0: Can't open blockdev [ 330.034816][ T5860] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.051051][ T5860] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 330.061120][T10687] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1373'. [ 330.061418][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.083896][ T5860] usb 6-1: config 0 descriptor?? [ 330.363960][ T5900] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 330.385106][ T43] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 330.524024][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 330.533560][ T5860] keytouch 0003:0926:3333.0026: fixing up Keytouch IEC report descriptor [ 330.537013][ T5900] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 330.551660][ T5900] usb 2-1: config 1 has no interface number 0 [ 330.558513][ T5900] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 330.569135][ T43] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 330.569531][ T5900] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 330.578672][ T5860] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0026/input/input42 [ 330.588271][ T5900] usb 2-1: config 1 interface 105 has no altsetting 0 [ 330.606842][ T43] usb 8-1: config 0 has no interface number 0 [ 330.620284][ T43] usb 8-1: config 0 interface 41 has no altsetting 0 [ 330.621124][ T5900] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 330.645840][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.656084][ T43] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 330.656375][ T5900] usb 2-1: Product: syz [ 330.667318][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.681739][ T5900] usb 2-1: Manufacturer: syz [ 330.688404][ T5900] usb 2-1: SerialNumber: syz [ 330.688867][ T43] usb 8-1: Product: syz [ 330.698720][ T43] usb 8-1: Manufacturer: syz [ 330.699247][T10697] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 330.703468][ T43] usb 8-1: SerialNumber: syz [ 330.730210][T10697] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 330.742214][ T43] usb 8-1: config 0 descriptor?? [ 330.762623][T10682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.775241][T10682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.788818][ T5860] keytouch 0003:0926:3333.0026: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 330.830157][T10682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.863048][T10682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.137640][ T5943] usb 6-1: USB disconnect, device number 53 [ 331.219634][T10697] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 331.227004][T10697] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 331.412202][ T43] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 331.424395][ T43] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -71 [ 331.443866][ T43] usb 8-1: USB disconnect, device number 27 [ 331.713120][ T5900] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 331.732542][ T5900] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 331.770836][ T5900] aqc111 2-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41 [ 331.989138][T10697] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 332.032610][T10697] /dev/rnullb0: Can't open blockdev [ 332.096151][ T5900] usb 2-1: USB disconnect, device number 70 [ 332.115967][ T5900] aqc111 2-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 332.244833][T10722] /dev/rnullb0: Can't open blockdev [ 332.285752][ T5900] aqc111 2-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 332.322963][ T5900] aqc111 2-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 332.338398][ T5900] aqc111 2-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 332.429954][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 332.459633][ T5907] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 332.643517][ T5907] usb 5-1: Using ep0 maxpacket: 8 [ 332.670947][ T5907] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 332.694320][ T5907] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 332.722565][ T5907] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65416, setting to 64 [ 332.744898][ T5907] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 332.757264][ T10] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 332.770773][ T5915] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 332.778419][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.823228][ T5907] hub 5-1:1.0: bad descriptor, ignoring hub [ 332.843847][ T5907] hub 5-1:1.0: probe with driver hub failed with error -5 [ 332.844232][T10744] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1387'. [ 332.858800][T10744] /dev/rnullb0: Can't open blockdev [ 332.895016][ T5907] cdc_wdm 5-1:1.0: skipping garbage [ 332.907682][ T5907] cdc_wdm 5-1:1.0: skipping garbage [ 332.914880][ T5907] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 332.941169][ T5915] usb 6-1: device descriptor read/64, error -71 [ 332.963250][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.986460][ T10] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 333.007322][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.049648][ T10] usb 8-1: config 0 descriptor?? [ 333.111893][ T5914] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 333.218759][ T5915] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 333.291659][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 333.292243][ T43] usb 5-1: USB disconnect, device number 67 [ 333.304132][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 333.327775][ T10] usb 8-1: USB disconnect, device number 28 [ 333.389777][ T5915] usb 6-1: device descriptor read/64, error -71 [ 