last executing test programs: 9m11.149475088s ago: executing program 0 (id=2740): set_mempolicy(0x8006, 0x0, 0x5) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000150001c0", @ANYRESHEX=r2]) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000004c0)="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", 0xfc) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d00010000600009040080"], 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) mkdir(&(0x7f0000000200)='./bus\x00', 0x91) 9m9.521548752s ago: executing program 0 (id=2748): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x2}}, 0x18) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 9m9.486327534s ago: executing program 0 (id=2749): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008002e00"], 0x1c}], 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008002e00"], 0x1c}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x3c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x40180d0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x3c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x40180d0) creat(&(0x7f0000001380)='./file0\x00', 0x4) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000011c0)=ANY=[@ANYBLOB="8704040000000000fc02000000619cc0694d00000000000000ed"], 0x28) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000f4c000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x9, 0x244080) 9m9.40152756s ago: executing program 0 (id=2750): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/184, 0xb8}, {&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f0000000a40)=""/4086, 0xff6}, {&(0x7f0000003980)=""/4123, 0x101b}, {&(0x7f00000002c0)=""/52, 0x34}, {&(0x7f0000000340)=""/158, 0x9e}, {&(0x7f0000000940)=""/199, 0xc7}, {&(0x7f0000000240)=""/107, 0x6b}], 0x8}, 0x40012100) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x93771000) 9m8.940790114s ago: executing program 0 (id=2753): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, 0x0, 0x0) r2 = socket(0x0, 0x5, 0x4) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f0000000300)={0x0, 0xfffffffb}) clock_gettime(0xfffffffffffffffd, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x3274, 0x3}}, './file2\x00'}) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) setpgid(0x0, r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3}, 0xe) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000006400)={r6, 0x9}, &(0x7f0000006440)=0x8) creat(&(0x7f0000000000)='./file0\x00', 0x1ea) mount(0x0, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) 9m8.669481259s ago: executing program 0 (id=2755): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x208281, 0x0) set_mempolicy(0x4003, &(0x7f0000000200)=0x8000000007, 0x5fff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x22052, r0, 0x93774000) 8m53.364562613s ago: executing program 32 (id=2755): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x208281, 0x0) set_mempolicy(0x4003, &(0x7f0000000200)=0x8000000007, 0x5fff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x22052, r0, 0x93774000) 5m10.91702344s ago: executing program 3 (id=4525): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x220000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0xaf4, 0x6) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f00000000c0)={&(0x7f0000000380)=[0x9, 0x4, 0x5ef2, 0x6, 0x8, 0x75, 0x7, 0x6, 0x7, 0x5, 0x4, 0x7b6, 0x7, 0x9, 0x3, 0x3, 0x7, 0x1d, 0xfffffff7, 0x1, 0x7, 0x86d8, 0x5, 0x5, 0x6, 0x5, 0xfffffe00, 0x2e86, 0x3, 0x10d, 0x6, 0x87, 0x7, 0x4737, 0x6, 0x7, 0x80000001, 0x4, 0xfff, 0x3, 0x6, 0x400, 0x10001, 0x77c2, 0x10, 0xfa, 0x7, 0x1, 0x9, 0x2, 0x78d, 0x8, 0xc00000, 0x40, 0x8000, 0x0, 0x0, 0x9, 0x6, 0x6, 0x8, 0x68a6, 0x375, 0x3, 0x6, 0x7, 0x0, 0x7fff, 0x3, 0x2, 0x8, 0x2, 0x0, 0x2, 0xf43f, 0x8, 0x9, 0xf2, 0x200, 0x400, 0x1, 0x5, 0x2, 0xe000000, 0x7, 0xffffffff, 0x9f, 0x48ac43c1, 0xb, 0x3, 0xfffeffff, 0x30d0, 0x0, 0x5, 0x9, 0x4, 0x7, 0xdb8, 0x3, 0x5c, 0x1, 0x2, 0xffffffff, 0x7, 0xfef, 0xfffffff8, 0xfffffffe, 0x6, 0x4, 0x80000001, 0x3, 0xa1ad, 0x6, 0x8, 0x40, 0x3ff, 0x7, 0x5, 0x69a, 0x0, 0x7, 0x7, 0x7fffffff, 0x3, 0xbd, 0xe126, 0x2, 0x80, 0x1, 0x6, 0x21a5, 0xfff, 0x8, 0x88f, 0x80000001, 0x7, 0xe1, 0x2, 0x0, 0x1000, 0x14000, 0x8, 0x8, 0xd685, 0x4, 0x69c9c80c, 0x9, 0x1, 0x8, 0x4, 0x9, 0xf, 0xfffffc00, 0xa, 0x5f19, 0x2, 0x5, 0x3ff, 0x1, 0x6a26, 0xfffffffb, 0x0, 0x1, 0xffff7622, 0x8, 0x0, 0x6, 0x4, 0x7, 0x87, 0x6, 0x7, 0x7, 0x4, 0x1ff, 0x2, 0x3, 0x10, 0x10001, 0x7, 0x3, 0x2, 0xfff, 0x7, 0xff, 0x8000, 0x5, 0xc9ac, 0x1, 0x5, 0x8, 0x3, 0xff, 0xea, 0x0, 0x7, 0x5, 0x5, 0x8, 0x4, 0x8, 0x1000, 0x2, 0x4, 0x2, 0x7, 0x9cc0, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x9, 0x96, 0x6, 0x7e11, 0x4, 0xf4, 0x6, 0x1, 0x96eb, 0x5, 0x5, 0x8, 0xc3fe, 0xb, 0x5, 0x5cbc, 0x8, 0x9, 0x78, 0x101, 0x4, 0x9, 0x6, 0xfff, 0x92f, 0x9, 0x7a2cd1f3, 0x4, 0xff, 0x5, 0x7, 0x9, 0xffff, 0x3, 0x9, 0x0, 0x5b170f86, 0xc7129b95, 0xfff, 0x1, 0x7040, 0x6, 0x800, 0x3ff, 0xda, 0x8001, 0x6, 0x3, 0x3, 0x7fff, 0xb, 0xfffffff8, 0x1, 0x7f4a, 0x80000001, 0x3, 0x8, 0x8, 0x1, 0x0, 0x1, 0x6, 0x2, 0xffff, 0x4b, 0x3, 0x5, 0x3, 0xfffffff7, 0x8, 0x4, 0x1, 0x1000, 0x7, 0xfffff000, 0xfffffffd, 0xc, 0x7e578857, 0x2, 0x173, 0xe, 0x7, 0x3, 0x5, 0x8, 0xa75, 0x5, 0x1, 0xeb, 0x5, 0x8, 0xa, 0x505, 0x2b, 0x4, 0x0, 0x10000, 0x3ff, 0x3, 0x1ff, 0x7, 0xe, 0x80, 0xff, 0x8001, 0x501, 0x5, 0x5, 0x7, 0x28000, 0xf3bb, 0x9, 0x2, 0x5bf, 0x80, 0x3, 0x8e, 0x7, 0x1, 0xee, 0x24a5, 0x4, 0x7fff, 0x9, 0x4, 0x7, 0x401, 0x4, 0x3, 0xffff611d, 0x9231, 0x9, 0x9, 0x3, 0x1, 0xffffffff, 0x4c9, 0x100, 0x6f04, 0x0, 0x9, 0x7fff, 0x8, 0x9, 0xc, 0xd, 0xb, 0xe, 0x5, 0x9, 0x6, 0x8, 0x6, 0x80000000, 0x1, 0xda, 0x5, 0x6, 0x5, 0xffff760c, 0x0, 0x4, 0x9, 0x4, 0x3, 0x9, 0x9, 0x400, 0x7, 0xfffffffe, 0x1, 0x5540000, 0x0, 0x0, 0x9, 0x7f, 0x9, 0x6, 0x8, 0x80000001, 0x3, 0x5, 0x4, 0x7, 0xa, 0x6, 0x1, 0x8, 0x8, 0xcf, 0x61da7e89, 0x7f, 0x6, 0x8, 0x1, 0x5, 0x59, 0x8001, 0x5, 0xf, 0x2, 0x12d, 0x400, 0x8000, 0x7, 0x29, 0xcfca, 0x7, 0xe78, 0xa, 0x3, 0xae, 0x3fc00000, 0x1, 0x6, 0xe, 0x3, 0x5, 0x6, 0x0, 0x2, 0x1, 0x5, 0x6, 0x3ff, 0x8f5, 0x6, 0x2, 0x6, 0x7, 0x5, 0xe, 0xfffffeff, 0x9, 0x3, 0x3, 0x10, 0x5b, 0x55a, 0x0, 0x4, 0x2, 0x7, 0x8, 0x6, 0x6, 0x8, 0xffffffff, 0xffffffff, 0x4, 0x2, 0x3, 0x2, 0x8000, 0x9, 0x1, 0x5, 0xffff, 0x7f, 0x7fff, 0x40, 0x8, 0x0, 0x7ff, 0x2, 0xc08, 0x3, 0x0, 0x1, 0x2d58, 0x4, 0xd8, 0x9, 0x2, 0x7fff, 0x7, 0x6800, 0x3b79, 0x80000001, 0x3342, 0x5, 0x9, 0x2, 0x0, 0x80, 0x6983, 0x2, 0x5, 0x4, 0x657, 0x8, 0x3, 0x6, 0x6, 0x7, 0x8, 0x10001, 0x7, 0x9, 0x1, 0x5, 0x80, 0x5, 0x4, 0x7, 0x6, 0x4, 0x2, 0x2, 0x8001, 0x101, 0xfffffff3, 0x8, 0x5, 0x0, 0x3, 0x0, 0x8, 0x154d800, 0x3, 0x1, 0x0, 0xbc6c, 0x3, 0xb, 0x3, 0x4, 0x3, 0xc, 0xc, 0x6, 0x3, 0xf25, 0x4800000, 0xffff0000, 0xffff, 0x4, 0x1d1, 0x5, 0xd, 0x9, 0x3, 0x4, 0x81, 0x10001, 0x0, 0x40, 0x1, 0x7, 0x10001, 0x2, 0x2, 0x400, 0xd, 0x5, 0x2, 0x3, 0x28, 0x5, 0x8, 0x6, 0x34d1, 0x200, 0x2, 0x6f, 0x2, 0x48, 0x4, 0x3, 0x1, 0xa4, 0xf, 0x1000, 0x8c0, 0x34, 0x6, 0x7, 0x200, 0x7fffffff, 0x3, 0x9, 0x400, 0x8, 0x5, 0xe, 0x7d78, 0x1, 0x14000000, 0x3, 0x3, 0x0, 0x5, 0xd018, 0x4, 0x5, 0xce6, 0xd, 0x1ff, 0x5, 0x0, 0x24, 0xd, 0x4d, 0x5, 0x7, 0x10000, 0xc, 0x3, 0x2, 0x3, 0x3, 0x2, 0x9, 0x8, 0xa, 0x5, 0x1, 0x19f, 0x9, 0x98, 0x7, 0x7, 0x5, 0x6, 0x4, 0x7, 0x5, 0x2, 0x9, 0x8, 0x100, 0x10001, 0x2, 0x2, 0x4, 0x80000000, 0x4, 0x307, 0x4, 0x4, 0xd2, 0xbc9, 0xffffffdc, 0x5, 0xff, 0x2000000, 0x6, 0xac, 0x99, 0x9, 0xe9, 0x1c0000, 0x1, 0x85c, 0x9, 0x6, 0x3, 0x7, 0xc15, 0xb, 0x3, 0x10001, 0x41, 0x7, 0x200, 0x3, 0x7, 0x7, 0x101, 0xfffffffd, 0x400, 0x3ff, 0x81, 0x101, 0x55501607, 0x10001, 0x1, 0x80000001, 0x72, 0x3, 0x60, 0x47e3, 0xffffff00, 0x7fff, 0x80, 0x6, 0x1ff, 0x6, 0x7, 0xa, 0x1, 0x1, 0x1, 0x3, 0x3, 0x2ce, 0x138, 0x3ff, 0x40, 0x6, 0x9, 0x8, 0x0, 0x1, 0x7, 0x7, 0x7, 0x6, 0x2, 0x4000, 0x100, 0x0, 0xa94, 0x4, 0x3, 0x4, 0xfffffb76, 0x2000000, 0x8, 0x9d3, 0x3, 0x8, 0x3, 0x9, 0xff9a, 0x1, 0x7, 0x1, 0xc, 0x4, 0x1, 0x101, 0x80000001, 0x7, 0x6, 0x0, 0x7ff, 0x7, 0x2, 0xcb, 0xd6, 0x9, 0xe0, 0xffffff25, 0x1, 0x4a8a, 0x9, 0x3, 0x9, 0x7, 0x10000, 0x3, 0x1, 0xc4, 0xff, 0x1, 0x4, 0xffff0000, 0x6, 0x8, 0xa, 0x3, 0xb, 0x8, 0x6, 0x1, 0x3, 0x7fff, 0xfffffff4, 0xf551, 0x4, 0x7, 0x4, 0xf, 0x2, 0x7, 0x5, 0xfffffffd, 0xc18a, 0x0, 0x1, 0x8, 0xf8000000, 0x4, 0x7, 0x7ff, 0xff, 0x200, 0x3, 0x7, 0x2, 0x8001, 0x9d, 0x101, 0x101, 0x5, 0x1, 0x101, 0x9, 0x6, 0x3d01, 0x5edb, 0xe, 0x7, 0x8, 0x3, 0xfffffff8, 0x2, 0xc, 0x5, 0x81, 0x3ff, 0x9, 0x4, 0xb, 0x9, 0xc, 0x9, 0x8, 0x1, 0xfffffff0, 0x9, 0x0, 0x1, 0xff, 0x80000000, 0x9, 0x6, 0x8, 0x401, 0x6, 0x5, 0x2, 0x1, 0x10, 0xffffffff, 0x4f87, 0x44, 0x9, 0x6, 0x4, 0x9, 0xa6b9, 0x1, 0x0, 0x8, 0x3ff, 0x5, 0xe0000000, 0x5, 0xe, 0x7f, 0xfa8, 0x0, 0x9, 0x0, 0xc000000, 0x10000, 0x0, 0x9, 0x5, 0x80000001, 0xffffffff, 0x281b, 0x8ea, 0x5, 0x2, 0x80000001, 0xaf, 0x0, 0x3, 0x7fffffff, 0x5, 0xb9, 0x1, 0xde4, 0x9, 0xffff8001, 0x9, 0x3, 0x3, 0x9, 0x0, 0x2, 0x0, 0xc27, 0x8, 0x6aa, 0x79e50ba4, 0x8, 0x2, 0x200, 0x5, 0x4, 0x0, 0x400, 0x3, 0x4, 0x3ff, 0x1, 0x0, 0x81, 0x7, 0x86, 0x10001, 0x8, 0x4, 0x7, 0x4, 0x8, 0x6, 0x5, 0x101, 0x80000001, 0x9, 0x1, 0x7, 0x9, 0x6, 0xb9, 0x9, 0xfffffff8, 0x2, 0x80000001, 0x10, 0x6, 0x7, 0x1, 0x9, 0x1a9, 0xfe1, 0x5, 0x7fffffff, 0x5, 0x40, 0x2, 0x8, 0x5, 0x200, 0x1, 0x9, 0x9, 0x2, 0x22ce, 0x1, 0xce, 0x7f, 0x1, 0xf, 0xa3, 0x3, 0x7, 0x2, 0x9, 0x1000, 0x9, 0x3ff, 0x2, 0xc, 0x3, 0x1000, 0x8, 0xc76, 0x2, 0x3, 0x3, 0x6, 0x6, 0x2, 0x6, 0xb, 0x7, 0x81, 0x1487, 0x0, 0x54, 0x2, 0x1, 0xc1, 0x80000001, 0x10001, 0x9, 0x3, 0x1, 0x8, 0x9, 0xa, 0x400, 0x2, 0x4, 0x0, 0x0, 0x2, 0x0, 0x1, 0x482d, 0x7, 0x5, 0x81, 0xe5b8, 0xbcb, 0x98, 0x8, 0x7, 0x5, 0x4000000, 0x3, 0x80000000, 0x5, 0x10001, 0x2], 0x4, 0x400, 0x4}) readv(r0, &(0x7f0000002580)=[{&(0x7f0000000140)=""/103, 0x67}, {&(0x7f0000001380)=""/241, 0xf1}, {&(0x7f00000001c0)=""/142, 0x8e}, {&(0x7f0000001480)=""/19, 0x13}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/192, 0xc0}], 0x6) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000002600)=""/180, &(0x7f00000026c0)=0xb4) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x220000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) pipe(&(0x7f0000000100)) (async) splice(r2, 0x0, r5, 0x0, 0xaf4, 0x6) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) (async) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f00000000c0)={&(0x7f0000000380)=[0x9, 0x4, 0x5ef2, 0x6, 0x8, 0x75, 0x7, 0x6, 0x7, 0x5, 0x4, 0x7b6, 0x7, 0x9, 0x3, 0x3, 0x7, 0x1d, 0xfffffff7, 0x1, 0x7, 0x86d8, 0x5, 0x5, 0x6, 0x5, 0xfffffe00, 0x2e86, 0x3, 0x10d, 0x6, 0x87, 0x7, 0x4737, 0x6, 0x7, 0x80000001, 0x4, 0xfff, 0x3, 0x6, 0x400, 0x10001, 0x77c2, 0x10, 0xfa, 0x7, 0x1, 0x9, 0x2, 0x78d, 0x8, 0xc00000, 0x40, 0x8000, 0x0, 0x0, 0x9, 0x6, 0x6, 0x8, 0x68a6, 0x375, 0x3, 0x6, 0x7, 0x0, 0x7fff, 0x3, 0x2, 0x8, 0x2, 0x0, 0x2, 0xf43f, 0x8, 0x9, 0xf2, 0x200, 0x400, 0x1, 0x5, 0x2, 0xe000000, 0x7, 0xffffffff, 0x9f, 0x48ac43c1, 0xb, 0x3, 0xfffeffff, 0x30d0, 0x0, 0x5, 0x9, 0x4, 0x7, 0xdb8, 0x3, 0x5c, 0x1, 0x2, 0xffffffff, 0x7, 0xfef, 0xfffffff8, 0xfffffffe, 0x6, 0x4, 0x80000001, 0x3, 0xa1ad, 0x6, 0x8, 0x40, 0x3ff, 0x7, 0x5, 0x69a, 0x0, 0x7, 0x7, 0x7fffffff, 0x3, 0xbd, 0xe126, 0x2, 0x80, 0x1, 0x6, 0x21a5, 0xfff, 0x8, 0x88f, 0x80000001, 0x7, 0xe1, 0x2, 0x0, 0x1000, 0x14000, 0x8, 0x8, 0xd685, 0x4, 0x69c9c80c, 0x9, 0x1, 0x8, 0x4, 0x9, 0xf, 0xfffffc00, 0xa, 0x5f19, 0x2, 0x5, 0x3ff, 0x1, 0x6a26, 0xfffffffb, 0x0, 0x1, 0xffff7622, 0x8, 0x0, 0x6, 0x4, 0x7, 0x87, 0x6, 0x7, 0x7, 0x4, 0x1ff, 0x2, 0x3, 0x10, 0x10001, 0x7, 0x3, 0x2, 0xfff, 0x7, 0xff, 0x8000, 0x5, 0xc9ac, 0x1, 0x5, 0x8, 0x3, 0xff, 0xea, 0x0, 0x7, 0x5, 0x5, 0x8, 0x4, 0x8, 0x1000, 0x2, 0x4, 0x2, 0x7, 0x9cc0, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x9, 0x96, 0x6, 0x7e11, 0x4, 0xf4, 0x6, 0x1, 0x96eb, 0x5, 0x5, 0x8, 0xc3fe, 0xb, 0x5, 0x5cbc, 0x8, 0x9, 0x78, 0x101, 0x4, 0x9, 0x6, 0xfff, 0x92f, 0x9, 0x7a2cd1f3, 0x4, 0xff, 0x5, 0x7, 0x9, 0xffff, 0x3, 0x9, 0x0, 0x5b170f86, 0xc7129b95, 0xfff, 0x1, 0x7040, 0x6, 0x800, 0x3ff, 0xda, 0x8001, 0x6, 0x3, 0x3, 0x7fff, 0xb, 0xfffffff8, 0x1, 0x7f4a, 0x80000001, 0x3, 0x8, 0x8, 0x1, 0x0, 0x1, 0x6, 0x2, 0xffff, 0x4b, 0x3, 0x5, 0x3, 0xfffffff7, 0x8, 0x4, 0x1, 0x1000, 0x7, 0xfffff000, 0xfffffffd, 0xc, 0x7e578857, 0x2, 0x173, 0xe, 0x7, 0x3, 0x5, 0x8, 0xa75, 0x5, 0x1, 0xeb, 0x5, 0x8, 0xa, 0x505, 0x2b, 0x4, 0x0, 0x10000, 0x3ff, 0x3, 0x1ff, 0x7, 0xe, 0x80, 0xff, 0x8001, 0x501, 0x5, 0x5, 0x7, 0x28000, 0xf3bb, 0x9, 0x2, 0x5bf, 0x80, 0x3, 0x8e, 0x7, 0x1, 0xee, 0x24a5, 0x4, 0x7fff, 0x9, 0x4, 0x7, 0x401, 0x4, 0x3, 0xffff611d, 0x9231, 0x9, 0x9, 0x3, 0x1, 0xffffffff, 0x4c9, 0x100, 0x6f04, 0x0, 0x9, 0x7fff, 0x8, 0x9, 0xc, 0xd, 0xb, 0xe, 0x5, 0x9, 0x6, 0x8, 0x6, 0x80000000, 0x1, 0xda, 0x5, 0x6, 0x5, 0xffff760c, 0x0, 0x4, 0x9, 0x4, 0x3, 0x9, 0x9, 0x400, 0x7, 0xfffffffe, 0x1, 0x5540000, 0x0, 0x0, 0x9, 0x7f, 0x9, 0x6, 0x8, 0x80000001, 0x3, 0x5, 0x4, 0x7, 0xa, 0x6, 0x1, 0x8, 0x8, 0xcf, 0x61da7e89, 0x7f, 0x6, 0x8, 0x1, 0x5, 0x59, 0x8001, 0x5, 0xf, 0x2, 0x12d, 0x400, 0x8000, 0x7, 0x29, 0xcfca, 0x7, 0xe78, 0xa, 0x3, 0xae, 0x3fc00000, 0x1, 0x6, 0xe, 0x3, 0x5, 0x6, 0x0, 0x2, 0x1, 0x5, 0x6, 0x3ff, 0x8f5, 0x6, 0x2, 0x6, 0x7, 0x5, 0xe, 0xfffffeff, 0x9, 0x3, 0x3, 0x10, 0x5b, 0x55a, 0x0, 0x4, 0x2, 0x7, 0x8, 0x6, 0x6, 0x8, 0xffffffff, 0xffffffff, 0x4, 0x2, 0x3, 0x2, 0x8000, 0x9, 0x1, 0x5, 0xffff, 0x7f, 0x7fff, 0x40, 0x8, 0x0, 0x7ff, 0x2, 0xc08, 0x3, 0x0, 0x1, 0x2d58, 0x4, 0xd8, 0x9, 0x2, 0x7fff, 0x7, 0x6800, 0x3b79, 0x80000001, 0x3342, 0x5, 0x9, 0x2, 0x0, 0x80, 0x6983, 0x2, 0x5, 0x4, 0x657, 0x8, 0x3, 0x6, 0x6, 0x7, 0x8, 0x10001, 0x7, 0x9, 0x1, 0x5, 0x80, 0x5, 0x4, 0x7, 0x6, 0x4, 0x2, 0x2, 0x8001, 0x101, 0xfffffff3, 0x8, 0x5, 0x0, 0x3, 0x0, 0x8, 0x154d800, 0x3, 0x1, 0x0, 0xbc6c, 0x3, 0xb, 0x3, 0x4, 0x3, 0xc, 0xc, 0x6, 0x3, 0xf25, 0x4800000, 0xffff0000, 0xffff, 0x4, 0x1d1, 0x5, 0xd, 0x9, 0x3, 0x4, 0x81, 0x10001, 0x0, 0x40, 0x1, 0x7, 0x10001, 0x2, 0x2, 0x400, 0xd, 0x5, 0x2, 0x3, 0x28, 0x5, 0x8, 0x6, 0x34d1, 0x200, 0x2, 0x6f, 0x2, 0x48, 0x4, 0x3, 0x1, 0xa4, 0xf, 0x1000, 0x8c0, 0x34, 0x6, 0x7, 0x200, 0x7fffffff, 0x3, 0x9, 0x400, 0x8, 0x5, 0xe, 0x7d78, 0x1, 0x14000000, 0x3, 0x3, 0x0, 0x5, 0xd018, 0x4, 0x5, 0xce6, 0xd, 0x1ff, 0x5, 0x0, 0x24, 0xd, 0x4d, 0x5, 0x7, 0x10000, 0xc, 0x3, 0x2, 0x3, 0x3, 0x2, 0x9, 0x8, 0xa, 0x5, 0x1, 0x19f, 0x9, 0x98, 0x7, 0x7, 0x5, 0x6, 0x4, 0x7, 0x5, 0x2, 0x9, 0x8, 0x100, 0x10001, 0x2, 0x2, 0x4, 0x80000000, 0x4, 0x307, 0x4, 0x4, 0xd2, 0xbc9, 0xffffffdc, 0x5, 0xff, 0x2000000, 0x6, 0xac, 0x99, 0x9, 0xe9, 0x1c0000, 0x1, 0x85c, 0x9, 0x6, 0x3, 0x7, 0xc15, 0xb, 0x3, 0x10001, 0x41, 0x7, 0x200, 0x3, 0x7, 0x7, 0x101, 0xfffffffd, 0x400, 0x3ff, 0x81, 0x101, 0x55501607, 0x10001, 0x1, 0x80000001, 0x72, 0x3, 0x60, 0x47e3, 0xffffff00, 0x7fff, 0x80, 0x6, 0x1ff, 0x6, 0x7, 0xa, 0x1, 0x1, 0x1, 0x3, 0x3, 0x2ce, 0x138, 0x3ff, 0x40, 0x6, 0x9, 0x8, 0x0, 0x1, 0x7, 0x7, 0x7, 0x6, 0x2, 0x4000, 0x100, 0x0, 0xa94, 0x4, 0x3, 0x4, 0xfffffb76, 0x2000000, 0x8, 0x9d3, 0x3, 0x8, 0x3, 0x9, 0xff9a, 0x1, 0x7, 0x1, 0xc, 0x4, 0x1, 0x101, 0x80000001, 0x7, 0x6, 0x0, 0x7ff, 0x7, 0x2, 0xcb, 0xd6, 0x9, 0xe0, 0xffffff25, 0x1, 0x4a8a, 0x9, 0x3, 0x9, 0x7, 0x10000, 0x3, 0x1, 0xc4, 0xff, 0x1, 0x4, 0xffff0000, 0x6, 0x8, 0xa, 0x3, 0xb, 0x8, 0x6, 0x1, 0x3, 0x7fff, 0xfffffff4, 0xf551, 0x4, 0x7, 0x4, 0xf, 0x2, 0x7, 0x5, 0xfffffffd, 0xc18a, 0x0, 0x1, 0x8, 0xf8000000, 0x4, 0x7, 0x7ff, 0xff, 0x200, 0x3, 0x7, 0x2, 0x8001, 0x9d, 0x101, 0x101, 0x5, 0x1, 0x101, 0x9, 0x6, 0x3d01, 0x5edb, 0xe, 0x7, 0x8, 0x3, 0xfffffff8, 0x2, 0xc, 0x5, 0x81, 0x3ff, 0x9, 0x4, 0xb, 0x9, 0xc, 0x9, 0x8, 0x1, 0xfffffff0, 0x9, 0x0, 0x1, 0xff, 0x80000000, 0x9, 0x6, 0x8, 0x401, 0x6, 0x5, 0x2, 0x1, 0x10, 0xffffffff, 0x4f87, 0x44, 0x9, 0x6, 0x4, 0x9, 0xa6b9, 0x1, 0x0, 0x8, 0x3ff, 0x5, 0xe0000000, 0x5, 0xe, 0x7f, 0xfa8, 0x0, 0x9, 0x0, 0xc000000, 0x10000, 0x0, 0x9, 0x5, 0x80000001, 0xffffffff, 0x281b, 0x8ea, 0x5, 0x2, 0x80000001, 0xaf, 0x0, 0x3, 0x7fffffff, 0x5, 0xb9, 0x1, 0xde4, 0x9, 0xffff8001, 0x9, 0x3, 0x3, 0x9, 0x0, 0x2, 0x0, 0xc27, 0x8, 0x6aa, 0x79e50ba4, 0x8, 0x2, 0x200, 0x5, 0x4, 0x0, 0x400, 0x3, 0x4, 0x3ff, 0x1, 0x0, 0x81, 0x7, 0x86, 0x10001, 0x8, 0x4, 0x7, 0x4, 0x8, 0x6, 0x5, 0x101, 0x80000001, 0x9, 0x1, 0x7, 0x9, 0x6, 0xb9, 0x9, 0xfffffff8, 0x2, 0x80000001, 0x10, 0x6, 0x7, 0x1, 0x9, 0x1a9, 0xfe1, 0x5, 0x7fffffff, 0x5, 0x40, 0x2, 0x8, 0x5, 0x200, 0x1, 0x9, 0x9, 0x2, 0x22ce, 0x1, 0xce, 0x7f, 0x1, 0xf, 0xa3, 0x3, 0x7, 0x2, 0x9, 0x1000, 0x9, 0x3ff, 0x2, 0xc, 0x3, 0x1000, 0x8, 0xc76, 0x2, 0x3, 0x3, 0x6, 0x6, 0x2, 0x6, 0xb, 0x7, 0x81, 0x1487, 0x0, 0x54, 0x2, 0x1, 0xc1, 0x80000001, 0x10001, 0x9, 0x3, 0x1, 0x8, 0x9, 0xa, 0x400, 0x2, 0x4, 0x0, 0x0, 0x2, 0x0, 0x1, 0x482d, 0x7, 0x5, 0x81, 0xe5b8, 0xbcb, 0x98, 0x8, 0x7, 0x5, 0x4000000, 0x3, 0x80000000, 0x5, 0x10001, 0x2], 0x4, 0x400, 0x4}) (async) readv(r0, &(0x7f0000002580)=[{&(0x7f0000000140)=""/103, 0x67}, {&(0x7f0000001380)=""/241, 0xf1}, {&(0x7f00000001c0)=""/142, 0x8e}, {&(0x7f0000001480)=""/19, 0x13}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/192, 0xc0}], 0x6) (async) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000002600)=""/180, &(0x7f00000026c0)=0xb4) (async) 5m10.711539146s ago: executing program 3 (id=4529): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007000010600000000000000000700000047"], 0x18}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='f2fs\x00', 0x0, &(0x7f00000035c0)='quota') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x20011, r0, 0xf648d000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$tun(r3, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x3e, 0x1c, 0x64, 0x0, 0xb, 0x1, 0x0, @private=0xa0100fe, @dev={0xac, 0x14, 0x14, 0x1a}}, "3297e3ba0fa8a2e7"}}, 0x2a) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@initdev, @in6=@ipv4={""/10, ""/2, @private}}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r7 = socket$caif_stream(0x25, 0x1, 0x2) connect$caif(r7, &(0x7f0000000040), 0x18) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0xe, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000380)={0x28, 0x0, r8, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000080)={0x28, 0x3, r9, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvfrom$unix(r10, &(0x7f0000000180)=""/120, 0x78, 0x140, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) madvise(&(0x7f00002a7000/0x1000)=nil, 0x1000, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5m10.143251681s ago: executing program 3 (id=4532): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x7f, 0x88}}]}}]}}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$getown(r0, 0x9) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000021c0)=0x0) r3 = syz_clone(0x10200, &(0x7f0000002200)="e83fe3f3d4d2ef3516f2a02b38beb9a1e516da4e08ebc09cb50d78fb6486e0f13fc31e0a482ef9a3dbea3f1d10acd14935201d94c62784c9a433094c85048d41f0781b6d2d258e06ad6a4a93cf64d5e0f166cbd9da5a85cbb6272ac6ff39f615022a6fb35dacf407058c2f43d3574dc13b440a6efdda613951db83e7621c31103cb1407c907348fd74578ff30ca80dd6fb22de94821b4450b1b3348545da4796e6272ffcafb6701a1f134479f7aa89401083f7f7e237adfece1814570812a3fbc0defe1a1cc13ec8ab91def23341a1db43a0f4d6c4405a8964b0f60193", 0xdd, &(0x7f0000002300), &(0x7f0000002340), &(0x7f0000002380)="1ca870e94921a6d1fa399f79396b77ba") syz_clone3(&(0x7f0000002400)={0x200000800, &(0x7f0000002000), &(0x7f0000002040), &(0x7f0000002080), {0x2}, &(0x7f00000020c0)=""/135, 0x87, &(0x7f0000002180)=""/55, &(0x7f00000023c0)=[r1, r2, r3], 0x3, {r0}}, 0x58) r4 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}}) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x20, &(0x7f0000000100)=ANY=[@ANYBLOB="0c00004e1560254722cb66187f3b68d00c08004e15"]) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r6, 0x7dfff000) fcntl$getown(r4, 0x9) 5m9.232611453s ago: executing program 1 (id=4545): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x80000, 0x0) 5m9.117561084s ago: executing program 1 (id=4547): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 5m9.100605701s ago: executing program 1 (id=4549): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async) mlock2(&(0x7f000008e000/0x4000)=nil, 0x4000, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x258042, 0x18e) 5m8.933553934s ago: executing program 1 (id=4551): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x10, &(0x7f0000000040)={0x0, 0x2, 0x6, "92afc102df3e"}, 0x0, 0x0}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_int(r1, 0x0, 0xf, 0x0, &(0x7f0000000240)) (async) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000440)={'a', ' *:* ', 'w\x00'}, 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB='usrquota_block_hardlimit=23e48%,uid<', @ANYRESDEC=r4, @ANYBLOB="2c736d61636b856af8ec9cb31059781d9a810fba5664e166737472616e736d7574653d402c00"]) (async, rerun: 64) setpgid(0x0, r3) (async, rerun: 64) creat(&(0x7f0000000000)='./file0\x00', 0x1ea) (async) mount(0x0, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) 5m8.728442352s ago: executing program 3 (id=4554): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000380)={'syz1\x00', {0x1, 0x2, 0x1ff, 0xb06}, 0x27, [0x1000, 0x10001, 0x80, 0x10, 0xc, 0x827, 0x0, 0x1, 0xcf1, 0x2, 0x0, 0x8, 0x3, 0x100, 0xc776, 0x7, 0x7, 0x9, 0x3, 0xfffffffd, 0xfffffffd, 0x4, 0x2, 0xa, 0xe, 0x1, 0x80000000, 0x4, 0x8, 0xb, 0x4, 0xa9, 0x956, 0x1, 0x88, 0x4, 0x8000, 0x7, 0xa, 0x0, 0x9de, 0x1, 0x0, 0x80000000, 0x7, 0x2, 0x7fff, 0xc30, 0x40000000, 0x6, 0xb05, 0xc, 0x8, 0x5, 0x6, 0x4, 0x0, 0x3, 0x3, 0x9, 0x5, 0x6, 0x0, 0x3fcc], [0x800, 0x96, 0x2fd1d58, 0x0, 0x401, 0x6, 0x1, 0x8, 0x7, 0x80, 0xfff, 0x2f, 0x9, 0x3, 0x10001, 0x0, 0xfffffbff, 0x6, 0x100, 0x4, 0x7fffffff, 0x1, 0x8001, 0x1, 0xd, 0x5, 0x1000, 0x8, 0x1, 0x9, 0x80000000, 0xd, 0x1, 0x0, 0xfa, 0x3, 0x9f9, 0x1, 0x2, 0xb342, 0x2, 0x451f, 0x1, 0x605f, 0xb2, 0xd4e5, 0x3, 0x80000001, 0x1, 0x2, 0x5, 0x0, 0x6c, 0x7, 0x101, 0xca8, 0x0, 0x7fffffff, 0xfffffffe, 0xffffff81, 0x5, 0x7, 0x5, 0xff], [0xfffffff5, 0x0, 0x0, 0xdd, 0x6, 0x0, 0x80000349, 0x10000000, 0x89ef, 0xcb4, 0x4, 0x587a, 0x0, 0xf, 0x100, 0xa0000000, 0x0, 0x5, 0x4, 0x9, 0x6, 0xe, 0xcc, 0x7, 0x200, 0x8, 0x6, 0x6, 0x2, 0x10001, 0x7fff, 0x1, 0xfb, 0x2, 0x1, 0x1, 0x0, 0x1fd, 0x6, 0xf, 0x4, 0x2, 0x1000, 0xfa, 0x5, 0x2, 0x6, 0x0, 0x2, 0x3, 0x9, 0x5, 0x741, 0x3, 0x8, 0x2, 0xff, 0x8, 0x6, 0x7ff, 0xd, 0x5, 0x7f], [0x2e, 0x9, 0x1, 0x1d43, 0x5, 0x4f84, 0x7ff, 0x0, 0x4, 0x2b, 0x6, 0x81, 0x8, 0x200, 0xa, 0x1, 0x7fff, 0x7, 0x4, 0x1, 0x2acd684b, 0x2, 0x0, 0x80000000, 0x8009, 0x4, 0x41, 0x7, 0x2, 0x4, 0x5, 0x6, 0xda, 0x200, 0x0, 0x6, 0x2, 0xa0000, 0x6a, 0x6, 0x8, 0x8, 0x5, 0xffffff2d, 0x4, 0xbe9f, 0x6, 0x2, 0x8cb3, 0x7, 0x400, 0x7, 0x10000, 0x1c0000, 0x8, 0xaa3, 0x38e5, 0x0, 0x5, 0x2, 0x1, 0x3, 0x6, 0x4]}, 0x45c) rmdir(&(0x7f0000000280)='./control\x00') mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$afs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) chdir(&(0x7f00000000c0)='./file0\x00') (async) inotify_init1(0x0) (async) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) (async) write$uinput_user_dev(r1, &(0x7f0000000380)={'syz1\x00', {0x1, 0x2, 0x1ff, 0xb06}, 0x27, [0x1000, 0x10001, 0x80, 0x10, 0xc, 0x827, 0x0, 0x1, 0xcf1, 0x2, 0x0, 0x8, 0x3, 0x100, 0xc776, 0x7, 0x7, 0x9, 0x3, 0xfffffffd, 0xfffffffd, 0x4, 0x2, 0xa, 0xe, 0x1, 0x80000000, 0x4, 0x8, 0xb, 0x4, 0xa9, 0x956, 0x1, 0x88, 0x4, 0x8000, 0x7, 0xa, 0x0, 0x9de, 0x1, 0x0, 0x80000000, 0x7, 0x2, 0x7fff, 0xc30, 0x40000000, 0x6, 0xb05, 0xc, 0x8, 0x5, 0x6, 0x4, 0x0, 0x3, 0x3, 0x9, 0x5, 0x6, 0x0, 0x3fcc], [0x800, 0x96, 0x2fd1d58, 0x0, 0x401, 0x6, 0x1, 0x8, 0x7, 0x80, 0xfff, 0x2f, 0x9, 0x3, 0x10001, 0x0, 0xfffffbff, 0x6, 0x100, 0x4, 0x7fffffff, 0x1, 0x8001, 0x1, 0xd, 0x5, 0x1000, 0x8, 0x1, 0x9, 0x80000000, 0xd, 0x1, 0x0, 0xfa, 0x3, 0x9f9, 0x1, 0x2, 0xb342, 0x2, 0x451f, 0x1, 0x605f, 0xb2, 0xd4e5, 0x3, 0x80000001, 0x1, 0x2, 0x5, 0x0, 0x6c, 0x7, 0x101, 0xca8, 0x0, 0x7fffffff, 0xfffffffe, 0xffffff81, 0x5, 0x7, 0x5, 0xff], [0xfffffff5, 0x0, 0x0, 0xdd, 0x6, 0x0, 0x80000349, 0x10000000, 0x89ef, 0xcb4, 0x4, 0x587a, 0x0, 0xf, 0x100, 0xa0000000, 0x0, 0x5, 0x4, 0x9, 0x6, 0xe, 0xcc, 0x7, 0x200, 0x8, 0x6, 0x6, 0x2, 0x10001, 0x7fff, 0x1, 0xfb, 0x2, 0x1, 0x1, 0x0, 0x1fd, 0x6, 0xf, 0x4, 0x2, 0x1000, 0xfa, 0x5, 0x2, 0x6, 0x0, 0x2, 0x3, 0x9, 0x5, 0x741, 0x3, 0x8, 0x2, 0xff, 0x8, 0x6, 0x7ff, 0xd, 0x5, 0x7f], [0x2e, 0x9, 0x1, 0x1d43, 0x5, 0x4f84, 0x7ff, 0x0, 0x4, 0x2b, 0x6, 0x81, 0x8, 0x200, 0xa, 0x1, 0x7fff, 0x7, 0x4, 0x1, 0x2acd684b, 0x2, 0x0, 0x80000000, 0x8009, 0x4, 0x41, 0x7, 0x2, 0x4, 0x5, 0x6, 0xda, 0x200, 0x0, 0x6, 0x2, 0xa0000, 0x6a, 0x6, 0x8, 0x8, 0x5, 0xffffff2d, 0x4, 0xbe9f, 0x6, 0x2, 0x8cb3, 0x7, 0x400, 0x7, 0x10000, 0x1c0000, 0x8, 0xaa3, 0x38e5, 0x0, 0x5, 0x2, 0x1, 0x3, 0x6, 0x4]}, 0x45c) (async) rmdir(&(0x7f0000000280)='./control\x00') (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) (async) 5m8.497927109s ago: executing program 3 (id=4555): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f00000062c0)={&(0x7f0000005f80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006180)=[{&(0x7f0000006000)=""/179, 0xb3}, {&(0x7f00000060c0)=""/121, 0x79}, {&(0x7f0000006140)=""/3, 0x3}], 0x3, &(0x7f00000061c0)=""/238, 0xee}, 0x40) (async) recvmmsg$unix(r0, &(0x7f0000005cc0)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000180)=""/2, 0x2}, {&(0x7f00000001c0)=""/152, 0x98}, {&(0x7f0000000280)=""/245, 0xf5}, {&(0x7f0000000380)=""/214, 0xd6}], 0x4, &(0x7f00000004c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000000500), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000580)=""/148, 0x94}, {&(0x7f0000000640)=""/164, 0xa4}, {&(0x7f0000000700)=""/207, 0xcf}, {&(0x7f0000000800)=""/97, 0x61}], 0x4}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)=""/231, 0xe7}], 0x1, &(0x7f0000000a00)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000000b40)=@abs, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000bc0)=""/126, 0xfffffffffffffe61}, {&(0x7f0000000c40)=""/208, 0xd0}, {&(0x7f0000000d40)=""/45, 0x2d}], 0x3}}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000000dc0)=""/216, 0xd8}, {&(0x7f0000000ec0)=""/221, 0xdd}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/118, 0x76}, {&(0x7f0000002040)=""/103, 0x67}], 0x5}}, {{&(0x7f0000002140)=@abs, 0x6e, &(0x7f0000003580)=[{&(0x7f00000021c0)=""/179, 0xb3}, {&(0x7f0000002280)=""/119, 0x77}, {&(0x7f0000002300)=""/109, 0x6d}, {&(0x7f0000002380)=""/15, 0xf}, {&(0x7f00000023c0)=""/225, 0xe1}, {&(0x7f00000024c0)=""/124, 0x7c}, {&(0x7f0000002540)=""/22, 0x16}, {&(0x7f0000002580)=""/4096, 0x1000}], 0x8, &(0x7f0000003600)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000003740), 0x6e, &(0x7f0000003b80)=[{&(0x7f00000037c0)=""/222, 0xde}, {&(0x7f00000038c0)=""/124, 0x7c}, {&(0x7f0000003940)=""/78, 0x4e}, {&(0x7f00000039c0)=""/179, 0xb3}, {&(0x7f0000003a80)=""/171, 0xab}, {&(0x7f0000003b40)=""/45, 0x2d}], 0x6, &(0x7f0000003c00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000003c40), 0x6e, &(0x7f0000004e80)=[{&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/111, 0x6f}, {&(0x7f0000004d40)=""/2, 0x2}, {&(0x7f0000004d80)=""/223, 0xdf}], 0x4}}, {{&(0x7f0000004ec0), 0x6e, &(0x7f0000005400)=[{&(0x7f0000004f40)=""/49, 0x31}, {&(0x7f0000004f80)=""/207, 0xcf}, {&(0x7f0000005080)=""/197, 0xc5}, {&(0x7f0000005180)=""/209, 0xd1}, {&(0x7f0000005280)=""/174, 0xae}, {&(0x7f0000005340)=""/57, 0x39}, {&(0x7f0000005380)=""/54, 0x36}, {&(0x7f00000053c0)=""/48, 0x30}], 0x8, &(0x7f0000006300)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000005540)=@abs, 0x6e, &(0x7f0000005b80)=[{&(0x7f00000055c0)=""/189, 0xbd}, {&(0x7f0000005680)=""/166, 0xa6}, {&(0x7f0000005740)=""/73, 0x49}, {&(0x7f00000057c0)=""/6, 0x6}, {&(0x7f0000005800)=""/106, 0x6a}, {&(0x7f0000005880)=""/50, 0x32}, {&(0x7f00000058c0)=""/82, 0x52}, {&(0x7f0000005940)=""/91, 0x5b}, {&(0x7f00000059c0)=""/223, 0xdf}, {&(0x7f0000005ac0)=""/164, 0xa4}], 0xa, &(0x7f0000005c40)=[@rights={{0x24}}, @cred={{0x1c}}], 0x48}}], 0xa, 0x40000003, &(0x7f0000005f40)={0x0, 0x989680}) 5m8.039676836s ago: executing program 3 (id=4559): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d54549b}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x2f, 0x80805, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000080)={r5, @in6={{0xa, 0x4e23, 0xfffffff7, @remote, 0x4}}, [0xed40, 0x5, 0x100000001, 0x100, 0x5, 0x1, 0x5, 0x80, 0xfffffffffffffffc, 0x9, 0xd6be, 0x8, 0x1]}, &(0x7f00000001c0)=0x100) creat(&(0x7f0000000040)='./file0\x00', 0x31) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x43) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r8 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r7, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5002000046cddd3d9523fd6837c343a3dc7802a0526092d8402ce7422b5e9d35546a68e8fe8c6f4f73d054d90ddf0ff5fe8ab2852452e33610391f7d647b46651b32f4c3ec2e4c", @ANYRES16=0x0, @ANYBLOB="000828bd7000fcdbdf250600000008000300", @ANYRES32=r9, @ANYBLOB="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"], 0x250}, 0x1, 0x0, 0x0, 0x8533dfbb988de0f}, 0x8800) socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f00001df000/0x3000)=nil, 0x3000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r10 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r10, &(0x7f0000000140)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, 0x80, &(0x7f0000000100)=[{&(0x7f00000001c0)="3fd4ac5d41c469e4662eb978f1a25800ba324fc56413c72941b19e8bb5adc7e708fa6cfb70c4c67d0b615b879354372960f273d46def13361ba741c3b53f228c9404d5aaa6afd701b93bfcc09a0303d4ab585ced9218591175f712f819784903bc0e46f5ae769cf41c68603ea497855174b1e5b2e7f875e075a60470f8b00277cdc1fdd0e7", 0x85}], 0x1}, 0x20000080) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) 5m7.316050956s ago: executing program 33 (id=4559): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d54549b}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x2f, 0x80805, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000080)={r5, @in6={{0xa, 0x4e23, 0xfffffff7, @remote, 0x4}}, [0xed40, 0x5, 0x100000001, 0x100, 0x5, 0x1, 0x5, 0x80, 0xfffffffffffffffc, 0x9, 0xd6be, 0x8, 0x1]}, &(0x7f00000001c0)=0x100) creat(&(0x7f0000000040)='./file0\x00', 0x31) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x43) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r8 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r7, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5002000046cddd3d9523fd6837c343a3dc7802a0526092d8402ce7422b5e9d35546a68e8fe8c6f4f73d054d90ddf0ff5fe8ab2852452e33610391f7d647b46651b32f4c3ec2e4c", @ANYRES16=0x0, @ANYBLOB="000828bd7000fcdbdf250600000008000300", @ANYRES32=r9, @ANYBLOB="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"], 0x250}, 0x1, 0x0, 0x0, 0x8533dfbb988de0f}, 0x8800) socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f00001df000/0x3000)=nil, 0x3000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r10 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r10, &(0x7f0000000140)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, 0x80, &(0x7f0000000100)=[{&(0x7f00000001c0)="3fd4ac5d41c469e4662eb978f1a25800ba324fc56413c72941b19e8bb5adc7e708fa6cfb70c4c67d0b615b879354372960f273d46def13361ba741c3b53f228c9404d5aaa6afd701b93bfcc09a0303d4ab585ced9218591175f712f819784903bc0e46f5ae769cf41c68603ea497855174b1e5b2e7f875e075a60470f8b00277cdc1fdd0e7", 0x85}], 0x1}, 0x20000080) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) 5m7.253655766s ago: executing program 1 (id=4562): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xac) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x8, 0x1, 'client1\x00', 0x5, "59d621f66cfac767", "0e863ba9817df4e176d1ee90b410d2dfc51fd6d51f6d73439f133c89b237e93b", 0x5, 0x8001}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000280)={{0xf7, 0x89}, 'port1\x00', 0x81, 0x2757f6197e5543f9, 0x3, 0x9c37, 0x1, 0x8001, 0x8, 0x0, 0x7, 0x7}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000440)={0x1, @raw_data="6e5e0d8af755aaeb4e563231029c6060cb90186ad12fcff681d35bf8204529cf75d5c236c4ba611e967817b3c9e2bd07fa0c1777bf78f1c3e2b902b713ed09332fe333bf46606760d3b64c0ff252e15c61a0ebb4c49886cd31bca3d2906cb584a927283e6ba03b1121c8ecdc3829085bfc5ba3f3ce60e0bfe2f26cd3206b004da5328b1237de048a0bb6ab9c562ab4ba7a314d4414b03f09ed995423b147395f48627834f74b0f25bfb593fec9e3d90034e7aa5310b5e6b168e4adebc9df10815ccde151483bd6fe"}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r5, 0x3b8b, &(0x7f0000000300)={0x10, 0x0, r7}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f00000000c0)={0x30, r7, 0x1, 0x0, 0x9, 0x44, 0x5, &(0x7f0000000040)=""/31}) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 5m6.977671065s ago: executing program 1 (id=4565): mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='efs\x00', 0x200000, 0x0) 5m6.234293163s ago: executing program 34 (id=4565): mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='efs\x00', 0x200000, 0x0) 4m33.968641374s ago: executing program 4 (id=4727): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x20, 0x33, 0xb, 0x0, 0x0, {0x7}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x20}}, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000000c0)={[{0xfffffff1, 0x7, 0x81, 0xfd, 0x0, 0x8, 0x7, 0x1, 0x1, 0x3a, 0xc, 0x4, 0x10001}, {0x391, 0x7fff, 0x4, 0x8, 0x2, 0x7, 0xfb, 0x1, 0x9, 0xff, 0x2, 0x81, 0x9}, {0xfff, 0x7f, 0x6, 0xc, 0x12, 0x3, 0x80, 0xdb, 0x4, 0x4, 0x8, 0x22, 0x9}], 0x5a}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) sendfile(r3, r3, 0x0, 0x7ffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregset(0x4205, r5, 0x2, &(0x7f00000001c0)={0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) futex_waitv(0x0, 0x0, 0x2000000, 0x0, 0x1) r7 = socket$tipc(0x1e, 0x5, 0x0) r8 = dup3(r6, r7, 0x0) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0xe5b}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r8, 0x84, 0x78, &(0x7f0000000080)=r9, 0x4) 4m33.533506853s ago: executing program 4 (id=4728): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00\x00\x00\x00\x00)\x00'], 0x68}}], 0x1, 0x4000000) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f00000001c0), 0x8) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000440)=0x1, &(0x7f00000007c0)=0x4) r4 = syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000000)={0xd, @vbi}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x181) fcntl$notify(r6, 0x402, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) shutdown(r1, 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0xa8000, 0x0) getpeername$l2tp(r5, &(0x7f0000000100)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r1) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r6, 0xc0305615, &(0x7f00000000c0)={0x0, {0x3, 0x9}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e21, 0x516, @remote, 0x55}}, [0x1d, 0x4, 0xfffffffffffffffc, 0x5243d027, 0xd6, 0x4, 0x7f, 0x7f, 0x3, 0x0, 0x101, 0x7, 0x3, 0xffffffffffffffff, 0x3]}, &(0x7f0000000080)=0x100) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00') getdents64(r7, &(0x7f0000000100)=""/80, 0x2f) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x4bfa, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) 4m33.441860333s ago: executing program 4 (id=4729): r0 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) (async) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000140)=""/162, 0xa2, 0x3eb5, &(0x7f0000000280)={r1, r2+60000000}) (async) mq_timedreceive(r0, &(0x7f0000000640)=""/4096, 0x1000, 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100)) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001fa00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a300000000014000000020a5b"], 0x88}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x200000000000000) (async, rerun: 32) ioctl$IMCTRLREQ(r4, 0x80044945, &(0x7f00000002c0)={0x400, 0x6, 0x80, 0x220}) (rerun: 32) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xd, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r5, 0x3b86, &(0x7f00000002c0)={0x18, r6}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x8, 0x0, 0x0, 0x0) r9 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r7, 0x8983, &(0x7f00000000c0)={0x8, 'syz_tun\x00', {'veth0_to_hsr\x00'}, 0x8001}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0x15, 0x0, &(0x7f0000000040)) (async) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0014"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x1ea) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) 4m33.343848228s ago: executing program 4 (id=4730): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r1, 0x111, 0x1, 0x0, &(0x7f0000000080)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) prlimit64(r3, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_timeval(r4, 0x1, 0x15, 0x0, &(0x7f0000000080)) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x6, 0x0) sendfile(r6, r5, 0x0, 0x7ffff001) 4m33.220823367s ago: executing program 4 (id=4732): ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes256, 0x16, '\x00', @b}) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r0, 0x80284504, &(0x7f0000000000)=""/56) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0xa}, 0x18) r1 = syz_clone(0x0, &(0x7f00000000c0)="074aeb9d451fb9ad65b7042859d72236399dfaa797952ecb9b0b6bd7351d416893bc28431e311a7b88db4ebca430ee9b915f6e3161d979740cb7443c8795556e4bd01b8cc6f8931eacfb80609f92a65f8cfc0267f6", 0x55, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="1b39f085bb52facf16568b5e2c1f0c26ae20dd3c38727aa17bd631344ffa438678248f69cb003be62c7a837add3dbb40c01d4b29090af8f6cdd544698f938452a9399b0ce478d50f2ade8df41a52eafe9a0363c7e63bd0177a6705776ced1a") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f00000003c0)={r1, 0x0, 0x2}) sendmsg$inet6(r5, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="f7", 0x1}], 0x1}, 0x4000) kcmp$KCMP_EPOLL_TFD(r1, r3, 0x7, r0, &(0x7f0000000380)={r5, r0, 0xb345}) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x8c011, 0x0) mknodat(r6, &(0x7f0000000040)='./file0\x00', 0x100, 0x54d) 4m32.958162081s ago: executing program 4 (id=4734): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648d000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x70bd2f, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48041}, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x2}}, 0x2e) 4m17.67276779s ago: executing program 35 (id=4734): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648d000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x70bd2f, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48041}, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x2}}, 0x2e) 3m41.508326453s ago: executing program 5 (id=5018): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100), 0x4) listen(r0, 0xa) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4400, 0x0) r1 = syz_io_uring_complete(0x0) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x2}}, './cgroup\x00'}) 3m41.337462444s ago: executing program 5 (id=5020): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x7c, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x60, 0x8, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8a27c5c1b90afa837606edf956b86aacceedaf0dae966cdc005e285145a4c422"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffad}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x7c}}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000040)={'netdevsim0\x00', {0x2, 0x0, @local}}) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) r7 = open(&(0x7f0000000100)='./file0\x00', 0x220400, 0x100) ioctl$VIDIOC_G_AUDOUT(r7, 0x80345631, &(0x7f0000000140)) r8 = socket(0x40000000015, 0x805, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r10, 0x29, 0x18, 0x0, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNGETVNETBE(r11, 0x800454df, &(0x7f0000000600)=0x1) sendmsg$IPSET_CMD_TEST(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) getsockopt(r8, 0x118, 0x5, 0x0, &(0x7f0000000180)) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x3a, 0x2, 0x0, "8baadc68379dd10200e6fff749686b10ff85a510ec01000000419d6bc2cb00"}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'wlan0\x00', &(0x7f0000000200)=@ethtool_stats={0x1d, 0x4, [0x2, 0x0, 0x7, 0x100]}}) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000)) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000) 3m40.67070726s ago: executing program 5 (id=5026): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}}, 0x80, 0x0}, 0x40810) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000001fc0)={0x460, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5f}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffff}, @NL80211_ATTR_FRAME={0x3b9, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @from_mac, {0x9}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x1012, 0x7, @device_a, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x12}, {0xc}, {0xc, 0x1}, {0x9, 0x1}]}, @val={0x2d, 0x1a, {0x300, 0x0, 0x0, 0x0, {0x10001, 0x3, 0x0, 0x259, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x8, 0x800, 0x3}}, [{0xdd, 0x13, "c0178b979ea0907e64f86dc8c879099b75bee1"}, {0xdd, 0x9a, "88d9b8d5c21239e0b21953bdfe843cd036b2d09fe760cde293125a05811e5b983addd14710acc51caeb0966ed41097077157afaf9385d1fe3303b163b88cafe118d234b5ff37c231ced120ba0f36522819481494b0f3cccd1a7c0f5e9292c5b98f08405436b43d1943b75befd8cf732371b66eaf5e2a8de5445ba39c8eb372bd7866e58eefb8d4713523cedb1d4b873b43e603f3fa21c30edb99"}, {0xdd, 0xa9, "d5a4d8297fbb8c8028ba2426756193db09436af3f391e9f8fb57810d3b71d9ae99301a8de0d3e711b4427a346d4a60ffcf7cb078cdbe2b2f2b685075b465f009a64dc2314feb46d32d6297160bb4c33660855abac6a3f721001d14f2ebe8cb924c0324bce143b348195b390aaacc68ba9f94e18aea4eddc69af2cac48020347429fe058daf5ff505cdae3d25fd9ef4fbd934a34be741d9c3499e5176116e20e5aa7f09bace36812885"}, {0xdd, 0x94, "e40d9b7894cdaf3963247290e8bc27036e97a326d1167f1edca6c27def93331b627994b9cc997bdbbaab5eb4a0d8dd5d0f465717b4949e8e5ae7abb2322969cd470445bd60b3c6f1777295fff0f928c58f0b2f4ad7a02597cc2fc309ca27787e1300158ff2cf258c7b685400a6508c28762f3d783bcf1a8c50a1ddc108c56b7edcf8b6d20938bb8fd59c22f0557470c10b543ac3"}, {0xdd, 0xc9, "2c3a0de19d84258be5670c8b009a46515ee3b108a03f155dd97b1790ff57c2f1803b26cc9e776ad948f39111b449a685f6808c988471f98cb87ebf5c177eabc67a48c63b39de322fbb397e9191661ddc4b90c164f6535f86ecf858a1d4e09dd1585b87428463251a153629f9b8834b0f881fc6a34af1feccc60fa3ee6266645588f238e684c9c86f41562c962862a24d31ee7b8e234bd127467668fab21465d359ad01bc0b7abc878ef37e1b68afbb05f53d0a7a3084305c6d7faabdd16c41cc98262d71cdc121c8fa"}, {0xdd, 0x6, "f48e7192a754"}, {0xdd, 0x9e, "c7eb2efa02debe2c942e23933974f567a22ea8e4212a8738de284f2c37d6959159eb7691a0bb8e01593b5798fc53a843a2781805fe02bb45bba707f1ccd30fbda62a097693785d8ef747ef40d7cfff8177948def618aa0c026672ffc91e4805cd289f724e46a63d4e7b7b1bb9a86c505a9cc3398fd1363c5e7b876d32cbf3300f4b0cb417b1a23519e1c7a2fbc98bd5989e92537928970ec7c1c1e96146e"}]}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xef}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbb0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1000}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7e2}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x460}, 0x1, 0x0, 0x0, 0x24011}, 0x404c000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0adff010000000000000dd6e4edef3d93452a09004b43370e9703890723f97e46bb", 0xd3}], 0x1}, 0x20004804) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 3m40.432353385s ago: executing program 5 (id=5027): r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400840000000009040000028b8647000905e869690900000009050a"], 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2800000024000100000000000000000008000000803f545be42b50be172e5a35d6c8daef2909c069771508cd5996e6a3f0fdc8f5c89622a5b3402822eab9879936c2a3fb43d63503814be0f9907bdefe6601235374dfebccc929c8ea7730de6d3fce4b6cf954e510952389e7526c99485f1e1ed91efa509ecff1110caa5de117c015113b9efcf107f832738da971fd71463fb2756eed03464978a61da7ba6e1aea9f0166df0e1e71f391a062e225546cf169317005acacf4", @ANYRES32=0x0, @ANYBLOB="09000080976b64086800000004000180"], 0x28}], 0x1}, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000007000046009d", @ANYBLOB="c770ee18914110e7c19b01ac039e3b014b5aec3434a72f40ae71e605169e6bf8700ae9"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000200)=""/234) 3m38.373277115s ago: executing program 5 (id=5042): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x3c) (async) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x3c) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) gettid() (async) r3 = gettid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) setpgid(r3, r0) creat(&(0x7f0000000000)='./file0\x00', 0x1ea) (async) creat(&(0x7f0000000000)='./file0\x00', 0x1ea) mount(0x0, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) 3m38.221163272s ago: executing program 5 (id=5043): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpgrp(0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x5050, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x147443, 0x0) r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x0, 