333.532630][ T5915] usb usb6-port1: attempt power cycle [ 333.706521][T10771] /dev/rnullb0: Can't open blockdev [ 333.902470][ T5915] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 333.903884][T10780] /dev/rnullb0: Can't open blockdev [ 333.936424][ T5915] usb 6-1: device descriptor read/8, error -71 [ 334.223009][ T5915] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 334.246229][ T5915] usb 6-1: device descriptor read/8, error -71 [ 334.362450][ T5915] usb usb6-port1: unable to enumerate USB device [ 334.870870][T10785] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1396'. [ 335.025527][T10791] /dev/rnullb0: Can't open blockdev [ 335.104688][T10796] /dev/rnullb0: Can't open blockdev [ 335.194326][T10801] /dev/rnullb0: Can't open blockdev [ 335.350837][T10807] /dev/sg0: Can't lookup blockdev [ 335.397414][T10809] netlink: 'syz.1.1406': attribute type 29 has an invalid length. [ 335.407221][T10810] /dev/sg0: Can't lookup blockdev [ 335.521245][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1408'. [ 335.536602][T10817] /dev/rnullb0: Can't open blockdev [ 335.536776][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1408'. [ 335.543266][T10816] /dev/rnullb0: Can't open blockdev [ 335.557140][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1408'. [ 335.561361][T10817] /dev/rnullb0: Can't open blockdev [ 335.578993][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1408'. [ 335.587630][T10821] fuse: Bad value for 'user_id' [ 335.593442][T10821] fuse: Bad value for 'user_id' [ 335.599085][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1408'. [ 335.620180][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1408'. [ 335.636978][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1408'. [ 335.663270][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1408'. [ 335.761809][T10824] /dev/rnullb0: Can't open blockdev [ 335.800537][T10826] /dev/rnullb0: Can't open blockdev [ 336.222570][ T983] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 336.500102][ T983] usb 2-1: device descriptor read/64, error -71 [ 336.684174][T10846] /dev/rnullb0: Can't open blockdev [ 336.707593][T10847] /dev/rnullb0: Can't open blockdev [ 336.938512][ T983] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 337.084069][T10852] /dev/rnullb0: Can't open blockdev [ 337.120426][ T983] usb 2-1: device descriptor read/64, error -71 [ 337.254154][ T983] usb usb2-port1: attempt power cycle [ 337.565649][ T5936] hid_parser_main: 5 callbacks suppressed [ 337.565667][ T5936] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 337.594310][ T5936] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 337.604099][ T5943] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 337.645465][ T983] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 337.699543][ T983] usb 2-1: device descriptor read/8, error -71 [ 337.776604][ T5943] usb 8-1: unable to get BOS descriptor or descriptor too short [ 337.791266][ T5943] usb 8-1: not running at top speed; connect to a high speed hub [ 337.817035][ T5943] usb 8-1: config 9 has an invalid interface number: 98 but max is 0 [ 337.836163][ T5943] usb 8-1: config 9 has no interface number 0 [ 337.853833][ T5943] usb 8-1: config 9 interface 98 has no altsetting 0 [ 337.876086][ T5943] usb 8-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=72.b1 [ 337.884158][T10870] /dev/rnullb0: Can't open blockdev [ 337.896649][ T5943] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.914024][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 337.923929][ T5943] usb 8-1: Product: syz [ 337.932844][ T5943] usb 8-1: Manufacturer: syz [ 337.948467][ T5943] usb 8-1: SerialNumber: syz [ 337.986154][ T983] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 338.008594][ T983] usb 2-1: device descriptor read/8, error -71 [ 338.125700][ T983] usb usb2-port1: unable to enumerate USB device [ 338.182971][T10863] /dev/rnullb0: Can't open blockdev [ 338.203802][ T5943] cypress_cy7c63 8-1:9.98: Cypress CY7C63xxx device now attached [ 338.223035][ T5943] usb 8-1: USB disconnect, device number 29 [ 338.237872][ T5943] cypress_cy7c63 8-1:9.98: Cypress CY7C63xxx device now disconnected [ 338.452901][T10881] /dev/rnullb0: Can't open blockdev [ 338.836340][T10887] /dev/rnullb0: Can't open blockdev [ 338.873501][ T5943] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 339.055120][ T5943] usb 6-1: Using ep0 maxpacket: 16 [ 339.062714][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.079768][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.089677][ T5943] usb 6-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 339.099899][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.120164][ T5943] usb 6-1: config 0 descriptor?? [ 339.366059][T10897] /dev/rnullb0: Can't open blockdev [ 339.481786][T10904] /dev/rnullb0: Can't open blockdev [ 339.592630][ T5943] kye 0003:0458:5017.0028: control desc unexpectedly large [ 339.602128][ T5943] kye 0003:0458:5017.0028: control desc unexpectedly large [ 339.633976][ T5943] input: HID 0458:5017 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5017.0028/input/input44 [ 339.755164][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 339.755182][ T30] audit: type=1326 audit(2000000099.385:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10911 comm="syz.1.1441" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f625ab8e9a9 code=0x0 [ 339.759033][ T5943] kye 0003:0458:5017.0028: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5017] on usb-dummy_hcd.5-1/input0 [ 339.814029][ T5943] usb 6-1: USB disconnect, device number 58 [ 339.872616][ T5900] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 339.885993][T10913] fido_id[10913]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 340.049545][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 340.068377][ T5900] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 340.084262][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 340.094845][ T5900] usb 5-1: Product: syz [ 340.099044][ T5900] usb 5-1: Manufacturer: syz [ 340.107645][ T5900] usb 5-1: SerialNumber: syz [ 340.117762][ T5900] usb 5-1: config 0 descriptor?? [ 340.127133][ T5854] Bluetooth: hci4: command 0x0406 tx timeout [ 340.223349][T10919] syz.7.1444: attempt to access beyond end of device [ 340.223349][T10919] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 340.241580][T10919] FAT-fs (nbd7): unable to read boot sector [ 340.355080][ T5915] usb 5-1: USB disconnect, device number 68 [ 340.451714][T10926] /dev/rnullb0: Can't open blockdev [ 340.483142][T10926] /dev/rnullb0: Can't open blockdev [ 340.511027][T10928] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 340.539719][T10928] evm: overlay not supported [ 340.711906][T10934] binder: 10933:10934 ioctl c0306201 200000000640 returned -22 [ 340.980288][ T5915] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 341.021904][T10944] /dev/rnullb0: Can't open blockdev [ 341.161240][ T5915] usb 6-1: Using ep0 maxpacket: 8 [ 341.168538][ T5915] usb 6-1: config index 0 descriptor too short (expected 19730, got 18) [ 341.177038][ T5915] usb 6-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 341.185752][ T5915] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 54 [ 341.197253][ T5915] usb 6-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 341.206463][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.214795][ T5915] usb 6-1: Product: syz [ 341.218983][ T5915] usb 6-1: Manufacturer: syz [ 341.223613][ T5915] usb 6-1: SerialNumber: syz [ 341.231152][ T5915] usb 6-1: config 0 descriptor?? [ 341.364356][ T5936] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 341.465496][ T5915] usb 6-1: USB disconnect, device number 59 [ 341.546079][ T5936] usb 5-1: Using ep0 maxpacket: 32 [ 341.552761][ T5936] usb 5-1: config 0 has an invalid interface number: 247 but max is 0 [ 341.561362][ T5936] usb 5-1: config 0 has no interface number 0 [ 341.569229][ T5936] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 341.578359][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 341.593484][ T5936] usb 5-1: Product: syz [ 341.597751][ T5936] usb 5-1: Manufacturer: syz [ 341.606447][ T5936] usb 5-1: config 0 descriptor?? [ 341.840945][ T5943] usb 5-1: USB disconnect, device number 69 [ 342.548105][ T5943] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 342.556576][ T10] hid (null): unknown global tag 0xd [ 342.572653][ T5936] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 342.743582][ T5943] usb 6-1: Using ep0 maxpacket: 8 [ 342.753273][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 342.768033][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 342.791122][ T5936] usb 2-1: config 4 has an invalid interface number: 5 but max is 0 [ 342.801496][ T5943] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 342.811284][ T5936] usb 2-1: config 4 has no interface number 0 [ 342.828059][ T5936] usb 2-1: config 4 interface 5 has no altsetting 0 [ 342.836057][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.851980][ T5936] usb 2-1: New USB device found, idVendor=19d2, idProduct=0157, bcdDevice= 1.48 [ 342.871896][ T5943] usb 6-1: config 0 descriptor?? [ 342.881577][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.924328][ T5936] usb 2-1: Product: syz [ 342.933120][ T5936] usb 2-1: Manufacturer: syz [ 342.947781][ T5936] usb 2-1: SerialNumber: syz [ 343.152530][ T5943] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 343.208849][T10960] /dev/rnullb0: Can't open blockdev [ 343.264662][ T5936] usb 2-1: USB disconnect, device number 75 [ 343.359028][T10958] iowarrior 6-1:0.0: Error -90 while submitting URB [ 343.371491][T10958] iowarrior 6-1:0.0: Error -90 while submitting URB [ 343.467889][ T5943] usb 6-1: USB disconnect, device number 60 [ 343.585795][ T10] hid (null): invalid report_count 1094002085 [ 343.593061][ T5915] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.604460][ T10] hid (null): bogus close delimiter [ 343.609887][ T10] hid (null): unknown global tag 0xe [ 343.615284][ T10] hid (null): unknown global tag 0xe [ 343.620712][ T10] hid (null): invalid report_size -1606544271 [ 343.626877][ T10] hid (null): bogus close delimiter [ 343.860920][T10970] __nla_validate_parse: 25 callbacks suppressed [ 343.860941][T10970] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.1463'. [ 344.154801][ T5943] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 344.350939][ T5943] usb 2-1: config 0 has an invalid interface number: 153 but max is 0 [ 344.364596][ T5943] usb 2-1: config 0 has no interface number 0 [ 344.373452][ T5943] usb 2-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 344.402602][ T5943] usb 2-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 344.421230][ T5943] usb 2-1: config 0 interface 153 has no altsetting 0 [ 344.435397][ T5943] usb 2-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 344.451860][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.460594][ T5943] usb 2-1: Product: syz [ 344.471697][ T5943] usb 2-1: Manufacturer: syz [ 344.478102][ T5943] usb 2-1: SerialNumber: syz [ 344.494639][ T5943] usb 2-1: config 0 descriptor?? [ 344.517893][ T5943] hub 2-1:0.153: bad descriptor, ignoring hub [ 344.525751][ T5943] hub 2-1:0.153: probe with driver hub