0x0, 0x0, 0x80000000}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r8) sendmsg$DEVLINK_CMD_PORT_SET(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r9, 0x1, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 3m23.217802652s ago: executing program 36 (id=5043): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpgrp(0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x5050, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c00014000000000000000000c00014000000000000000014c000480080002404c82f47c080001400000000008000140000000010800014000000003080002404f32945f080001400000000308000140000000020800024019885f270800014000000003fd000c00a03ac330bf11a2145946e6d945deece8485ee69dbc29a8dd5dbce127f829a3adf5c4171b4bedbbc9b913a67b9ee679020f0200000064419faae0136b893d91d95b1174f115798a1abfdc06983fb83f2116a85a00dd35cdf9d8f81683e5e2ebcca132a712e0be44c12c02ac92fbbb86ed717ce0cbd6a0134f899e23ca6d2f063d26be86555cc0e9c7a25d77e6c0f4217794be96b5d797e3116d874c3adfb096e0567ec28bd1e4d8d6713109695f1f3a877d89d20e19304501aeb851d14c4f9b2d769d554fe5308810d19bb040c1977bce50b894f2c45a1f0e80c8256b6dcb072f9d91d94a67bba9f62eb2f192fa4b3786d9a774b99aa332dfbb000000080007"], 0x25c}}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x147443, 0x0) r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x0, 0x0, 0x0, 0x80000000}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r8) sendmsg$DEVLINK_CMD_PORT_SET(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r9, 0x1, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 4.758447109s ago: executing program 2 (id=6146): pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]}) 4.704771141s ago: executing program 2 (id=6147): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffff]}, 0x0, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x27, "990d8e5219a83f3731069d34dccc58bc857ae5f4d572867e2288533d5caf1768489cf6c5f1a4ac"}, &(0x7f0000000200)=0x2f) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={r3, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r2, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="c18e0000"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x20) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0x401070c9, 0x0) r5 = getpid() r6 = gettid() rt_tgsigqueueinfo(r5, r6, 0x8, &(0x7f0000000000)={0x0, 0x200000, 0x4}) ioctl$BLKRRPART(r0, 0x125f, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffff]}, 0x0, 0x8) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x27, "990d8e5219a83f3731069d34dccc58bc857ae5f4d572867e2288533d5caf1768489cf6c5f1a4ac"}, &(0x7f0000000200)=0x2f) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={r3, 0x4}, 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) (async) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) (async) sendmsg$inet_sctp(r2, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) (async) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="c18e0000"], 0x8) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x20) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r4, 0x401070c9, 0x0) (async) getpid() (async) gettid() (async) rt_tgsigqueueinfo(r5, r6, 0x8, &(0x7f0000000000)={0x0, 0x200000, 0x4}) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) 4.18957083s ago: executing program 7 (id=6148): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) (async) set_mempolicy(0x4003, &(0x7f0000000200)=0x8000000007, 0x5fff) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000240)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x54, &(0x7f0000000380)=[@in6={0xa, 0x4e21, 0xa, @mcast1, 0x9}, @in6={0xa, 0x4e25, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb}, @in6={0xa, 0x4e21, 0xfff, @empty, 0x7ff}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000200)={r3, 0x9, 0x30, 0xd8ba, 0x9}, &(0x7f0000000080)=0x36) (async, rerun: 64) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'rose0\x00'}}) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x22052, r0, 0x93774000) fsetxattr$security_ima(r2, &(0x7f0000000040), &(0x7f00000000c0)=@v2={0x5, 0x3, 0x5, 0x21e8, 0x77, "4355af8bd2179301f05f6bd8370ba3c7c253792810f2e6acbbd941a0836dbcb9454c2bd63e7a7da13dc171d0264b8ade8c27e140e40e409c2cab4f0fc72a254d1dd20d95af397175ada2a3d6319dd8ad9ad2883eb3715097f30164c41d7ff0e480e5e82c41dce0b895cb3b1b27e62f9c7eecc5cb187246"}, 0x80, 0x1) (async) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) 3.785401137s ago: executing program 7 (id=6151): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000001180)=0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2, r3}) unshare(0x2040400) fcntl$lock(r2, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x1b9, 0x1fd}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x50, r5, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) 3.610882285s ago: executing program 7 (id=6153): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x4) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000100)=0x49d820e0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000840)={0x4000400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff], 0x1}, 0x58) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x5708e000) 2.565605865s ago: executing program 7 (id=6154): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x32840, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x491240, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 2.564953719s ago: executing program 6 (id=6155): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) r4 = fsopen(&(0x7f0000000080)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) write$P9_RLERRORu(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='S\x00\x00\x00\a'], 0x53) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010006080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',\b\x00\x00\x00o=', @ANYRESHEX=r3, @ANYBLOB=',k']) r7 = epoll_create(0x8) r8 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @default}, [@default, @null, @default, @null, @rose, @remote, @null]}, &(0x7f0000000180)=0x48, 0x80000) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f00000001c0)={r7, r8, 0xcbd2}) ioprio_set$pid(0x2, r0, 0x4000) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0xd0, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0xa4, 0x4, 0x0, 0x1, [{0xa0, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x8c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x80, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7b, 0x1, "a6d5ac4e41747147ba86b4cb5713607740110c66a61ef64a9ef10cf821b82afda40703cec33f71410eae4b79eaf150c0396e7eec74b3927a1fa0294d27edb20c88474efb56a7883f25e1d9ae40695ca1e2f5c3702d62c6f7b4cdf756b0f0412184d3a6e667a9147e6a9aa44aea9499e8e350928a8dc5f0"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1000000}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xf8}}, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d00010000000000000017cd4460bc08eab5569297d11e61828837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x69}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r11, r11, 0x0, 0x7ffff000) 2.409200909s ago: executing program 6 (id=6157): pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]}) 2.321555518s ago: executing program 7 (id=6158): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file0\x00', 0x181) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='erofs\x00', 0x200004, 0x0) 2.29723383s ago: executing program 6 (id=6159): pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]}) (fail_nth: 1) 2.173564323s ago: executing program 6 (id=6161): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) set_mempolicy(0x8006, 0x0, 0x5) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r6, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r6, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$BLKBSZSET(r4, 0x40081271, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x110, r7, 0x91084000) 2.173218402s ago: executing program 2 (id=6162): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x2, 0x0, 0x0) mount(&(0x7f0000000000)=@md0, 0x0, 0x0, 0x2a0000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) 2.172947533s ago: executing program 7 (id=6163): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022400010000600009040080020300000009f606040001220500090581032000090807"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @bcast}, [@remote, @remote, @rose, @netrom, @rose, @rose, @null, @null]}, &(0x7f0000000100)=0x48, 0x800) getpeername$netrom(r1, &(0x7f0000000140)={{0x3, @null}, [@bcast, @netrom, @rose, @remote, @bcast, @remote, @rose, @null]}, &(0x7f00000001c0)=0x48) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x0, 0x10, 0xd, {0xd, 0x22, "782fffe0f506ee94ed7dbc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000380)={{0x0, 0x2}}) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) 1.995615843s ago: executing program 6 (id=6164): setresgid(0xee00, 0xee01, 0x0) (async) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x3, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) fadvise64(r2, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x22052, r2, 0x93771000) 1.672689437s ago: executing program 8 (id=6165): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000240)="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", 0x2000, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x12, r0, 0x8ee4a000) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000004280)={0x18, 0xfffffffffffffffe}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) lseek(r1, 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 1.569353635s ago: executing program 8 (id=6166): r0 = fsopen(&(0x7f0000000000)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='\\\xc1*)\x00', &(0x7f0000000080)="ec", 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xff, 0x2}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r4, 0x104, 0x4, &(0x7f0000001bc0)=0x1, 0x4) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x60) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a800160020000140", 0x38}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) open(&(0x7f0000000100)='./cgroup\x00', 0x400, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a0102000000000000000002001a000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f28edd81ab64db88bebd7f17bd812f8f"], 0xfc}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020603000000000000000000000000040d000300686173683a6d6163000000000900020073797a310000000014000780080013000000000008001240000000ab05000400000000000500010007000000050005"], 0x5c}, 0x1, 0x0, 0x0, 0xc040}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x801, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0xa3, 0x0, &(0x7f00000000c0)}) 1.336333022s ago: executing program 6 (id=6167): syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[], 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001700)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000740)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001540)=[{&(0x7f0000001280)='W', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000240)={r1, 0x2}, 0x8) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000004540)='./file0\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x1, 0x10001011, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x189) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r3, &(0x7f00000004c0)='./file0\x00', 0x2) close(r2) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r8, 0x0, 0x0, r9], [0x2b8, 0x0, 0x0, 0xfffffffe]}) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r10, 0x400, 0x70bd2e, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x404c000}, 0x4000000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000480)=r11) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000180), 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) r12 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r13 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r14 = dup(r13) write$6lowpan_enable(r14, &(0x7f0000000000)='0', 0xfffffd2c) syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r12, 0x2000) 1.327324731s ago: executing program 8 (id=6168): pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]}) 1.201489802s ago: executing program 2 (id=6169): pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0x2bc, 0x1c, 0x400, 0x70bd29, 0x25dfdbfd, {0x14}, [@typed={0x4, 0x37}, @typed={0x8, 0x56, 0x0, 0x0, @ipv4=@broadcast}, @generic="d30d3f202ea2056b97e4897c2a0f19648d8cad9458731bfc777f1729cde148136295cd49a680", @typed={0x8, 0xf8, 0x0, 0x0, @pid=r1}, @generic="a7d0df2fe8eb28b698f55b2997abf966e07f3cfb301b1aaee0b76237639f5a50b4347a23cb55c5df5defb9f3cdb465c2c1f7573ce58a781e2014272d77cd3156a8633cec8fdc5cb1fb385f8c31ee1a751c498531bff91429b9d35e3dcb3bb7610edc7cc7bed4384153a7c471c0a9e0c8c054ef556b766bc6e3b6", @typed={0xc, 0x43, 0x0, 0x0, @u64=0x7}, @typed={0xb, 0x41, 0x0, 0x0, @str='workdir'}, @generic="219cfcc30dc387d35f9ab0b9437333a34afc97368c945879c53e5bc102e7e1d5fd8046e96c2735df5237cd4987eec9e4f445aefb3417954d513ee18a159e2206c01266a99b7c338d792839487e5ef1b83633089ae15fcee534028a441936ad28b63f50bbae2004b33d130afac49bd89804da4e9fe7e74f48f4e1742255f47abc37eebf853f41632f3632982c8ed5c330b7d5777688a646c617080b6fcebc4e2b9acaa92d257e8725b32a98d905a35eb4784e0963850edd3f5147c80749", @generic="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", @generic="1ee8936ef906f5ea3d2330e08da466874619dc090a2a0400974d975ce0eb4e"]}, 0x2bc}, 0x1, 0x0, 0x0, 0x4800}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) quotactl_fd$Q_SYNC(r2, 0x8dbd21d8df17c9e7, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]}) 1.186631615s ago: executing program 8 (id=6170): prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (rerun: 32) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 1.114581774s ago: executing program 8 (id=6171): pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]}) (fail_nth: 2) 1.013463764s ago: executing program 2 (id=6172): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = socket(0x1e, 0x4, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x9, 0xfd, 0xfffffff9}) r2 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x8, 0x0, @broadcast}, 0x10, &(0x7f00000007c0)}, 0x2004c880) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f00000000c0)="97", 0x1}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) write(r5, &(0x7f0000000400)="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", 0x1f000) 733.815167ms ago: executing program 8 (id=6173): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x220, 0x84, 0x77, 0x72, 0x40, 0x582, 0xbe1e, 0xcfce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xb, 0x20, 0x180, 0x2, [{{0x9, 0x4, 0xe5, 0xf1, 0x1, 0xff, 0x7a, 0xd1, 0x90, [], [{{0x9, 0x5, 0xa, 0x2, 0x0, 0x4, 0x3, 0x2}}]}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FITHAW(r0, 0xc0045878) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, r3, &(0x7f00000002c0)) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=ANY=[@ANYRES8=r2], 0x52, 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x220, 0x84, 0x77, 0x72, 0x40, 0x582, 0xbe1e, 0xcfce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xb, 0x20, 0x180, 0x2, [{{0x9, 0x4, 0xe5, 0xf1, 0x1, 0xff, 0x7a, 0xd1, 0x90, [], [{{0x9, 0x5, 0xa, 0x2, 0x0, 0x4, 0x3, 0x2}}]}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x2}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$FITHAW(r0, 0xc0045878) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in=@dev, @in=@multicast2}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) (async) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, r3, &(0x7f00000002c0)) (async) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=ANY=[@ANYRES8=r2], 0x52, 0x2) (async) 0s ago: executing program 2 (id=6174): creat(&(0x7f0000001380)='./file0\x00', 0x4) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000000)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, r1) r2 = getpgid(r1) setpgid(r1, r2) mount(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x8, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x62) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) r5 = fsopen(&(0x7f00000002c0)='iso9660\x00', 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffe}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x4, r8}) ioctl$DMA_BUF_SET_NAME_A(r10, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r10, 0xc0086202, &(0x7f0000000540)=0x1) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) kernel console output (not intermixed with test programs): 13081][ T3514] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.584665][ T3514] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.660707][ T3514] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.718427][T24328] chnl_net:caif_netlink_parms(): no params data found [ 918.851762][T24328] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.859038][T24328] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.867282][T24328] bridge_slave_0: entered allmulticast mode [ 918.875459][T24328] bridge_slave_0: entered promiscuous mode [ 918.913805][T24328] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.923162][T24328] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.930861][T24328] bridge_slave_1: entered allmulticast mode [ 918.937994][T24328] bridge_slave_1: entered promiscuous mode [ 919.002997][T24328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.017052][T24328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.042589][ T3514] : left allmulticast mode [ 919.047757][ T3514] bridge0: port 3() entered disabled state [ 919.057700][ T3514] bridge_slave_1: left allmulticast mode [ 919.064470][ T3514] bridge_slave_1: left promiscuous mode [ 919.070335][ T3514] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.079104][ T3514] bridge_slave_0: left allmulticast mode [ 919.084986][ T3514] bridge_slave_0: left promiscuous mode [ 919.091243][ T3514] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.374067][ T3514] bridge0 (unregistering): left allmulticast mode [ 919.605516][ T3514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 919.618498][ T3514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.634319][ T3514] bond0 (unregistering): Released all slaves [ 919.665930][T24328] team0: Port device team_slave_0 added [ 919.674018][T24328] team0: Port device team_slave_1 added [ 919.760052][T24328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.767039][T24328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.796607][T24328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 919.843433][T24328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 919.850608][T24328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.884272][T24328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.032567][T24328] hsr_slave_0: entered promiscuous mode [ 920.055081][T24328] hsr_slave_1: entered promiscuous mode [ 920.063871][T24328] debugfs: 'hsr0' already exists in 'hsr' [ 920.072172][T24328] Cannot create hsr debugfs directory [ 920.093236][ T3514] hsr_slave_0: left promiscuous mode [ 920.106555][ T3514] hsr_slave_1: left promiscuous mode [ 920.115568][ T3514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 920.126599][ T3514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 920.137198][ T3514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 920.147310][ T3514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 920.189665][ T3514] veth0_macvtap: left promiscuous mode [ 920.195387][ T3514] veth1_vlan: left promiscuous mode [ 920.203227][ T3514] veth0_vlan: left promiscuous mode [ 920.349142][ T3514] pim6reg (unregistering): left allmulticast mode [ 920.479613][T12858] Bluetooth: hci0: command tx timeout [ 920.991706][ T3514] team0 (unregistering): Port device team_slave_1 removed [ 921.056072][ T3514] team0 (unregistering): Port device team_slave_0 removed [ 922.184861][ T3514] IPVS: stop unused estimator thread 0... [ 922.559841][T12858] Bluetooth: hci0: command tx timeout [ 922.628378][T24328] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 922.644661][T24328] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 922.660834][T24328] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 922.676848][T24328] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 922.794872][T24328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 922.824028][T24328] 8021q: adding VLAN 0 to HW filter on device team0 [ 922.844410][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.851608][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 922.873486][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.880682][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 923.208896][T24328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 923.288127][T24328] veth0_vlan: entered promiscuous mode [ 923.307624][T24328] veth1_vlan: entered promiscuous mode [ 923.358981][T24328] veth0_macvtap: entered promiscuous mode [ 923.386824][T24328] veth1_macvtap: entered promiscuous mode [ 923.418193][T24328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 923.443709][T24328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 923.472212][ T3514] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.501580][ T3514] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.525533][ T3514] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.557757][ T3514] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.656593][T15611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.678169][T15611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.727018][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.737287][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.649563][T12858] Bluetooth: hci0: command tx timeout [ 926.724841][T12858] Bluetooth: hci0: command tx timeout [ 931.602103][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.608445][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 982.965192][T24577] openvswitch: netlink: Missing valid actions attribute. [ 982.981245][T24577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 983.128444][T24585] overlayfs: failed to resolve './file0': -2 [ 983.181781][T24587] input: syz0 as /devices/virtual/input/input102 [ 983.197705][T24587] input: failed to attach handler leds to device input102, error: -6 [ 983.531017][T24597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 983.705420][T24606] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5367'. [ 983.720107][T24606] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 983.729039][T24606] /dev/rnullb0: Can't open blockdev [ 983.834899][T24618] netlink: 'syz.7.5369': attribute type 9 has an invalid length. [ 983.844788][T24618] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5369'. [ 983.870045][ T10] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 983.935169][T24622] /dev/rnullb0: Can't open blockdev [ 984.018943][T24627] overlayfs: failed to resolve './file0': -2 [ 984.029300][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 984.040873][ T10] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 984.059272][ T10] usb 7-1: config 0 has no interface number 0 [ 984.066027][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 984.087604][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 984.116854][ T10] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 984.138874][ T10] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 984.152558][ T10] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 984.172270][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.199993][ T10] usb 7-1: config 0 descriptor?? [ 984.227585][ T10] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 984.596965][T24641] XFS (nullb0): Invalid superblock magic number [ 984.892008][T24655] fuse: Unknown parameter 'rootmo~e' [ 984.914275][ T5930] usb 7-1: USB disconnect, device number 36 [ 984.921912][T24657] usb usb8: usbfs: process 24657 (syz.7.5380) did not claim interface 0 before use [ 984.949177][ T5930] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 984.967459][T24657] /dev/rnullb0: Can't open blockdev [ 985.120379][T24664] netlink: 'syz.7.5382': attribute type 1 has an invalid length. [ 985.128286][T24664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 985.149068][T24664] /dev/rnullb0: Can't open blockdev [ 985.296107][T24678] /dev/rnullb0: Can't open blockdev [ 985.634425][T24695] overlay: Unknown parameter 'audit' [ 985.739600][ T5961] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 985.857845][T24704] /dev/rnullb0: Can't open blockdev [ 985.938984][ T5961] usb 9-1: Using ep0 maxpacket: 8 [ 985.961487][ T5961] usb 9-1: config 0 interface 0 has no altsetting 0 [ 985.990721][ T5961] usb 9-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 986.002580][ T5961] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.011503][ T5961] usb 9-1: Product: syz [ 986.015824][ T5961] usb 9-1: Manufacturer: syz [ 986.032465][ T5961] usb 9-1: SerialNumber: syz [ 986.050049][T14154] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 986.061172][ T5961] usb 9-1: config 0 descriptor?? [ 986.080800][ T5961] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 found [ 986.224128][T14154] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.234808][T14154] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 986.244171][T14154] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.260412][T14154] usb 7-1: config 0 descriptor?? [ 986.269418][ T5930] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 986.278356][T14154] pwc: Askey VC010 type 2 USB webcam detected. [ 986.302163][ T5961] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 now disconnected [ 986.324442][ T5961] snd_usb_toneport 9-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 986.419326][ T5930] usb 8-1: device descriptor read/64, error -71 [ 986.488852][ T5923] usb 9-1: USB disconnect, device number 11 [ 986.542505][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 986.659378][ T5930] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 986.670089][T14154] pwc: recv_control_msg error -32 req 02 val 2b00 [ 986.677109][T14154] pwc: recv_control_msg error -32 req 02 val 2700 [ 986.699322][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 986.706112][ T24] usb 3-1: config index 0 descriptor too short (expected 1554, got 18) [ 986.716911][ T24] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 986.726023][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 986.743629][ T24] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 986.752965][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.761435][ T24] usb 3-1: Product: syz [ 986.765659][ T24] usb 3-1: Manufacturer: syz [ 986.770504][ T24] usb 3-1: SerialNumber: syz [ 986.777363][ T24] usb 3-1: config 0 descriptor?? [ 986.789413][ T5930] usb 8-1: device descriptor read/64, error -71 [ 986.885618][T24700] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 986.892868][T24700] /dev/rnullb0: Can't open blockdev [ 986.899043][T14154] pwc: recv_control_msg error -71 req 04 val 1000 [ 986.907534][ T5930] usb usb8-port1: attempt power cycle [ 986.913628][T14154] pwc: recv_control_msg error -71 req 04 val 1300 [ 986.921376][T14154] pwc: recv_control_msg error -71 req 04 val 1400 [ 986.928270][T14154] pwc: recv_control_msg error -71 req 02 val 2000 [ 986.935390][T14154] pwc: recv_control_msg error -71 req 02 val 2100 [ 986.943692][T14154] pwc: recv_control_msg error -71 req 04 val 1500 [ 986.953041][T14154] pwc: recv_control_msg error -71 req 02 val 2500 [ 986.962829][T14154] pwc: recv_control_msg error -71 req 02 val 2400 [ 986.970234][T14154] pwc: recv_control_msg error -71 req 02 val 2600 [ 986.977072][T14154] pwc: recv_control_msg error -71 req 02 val 2900 [ 986.985202][T14154] pwc: recv_control_msg error -71 req 02 val 2800 [ 987.000040][T14154] pwc: recv_control_msg error -71 req 04 val 1100 [ 987.012075][T14154] pwc: recv_control_msg error -71 req 04 val 1200 [ 987.032264][ T24] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 987.042229][T14154] pwc: Registered as video103. [ 987.057050][ T24] gspca_sunplus: reg_w_riv err -71 [ 987.062482][T14154] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input103 [ 987.074503][ T24] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 987.088880][ T24] usb 3-1: USB disconnect, device number 52 [ 987.119663][T14154] usb 7-1: USB disconnect, device number 37 [ 987.259881][ T5930] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 987.282067][ T5930] usb 8-1: device descriptor read/8, error -71 [ 987.519979][ T5930] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 987.550431][ T5930] usb 8-1: device descriptor read/8, error -71 [ 987.660600][ T5930] usb usb8-port1: unable to enumerate USB device [ 987.704793][T24739] dvmrp0: entered allmulticast mode [ 987.748077][T24739] /dev/rnullb0: Can't open blockdev [ 987.939397][ T5961] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 988.059364][ T24] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 988.089718][ T5961] usb 7-1: Using ep0 maxpacket: 8 [ 988.100620][ T5961] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 988.114387][ T5961] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 988.124224][ T5961] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 988.137040][ T5961] usb 7-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 988.146134][ T5961] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.155904][ T5961] usb 7-1: config 0 descriptor?? [ 988.189560][ T24] usb 9-1: device descriptor read/64, error -71 [ 988.364037][T24738] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 988.388021][ T5961] usbhid 7-1:0.0: can't add hid device: -71 [ 988.398400][ T5961] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 988.418534][ T5961] usb 7-1: USB disconnect, device number 38 [ 988.431231][ T24] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 988.589445][ T24] usb 9-1: device descriptor read/64, error -71 [ 988.709642][ T24] usb usb9-port1: attempt power cycle [ 989.059325][ T24] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 989.091166][ T24] usb 9-1: device descriptor read/8, error -71 [ 989.124713][T24776] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 989.171041][T24776] overlayfs: missing 'lowerdir' [ 989.206686][T24776] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5410'. [ 989.216470][T24776] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5410'. [ 989.261532][T24783] /dev/rnullb0: Can't open blockdev [ 989.360096][ T24] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 989.402515][ T24] usb 9-1: device descriptor read/8, error -71 [ 989.531106][ T24] usb usb9-port1: unable to enumerate USB device [ 989.789349][ T24] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 989.949337][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 989.958620][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.974805][ T24] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 989.987415][ T24] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 990.005849][ T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 990.024206][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.034280][ T24] usb 8-1: Product: syz [ 990.038471][ T24] usb 8-1: Manufacturer: syz [ 990.046310][ T24] usb 8-1: SerialNumber: syz [ 990.057324][ T24] usb 8-1: rejected 1 configuration due to insufficient available bus power [ 990.067623][ T24] usb 8-1: no configuration chosen from 1 choice [ 990.518719][T24796] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 990.525338][T24796] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 990.537337][T24796] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 990.695337][T24817] loop7: detected capacity change from 0 to 7 [ 990.779417][ T5961] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 990.805105][T24819] loop2: detected capacity change from 0 to 7 [ 990.937315][T24817] Dev loop7: unable to read RDB block 7 [ 990.945034][T24817] loop7: unable to read partition table [ 990.951732][ T5961] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 990.960103][ T5961] usb 7-1: config 0 has no interface number 0 [ 990.960615][T24817] loop7: partition table beyond EOD, truncated [ 990.968800][ T5961] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 990.978856][T24817] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 990.982897][ T5961] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.004299][ T5961] usb 7-1: Product: syz [ 991.008580][ T5961] usb 7-1: Manufacturer: syz [ 991.014572][ T5961] usb 7-1: SerialNumber: syz [ 991.022644][ T5961] usb 7-1: config 0 descriptor?? [ 991.031404][ T5961] yurex 7-1:0.50: Could not find endpoints [ 991.079645][ T5868] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 991.240797][T24804] /dev/rnullb0: Can't open blockdev [ 991.247816][ T5961] usb 7-1: USB disconnect, device number 39 [ 991.269414][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 991.286038][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.301085][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.316096][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 991.324440][T24818] Dev loop7: unable to read RDB block 7 [ 991.331595][ T5868] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 991.335119][T24818] loop7: unable to read partition table [ 991.349813][T24818] loop7: partition table beyond EOD, truncated [ 991.350449][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.368805][ T5868] usb 3-1: config 0 descriptor?? [ 991.815255][ T5868] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 991.825261][ T5868] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 991.839416][T12858] Bluetooth: hci0: command 0x0c1a tx timeout [ 991.873343][ T5868] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 991.884912][ T5868] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 991.902226][ T5868] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 991.918220][ T5868] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 991.938326][ T5868] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 991.956838][ T5868] microsoft 0003:045E:07DA.0039: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 991.983218][ T5868] microsoft 0003:045E:07DA.0039: no inputs found [ 991.993442][ T5868] microsoft 0003:045E:07DA.0039: could not initialize ff, continuing anyway [ 992.092957][ T5868] usb 3-1: USB disconnect, device number 53 [ 992.131640][T24826] fido_id[24826]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 992.519476][ T5868] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 992.542565][T24834] netlink: 'syz.8.5429': attribute type 10 has an invalid length. [ 992.551776][ T24] usb 8-1: USB disconnect, device number 33 [ 992.569063][T24834] netlink: 156 bytes leftover after parsing attributes in process `syz.8.5429'. [ 992.679454][ T5868] usb 7-1: Using ep0 maxpacket: 32 [ 992.691901][ T5868] usb 7-1: config 0 interface 0 has no altsetting 0 [ 992.711540][ T5868] usb 7-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= a.06 [ 992.721988][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.730177][ T5868] usb 7-1: Product: syz [ 992.734455][ T5868] usb 7-1: Manufacturer: syz [ 992.739095][ T5868] usb 7-1: SerialNumber: syz [ 992.746605][ T5868] usb 7-1: config 0 descriptor?? [ 992.962982][T24832] /dev/rnullb0: Can't open blockdev [ 992.987765][ T5868] snd_usb_podhd 7-1:0.0: Line 6 POD HD500 found [ 993.003874][ T5868] usb 7-1: selecting invalid altsetting 1 [ 993.003971][ T5236] Dev loop7: unable to read RDB block 7 [ 993.011174][ T5868] snd_usb_podhd 7-1:0.0: set_interface failed [ 993.025209][ T5868] snd_usb_podhd 7-1:0.0: Line 6 POD HD500 now disconnected [ 993.036287][ T5868] snd_usb_podhd 7-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 993.041623][ T5236] loop7: unable to read partition table [ 993.048449][ T5868] usb 7-1: USB disconnect, device number 40 [ 993.061737][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.068200][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.077409][ T5236] loop7: partition table beyond EOD, truncated [ 993.091750][T24838] /dev/loop7: Can't open blockdev [ 993.413759][T24859] /dev/rnullb0: Can't open blockdev [ 993.439518][T14154] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 993.447356][ T24] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 993.618907][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 993.634142][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.648270][T14154] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 993.658222][T14154] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.666862][ T24] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 993.677510][T14154] usb 9-1: Product: syz [ 993.685319][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.693540][T14154] usb 9-1: Manufacturer: syz [ 993.698163][T14154] usb 9-1: SerialNumber: syz [ 993.706592][ T24] usb 3-1: config 0 descriptor?? [ 993.751061][T14154] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 993.793687][ T5923] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 993.871448][T24872] syzkaller1: entered promiscuous mode [ 993.877458][T24872] syzkaller1: entered allmulticast mode [ 993.919502][T12858] Bluetooth: hci0: command 0x0c1a tx timeout [ 994.058289][T24874] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 994.230557][ T24] cypress 0003:04B4:07B1.003A: item fetching failed at offset 2/5 [ 994.246620][ T24] cypress 0003:04B4:07B1.003A: parse failed [ 994.254309][ T24] cypress 0003:04B4:07B1.003A: probe with driver cypress failed with error -22 [ 994.365922][T24881] /dev/rnullb0: Can't open blockdev [ 994.404625][T24845] netlink: 'syz.8.5433': attribute type 21 has an invalid length. [ 994.420834][T24845] netlink: 'syz.8.5433': attribute type 1 has an invalid length. [ 994.434107][T24877] /dev/rnullb0: Can't open blockdev [ 994.456220][T24883] /dev/rnullb0: Can't open blockdev [ 994.470127][ T24] usb 9-1: USB disconnect, device number 16 [ 994.471498][T24883] 9pnet_fd: Insufficient options for proto=fd [ 994.502236][T24868] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 994.517865][T21591] usb 3-1: USB disconnect, device number 54 [ 994.879700][ T5923] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 994.887072][ T5923] ath9k_htc: Failed to initialize the device [ 994.894281][ T24] usb 9-1: ath9k_htc: USB layer deinitialized [ 995.045219][T24893] /dev/rnullb0: Can't open blockdev [ 995.250177][T24898] /dev/rnullb0: Can't open blockdev [ 995.255700][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 995.737221][T24906] /dev/rnullb0: Can't open blockdev [ 995.809800][T24910] /dev/rnullb0: Can't open blockdev [ 995.999388][T12462] Bluetooth: hci0: command 0x0c1a tx timeout [ 996.250799][ T5868] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 996.334399][T24925] /dev/rnullb0: Can't open blockdev [ 996.417933][T24929] /dev/rnullb0: Can't open blockdev [ 996.419923][ T5868] usb 8-1: Using ep0 maxpacket: 8 [ 996.448269][ T5868] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 996.466214][ T5868] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 996.486436][ T5868] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 996.504993][ T5868] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 996.516910][ T5868] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 996.526259][ T5868] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.543221][ T5868] hub 8-1:1.0: bad descriptor, ignoring hub [ 996.558738][ T5868] hub 8-1:1.0: probe with driver hub failed with error -5 [ 996.576100][ T5868] cdc_wdm 8-1:1.0: skipping garbage [ 996.581561][ T5868] cdc_wdm 8-1:1.0: skipping garbage [ 996.595678][ T5868] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 996.606217][ T5868] cdc_wdm 8-1:1.0: Unknown control protocol [ 996.719664][ T5923] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 996.876077][ T24] usb 8-1: USB disconnect, device number 34 [ 996.898438][ T5923] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 996.907769][ T5923] usb 9-1: config 0 has no interface number 0 [ 996.918115][ T5923] usb 9-1: too many endpoints for config 0 interface 1 altsetting 0: 64, using maximum allowed: 30 [ 996.931015][ T5923] usb 9-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 996.944669][ T5923] usb 9-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 996.955583][ T5923] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.965672][ T5923] usb 9-1: config 0 descriptor?? [ 997.119423][ T5868] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 997.255179][ T5923] usb 9-1: string descriptor 0 read error: -71 [ 997.264129][ T5923] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 997.289517][T12858] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 997.298248][T24857] udevd[24857]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 997.329120][ T5868] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 997.330741][ T5923] snd-usb-audio 9-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 997.349955][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.366774][ T5868] usb 7-1: config 0 descriptor?? [ 997.387050][ T5868] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 997.412575][ T5923] usb 9-1: USB disconnect, device number 17 [ 997.499086][T24937] /dev/rnullb0: Can't open blockdev [ 997.585027][ T5868] cpia1 7-1:0.0: unexpected state after lo power cmd: 00 [ 997.659022][ T5868] gspca_cpia1: usb_control_msg 01, error -71 [ 997.678185][T24939] kvm: emulating exchange as write [ 997.683456][ T5868] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 997.705315][ T5868] usb 7-1: USB disconnect, device number 41 [ 997.851557][T24953] ./cgroup: Can't lookup blockdev [ 997.907453][T24955] /dev/rnullb0: Can't open blockdev [ 998.015167][T24962] /dev/rnullb0: Can't open blockdev [ 998.026865][T24962] /dev/rnullb0: Can't open blockdev [ 998.079315][ T5868] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 998.239826][ T5868] usb 7-1: Using ep0 maxpacket: 32 [ 998.254268][ T5868] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 998.268908][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.284263][ T5868] usb 7-1: config 0 descriptor?? [ 998.294808][ T5868] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 999.148361][ T5868] gspca_vc032x: reg_r err -71 [ 999.161235][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 999.166663][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 999.186824][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 999.204968][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 999.226497][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 999.259791][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 999.262578][ T5923] usb 8-1: new low-speed USB device number 35 using dummy_hcd [ 999.265130][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 999.265145][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 999.265155][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 999.265165][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 999.265175][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 999.265185][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 999.321733][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 999.327062][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 999.336410][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 999.342039][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 999.347528][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 999.357841][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 999.407599][ T5868] gspca_vc032x: Unknown sensor... [ 999.418015][ T5868] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 999.447187][ T5868] usb 7-1: USB disconnect, device number 42 [ 999.477954][ T5923] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 999.503828][ T5923] usb 8-1: string descriptor 0 read error: -22 [ 999.516275][ T5923] usb 8-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 999.540110][ T5923] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.771137][ T5868] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 999.779865][ T5923] usb 8-1: USB disconnect, device number 35 [ 999.901450][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 999.940995][ T5868] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.956428][ T5868] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 999.976662][ T5868] usb 7-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 999.986099][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.998355][ T5868] usb 7-1: config 0 descriptor?? [ 1000.083482][ T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1000.093297][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.104797][ T10] usb 3-1: config 0 descriptor?? [ 1000.114046][ T10] cp210x 3-1:0.0: cp210x converter detected [ 1000.263402][ T5868] usb 7-1: USB disconnect, device number 43 [ 1000.415815][T25009] Invalid source name [ 1000.423388][T25009] UBIFS error (pid: 25009): cannot open "./file0", error -22 [ 1000.514670][ T10] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1000.752068][ T10] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1000.957462][T25019] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1000.964777][T25019] /dev/rnullb0: Can't open blockdev [ 1001.015889][T25022] /dev/rnullb0: Can't open blockdev [ 1001.109407][ T10] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1001.249486][ T10] usb 7-1: device descriptor read/64, error -71 [ 1001.509592][ T10] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1001.653774][T25043] /dev/rnullb0: Can't open blockdev [ 1001.669353][ T10] usb 7-1: device descriptor read/64, error -71 [ 1001.701544][T25045] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5497'. [ 1001.734506][T25045] /dev/rnullb0: Can't open blockdev [ 1001.781833][ T10] usb usb7-port1: attempt power cycle [ 1001.834223][T25051] netlink: 'syz.8.5499': attribute type 29 has an invalid length. [ 1002.129308][ T10] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1002.151041][ T10] usb 7-1: device descriptor read/8, error -71 [ 1002.182790][ T5868] usb 8-1: new low-speed USB device number 36 using dummy_hcd [ 1002.359719][ T5868] usb 8-1: Invalid ep0 maxpacket: 32 [ 1002.389784][ T10] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1002.424992][ T10] usb 7-1: device descriptor read/8, error -71 [ 1002.489470][ T5868] usb 8-1: new low-speed USB device number 37 using dummy_hcd [ 1002.539848][ T10] usb usb7-port1: unable to enumerate USB device [ 1002.649353][ T5868] usb 8-1: Invalid ep0 maxpacket: 32 [ 1002.655522][ T5868] usb usb8-port1: attempt power cycle [ 1002.669485][ T24] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1002.680383][ T5923] usb 3-1: USB disconnect, device number 55 [ 1002.704151][ T5923] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1002.723982][ T5923] cp210x 3-1:0.0: device disconnected [ 1002.999432][ T5868] usb 8-1: new low-speed USB device number 38 using dummy_hcd [ 1003.031595][ T5868] usb 8-1: Invalid ep0 maxpacket: 32 [ 1003.159405][ T5868] usb 8-1: new low-speed USB device number 39 using dummy_hcd [ 1003.190040][ T5868] usb 8-1: Invalid ep0 maxpacket: 32 [ 1003.199772][ T5868] usb usb8-port1: unable to enumerate USB device [ 1003.290676][T25078] netlink: 'syz.2.5508': attribute type 29 has an invalid length. [ 1003.835565][T25080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5509'. [ 1003.862226][T25080] /dev/rnullb0: Can't open blockdev [ 1004.535250][T25092] loop9: detected capacity change from 0 to 7 [ 1004.545288][T24857] Buffer I/O error on dev loop9, logical block 0, async page read [ 1004.553923][T24857] Buffer I/O error on dev loop9, logical block 0, async page read [ 1004.563742][T24857] Buffer I/O error on dev loop9, logical block 0, async page read [ 1004.572713][T24857] Buffer I/O error on dev loop9, logical block 0, async page read [ 1004.581491][T24857] Buffer I/O error on dev loop9, logical block 0, async page read [ 1004.590218][T24857] Buffer I/O error on dev loop9, logical block 0, async page read [ 1004.601026][T24857] Buffer I/O error on dev loop9, logical block 0, async page read [ 1004.608954][T24857] ldm_validate_partition_table(): Disk read failed. [ 1004.616062][T24857] Buffer I/O error on dev loop9, logical block 0, async page read [ 1004.627936][T24857] Buffer I/O error on dev loop9, logical block 0, async page read [ 1004.636101][T24857] Buffer I/O error on dev loop9, logical block 0, async page read [ 1004.644732][T24857] Dev loop9: unable to read RDB block 0 [ 1004.651588][T24857] loop9: unable to read partition table [ 1004.657757][T24857] loop9: partition table beyond EOD, truncated [ 1004.668005][T25092] ldm_validate_partition_table(): Disk read failed. [ 1004.675793][T25092] Dev loop9: unable to read RDB block 0 [ 1004.682371][T25092] loop9: unable to read partition table [ 1004.688305][T25092] loop9: partition table beyond EOD, truncated [ 1004.696673][T25092] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 1004.696673][T25092] ) failed (rc=-5) [ 1004.829308][ T5868] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1004.983655][ T5868] usb 7-1: Using ep0 maxpacket: 8 [ 1004.991543][ T5868] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 1005.004331][ T5868] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1005.016335][ T5868] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1005.026697][ T5868] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1005.050360][ T5868] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1005.069274][ T5868] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1005.088954][ T5868] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1005.108523][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.194957][T25101] No control pipe specified [ 1005.205801][T25101] overlayfs: failed to resolve './file0': -2 [ 1005.295793][T25105] random: crng reseeded on system resumption [ 1005.345659][ T5868] usb 7-1: GET_CAPABILITIES returned 0 [ 1005.351981][ T5868] usbtmc 7-1:16.0: can't read capabilities [ 1005.393880][T25108] /dev/rnullb0: Can't open blockdev [ 1005.553332][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1005.564134][T25094] netlink: 228 bytes leftover after parsing attributes in process `syz.6.5514'. [ 1005.590307][T25092] usbtmc 7-1:16.0: Unable to send data, error -71 [ 1005.598104][T25092] /dev/rnullb0: Can't open blockdev [ 1005.607895][ T24] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1005.625053][T25115] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 1005.635979][ T24] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1005.636257][T25113] IPVS: stopping backup sync thread 25115 ... [ 1005.661706][ T24] usb 9-1: can't read configurations, error -71 [ 1005.694544][ T5868] usb 7-1: USB disconnect, device number 48 [ 1005.705006][T25113] /dev/rnullb0: Can't open blockdev [ 1005.826992][T25121] binder: 25120:25121 ioctl c00c620f 0 returned -14 [ 1005.915875][T25125] No control pipe specified [ 1005.949820][T25125] overlayfs: failed to resolve './file0': -2 [ 1006.290052][ T5930] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1006.299636][ T5923] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1006.450391][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 1006.457578][ T5923] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 1006.466080][ T5930] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.476224][ T5923] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.486752][ T5923] usb 7-1: config 0 has no interface number 0 [ 1006.493076][ T5923] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1006.503232][ T5923] usb 7-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1006.516333][ T24] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1006.525830][ T5930] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 1006.535668][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 1006.544308][ T5923] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1006.553444][ T5930] usb 3-1: Product: syz [ 1006.557691][ T5930] usb 3-1: Manufacturer: syz [ 1006.562808][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.570902][ T5930] usb 3-1: SerialNumber: syz [ 1006.576616][ T5923] usb 7-1: Product: syz [ 1006.584677][ T5923] usb 7-1: Manufacturer: syz [ 1006.590788][ T5923] usb 7-1: SerialNumber: syz [ 1006.598896][ T5923] usb 7-1: config 0 descriptor?? [ 1006.609623][ T5930] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1006.679337][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 1006.688357][ T24] usb 9-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1006.697801][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.705937][ T24] usb 9-1: Product: syz [ 1006.710274][ T24] usb 9-1: Manufacturer: syz [ 1006.714882][ T24] usb 9-1: SerialNumber: syz [ 1006.724034][ T24] usb 9-1: config 0 descriptor?? [ 1006.788095][T25128] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1006.795918][T25128] /dev/rnullb0: Can't open blockdev [ 1006.803246][ T12] usb 3-1: Failed to submit usb control message: -71 [ 1006.803353][ T5868] usb 3-1: USB disconnect, device number 56 [ 1006.815074][ T12] usb 3-1: unable to send the bmi data to the device: -71 [ 1006.824837][ T12] usb 3-1: unable to get target info from device [ 1006.831654][ T12] usb 3-1: could not get target info (-71) [ 1006.838326][ T12] usb 3-1: could not probe fw (-71) [ 1006.863795][ T5961] usb 7-1: USB disconnect, device number 49 [ 1007.136646][ T24] airspy 9-1:0.0: Board ID: 00 [ 1007.151007][ T24] airspy 9-1:0.0: Firmware version: [ 1007.288101][T25154] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5537'. [ 1007.341031][T25134] /dev/rnullb0: Can't open blockdev [ 1007.363807][ T24] airspy 9-1:0.0: usb_control_msg() failed -71 request 11 [ 1007.396173][ T24] airspy 9-1:0.0: Registered as swradio24 [ 1007.427902][ T24] airspy 9-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1007.444482][ T24] usb 9-1: USB disconnect, device number 19 [ 1007.609004][T25164] No control pipe specified [ 1007.635474][T25164] overlayfs: failed to resolve './file0': -2 [ 1007.849532][ T5868] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 1007.958314][T25178] /dev/rnullb0: Can't open blockdev [ 1008.020278][ T5868] usb 7-1: not running at top speed; connect to a high speed hub [ 1008.031618][ T5868] usb 7-1: config 2 has an invalid interface number: 227 but max is 0 [ 1008.038332][ T24] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1008.059818][ T5868] usb 7-1: config 2 has no interface number 0 [ 1008.069973][ T5868] usb 7-1: config 2 interface 227 has no altsetting 0 [ 1008.114688][ T5868] usb 7-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=2c.d4 [ 1008.153530][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.163110][ T5868] usb 7-1: Product: syz [ 1008.167297][ T5868] usb 7-1: Manufacturer: syz [ 1008.176858][ T5868] usb 7-1: SerialNumber: syz [ 1008.209653][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1008.223995][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1008.348243][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1008.358799][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1008.368850][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.403391][T25162] /dev/rnullb0: Can't open blockdev [ 1008.407987][ T24] usb 3-1: config 0 descriptor?? [ 1008.437700][ T24] hub 3-1:0.0: USB hub found [ 1008.439012][ T5868] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 1008.482576][ T5868] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 1008.506476][ T5868] pac7311 7-1:2.227: probe with driver pac7311 failed with error -71 [ 1008.524596][ T5868] usb 7-1: USB disconnect, device number 50 [ 1008.622886][ T24] hub 3-1:0.0: 1 port detected [ 1008.979403][ T5930] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1009.083336][T25195] overlayfs: failed to resolve './file0': -2 [ 1009.169334][ T5930] usb 9-1: Using ep0 maxpacket: 32 [ 1009.202109][T25199] /dev/rnullb0: Can't open blockdev [ 1009.210697][ T5930] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.249299][ T5930] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.269348][ T24] hub 3-1:0.0: activate --> -90 [ 1009.277879][ T5930] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1009.311774][ T5930] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.360434][ T5930] usb 9-1: config 0 descriptor?? [ 1009.369131][ T5930] hub 9-1:0.0: USB hub found [ 1009.579349][ T5930] hub 9-1:0.0: 1 port detected [ 1009.765228][T25217] /dev/rnullb0: Can't open blockdev [ 1009.874314][ T24] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 1009.874738][ T5961] usb 3-1: USB disconnect, device number 57 [ 1009.887567][ T5868] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1010.049569][ T5868] usb 7-1: device descriptor read/64, error -71 [ 1010.139514][ T24] usb 8-1: new full-speed USB device number 40 using dummy_hcd [ 1010.186386][ T5923] hub 9-1:0.0: activate --> -90 [ 1010.299451][ T5868] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1010.302456][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1010.326276][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1010.337949][ T24] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1010.355856][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.375015][ T24] usb 8-1: config 0 descriptor?? [ 1010.449375][ T5868] usb 7-1: device descriptor read/64, error -71 [ 1010.476323][T25222] overlayfs: failed to resolve './file0': -2 [ 1010.571450][ T5868] usb usb7-port1: attempt power cycle [ 1010.801163][ T24] savu 0003:1E7D:2D5A.003B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 1010.912666][ T5930] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1010.919686][ T5868] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1010.940495][ T5868] usb 7-1: device descriptor read/8, error -71 [ 1011.047490][T25219] /dev/rnullb0: Can't open blockdev [ 1011.056786][ T24] usb 8-1: USB disconnect, device number 40 [ 1011.079470][ T5930] usb 3-1: Using ep0 maxpacket: 8 [ 1011.088686][ T5930] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 1011.098789][ T5930] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.111247][ T5930] usb 3-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 1011.120747][ T5930] usb 3-1: config 127 has no interface number 0 [ 1011.127695][ T5930] usb 3-1: config 127 interface 171 has no altsetting 0 [ 1011.137203][ T5930] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1011.146407][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.154878][ T5930] usb 3-1: Product: syz [ 1011.159087][ T5930] usb 3-1: Manufacturer: syz [ 1011.163865][ T5930] usb 3-1: SerialNumber: syz [ 1011.179396][ T5868] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1011.200269][ T5868] usb 7-1: device descriptor read/8, error -71 [ 1011.311904][ T5868] usb usb7-port1: unable to enumerate USB device [ 1011.393252][ T5930] usb 3-1: USB disconnect, device number 58 [ 1011.602673][ T5923] hub 9-1:0.0: hub_ext_port_status failed (err = -32) [ 1011.618311][T25235] comedi comedi0: aio_aio12_8: I/O port conflict (0x2,32) [ 1012.029682][ T5923] usb 9-1: USB disconnect, device number 20 [ 1012.068099][T25243] netlink: 'syz.7.5569': attribute type 21 has an invalid length. [ 1012.078112][T25243] netlink: 128 bytes leftover after parsing attributes in process `syz.7.5569'. [ 1012.112577][T25243] netlink: 'syz.7.5569': attribute type 10 has an invalid length. [ 1012.122403][T25243] netlink: 156 bytes leftover after parsing attributes in process `syz.7.5569'. [ 1012.353722][T25249] overlayfs: missing 'workdir' [ 1012.367068][T25252] overlayfs: failed to resolve './file0': -2 [ 1012.640694][T25261] /dev/rnullb0: Can't open blockdev [ 1012.939455][ T5923] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1013.059605][ T10] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1013.089438][ T5923] usb 8-1: Using ep0 maxpacket: 32 [ 1013.096350][ T5923] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1013.107815][ T5923] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1013.117657][ T5923] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1013.127237][ T5923] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.137686][ T5923] usb 8-1: config 0 descriptor?? [ 1013.151455][ T5923] hub 8-1:0.0: USB hub found [ 1013.239394][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1013.246910][ T10] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 1013.255486][ T10] usb 7-1: config 0 has no interface number 0 [ 1013.261682][ T10] usb 7-1: config 0 interface 12 has no altsetting 0 [ 1013.271231][ T10] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 1013.280620][ T10] usb 7-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 1013.288809][ T10] usb 7-1: Product: syz [ 1013.293186][ T10] usb 7-1: Manufacturer: syz [ 1013.297799][ T10] usb 7-1: SerialNumber: syz [ 1013.305810][ T10] usb 7-1: config 0 descriptor?? [ 1013.348775][ T5923] hub 8-1:0.0: 1 port detected [ 1013.362984][T25271] /dev/rnullb0: Can't open blockdev [ 1013.421764][T25273] fuse: Bad value for 'user_id' [ 1013.426693][T25273] fuse: Bad value for 'user_id' [ 1013.545363][T25277] autofs: Bad value for 'fd' [ 1013.555156][T25277] overlayfs: failed to resolve './file0': -2 [ 1013.862337][ T5923] hub 8-1:0.0: activate --> -90 [ 1013.974598][T25287] netlink: 'syz.8.5584': attribute type 10 has an invalid length. [ 1013.975460][T25289] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1013.992046][T25289] /dev/rnullb0: Can't open blockdev [ 1013.992728][T25287] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1014.006720][T25287] netlink: 'syz.8.5584': attribute type 10 has an invalid length. [ 1014.024357][T25287] netlink: 'syz.8.5584': attribute type 10 has an invalid length. [ 1014.032968][T25287] netlink: 'syz.8.5584': attribute type 10 has an invalid length. [ 1014.041069][T25287] netlink: 'syz.8.5584': attribute type 10 has an invalid length. [ 1014.049186][T25287] netlink: 'syz.8.5584': attribute type 10 has an invalid length. [ 1014.058444][T25287] netlink: 'syz.8.5584': attribute type 10 has an invalid length. [ 1014.066797][T25287] netlink: 'syz.8.5584': attribute type 10 has an invalid length. [ 1014.281133][ T5930] usb 8-1: USB disconnect, device number 41 [ 1014.288196][ T5923] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 1014.295941][ T5923] usb 8-1-port1: attempt power cycle [ 1014.359443][ T5964] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1014.509392][ T5964] usb 9-1: Using ep0 maxpacket: 16 [ 1014.516220][ T5964] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.529264][ T5964] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.539582][ T5964] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1014.552806][ T5964] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1014.562228][ T5964] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.574340][ T5964] usb 9-1: config 0 descriptor?? [ 1014.985816][T25268] ./file0: Can't lookup blockdev [ 1015.013331][ T5964] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1015.028995][ T5964] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1015.051158][ T5964] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1015.071800][ T5964] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1015.079074][ T5964] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1015.099382][T25301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1015.111675][ T5964] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1015.121699][ T5964] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1015.128968][ T5964] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1015.158307][ T5964] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1015.169390][ T5964] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1015.178011][ T5964] HID 045e:07da: Invalid code 65791 type 1 [ 1015.179389][T25301] netlink: 100 bytes leftover after parsing attributes in process `syz.7.5588'. [ 1015.198028][T25291] /dev/rnullb0: Can't open blockdev [ 1015.228920][T25305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1015.241686][ T5964] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.003C/input/input104 [ 1015.259503][T25306] autofs: Bad value for 'fd' [ 1015.276069][T25306] overlayfs: failed to resolve './file0': -2 [ 1015.294531][ T5964] microsoft 0003:045E:07DA.003C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1015.338842][ T5964] usb 9-1: USB disconnect, device number 21 [ 1015.369028][T25301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1015.451765][T25307] fido_id[25307]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1015.795360][T25323] /dev/rnullb0: Can't open blockdev [ 1015.802004][T25323] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5596'. [ 1015.822261][T25323] openvswitch: netlink: Flow actions attr not present in new flow. [ 1015.975394][T25330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.997913][T25332] autofs: Bad value for 'fd' [ 1016.008757][T25332] overlayfs: failed to resolve './file0': -2 [ 1016.022055][T25330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1016.023360][T25333] fuse: Unknown parameter '0x0000000000000005' [ 1016.359423][ T5964] usb 8-1: new full-speed USB device number 46 using dummy_hcd [ 1016.404344][T25347] /dev/rnullb0: Can't open blockdev [ 1016.489789][ T5964] usb 8-1: device descriptor read/64, error -71 [ 1016.560045][T23770] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1016.725473][T23770] usb 3-1: Using ep0 maxpacket: 32 [ 1016.743298][T23770] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 1024 [ 1016.749324][ T5964] usb 8-1: new full-speed USB device number 47 using dummy_hcd [ 1016.759715][T23770] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1016.784999][T23770] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1016.798413][T23770] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1016.810539][T23770] usb 3-1: Product: syz [ 1016.814864][T23770] usb 3-1: Manufacturer: syz [ 1016.822204][T23770] usb 3-1: SerialNumber: syz [ 1016.830999][T23770] usb 3-1: config 0 descriptor?? [ 1016.837314][T25343] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1016.909305][ T5964] usb 8-1: device descriptor read/64, error -71 [ 1017.023957][ T5964] usb usb8-port1: attempt power cycle [ 1017.053055][ T10] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 1017.069406][ T10] f81534 7-1:0.12: f81534_find_config_idx: read failed: -32 [ 1017.078367][ T10] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 1017.095773][ T10] f81534 7-1:0.12: probe with driver f81534 failed with error -32 [ 1017.144933][ T5930] usb 3-1: USB disconnect, device number 59 [ 1017.246090][T25362] overlay: filesystem on ./bus not supported [ 1017.379492][ T5964] usb 8-1: new full-speed USB device number 48 using dummy_hcd [ 1017.398079][T25360] /dev/rnullb0: Can't open blockdev [ 