failed with error -5 [ 344.545580][ T5943] sierra 2-1:0.153: Sierra USB modem converter detected [ 344.582272][ T43] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 344.653545][ T10] hid (null): unknown global tag 0xd [ 344.659005][ T10] hid (null): invalid report_size 43651 [ 344.664640][ T10] hid (null): unknown global tag 0xe [ 344.670709][ T10] hid (null): invalid report_size 55004 [ 344.676312][ T10] hid (null): invalid report_size 40699 [ 344.681962][ T10] hid (null): unknown global tag 0xc [ 344.687304][ T10] hid (null): unknown global tag 0xd [ 344.692724][ T10] hid (null): report_id 0 is invalid [ 344.698076][ T10] hid (null): report_id 0 is invalid [ 344.738992][T10970] /dev/rnullb0: Can't open blockdev [ 344.778823][ T43] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 344.807547][ T5943] usb 2-1: USB disconnect, device number 76 [ 344.813655][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.835971][ T5943] sierra 2-1:0.153: device disconnected [ 344.847844][ T43] usb 6-1: Product: syz [ 344.864989][ T43] usb 6-1: Manufacturer: syz [ 344.891409][ T43] usb 6-1: SerialNumber: syz [ 344.914210][ T43] usb 6-1: config 0 descriptor?? [ 345.723767][ T10] hid (null): invalid report_count 62343 [ 345.730893][ T10] hid (null): bogus close delimiter [ 345.736196][ T10] hid (null): bogus close delimiter [ 345.741542][ T10] hid (null): unknown global tag 0xe [ 345.748438][ T10] hid (null): unknown global tag 0xc [ 345.753810][ T10] hid (null): unknown global tag 0xe [ 345.759235][ T10] hid (null): unknown global tag 0xd [ 345.765820][ T10] hid (null): unknown global tag 0xe [ 345.771473][ T10] hid (null): unknown global tag 0xc [ 345.776800][ T10] hid (null): invalid report_count -1256627359 [ 345.783851][ T10] hid (null): unknown global tag 0xe [ 345.789264][ T10] hid (null): report_id 0 is invalid [ 345.811752][ T10] hid (null): unknown global tag 0xc [ 345.817096][ T10] hid (null): unknown global tag 0xd [ 345.833071][ T10] hid (null): unknown global tag 0xe [ 345.841068][ T10] hid (null): unknown global tag 0xc [ 345.846522][ T10] hid (null): unknown global tag 0xd [ 345.851838][ T10] hid (null): unknown global tag 0xe3 [ 345.861555][ T10] hid-generic FFFE:000C:F34D.0029: unknown main item tag 0x1 [ 345.869259][ T10] hid-generic FFFE:000C:F34D.0029: unknown main item tag 0x7 [ 345.876938][ T10] hid-generic FFFE:000C:F34D.0029: unexpected long global item [ 345.885108][ T10] hid-generic FFFE:000C:F34D.0029: probe with driver hid-generic failed with error -22 [ 345.898630][T10984] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1465'. [ 346.239285][ T10] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 346.433044][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 346.443486][ T10] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 346.456485][ T10] usb 5-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice= 0.48 [ 346.466414][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.474812][ T10] usb 5-1: Product: syz [ 346.479157][ T10] usb 5-1: Manufacturer: syz [ 346.483872][ T10] usb 5-1: SerialNumber: syz [ 347.552081][ T5943] usb 6-1: USB disconnect, device number 61 [ 347.620263][T11008] /dev/rnullb0: Can't open blockdev [ 347.661127][ T43] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 347.832368][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 347.848646][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 347.866246][ T43] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 347.885611][ T43] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 347.893845][ T43] usb 2-1: Product: syz [ 347.898169][ T43] usb 2-1: Manufacturer: syz [ 347.902826][ T43] usb 2-1: SerialNumber: syz [ 347.913668][ T43] usb 2-1: config 0 descriptor?? [ 347.929957][T11006] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 347.940749][ T43] hub 2-1:0.0: bad descriptor, ignoring hub [ 347.951071][ T43] hub 2-1:0.0: probe with driver hub failed with error -5 [ 348.912523][ T5915] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 348.966233][T11006] usb 2-1: reset high-speed USB device number 77 using dummy_hcd [ 349.153425][T11006] usb 2-1: device firmware changed [ 349.172163][ T43] usb 2-1: USB disconnect, device number 77 [ 349.232736][ T5936] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 349.244996][ T10] esd_usb 5-1:7.0: sending version message failed [ 349.263701][ T10] esd_usb 5-1:7.0: probe with driver esd_usb failed with error -22 [ 349.308386][ T10] usb 5-1: USB disconnect, device number 70 [ 349.326017][T11020] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1482'. [ 349.340086][ T43] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 349.439069][ T5936] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 349.450725][ T5936] usb 6-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 349.460286][ T5936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.484388][ T5936] usb 6-1: config 0 descriptor?? [ 349.521428][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 349.528832][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 349.544841][ T43] usb 2-1: string descriptor 0 read error: -22 [ 349.551673][ T43] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 349.566219][ T43] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 349.593480][ T43] usb 2-1: config 0 descriptor?? [ 349.600132][T11016] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 349.619785][ T43] hub 2-1:0.0: bad descriptor, ignoring hub [ 349.625784][ T43] hub 2-1:0.0: probe with driver hub failed with error -5 [ 349.924261][T11016] /dev/rnullb0: Can't open blockdev [ 