1017.410048][ T5964] usb 8-1: device descriptor read/8, error -71 [ 1017.660796][ T5964] usb 8-1: new full-speed USB device number 49 using dummy_hcd [ 1017.682478][ T5964] usb 8-1: device descriptor read/8, error -71 [ 1017.799374][T14154] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1017.807303][ T5964] usb usb8-port1: unable to enumerate USB device [ 1017.959347][T14154] usb 9-1: Using ep0 maxpacket: 32 [ 1017.965953][T14154] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.977040][T14154] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.987124][T14154] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1017.996257][T14154] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.007260][T14154] usb 9-1: config 0 descriptor?? [ 1018.019459][T14154] hub 9-1:0.0: USB hub found [ 1018.079370][T25330] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1018.229488][T14154] hub 9-1:0.0: 1 port detected [ 1018.458872][T25375] /dev/rnullb0: Can't open blockdev [ 1018.797268][T25392] overlay: filesystem on ./bus not supported [ 1018.828139][ T5930] hub 9-1:0.0: activate --> -90 [ 1019.169678][T25398] /dev/rnullb0: Can't open blockdev [ 1019.450126][ T5930] hub 9-1:0.0: hub_ext_port_status failed (err = -71) [ 1019.459405][ T5964] usb 9-1: USB disconnect, device number 22 [ 1019.931384][T25409] /dev/rnullb0: Can't open blockdev [ 1020.097360][T25416] autofs: Bad value for 'fd' [ 1020.124289][T25416] overlayfs: failed to resolve './file0': -2 [ 1020.269753][T25420] /dev/rnullb0: Can't open blockdev [ 1020.407272][T25428] /dev/rnullb0: Can't open blockdev [ 1020.430004][T25429] /dev/rnullb0: Can't open blockdev [ 1020.475021][T25429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1020.508464][T25429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.749306][ T10] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1020.847262][T25445] /dev/rnullb0: Can't open blockdev [ 1020.899462][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 1020.918685][T25448] autofs: Bad value for 'fd' [ 1020.921238][ T10] usb 8-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1020.926373][T25448] overlayfs: failed to resolve './file0': -2 [ 1020.947706][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.968067][ T10] usb 8-1: config 0 descriptor?? [ 1020.992907][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1021.262862][T25465] veth1_macvtap: left promiscuous mode [ 1021.284535][T25465] macsec0: entered promiscuous mode [ 1021.313855][T25465] macsec0: entered allmulticast mode [ 1021.337750][T25466] veth1_macvtap: entered promiscuous mode [ 1021.366207][T25466] veth1_macvtap: entered allmulticast mode [ 1021.380137][T25466] macsec0: left promiscuous mode [ 1021.388123][T25471] ptrace attach of "./syz-executor exec"[23575] was attempted by "ÉôÔ“€7çE\x09Å» 宬›ò¾áPÕ"[25471] [ 1021.392725][T25466] macsec0: left allmulticast mode [ 1021.407887][T25466] veth1_macvtap: left allmulticast mode [ 1021.407901][T25472] ptrace attach of "./syz-executor exec"[23575] was attempted by "ÉôÔ“€7çE\x09Å» 宬›ò¾áPÕ"[25472] [ 1021.461664][T25471] /dev/rnullb0: Can't open blockdev [ 1021.521326][T25476] /dev/rnullb0: Can't open blockdev [ 1021.860163][T25483] autofs: Bad value for 'fd' [ 1021.874719][T25483] overlayfs: failed to resolve './file0': -2 [ 1021.919695][ T10] gspca_sonixj: reg_w1 err -110 [ 1021.924863][ T10] sonixj 8-1:0.0: probe with driver sonixj failed with error -110 [ 1021.959523][ T10] usb 8-1: USB disconnect, device number 50 [ 1022.125089][T25490] /dev/rnullb0: Can't open blockdev [ 1022.140665][T25491] binder: Unknown parameter 'subj_user' [ 1022.377795][T25500] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1022.469527][T25500] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5660'. [ 1022.772518][T25513] /dev/rnullb0: Can't open blockdev [ 1022.838109][T25515] overlayfs: failed to resolve './file0': -2 [ 1023.044150][T25521] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5665'. [ 1023.087109][T25527] pimreg: entered allmulticast mode [ 1023.106158][T25521] /dev/rnullb0: Can't open blockdev [ 1023.257458][T25537] /dev/rnullb0: Can't open blockdev [ 1023.282470][T25539] nvme_fabrics: unknown parameter or missing value 'b *:* rwm' in ctrl creation request [ 1023.591152][T25558] overlayfs: failed to resolve './file0': -2 [ 1023.681842][T25561] /dev/rnullb0: Can't open blockdev [ 1024.285655][T25586] __vm_enough_memory: pid: 25586, comm: syz.7.5682, bytes: 21200024596480 not enough memory for the allocation [ 1024.329496][T25578] validate_nla: 26 callbacks suppressed [ 1024.329517][T25578] netlink: 'syz.2.5680': attribute type 1 has an invalid length. [ 1024.638815][T25595] overlayfs: failed to resolve './file0': -2 [ 1025.062343][T25613] netlink: 'syz.7.5690': attribute type 9 has an invalid length. [ 1025.237980][T25620] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5690'. [ 1025.273037][T25621] netlink: 'syz.2.5693': attribute type 29 has an invalid length. [ 1025.284462][T25623] /dev/rnullb0: Can't open blockdev [ 1025.585102][T25634] /dev/rnullb0: Can't open blockdev [ 1025.602206][T25637] netlink: 'syz.6.5696': attribute type 3 has an invalid length. [ 1025.619690][T25637] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.5696'. [ 1025.639039][T25639] No control pipe specified [ 1025.645565][T25639] overlayfs: failed to resolve './file0': -2 [ 1025.810158][T25645] /dev/rnullb0: Can't open blockdev [ 1025.996281][T25654] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1026.015964][T25654] /dev/rnullb0: Can't open blockdev [ 1026.028333][T25654] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1026.053804][T25654] /dev/rnullb0: Can't open blockdev [ 1026.222267][T25663] /dev/rnullb0: Can't open blockdev [ 1026.238121][T25669] /dev/rnullb0: Can't open blockdev [ 1026.417261][T25680] No control pipe specified [ 1026.424016][T25680] overlayfs: failed to resolve './file0': -2 [ 1026.469609][ T5930] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1026.576777][T25686] ipvlan0: entered promiscuous mode [ 1026.596561][T25686] ipvlan0: entered allmulticast mode [ 1026.604975][T25686] veth0_vlan: entered allmulticast mode [ 1026.619564][T25686] /dev/rnullb0: Can't open blockdev [ 1026.649297][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 1026.661561][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1026.681506][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1026.709421][ T5930] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1026.743281][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.762299][ T5930] usb 3-1: config 0 descriptor?? [ 1026.774123][T25697] fuse: Bad value for 'rootmode' [ 1026.785067][T25698] fuse: Bad value for 'rootmode' [ 1026.788889][ T5930] hub 3-1:0.0: USB hub found [ 1026.813408][ T30] audit: type=1326 audit(2000033578.784:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25696 comm="syz.8.5711" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c1378ebe9 code=0x0 [ 1026.973124][ T5930] hub 3-1:0.0: 1 port detected [ 1027.184516][T25665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5705'. [ 1027.605272][ T5930] hub 3-1:0.0: activate --> -90 [ 1028.090243][T25743] No control pipe specified [ 1028.102495][T25743] overlayfs: failed to resolve './file0': -2 [ 1028.242956][T14154] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 1028.253234][ T5930] usb 3-1: USB disconnect, device number 61 [ 1028.320615][T25747] kernel read not supported for file /file1 (pid: 25747 comm: syz.7.5719) [ 1028.356916][ T30] audit: type=1800 audit(2000033580.324:183): pid=25747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5719" name="file1" dev="mqueue" ino=106709 res=0 errno=0 [ 1028.724003][T25750] /dev/rnullb0: Can't open blockdev [ 1028.731874][T25750] /dev/rnullb0: Can't open blockdev [ 1028.884890][T25755] /dev/rnullb0: Can't open blockdev [ 1029.580483][T25768] autofs: Bad value for 'fd' [ 1029.586640][T25768] overlayfs: failed to resolve './file0': -2 [ 1029.690538][T25770] /dev/rnullb0: Can't open blockdev [ 1030.427716][T25799] /dev/rnullb0: Can't open blockdev [ 1030.621676][T25806] autofs: Bad value for 'fd' [ 1030.631330][T25806] overlayfs: failed to resolve './file0': -2 [ 1030.775421][T25811] overlay: ./file0 is not a directory [ 1030.801787][ T5930] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1030.981600][ T5930] usb 3-1: config 1 interface 0 altsetting 169 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 1030.999915][ T5930] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1031.020477][ T5930] usb 3-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.40 [ 1031.038418][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.055039][ T5930] usb 3-1: Product: syz [ 1031.064307][ T5930] usb 3-1: Manufacturer: syz [ 1031.069026][ T5930] usb 3-1: SerialNumber: syz [ 1031.074009][ T5923] usb 8-1: new low-speed USB device number 51 using dummy_hcd [ 1031.236388][ T5923] usb 8-1: Invalid ep0 maxpacket: 32 [ 1031.389411][ T5923] usb 8-1: new low-speed USB device number 52 using dummy_hcd [ 1031.417887][ T5930] usbhid 3-1:1.0: can't add hid device: -71 [ 1031.424280][ T5930] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1031.443235][ T5930] usb 3-1: USB disconnect, device number 62 [ 1031.559287][ T5923] usb 8-1: Invalid ep0 maxpacket: 32 [ 1031.565465][ T5923] usb usb8-port1: attempt power cycle [ 1031.727573][T25834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.739565][T25834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.891648][T25838] rose0: entered allmulticast mode [ 1031.909606][ T5923] usb 8-1: new low-speed USB device number 53 using dummy_hcd [ 1031.940053][ T5923] usb 8-1: Invalid ep0 maxpacket: 32 [ 1031.980328][ T5961] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 1032.044384][T25844] autofs: Bad value for 'fd' [ 1032.055964][T25844] overlayfs: failed to resolve './file0': -2 [ 1032.069657][ T5923] usb 8-1: new low-speed USB device number 54 using dummy_hcd [ 1032.100210][ T5923] usb 8-1: Invalid ep0 maxpacket: 32 [ 1032.128150][ T5923] usb usb8-port1: unable to enumerate USB device [ 1032.163023][ T5961] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1032.174822][ T5961] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.192744][ T5961] usb 9-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1032.206688][ T5961] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1032.216265][ T5961] usb 9-1: Manufacturer: syz [ 1032.233797][ T5961] usb 9-1: config 0 descriptor?? [ 1032.363955][T25849] bio_check_eod: 2 callbacks suppressed [ 1032.363975][T25849] syz.2.5750: attempt to access beyond end of device [ 1032.363975][T25849] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1032.384607][T25849] syz.2.5750: attempt to access beyond end of device [ 1032.384607][T25849] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1032.397672][T25849] Mount JFS Failure: -5 [ 1032.447886][ T5961] usbhid 9-1:0.0: can't add hid device: -71 [ 1032.474355][ T5961] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1032.501414][ T5961] usb 9-1: USB disconnect, device number 23 [ 1032.525700][T25853] /dev/rnullb0: Can't open blockdev [ 1032.901464][T25865] autofs: Unknown parameter '0x0000000000000004' [ 1032.909016][T25865] overlayfs: failed to resolve './file0': -2 [ 1033.228427][T25876] /dev/rnullb0: Can't open blockdev [ 1033.604434][T25891] autofs: Unknown parameter '0x0000000000000004' [ 1033.610934][ T5961] usb 8-1: new low-speed USB device number 55 using dummy_hcd [ 1033.626785][T25891] overlayfs: failed to resolve './file0': -2 [ 1033.939300][T14154] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1034.001616][ T5961] usb 8-1: device not accepting address 55, error -71 [ 1034.089412][T14154] usb 9-1: Using ep0 maxpacket: 8 [ 1034.096400][T14154] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1034.112863][T14154] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1034.123082][T14154] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.139995][T14154] usb 9-1: config 0 descriptor?? [ 1034.152343][T25905] /dev/rnullb0: Can't open blockdev [ 1034.343292][T25911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.352497][T25911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.373682][T25911] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1034.379610][ T5961] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1034.390167][T14154] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1034.394657][T25911] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1034.529917][ T5961] usb 8-1: device descriptor read/64, error -71 [ 1034.592017][ T10] usb 9-1: USB disconnect, device number 24 [ 1034.598020][ C0] iowarrior 9-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 1034.648734][ T5961] usb usb8-port1: attempt power cycle [ 1034.796643][T25895] /dev/rnullb0: Can't open blockdev [ 1034.989444][ T5961] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1035.013927][ T5961] usb 8-1: device descriptor read/8, error -71 [ 1035.260014][ T5961] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1035.300617][ T5961] usb 8-1: device descriptor read/8, error -71 [ 1035.423685][ T5961] usb usb8-port1: unable to enumerate USB device [ 1035.511021][T25923] autofs: Unknown parameter '0x0000000000000004' [ 1035.518886][T25923] overlayfs: failed to resolve './file0': -2 [ 1035.638667][T25925] Bluetooth: MGMT ver 1.23 [ 1035.644296][T25925] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5778'. [ 1035.698818][T25925] /dev/rnullb0: Can't open blockdev [ 1035.819932][T25929] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1036.854439][T14154] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1036.918263][T25942] MTD: Attempt to mount non-MTD device "/dev/nbd7" [ 1036.927963][T25942] syz.7.5785: attempt to access beyond end of device [ 1036.927963][T25942] nbd7: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1037.066492][T14154] usb 3-1: Using ep0 maxpacket: 8 [ 1037.093901][T14154] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1037.104277][T14154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.112361][T25944] autofs: Unknown parameter '0x0000000000000004' [ 1037.112972][T14154] usb 3-1: Product: syz [ 1037.123712][T14154] usb 3-1: Manufacturer: syz [ 1037.128367][T14154] usb 3-1: SerialNumber: syz [ 1037.138696][T14154] usb 3-1: config 0 descriptor?? [ 1037.143237][T25944] overlayfs: failed to resolve './file0': -2 [ 1037.154552][T14154] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1038.070726][T25957] /dev/rnullb0: Can't open blockdev [ 1038.545072][ T5961] usb 3-1: USB disconnect, device number 63 [ 1038.842247][T25971] autofs: Unknown parameter '0x0000000000000004' [ 1038.853300][T25971] overlayfs: failed to resolve './file0': -2 [ 1038.982453][T25973] /dev/rnullb0: Can't open blockdev [ 1039.898911][T25991] /dev/rnullb0: Can't open blockdev [ 1040.053607][T26003] autofs: Unknown parameter '0x0000000000000004' [ 1040.081487][T26003] overlayfs: failed to resolve './file0': -2 [ 1040.254081][T26012] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5808'. [ 1040.354336][T26013] PKCS7: Unknown OID: [4] 0.0 [ 1040.374060][T26013] PKCS7: Only support pkcs7_signedData type [ 1040.545482][T26026] random: crng reseeded on system resumption [ 1040.657599][T26030] netlink: 'syz.8.5813': attribute type 1 has an invalid length. [ 1040.665567][T26030] netlink: 'syz.8.5813': attribute type 3 has an invalid length. [ 1040.675813][T26030] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5813'. [ 1040.852916][T26035] /dev/rnullb0: Can't open blockdev [ 1040.913327][T26037] autofs: Unknown parameter 'fd0x0000000000000004' [ 1040.922998][T26037] overlayfs: failed to resolve './file0': -2 [ 1040.959821][ T5961] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1040.962533][T14154] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1040.988473][T26039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.004901][T26040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.013786][T26039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.013997][T26040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.119551][ T5961] usb 9-1: Using ep0 maxpacket: 32 [ 1041.121365][T14154] usb 3-1: Using ep0 maxpacket: 16 [ 1041.134457][ T5961] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 1041.143572][T14154] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1041.146977][ T5961] usb 9-1: config 0 has an invalid descriptor of length 104, skipping remainder of the config [ 1041.161079][T14154] usb 3-1: config 3 has an invalid interface number: 216 but max is 0 [ 1041.173742][ T5961] usb 9-1: config 0 has no interface number 0 [ 1041.175339][T14154] usb 3-1: config 3 has no interface number 0 [ 1041.182600][ T5961] usb 9-1: too many endpoints for config 0 interface 67 altsetting 0: 128, using maximum allowed: 30 [ 1041.197862][T14154] usb 3-1: config 3 interface 216 has no altsetting 0 [ 1041.200022][ T5961] usb 9-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 1041.215542][T14154] usb 3-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=de.a6 [ 1041.226616][ T5961] usb 9-1: New USB device found, idVendor=0424, idProduct=9dda, bcdDevice=c2.57 [ 1041.228245][T14154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.244294][ T5961] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.245959][T14154] usb 3-1: Product: á  [ 1041.252629][ T5961] usb 9-1: Product: syz [ 1041.261651][ T5961] usb 9-1: Manufacturer: syz [ 1041.266400][ T5961] usb 9-1: SerialNumber: syz [ 1041.274479][T14154] usb 3-1: Manufacturer: á [ 1041.277540][ T5961] usb 9-1: config 0 descriptor?? [ 1041.282345][T14154] usb 3-1: SerialNumber: Б [ 1041.641723][T26055] input: syz0 as /devices/virtual/input/input106 [ 1041.664934][T14154] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.216/input/input105 [ 1041.706744][ T5221] bcm5974 3-1:3.216: could not read from device [ 1041.714235][ T5221] bcm5974 3-1:3.216: could not read from device [ 1041.764365][ T5221] bcm5974 3-1:3.216: could not read from device [ 1041.771044][T14154] usb 3-1: USB disconnect, device number 64 [ 1041.789037][ T5221] bcm5974 3-1:3.216: could not read from device [ 1041.926362][ T5923] usb 9-1: USB disconnect, device number 25 [ 1042.007749][ T30] audit: type=1107 audit(2000033593.974:184): pid=26062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÓOR0¬Tgˆ")g,ÜÄ~¡¨^ƒ6?ôvI1ëuaÙzMTÐ Èp•²LÊ7ÝÈN‡à\ÇAÇy).èç#ø\S·¡ûÁ‰Á_xÝÌÜAü÷‹#6ÖŸ}´xVRUˇÒu’¡ÂÐg´÷©ØÀU½ÔÇM9¿)ž#Èeô«d¢ì8»²b |¡öÁRPO8¾›h´4ž€Škomë¶]ŸYäàéßÍd’öKs¿ŒÕýÐ<&Ï‚™î~Å' [ 1042.041261][T26064] /dev/rnullb0: Can't open blockdev [ 1042.068294][T26069] /dev/rnullb0: Can't open blockdev [ 1042.328189][T26081] /dev/rnullb0: Can't open blockdev [ 1042.493442][T26088] /dev/rnullb0: Can't open blockdev [ 1042.506529][T26088] /dev/rnullb0: Can't open blockdev [ 1042.578764][T26091] /dev/rnullb0: Can't open blockdev [ 1042.823325][T26098] /dev/rnullb0: Can't open blockdev [ 1042.984935][T26102] /dev/rnullb0: Can't open blockdev [ 1043.001789][T26102] /dev/rnullb0: Can't open blockdev [ 1043.496353][T26122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.508791][T26122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.629351][ T5868] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1043.789487][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 1043.797177][ T5868] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 1043.805408][ T5868] usb 3-1: config 0 has no interface number 0 [ 1043.811591][ T5868] usb 3-1: config 0 interface 32 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.823847][ T5868] usb 3-1: config 0 interface 32 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.833907][ T5868] usb 3-1: config 0 interface 32 has no altsetting 0 [ 1043.840942][ T5868] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 1043.850154][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.860300][ T5868] usb 3-1: config 0 descriptor?? [ 1044.077465][T26127] binder: 26126:26127 unknown command 0 [ 1044.084848][T26127] binder: 26126:26127 ioctl c0306201 200000000080 returned -22 [ 1044.097143][T26127] binder: 26126:26127 ioctl c0306201 200000000580 returned -14 [ 1044.107830][T26127] binder: 26126:26127 ioctl c0306201 200000000240 returned -11 [ 1044.590204][T26138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.600759][T26138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.741078][ T5868] usbhid 3-1:0.32: can't add hid device: -71 [ 1044.749831][ T5868] usbhid 3-1:0.32: probe with driver usbhid failed with error -71 [ 1044.770817][ T5868] usb 3-1: USB disconnect, device number 65 [ 1045.206327][T26155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.222013][T26155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.382419][T26158] netlink: 'syz.2.5858': attribute type 10 has an invalid length. [ 1045.401942][T26158] 8021q: adding VLAN 0 to HW filter on device team0 [ 1045.411268][T26158] bond0: (slave team0): Enslaving as an active interface with an up link [ 1046.174155][T26169] comedi comedi3: comedi_config --init_data is deprecated [ 1046.494669][T26177] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5864'. [ 1046.535115][T26177] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5864'. [ 1046.569064][T26177] netlink: 6 bytes leftover after parsing attributes in process `syz.6.5864'. [ 1046.750972][T26188] /dev/rnullb0: Can't open blockdev [ 1046.872704][T26193] tmpfs: Bad value for 'mpol' [ 1046.941764][T26197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5870'. [ 1046.947105][T26196] netlink: 'syz.7.5871': attribute type 4 has an invalid length. [ 1047.030416][T26199] /dev/rnullb0: Can't open blockdev [ 1047.226605][T26203] /dev/rnullb0: Can't open blockdev [ 1047.373675][T26207] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5875'. [ 1047.509306][ T5961] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 1047.681207][T26224] fuse: Bad value for 'group_id' [ 1047.686855][T26224] fuse: Bad value for 'group_id' [ 1047.802221][ T5961] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1047.820998][ T5961] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1047.854754][T26229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.859264][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 1047.867244][T26229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.925748][ T5961] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1048.087316][ T5961] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1048.096350][T26237] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5882'. [ 1048.109262][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.117318][ T5961] usb 3-1: Product: syz [ 1048.121547][ T5961] usb 3-1: Manufacturer: syz [ 1048.126153][ T5961] usb 3-1: SerialNumber: syz [ 1048.135155][ T5961] usb 3-1: config 0 descriptor?? [ 1048.142195][T26203] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1048.164365][ T5961] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input107 [ 1048.364838][ T5961] usb 3-1: USB disconnect, device number 66 [ 1048.364883][ C1] kbtab 3-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 1048.599628][ T5923] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1048.760688][ T5923] usb 9-1: Using ep0 maxpacket: 8 [ 1048.771732][ T5923] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1048.785581][ T5923] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1048.798802][ T5923] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1048.817369][ T5923] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1048.848216][ T5923] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1048.867044][ T5923] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1048.878649][ T5923] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.111207][ T5923] usb 9-1: usb_control_msg returned -32 [ 1049.112941][T26255] /dev/rnullb0: Can't open blockdev [ 1049.116828][ T5923] usbtmc 9-1:16.0: can't read capabilities [ 1049.519882][ T5961] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1049.590733][T26258] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5889'. [ 1049.691989][ T5961] usb 3-1: Using ep0 maxpacket: 32 [ 1049.706210][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.718873][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1049.759281][ T5961] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1049.774001][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.797104][ T5961] usb 3-1: config 0 descriptor?? [ 1049.815007][ T5961] hub 3-1:0.0: USB hub found [ 1049.887212][ T30] audit: type=1326 audit(2000033857.860:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26277 comm="syz.7.5894" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x0 [ 1049.940588][T26281] /dev/rnullb0: Can't open blockdev [ 1050.017791][ T5961] hub 3-1:0.0: 1 port detected [ 1050.802922][T26287] random: crng reseeded on system resumption [ 1050.952948][ T5868] hub 3-1:0.0: activate --> -90 [ 1051.042714][ T5868] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 1051.078412][ T5868] usb 3-1: USB disconnect, device number 67 [ 1051.378667][ T5868] usb 9-1: USB disconnect, device number 26 [ 1051.617786][T26314] /dev/rnullb0: Can't open blockdev [ 1051.913342][T26325] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1051.922642][ T5868] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1051.933967][T26325] /dev/rnullb0: Can't open blockdev [ 1052.082439][ T5868] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.100687][ T5868] usb 9-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1052.119229][ T5868] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.130992][ T5868] usb 9-1: config 0 descriptor?? [ 1052.248111][T26330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.281903][T26330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.364903][ T30] audit: type=1326 audit(2000033860.340:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26333 comm="syz.7.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1052.387761][ T30] audit: type=1326 audit(2000033860.340:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26333 comm="syz.7.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1052.412222][ T30] audit: type=1326 audit(2000033860.340:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26333 comm="syz.7.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1052.435744][ T30] audit: type=1326 audit(2000033860.340:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26333 comm="syz.7.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1052.458988][ T30] audit: type=1326 audit(2000033860.340:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26333 comm="syz.7.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1052.481757][ T30] audit: type=1326 audit(2000033860.340:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26333 comm="syz.7.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1052.504414][ T30] audit: type=1326 audit(2000033860.340:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26333 comm="syz.7.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1052.527051][ T30] audit: type=1326 audit(2000033860.340:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26333 comm="syz.7.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1052.555679][ T30] audit: type=1326 audit(2000033860.340:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26333 comm="syz.7.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1052.579492][ T5868] prodikeys 0003:041E:2801.003D: unknown main item tag 0x0 [ 1052.586740][ T5868] prodikeys 0003:041E:2801.003D: unexpected long global item [ 1052.595691][ T5868] prodikeys 0003:041E:2801.003D: hid parse failed [ 1052.605211][ T5868] prodikeys 0003:041E:2801.003D: probe with driver prodikeys failed with error -22 [ 1052.619939][ T5961] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1052.757684][ T5923] usb 9-1: USB disconnect, device number 27 [ 1052.807950][ T5961] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1052.827313][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.839235][ T5961] usb 3-1: Product: syz [ 1052.843435][ T5961] usb 3-1: Manufacturer: syz [ 1052.858307][ T5961] usb 3-1: SerialNumber: syz [ 1052.883455][ T5961] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1052.912383][ T5868] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1053.199648][ T5923] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1053.374014][ T5923] usb 9-1: Using ep0 maxpacket: 32 [ 1053.385364][ T5923] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 1053.399547][ T5923] usb 9-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 1053.423186][ T5923] usb 9-1: config 0 has no interface number 0 [ 1053.432880][ T5923] usb 9-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1053.456818][ T5923] usb 9-1: config 0 interface 89 has no altsetting 0 [ 1053.467631][ T5923] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1053.482768][ T5923] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.493614][ T5923] usb 9-1: Product: syz [ 1053.497896][ T5923] usb 9-1: Manufacturer: syz [ 1053.505874][ T5923] usb 9-1: SerialNumber: syz [ 1053.515558][ T5923] usb 9-1: config 0 descriptor?? [ 1054.009806][ T5868] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1054.027690][ T5868] ath9k_htc: Failed to initialize the device [ 1054.075212][ T5868] usb 3-1: ath9k_htc: USB layer deinitialized [ 1054.325523][ T5868] usb 3-1: USB disconnect, device number 68 [ 1054.490310][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.502696][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.892402][ T30] kauditd_printk_skb: 14681 callbacks suppressed [ 1054.892421][ T30] audit: type=1326 audit(2000033862.860:14876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26333 comm="syz.7.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd656d8d69f code=0x50000 [ 1054.930401][ T30] audit: type=1326 audit(2000033862.870:14877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26333 comm="syz.7.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1054.953052][ T30] audit: type=1326 audit(2000033862.870:14878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26333 comm="syz.7.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1054.976018][ T30] audit: type=1326 audit(2000033862.870:14879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26333 comm="syz.7.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1055.003278][ T30] audit: type=1326 audit(2000033862.870:14880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26333 comm="syz.7.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1055.034718][ T30] audit: type=1326 audit(2000033862.870:14881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26333 comm="syz.7.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1055.057653][ T30] audit: type=1326 audit(2000033862.870:14882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26333 comm="syz.7.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1055.080265][ T30] audit: type=1326 audit(2000033862.870:14883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26333 comm="syz.7.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1055.102912][ T30] audit: type=1326 audit(2000033862.870:14884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26333 comm="syz.7.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1055.154858][ T30] audit: type=1326 audit(2000033862.870:14885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26333 comm="syz.7.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1055.383223][T26354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.447967][T26354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.506701][T14154] usb 9-1: USB disconnect, device number 28 [ 1055.678349][T26367] netlink: 'syz.2.5923': attribute type 4 has an invalid length. [ 1055.743935][T26369] No control pipe specified [ 1055.750004][T26369] overlayfs: failed to resolve './file0': -2 [ 1055.929519][ T5868] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 1056.114239][ T5868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.125370][ T5868] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1056.143087][ T5868] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1056.155981][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.187771][ T5868] usb 3-1: config 0 descriptor?? [ 1056.401325][T26365] vxcan0: entered promiscuous mode [ 1056.415921][T14154] usb 3-1: USB disconnect, device number 69 [ 1056.553526][T26381] netlink: 129704 bytes leftover after parsing attributes in process `syz.6.5929'. [ 1056.950356][T26403] /dev/rnullb0: Can't open blockdev [ 1057.100753][T26411] /dev/rnullb0: Can't open blockdev [ 1057.133533][T26408] /dev/rnullb0: Can't open blockdev [ 1057.235924][T26416] /dev/rnullb0: Can't open blockdev [ 1057.279649][T14154] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1057.483285][T14154] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.498596][T14154] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1057.516966][T14154] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.534446][T14154] usb 9-1: config 0 descriptor?? [ 1057.543908][T14154] pwc: Askey VC010 type 2 USB webcam detected. [ 1057.943177][T14154] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1057.955702][T26439] /dev/rnullb0: Can't open blockdev [ 1058.293032][T26453] No control pipe specified [ 1058.302268][T26453] overlayfs: failed to resolve './file0': -2 [ 1058.427901][T26459] /dev/rnullb0: Can't open blockdev [ 1058.499351][ T5930] usb 8-1: new full-speed USB device number 59 using dummy_hcd [ 1058.553277][T26469] fuse: Unknown parameter 'h”4)æd' [ 1058.661933][ T5930] usb 8-1: config 7 has an invalid interface number: 131 but max is 0 [ 1058.670544][ T5930] usb 8-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1058.679996][ T5930] usb 8-1: config 7 has no interface number 0 [ 1058.686319][ T5930] usb 8-1: config 7 interface 131 altsetting 7 endpoint 0xC has invalid maxpacket 2039, setting to 64 [ 1058.697613][ T5930] usb 8-1: config 7 interface 131 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1058.708719][ T5930] usb 8-1: config 7 interface 131 altsetting 7 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1058.719759][ T5930] usb 8-1: config 7 interface 131 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1058.730787][ T5930] usb 8-1: config 7 interface 131 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 1058.741598][ T5930] usb 8-1: config 7 interface 131 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 1058.752429][ T5930] usb 8-1: config 7 interface 131 has no altsetting 0 [ 1058.761730][ T5930] usb 8-1: New USB device found, idVendor=1631, idProduct=c019, bcdDevice=bb.21 [ 1058.771979][ T5930] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.780188][ T5930] usb 8-1: Product: syz [ 1058.784384][ T5930] usb 8-1: Manufacturer: ÑŠ [ 1058.788962][ T5930] usb 8-1: SerialNumber: syz [ 1058.797617][T26451] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1059.232077][ T5930] usb 8-1: USB disconnect, device number 59 [ 1059.870715][T26396] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1059.978424][T14154] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1060.000925][T14154] pwc: recv_control_msg error -71 req 04 val 1000 [ 1060.018111][T14154] pwc: recv_control_msg error -71 req 04 val 1300 [ 1060.028184][T14154] pwc: recv_control_msg error -71 req 04 val 1400 [ 1060.069776][T14154] pwc: recv_control_msg error -71 req 02 val 2000 [ 1060.084729][T14154] pwc: recv_control_msg error -71 req 02 val 2100 [ 1060.099535][T14154] pwc: recv_control_msg error -71 req 04 val 1500 [ 1060.132033][T14154] pwc: recv_control_msg error -71 req 02 val 2500 [ 1060.135224][T26482] /dev/rnullb0: Can't open blockdev [ 1060.144212][T14154] pwc: recv_control_msg error -71 req 02 val 2400 [ 1060.164157][T14154] pwc: recv_control_msg error -71 req 02 val 2600 [ 1060.184801][T14154] pwc: recv_control_msg error -71 req 02 val 2900 [ 1060.202819][T14154] pwc: recv_control_msg error -71 req 02 val 2800 [ 1060.220756][T14154] pwc: recv_control_msg error -71 req 04 val 1100 [ 1060.249974][T14154] pwc: recv_control_msg error -71 req 04 val 1200 [ 1060.263486][T14154] pwc: Registered as video103. [ 1060.291487][T14154] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input109 [ 1060.395335][T14154] usb 9-1: USB disconnect, device number 29 [ 1060.406849][T26487] overlayfs: failed to resolve './file0': -2 [ 1060.878148][T26495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.888880][T26495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.508201][T26515] overlayfs: failed to resolve './file0': -2 [ 1061.639492][ T5868] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 1061.819671][ T5868] usb 8-1: Using ep0 maxpacket: 16 [ 1061.836696][ T5868] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1061.853405][ T5868] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1061.876501][ T5868] usb 8-1: Product: syz [ 1061.884853][ T5868] usb 8-1: Manufacturer: syz [ 1061.895718][ T5868] usb 8-1: SerialNumber: syz [ 1061.910400][ T5868] usb 8-1: config 0 descriptor?? [ 1062.137709][T26508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.163569][T26539] overlayfs: failed to resolve './file0': -2 [ 1062.171404][T26508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.226622][ T5868] usb 8-1: USB disconnect, device number 60 [ 1062.387239][T26544] /dev/rnullb0: Can't open blockdev [ 1062.513302][T26551] /dev/rnullb0: Can't open blockdev [ 1062.734488][T26553] overlayfs: failed to clone lowerpath [ 1062.748106][T26553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.756995][T26553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.770769][T26553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.782560][T26553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.834612][T26560] /dev/rnullb0: Can't open blockdev [ 1063.245192][T26568] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5989'. [ 1063.705106][T26583] /dev/rnullb0: Can't open blockdev [ 1063.774068][T23770] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1063.826689][T26591] /dev/rnullb0: Can't open blockdev [ 1063.949416][T23770] usb 9-1: Using ep0 maxpacket: 16 [ 1063.968085][T23770] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1063.987017][T23770] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1064.031416][T23770] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1064.041822][T23770] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.115938][T23770] usb 9-1: Product: syz [ 1064.128626][T23770] usb 9-1: Manufacturer: syz [ 1064.133552][T23770] usb 9-1: SerialNumber: syz [ 1064.142707][T23770] usb 9-1: config 0 descriptor?? [ 1064.369832][T23770] appledisplay: Apple Cinema Display connected [ 1064.587084][T26577] netlink: 'syz.8.5993': attribute type 3 has an invalid length. [ 1064.680963][T26608] fuse: Bad value for 'fd' [ 1064.689695][T26606] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 1064.710679][T26608] fuse: Bad value for 'fd' [ 1064.715481][T26608] fuse: Bad value for 'fd' [ 1064.770374][T26608] fuse: Bad value for 'fd' [ 1064.775373][T26608] fuse: Bad value for 'fd' [ 1064.801193][T26608] fuse: Bad value for 'fd' [ 1064.848090][T26608] fuse: Bad value for 'fd' [ 1064.890049][T26608] fuse: Bad value for 'fd' [ 1064.920625][T26608] fuse: Bad value for 'fd' [ 1064.943181][T26612] kvm: user requested TSC rate below hardware speed [ 1064.968386][T26608] fuse: Bad value for 'fd' [ 1065.048287][T26608] fuse: Bad value for 'fd' [ 1065.449475][ T5961] usb 9-1: USB disconnect, device number 30 [ 1065.449539][ C0] usb 9-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 1065.547717][ T5961] appledisplay: Apple Cinema Display disconnected [ 1065.583160][T26631] /dev/rnullb0: Can't open blockdev [ 1065.675672][T26633] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1065.705941][T26638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.721016][T26638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.730879][ T5930] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 1065.738204][T26638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.754330][T26638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.909603][ T5930] usb 8-1: Using ep0 maxpacket: 32 [ 1065.916947][ T5930] usb 8-1: config 0 has an invalid interface number: 108 but max is 0 [ 1065.930624][ T5930] usb 8-1: config 0 has no interface number 0 [ 1065.944400][ T5930] usb 8-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=68.96 [ 1065.954549][ T5930] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.966467][ T5930] usb 8-1: Product: syz [ 1065.972811][ T5930] usb 8-1: Manufacturer: syz [ 1065.977702][ T5930] usb 8-1: SerialNumber: syz [ 1065.985796][ T5930] usb 8-1: config 0 descriptor?? [ 1066.002857][ T5930] powermate 8-1:0.108: probe with driver powermate failed with error -5 [ 1066.197657][ T5930] usb 8-1: USB disconnect, device number 61 [ 1066.244603][T26653] /dev/rnullb0: Can't open blockdev [ 1066.380314][T26660] /dev/rnullb0: Can't open blockdev [ 1066.729362][T12462] Bluetooth: hci0: command tx timeout [ 1066.795978][T26675] dlm: no local IP address has been set [ 1066.807248][T26675] dlm: cannot start dlm midcomms -107 [ 1066.933253][T26683] /dev/rnullb0: Can't open blockdev [ 1067.500733][ T5923] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 1067.659634][ T5923] usb 8-1: device descriptor read/64, error -71 [ 1068.017373][ T5923] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 1068.159758][ T5923] usb 8-1: device descriptor read/64, error -71 [ 1068.279690][ T5923] usb usb8-port1: attempt power cycle [ 1068.306762][T26721] /dev/rnullb0: Can't open blockdev [ 1068.535570][T26731] /dev/rnullb0: Can't open blockdev [ 1068.543356][T26731] netlink: 'syz.2.6044': attribute type 2 has an invalid length. [ 1068.620239][ T5923] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 1068.650125][ T5923] usb 8-1: device descriptor read/8, error -71 [ 1068.769427][T14154] usb 9-1: new low-speed USB device number 31 using dummy_hcd [ 1068.848583][T26742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6048'. [ 1068.899383][ T5923] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 1068.907154][T14154] usb 9-1: device descriptor read/64, error -71 [ 1068.940378][ T5923] usb 8-1: device descriptor read/8, error -71 [ 1069.049755][ T5923] usb usb8-port1: unable to enumerate USB device [ 1069.149384][T14154] usb 9-1: new low-speed USB device number 32 using dummy_hcd [ 1069.255569][T26749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.269526][T26749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.290733][T14154] usb 9-1: device descriptor read/64, error -71 [ 1069.403461][T14154] usb usb9-port1: attempt power cycle [ 1069.449139][T26757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1069.749385][T14154] usb 9-1: new low-speed USB device number 33 using dummy_hcd [ 1069.769954][T14154] usb 9-1: device descriptor read/8, error -71 [ 1070.009427][T14154] usb 9-1: new low-speed USB device number 34 using dummy_hcd [ 1070.039919][T14154] usb 9-1: device descriptor read/8, error -71 [ 1070.150342][T14154] usb usb9-port1: unable to enumerate USB device [ 1070.157067][T26765] /dev/rnullb0: Can't open blockdev [ 1070.355831][T26774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.366776][T26774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.406087][T26777] /dev/rnullb0: Can't open blockdev [ 1070.411950][T14154] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1070.559310][T14154] usb 3-1: device descriptor read/64, error -71 [ 1070.568077][T26785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.577962][T26785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.809400][T14154] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1070.829395][T23770] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 1070.924668][T26788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.933929][T26788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.946540][T14154] usb 3-1: device descriptor read/64, error -71 [ 1070.992599][ T30] kauditd_printk_skb: 612 callbacks suppressed [ 1070.992617][ T30] audit: type=1800 audit(2000033878.970:15498): pid=26793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6065" name="/" dev="9p" ino=2 res=0 errno=0 [ 1071.059924][T14154] usb usb3-port1: attempt power cycle [ 1071.399306][T14154] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1071.439389][T14154] usb 3-1: device descriptor read/8, error -71 [ 