349.939946][T11018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.949916][T11018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.049472][ T5936] usbhid 6-1:0.0: can't add hid device: -71 [ 350.065333][ T5936] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 350.081477][ T5936] usb 6-1: USB disconnect, device number 62 [ 350.833759][T11036] /dev/rnullb0: Can't open blockdev [ 351.181053][T11043] ntfs3(loop5): try to read out of volume at offset 0x0 [ 351.306900][ T5936] usb 2-1: USB disconnect, device number 78 [ 351.352063][T11045] /dev/rnullb0: Can't open blockdev [ 351.442917][T11050] sctp: [Deprecated]: syz.7.1492 (pid 11050) Use of struct sctp_assoc_value in delayed_ack socket option. [ 351.442917][T11050] Use struct sctp_sack_info instead [ 351.477599][ T983] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 351.496793][T11055] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1492'. [ 351.722603][T11057] dns_resolver: Unsupported content type (254) [ 351.757688][ T983] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 351.772531][ T983] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 351.787932][ T983] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 351.830531][ T983] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 351.854804][ T983] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 351.873350][ T983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.894822][ T983] usb 6-1: Product: syz [ 351.899034][ T983] usb 6-1: Manufacturer: syz [ 351.903651][ T983] usb 6-1: SerialNumber: syz [ 351.930871][T11043] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 351.988287][T11062] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1496'. [ 352.072101][T11065] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1497'. [ 352.090176][T11065] openvswitch: netlink: Flow key attr not present in new flow. [ 352.164781][T11043] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 352.172985][T11043] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 352.301036][ T5936] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 352.364956][ T10] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 352.441478][T11069] /dev/rnullb0: Can't open blockdev [ 352.447804][T11069] /dev/rnullb0: Can't open blockdev [ 352.465469][T11069] /dev/rnullb0: Can't open blockdev [ 352.471299][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.489110][T11069] /dev/rnullb0: Can't open blockdev [ 352.493625][ T5936] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 352.496905][T11069] /dev/rnullb0: Can't open blockdev [ 352.503443][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.518689][ T5936] usb 5-1: config 0 descriptor?? [ 352.546687][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 352.564959][ T10] usb 8-1: config 0 has an invalid interface number: 251 but max is 0 [ 352.589704][ T10] usb 8-1: config 0 has no interface number 0 [ 352.605596][ T10] usb 8-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 352.618437][T11069] /dev/rnullb0: Can't open blockdev [ 352.628934][ T983] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 352.630547][T11069] /dev/rnullb0: Can't open blockdev [ 352.651491][T11069] /dev/rnullb0: Can't open blockdev [ 352.663632][T11069] /dev/rnullb0: Can't open blockdev [ 352.664462][ T983] cdc_ncm 6-1:1.0: bind() failure [ 352.676852][T11069] /dev/rnullb0: Can't open blockdev [ 352.689969][T11069] /dev/rnullb0: Can't open blockdev [ 352.701856][T11069] /dev/rnullb0: Can't open blockdev [ 352.704369][ T983] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 352.718009][T11069] /dev/rnullb0: Can't open blockdev [ 352.729783][ T10] usb 8-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 352.740010][ T983] cdc_ncm 6-1:1.1: bind() failure [ 352.755894][T11069] /dev/rnullb0: Can't open blockdev [ 352.758241][ T983] usb 6-1: USB disconnect, device number 63 [ 352.781046][ T10] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 352.807878][T11069] /dev/rnullb0: Can't open blockdev [ 352.813236][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.848596][ T10] usb 8-1: Product: syz [ 352.855816][T11069] /dev/rnullb0: Can't open blockdev [ 352.869257][ T10] usb 8-1: Manufacturer: syz [ 352.874144][ T10] usb 8-1: SerialNumber: syz [ 352.896861][T11069] /dev/rnullb0: Can't open blockdev [ 352.907191][ T10] usb 8-1: config 0 descriptor?? [ 352.918005][T11065] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 352.931752][T11065] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 352.940265][T11069] /dev/rnullb0: Can't open blockdev [ 352.953601][ T5915] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 352.954950][T11069] /dev/rnullb0: Can't open blockdev [ 352.984163][ T3472] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 352.993702][T11062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.017770][T11062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.083409][T11069] /dev/rnullb0: Can't open blockdev [ 353.111507][T11069] /dev/rnullb0: Can't open blockdev [ 353.130339][T11069] /dev/rnullb0: Can't open blockdev [ 353.140950][T11069] /dev/rnullb0: Can't open blockdev [ 353.162514][T11065] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 353.170138][T11065] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 353.177077][T11069] /dev/rnullb0: Can't open blockdev [ 353.195831][T11069] /dev/rnullb0: Can't open blockdev [ 353.214006][T11069] /dev/rnullb0: Can't open blockdev [ 353.238173][T11069] /dev/rnullb0: Can't open blockdev [ 353.322654][T11069] /dev/rnullb0: Can't open blockdev [ 353.343449][T11069] /dev/rnullb0: Can't open blockdev [ 353.354219][T11069] /dev/rnullb0: Can't open blockdev [ 353.365033][T11069] /dev/rnullb0: Can't open blockdev [ 353.376073][T11069] /dev/rnullb0: Can't open blockdev [ 353.398479][T11069] /dev/rnullb0: Can't open blockdev [ 353.416497][ T10] asix 8-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 353.432249][ T10] asix 8-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 353.450129][ T10] asix 8-1:0.251: probe with driver asix failed with error -5 [ 353.774700][T11078] /dev/rnullb0: Can't open blockdev [ 353.795258][T11078] /dev/rnullb0: Can't open blockdev [ 354.111506][T11089] /dev/rnullb0: Can't open blockdev [ 354.333356][ T5914] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 354.447180][T11095] /dev/rnullb0: Can't open blockdev [ 354.536603][T11097] tmpfs: Bad value for 'mpol' [ 355.185492][ T5936] usbhid 5-1:0.0: can't add hid device: -71 [ 355.209898][ T5936] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 355.243423][ T5936] usb 5-1: USB disconnect, device number 71 [ 355.322663][ T5914] usb 8-1: USB disconnect, device number 30 [ 355.666823][T11128] TCP: TCP_TX_DELAY enabled [ 355.823457][T11130] /dev/rnullb0: Can't open blockdev [ 356.361919][T11121] Process accounting resumed [ 357.443008][ T43] usb 8-1: new full-speed USB device number 31 using dummy_hcd [ 357.629192][ T43] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.646419][ T43] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 357.667840][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 357.681283][ T5936] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 357.694212][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 357.706489][ T43] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 357.722637][ T43] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 357.738802][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 357.768561][ T43] usb 8-1: Product: syz [ 357.773789][ T43] usb 8-1: Manufacturer: syz [ 357.780032][ T43] usb 8-1: SerialNumber: syz [ 357.796789][ T43] usb 8-1: config 0 descriptor?? [ 357.874459][ T5936] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 357.885306][ T5936] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 357.900447][ T5936] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 357.924180][ T5936] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 357.940920][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.981920][ T5936] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 358.019806][ T43] radio-si470x 8-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 358.037580][ T43] radio-si470x 8-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 358.087651][ T5936] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 358.192864][ T5936] usb 5-1: USB disconnect, device number 72 [ 358.236567][ T43] radio-si470x 8-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 358.240389][T11182] /dev/rnullb0: Can't open blockdev [ 358.253683][ T43] radio-si470x 8-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 358.267387][ T43] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -5 [ 358.290350][ T43] usb 8-1: USB disconnect, device number 31 [ 358.925551][T11193] /dev/rnullb0: Can't open blockdev [ 359.069664][T11200] /dev/rnullb0: Can't open blockdev [ 359.111300][ T5914] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 359.123189][ T3523] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 359.478416][T11213] /dev/rnullb0: Can't open blockdev [ 359.649689][T11215] /dev/rnullb0: Can't open blockdev [ 359.710110][T11215] rpc_pipefs: Unknown parameter 'trans' [ 359.841594][T11219] ./cgroup: Can't lookup blockdev [ 360.115727][ T5915] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 360.180177][ T5936] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 360.286785][ T5915] usb 8-1: Using ep0 maxpacket: 16 [ 360.293917][ T5915] usb 8-1: config 0 has an invalid interface number: 214 but max is 0 [ 360.302919][ T5915] usb 8-1: config 0 has no interface number 0 [ 360.311260][ T5915] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 360.325967][ T5915] usb 8-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 360.336863][ T5915] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.345473][ T5915] usb 8-1: Product: syz [ 360.351185][ T5915] usb 8-1: Manufacturer: syz [ 360.355874][ T5915] usb 8-1: SerialNumber: syz [ 360.365810][ T5915] usb 8-1: config 0 descriptor?? [ 360.382320][ T5936] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 360.394688][ T5936] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 360.412950][ T5936] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.438156][ T5936] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 360.455734][ T5936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.507435][ T5936] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 360.589728][ T5915] usbtouchscreen 8-1:0.214: Failed to read FW rev: 0 [ 360.597676][T11237] /dev/rnullb0: Can't open blockdev [ 360.610655][ T5915] usbtouchscreen 8-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 360.611923][ T5936] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 360.635393][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.738005][ T5915] usb 6-1: USB disconnect, device number 64 [ 361.542620][T11242] CIFS mount error: No usable UNC path provided in device string! [ 361.542620][T11242] [ 361.580914][T11242] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 361.938093][T11256] fuse: Bad value for 'fd' [ 362.111922][T11261] /dev/rnullb0: Can't open blockdev [ 362.372220][T11266] /dev/rnullb0: Can't open blockdev [ 362.409539][T11267] /dev/rnullb0: Can't open blockdev [ 362.754571][T11278] netlink: 2384 bytes leftover after parsing attributes in process `syz.5.1569'. [ 362.799188][ T5936] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 362.972572][ T5936] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 362.995673][ T5936] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 363.026650][ T5936] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 363.059908][ T5936] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 363.085208][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.112573][ T5936] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 363.159282][ T5936] usb 5-1: invalid MIDI out EP 0 [ 363.300409][ T5936] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 363.368556][ T5936] usb 5-1: USB disconnect, device number 73 [ 363.583343][ T43] usb 8-1: USB disconnect, device number 32 [ 363.651597][T11288] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1572'. [ 363.690054][T11287] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1572'. [ 363.760540][T11288] sp0: Synchronizing with TNC [ 363.781910][T11286] [U] è [ 363.797392][T11291] /dev/rnullb0: Can't open blockdev [ 364.304835][T11303] loop4: detected capacity change from 0 to 2560 [ 364.386747][T11303] buffer_io_error: 23 callbacks suppressed [ 364.386771][T11303] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 364.428671][T11303] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 364.498956][T11303] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 364.518453][T11303] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 364.535452][T11303] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 364.555970][T11307] /dev/rnullb0: Can't open blockdev [ 364.561721][T11303] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 364.585077][ T31] INFO: task kworker/u8:1:13 blocked for more than 143 seconds. [ 364.595667][T11303] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 364.611312][ T31] Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 [ 364.626312][T11303] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 364.649742][T11309] /dev/rnullb0: Can't open blockdev [ 364.655113][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 364.664619][T11303] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 364.674022][ T31] task:kworker/u8:1 state:D stack:23912 pid:13 tgid:13 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 364.689386][T11303] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 364.699198][ T31] Workqueue: netns cleanup_net [ 364.710926][ T31] Call Trace: [ 364.714707][ T31] [ 364.717949][ T31] __schedule+0x1737/0x4d30 [ 364.722656][ T31] ? __lock_acquire+0xab9/0xd20 [ 364.729165][ T31] ? schedule+0x165/0x360 [ 364.733652][ T31] ? __lock_acquire+0xab9/0xd20 [ 364.738671][ T31] ? __pfx___schedule+0x10/0x10 [ 364.743595][ T31] ? schedule+0x91/0x360 [ 364.748442][ T31] schedule+0x165/0x360 [ 364.752893][ T31] afs_cell_purge+0x3d9/0x540 [ 364.757732][ T31] ? __pfx_afs_cell_purge+0x10/0x10 [ 364.763064][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 364.768752][ T31] ? afs_net+0x45/0x270 [ 364.772960][ T31] ? afs_net+0x45/0x270 [ 364.777303][ T31] afs_net_exit+0x50/0x100 [ 364.781767][ T31] ops_undo_list+0x49a/0x990 [ 364.786402][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 364.791701][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 364.804758][ T31] cleanup_net+0x4c5/0x800 [ 364.811323][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 364.816401][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 364.821963][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 364.827823][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 364.835828][ T31] process_scheduled_works+0xade/0x17b0 [ 364.842285][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 364.848348][ T31] worker_thread+0x8a0/0xda0 [ 364.853320][ T31] kthread+0x70e/0x8a0 [ 364.857446][ T31] ? __pfx_worker_thread+0x10/0x10 [ 364.863111][ T31] ? __pfx_kthread+0x10/0x10 [ 364.867834][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 364.874037][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 364.879579][ T31] ? __pfx_kthread+0x10/0x10 [ 364.884991][ T31] ret_from_fork+0x3f9/0x770 [ 364.889777][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 364.895460][ T31] ? __switch_to_asm+0x39/0x70 [ 364.900502][ T31] ? __switch_to_asm+0x33/0x70 [ 364.909004][ T31] ? __pfx_kthread+0x10/0x10 [ 364.914049][ T31] ret_from_fork_asm+0x1a/0x30 [ 364.919237][ T31] [ 364.922665][ T31] [ 364.922665][ T31] Showing all locks held in the system: [ 364.932847][ T31] 3 locks held by kworker/u8:1/13: [ 364.938250][ T31] #0: ffff88801b6fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 364.950282][ T31] #1: ffffc90000127bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 364.963362][ T31] #2: ffffffff8f92b870 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 364.973056][ T31] 1 lock held by khungtaskd/31: [ 364.977953][ T31] #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 364.988587][ T31] 3 locks held by kworker/u8:3/49: [ 364.994164][ T31] 2 locks held by getty/5610: [ 364.998899][ T31] #0: ffff888033ede0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 365.008857][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 365.020913][ T31] 1 lock held by syz.4.1578/11306: [ 365.026206][ T31] #0: ffffffff8e543200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 365.038760][ T31] [ 365.041126][ T31] ============================================= [ 365.041126][ T31] [ 365.064188][ T31] NMI backtrace for cpu 1 [ 365.064214][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 365.064239][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 365.064252][ T31] Call Trace: [ 365.064260][ T31] [ 365.064268][ T31] dump_stack_lvl+0x189/0x250 [ 365.064306][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.064339][ T31] ? __pfx__printk+0x10/0x10 [ 365.064381][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 365.064411][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 365.064439][ T31] ? __pfx__printk+0x10/0x10 [ 365.064480][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 365.064507][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 365.064536][ T31] watchdog+0xf93/0xfe0 [ 365.064565][ T31] ? watchdog+0x1de/0xfe0 [ 365.064592][ T31] kthread+0x70e/0x8a0 [ 365.064626][ T31] ? __pfx_watchdog+0x10/0x10 [ 365.064646][ T31] ? __pfx_kthread+0x10/0x10 [ 365.064676][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 365.064704][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 365.064731][ T31] ? __pfx_kthread+0x10/0x10 [ 365.064761][ T31] ret_from_fork+0x3f9/0x770 [ 365.064790][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 365.064822][ T31] ? __switch_to_asm+0x39/0x70 [ 365.064839][ T31] ? __switch_to_asm+0x33/0x70 [ 365.064854][ T31] ? __pfx_kthread+0x10/0x10 [ 365.064882][ T31] ret_from_fork_asm+0x1a/0x30 [ 365.064916][ T31] [ 365.064947][ T31] Sending NMI from CPU 1 to CPUs 0: [ 365.216509][ C0] NMI backtrace for cpu 0 [ 365.216526][ C0] CPU: 0 UID: 0 PID: 71 Comm: kworker/u8:4 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 365.216548][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 365.216561][ C0] Workqueue: bat_events batadv_nc_worker [ 365.216594][ C0] RIP: 0010:rcu_is_watching+0x26/0xb0 [ 365.216619][ C0] Code: 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 20 99 40 11 e8 4b d7 d8 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df <4c> 8d 34 dd 10 3d e9 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 [ 365.216635][ C0] RSP: 0018:ffffc9000217f960 EFLAGS: 00000293 [ 365.216649][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 07f276a07de13200 [ 365.216661][ C0] RDX: 0000000000000000 RSI: ffffffff8c04d3e0 RDI: ffffffff8c04d3a0 [ 365.216673][ C0] RBP: ffffffff8b4d0e32 R08: 0000000000000000 R09: 0000000000000000 [ 365.216684][ C0] R10: dffffc0000000000 R11: ffffffff8b4d0d60 R12: 0000000000000002 [ 365.216696][ C0] R13: ffffffff8e53d8a0 R14: 0000000000000000 R15: dffffc0000000000 [ 365.216709][ C0] FS: 0000000000000000(0000) GS:ffff8881257ab000(0000) knlGS:0000000000000000 [ 365.216722][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 365.216734][ C0] CR2: 00007f3720d83178 CR3: 0000000026b1c000 CR4: 00000000003526f0 [ 365.216748][ C0] DR0: 0000000000000002 DR1: 0004000000000002 DR2: 0000000000000408 [ 365.216759][ C0] DR3: 1000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 365.216771][ C0] Call Trace: [ 365.216777][ C0] [ 365.216785][ C0] lock_acquire+0x5f/0x360 [ 365.216808][ C0] ? batadv_nc_worker+0xd2/0x610 [ 365.216830][ C0] ? batadv_nc_worker+0xd2/0x610 [ 365.216851][ C0] batadv_nc_worker+0xef/0x610 [ 365.216871][ C0] ? batadv_nc_worker+0xd2/0x610 [ 365.216892][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 365.216915][ C0] process_scheduled_works+0xade/0x17b0 [ 365.216950][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 365.216979][ C0] worker_thread+0x8a0/0xda0 [ 365.217014][ C0] kthread+0x70e/0x8a0 [ 365.217040][ C0] ? __pfx_worker_thread+0x10/0x10 [ 365.217060][ C0] ? __pfx_kthread+0x10/0x10 [ 365.217085][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 365.217107][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 365.217129][ C0] ? __pfx_kthread+0x10/0x10 [ 365.217154][ C0] ret_from_fork+0x3f9/0x770 [ 365.217185][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 365.217208][ C0] ? __switch_to_asm+0x39/0x70 [ 365.217224][ C0] ? __switch_to_asm+0x33/0x70 [ 365.217238][ C0] ? __pfx_kthread+0x10/0x10 [ 365.217262][ C0] ret_from_fork_asm+0x1a/0x30 [ 365.217286][ C0] [ 365.217667][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 365.478392][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 365.489680][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 365.499744][ T31] Call Trace: [ 365.503028][ T31] [ 365.505963][ T31] dump_stack_lvl+0x99/0x250 [ 365.510569][ T31] ? __asan_memcpy+0x40/0x70 [ 365.515190][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.520403][ T31] ? __pfx__printk+0x10/0x10 [ 365.525028][ T31] vpanic+0x281/0x750 [ 365.529030][ T31] ? __pfx_vpanic+0x10/0x10 [ 365.533571][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 365.539138][ T31] ? preempt_schedule+0xae/0xc0 [ 365.544004][ T31] ? preempt_schedule_common+0x83/0xd0 [ 365.549482][ T31] panic+0xb9/0xc0 [ 365.553220][ T31] ? __pfx_panic+0x10/0x10 [ 365.557644][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 365.563050][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 365.569257][ T31] watchdog+0xfd2/0xfe0 [ 365.573431][ T31] ? watchdog+0x1de/0xfe0 [ 365.577777][ T31] kthread+0x70e/0x8a0 [ 365.581869][ T31] ? __pfx_watchdog+0x10/0x10 [ 365.586555][ T31] ? __pfx_kthread+0x10/0x10 [ 365.591171][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 365.596388][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 365.601598][ T31] ? __pfx_kthread+0x10/0x10 [ 365.606287][ T31] ret_from_fork+0x3f9/0x770 [ 365.610906][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 365.616031][ T31] ? __switch_to_asm+0x39/0x70 [ 365.620802][ T31] ? __switch_to_asm+0x33/0x70 [ 365.625565][ T31] ? __pfx_kthread+0x10/0x10 [ 365.630168][ T31] ret_from_fork_asm+0x1a/0x30 [ 365.634945][ T31] [ 365.638184][ T31] Kernel Offset: disabled [ 365.642510][ T31] Rebooting in 86400 seconds..