1071.689473][T14154] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1071.732192][T14154] usb 3-1: device descriptor read/8, error -71 [ 1071.762086][T26823] netlink: 'syz.7.6073': attribute type 3 has an invalid length. [ 1071.788383][T26823] netlink: 766 bytes leftover after parsing attributes in process `syz.7.6073'. [ 1071.852454][T14154] usb usb3-port1: unable to enumerate USB device [ 1072.217282][T26838] overlayfs: missing 'lowerdir' [ 1072.310938][T26841] /dev/rnullb0: Can't open blockdev [ 1073.089340][ T5961] usb 9-1: new full-speed USB device number 35 using dummy_hcd [ 1073.201302][T26866] overlayfs: missing 'lowerdir' [ 1073.253326][T26869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1073.262946][T26869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.263380][ T5961] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1073.280062][ T5961] usb 9-1: not running at top speed; connect to a high speed hub [ 1073.289146][ T5961] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.300990][ T5961] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1073.318490][ T5961] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1073.349352][ T5961] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.357445][ T5961] usb 9-1: Product: syz [ 1073.367892][ T5961] usb 9-1: Manufacturer: syz [ 1073.384684][ T5961] usb 9-1: SerialNumber: syz [ 1073.559385][ T5964] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1073.657970][ T5961] usb 9-1: 0:2 : does not exist [ 1073.665674][ T5961] usb 9-1: unit 6 not found! [ 1073.675654][ T5961] usb 9-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1073.676830][T26881] /dev/rnullb0: Can't open blockdev [ 1073.688063][ T5961] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1073.700892][T26881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1073.702065][ T5961] usb 9-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1073.727303][ T5961] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1073.738422][ T5961] usb 9-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1073.739338][ T5964] usb 3-1: Using ep0 maxpacket: 32 [ 1073.751854][ T5961] usb 9-1: USB disconnect, device number 35 [ 1073.770864][ T5964] usb 3-1: config 0 has an invalid interface number: 111 but max is 1 [ 1073.784620][ T5964] usb 3-1: config 0 has an invalid descriptor of length 172, skipping remainder of the config [ 1073.798043][T24857] udevd[24857]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1073.798672][ T5964] usb 3-1: config 0 has no interface number 1 [ 1073.827016][ T5964] usb 3-1: too many endpoints for config 0 interface 0 altsetting 100: 248, using maximum allowed: 30 [ 1073.838485][ T5964] usb 3-1: config 0 interface 0 altsetting 100 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 1073.854768][ T5964] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1073.864171][ T5964] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1073.876200][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3 [ 1073.885301][ T5964] usb 3-1: Product: syz [ 1073.892564][ T5964] usb 3-1: Manufacturer: syz [ 1073.897163][ T5964] usb 3-1: SerialNumber: syz [ 1073.904587][ T5964] usb 3-1: config 0 descriptor?? [ 1074.073237][T26884] /dev/rnullb0: Can't open blockdev [ 1074.115543][T26867] ./file0: Can't lookup blockdev [ 1074.124645][ T5964] snd-usb-6fire 3-1:0.111: unable to receive device firmware state. [ 1074.145379][ T5964] snd-usb-6fire 3-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 1074.182737][ T5964] usb 3-1: USB disconnect, device number 74 [ 1074.274789][T26892] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6093'. [ 1074.287779][T26892] /dev/rnullb0: Can't open blockdev [ 1074.496387][T26899] overlayfs: missing 'lowerdir' [ 1074.587331][ T30] audit: type=1326 audit(2000033882.560:15499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26900 comm="syz.7.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1074.616820][ T30] audit: type=1326 audit(2000033882.560:15500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26900 comm="syz.7.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1074.651942][T26905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.665760][T26905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.677139][ T30] audit: type=1326 audit(2000033882.560:15501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26900 comm="syz.7.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1074.726374][ T30] audit: type=1326 audit(2000033882.560:15502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26900 comm="syz.7.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1074.771252][T26909] ALSA: mixer_oss: invalid OSS volume '' [ 1074.777095][T26909] ALSA: mixer_oss: invalid OSS volume '' [ 1074.779329][ T30] audit: type=1326 audit(2000033882.560:15503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26900 comm="syz.7.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1074.823326][T26911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.831878][ T30] audit: type=1326 audit(2000033882.560:15504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26900 comm="syz.7.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1074.852649][T26911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.854846][ T30] audit: type=1326 audit(2000033882.560:15505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26900 comm="syz.7.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1074.928543][ T30] audit: type=1326 audit(2000033882.560:15506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26900 comm="syz.7.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1074.961045][ T30] audit: type=1326 audit(2000033882.560:15507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26900 comm="syz.7.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1075.102189][T26920] /dev/rnullb0: Can't open blockdev [ 1075.122170][T26920] /dev/rnullb0: Can't open blockdev [ 1075.204750][ T5961] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1075.361015][ T5961] usb 9-1: Using ep0 maxpacket: 16 [ 1075.368474][ T5961] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 36872, setting to 1024 [ 1075.389603][ T5961] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1075.402160][ T5961] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1075.419262][ T5961] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.427423][ T5961] usb 9-1: Product: syz [ 1075.432364][ T5961] usb 9-1: Manufacturer: syz [ 1075.437165][ T5961] usb 9-1: SerialNumber: syz [ 1075.461051][ T5961] usb 9-1: config 0 descriptor?? [ 1075.486060][T26914] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1075.497364][ T5961] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1075.520878][ T5961] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1075.635178][T26930] overlayfs: missing 'lowerdir' [ 1075.714247][T26914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.741926][T26914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.751284][T26932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.776514][T26932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.777029][T26914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.820175][T26914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.835969][T26914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.851709][T26914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.873298][T26914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.895561][T26914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.929460][T26914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.950016][T26914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.006725][ T30] kauditd_printk_skb: 2343 callbacks suppressed [ 1076.006743][ T30] audit: type=1326 audit(2000033883.960:17851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26900 comm="syz.7.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1076.039072][T26932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.068987][T26932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.078368][T26932] /dev/rnullb0: Can't open blockdev [ 1076.084479][ T30] audit: type=1326 audit(2000033884.030:17852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26900 comm="syz.7.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1076.099697][ T5961] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1076.107700][ T30] audit: type=1326 audit(2000033884.030:17853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26900 comm="syz.7.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1076.107759][ T30] audit: type=1326 audit(2000033884.030:17854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26900 comm="syz.7.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1076.107802][ T30] audit: type=1326 audit(2000033884.030:17855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26900 comm="syz.7.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1076.107845][ T30] audit: type=1326 audit(2000033884.030:17856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26900 comm="syz.7.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1076.107897][ T30] audit: type=1326 audit(2000033884.030:17857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26900 comm="syz.7.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1076.107940][ T30] audit: type=1326 audit(2000033884.030:17858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26900 comm="syz.7.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1076.107984][ T30] audit: type=1326 audit(2000033884.030:17859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26900 comm="syz.7.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1076.108022][ T30] audit: type=1326 audit(2000033884.030:17860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26900 comm="syz.7.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd656d8ebe9 code=0x50000 [ 1076.262458][ T5961] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1076.365436][T26942] /dev/rnullb0: Can't open blockdev [ 1076.381325][ T5961] em28xx 9-1:0.0: board has no eeprom [ 1076.482355][ T5961] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1076.509277][ T5961] em28xx 9-1:0.0: dvb set to bulk mode. [ 1076.515039][ T5868] em28xx 9-1:0.0: Binding DVB extension [ 1076.543364][T26945] /dev/rnullb0: Can't open blockdev [ 1076.580994][ T5961] usb 9-1: USB disconnect, device number 36 [ 1076.600609][ T5961] em28xx 9-1:0.0: Disconnecting em28xx [ 1076.622319][T26947] /dev/rnullb0: Can't open blockdev [ 1076.686493][ T5868] em28xx 9-1:0.0: Registering input extension [ 1076.708883][ T5961] em28xx 9-1:0.0: Closing input extension [ 1076.737288][ T5961] em28xx 9-1:0.0: Freeing device [ 1076.858872][T26955] overlayfs: missing 'lowerdir' [ 1076.982852][T26960] comedi comedi3: comedi_config --init_data is deprecated [ 1077.018970][T26960] /dev/rnullb0: Can't open blockdev [ 1077.735902][T26982] overlayfs: missing 'lowerdir' [ 1078.487819][T27003] fuse: Unknown parameter 'group_id300000000000000000000' [ 1078.609313][ T5930] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1078.647183][T27010] trusted_key: encrypted_key: keylen parameter is missing [ 1078.723641][T27012] overlay: filesystem on ./bus not supported [ 1078.729882][ T5964] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 1078.779561][ T5930] usb 3-1: Using ep0 maxpacket: 8 [ 1078.790150][ T5930] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 1078.798400][ T5930] usb 3-1: config 2 has no interface number 0 [ 1078.813251][ T5930] usb 3-1: config 2 interface 31 has no altsetting 0 [ 1078.825177][T27014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.840055][T27014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.850737][ T5930] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1078.864457][T27014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.873593][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.882610][ T5930] usb 3-1: Product: syz [ 1078.886810][ T5930] usb 3-1: Manufacturer: syz [ 1078.892281][T27014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.903921][ T5930] usb 3-1: SerialNumber: syz [ 1078.935316][ T5964] usb 8-1: config 2 has an invalid interface number: 174 but max is 0 [ 1078.950085][ T5964] usb 8-1: config 2 has no interface number 0 [ 1078.956288][ T5964] usb 8-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1078.972233][ T5964] usb 8-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1078.984117][ T5964] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.994661][ T5964] usb 8-1: Product: syz [ 1078.998947][ T5964] usb 8-1: Manufacturer: syz [ 1079.011419][ T5964] usb 8-1: SerialNumber: syz [ 1079.030853][T26991] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1079.182131][T27019] netlink: 168 bytes leftover after parsing attributes in process `syz.8.6138'. [ 1079.195038][T27019] /dev/rnullb0: Can't open blockdev [ 1079.258987][T26990] /dev/rnullb0: Can't open blockdev [ 1079.271703][ T5964] usb 8-1: probing VID:PID(0424:012C) [ 1079.298327][ T5964] usb 8-1: vub300 testing BULK IN EndPoint(0) 82 [ 1079.318276][ T5964] usb 8-1: Could not find two sets of bulk-in/out endpoint pairs [ 1079.328443][ T5964] vub300 8-1:2.174: probe with driver vub300 failed with error -22 [ 1079.338322][T26995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6130'. [ 1079.359292][ T5964] usb 8-1: USB disconnect, device number 67 [ 1079.385034][T26995] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6130'. [ 1079.527662][ T5930] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 1079.555365][ T5930] usb 3-1: USB disconnect, device number 75 [ 1079.832923][T27031] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6142'. [ 1079.964282][T27035] tmpfs: Bad value for 'gid' [ 1079.968923][T27035] tmpfs: Bad value for 'gid' [ 1080.099335][ T5930] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1080.250041][ T5930] usb 9-1: Using ep0 maxpacket: 16 [ 1080.256738][T27035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.274420][ T5930] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1080.274964][T27035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.290545][ T5930] usb 9-1: config 9 has an invalid interface number: 129 but max is 0 [ 1080.296452][T27035] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1080.328218][ T5930] usb 9-1: config 9 has no interface number 0 [ 1080.330830][T27035] tipc: Enabled bearer , priority 10 [ 1080.341314][ T5930] usb 9-1: config 9 interface 129 has no altsetting 0 [ 1080.354676][ T5930] usb 9-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 1080.364317][ T5930] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.372885][ T5930] usb 9-1: Product: syz [ 1080.377179][ T5930] usb 9-1: Manufacturer: syz [ 1080.382640][ T5930] usb 9-1: SerialNumber: syz [ 1080.440904][T27047] overlay: filesystem on ./bus not supported [ 1080.827268][ T5930] usb 9-1: bad CDC descriptors [ 1080.849438][ T5930] usb 9-1: USB disconnect, device number 37 [ 1081.081056][T27054] /dev/rnullb0: Can't open blockdev [ 1081.213678][T27056] Bluetooth: MGMT ver 1.23 [ 1081.362315][ T5868] tipc: Node number set to 2886997162 [ 1081.436446][T27061] netlink: 6 bytes leftover after parsing attributes in process `syz.7.6151'. [ 1081.489845][T27061] /dev/rnullb0: Can't open blockdev [ 1082.689739][T27075] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6155'. [ 1082.766267][T27079] No control pipe specified [ 1082.773476][T27079] overlayfs: missing 'lowerdir' [ 1082.819917][T27081] overlay: filesystem on ./bus not supported [ 1082.915493][T27083] /dev/rnullb0: Can't open blockdev [ 1082.976468][T27087] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6160'. [ 1083.077950][T27090] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1083.354053][ T5930] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 1083.564505][ T5930] usb 8-1: Using ep0 maxpacket: 32 [ 1083.581215][ T5930] usb 8-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1083.609509][ T5930] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1083.636609][ T5930] usb 8-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1083.657549][ T5930] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.694203][ T5930] usb 8-1: config 0 descriptor?? [ 1083.867019][T27107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.877925][T27107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.893163][T27109] overlay: filesystem on ./bus not supported [ 1083.987183][T27112] overlay: filesystem on ./bus not supported [ 1084.092996][T27116] FAULT_INJECTION: forcing a failure. [ 1084.092996][T27116] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1084.110761][T27116] CPU: 1 UID: 0 PID: 27116 Comm: syz.8.6171 Not tainted 6.17.0-rc1-next-20250812-syzkaller #0 PREEMPT(full) [ 1084.110792][T27116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1084.110806][T27116] Call Trace: [ 1084.110815][T27116] [ 1084.110828][T27116] dump_stack_lvl+0x189/0x250 [ 1084.110863][T27116] ? __pfx____ratelimit+0x10/0x10 [ 1084.110884][T27116] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1084.110912][T27116] ? __pfx__printk+0x10/0x10 [ 1084.110940][T27116] ? __might_fault+0xb0/0x130 [ 1084.110971][T27116] should_fail_ex+0x414/0x560 [ 1084.111004][T27116] _copy_from_user+0x2d/0xb0 [ 1084.111028][T27116] memdup_user+0x5e/0xd0 [ 1084.111055][T27116] strndup_user+0x68/0xd0 [ 1084.111082][T27116] __se_sys_mount+0x9c/0x410 [ 1084.111110][T27116] ? ksys_write+0x22a/0x250 [ 1084.111135][T27116] ? __pfx___se_sys_mount+0x10/0x10 [ 1084.111159][T27116] ? rcu_is_watching+0x15/0xb0 [ 1084.111189][T27116] ? do_syscall_64+0xbe/0x3b0 [ 1084.111208][T27116] ? __x64_sys_mount+0x20/0xc0 [ 1084.111235][T27116] do_syscall_64+0xfa/0x3b0 [ 1084.111255][T27116] ? lockdep_hardirqs_on+0x9c/0x150 [ 1084.111274][T27116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.111294][T27116] ? clear_bhb_loop+0x60/0xb0 [ 1084.111319][T27116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.111338][T27116] RIP: 0033:0x7f3c1378ebe9 [ 1084.111357][T27116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1084.111376][T27116] RSP: 002b:00007f3c119f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1084.111398][T27116] RAX: ffffffffffffffda RBX: 00007f3c139b5fa0 RCX: 00007f3c1378ebe9 [ 1084.111414][T27116] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 1084.111428][T27116] RBP: 00007f3c119f6090 R08: 0000200000000380 R09: 0000000000000000 [ 1084.111441][T27116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1084.111453][T27116] R13: 00007f3c139b6038 R14: 00007f3c139b5fa0 R15: 00007fffd4b89bd8 [ 1084.111483][T27116] [ 1084.755037][T27124] /dev/rnullb0: Can't open blockdev [ 1084.839997][ T5868] usb 9-1: new full-speed USB device number 38 using dummy_hcd [ 1085.014645][ T5868] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1085.023429][ T5868] usb 9-1: not running at top speed; connect to a high speed hub [ 1085.033013][ T5868] usb 9-1: config 11 has an invalid interface number: 229 but max is 0 [ 1085.042906][ T5868] usb 9-1: config 11 has no interface number 0 [ 1085.049687][ T5868] usb 9-1: config 11 interface 229 has no altsetting 0 [ 1085.058962][ T5868] usb 9-1: New USB device found, idVendor=0582, idProduct=be1e, bcdDevice=cf.ce [ 1085.068622][ T5868] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.077252][ T5868] usb 9-1: Product: syz [ 1085.084430][ T5868] usb 9-1: Manufacturer: syz [ 1085.089537][ T5868] usb 9-1: SerialNumber: syz [ 1085.201322][ C0] ================================================================== [ 1085.209441][ C0] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 1085.217574][ C0] Read of size 2 at addr ffff88805880c82a by task syz.2.6174/27126 [ 1085.225769][ C0] [ 1085.228197][ C0] CPU: 0 UID: 0 PID: 27126 Comm: syz.2.6174 Not tainted 6.17.0-rc1-next-20250812-syzkaller #0 PREEMPT(full) [ 1085.228225][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1085.228238][ C0] Call Trace: [ 1085.228247][ C0] [ 1085.228256][ C0] dump_stack_lvl+0x189/0x250 [ 1085.228287][ C0] ? rcu_is_watching+0x15/0xb0 [ 1085.228309][ C0] ? __kasan_check_byte+0x12/0x40 [ 1085.228330][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1085.228356][ C0] ? rcu_is_watching+0x15/0xb0 [ 1085.228382][ C0] ? lock_release+0x4b/0x3e0 [ 1085.228405][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 1085.228421][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 1085.228439][ C0] print_report+0xca/0x240 [ 1085.228458][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 1085.228486][ C0] kasan_report+0x118/0x150 [ 1085.228506][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 1085.228535][ C0] rose_timer_expiry+0x471/0x4b0 [ 1085.228561][ C0] call_timer_fn+0x17e/0x5f0 [ 1085.228583][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1085.228608][ C0] ? call_timer_fn+0xbe/0x5f0 [ 1085.228625][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1085.228646][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1085.228675][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1085.228695][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1085.228720][ C0] __run_timer_base+0x61a/0x860 [ 1085.228735][ C0] ? ktime_get+0x3e/0x1f0 [ 1085.228762][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1085.228777][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 1085.228808][ C0] run_timer_softirq+0xb7/0x180 [ 1085.228826][ C0] handle_softirqs+0x283/0x870 [ 1085.228850][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1085.228872][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1085.228894][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1085.228923][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1085.228945][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1085.228968][ C0] irq_exit_rcu+0x9/0x30 [ 1085.228986][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1085.229014][ C0] [ 1085.229021][ C0] [ 1085.229028][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1085.229050][ C0] RIP: 0010:page_table_check_set+0x431/0x730 [ 1085.229073][ C0] Code: 99 e8 a3 c6 f4 ff 48 03 2d bc 20 c8 17 eb 10 e8 d5 5e 91 ff 48 89 df e8 cd e0 ff ff 48 89 c5 4c 89 e7 4c 89 fe e8 1f 61 91 ff <48> 85 ed 74 54 4d 39 fc 73 4f e8 b0 5e 91 ff 49 ff c4 e9 72 fe ff [ 1085.229092][ C0] RSP: 0018:ffffc900038d7348 EFLAGS: 00000297 [ 1085.229110][ C0] RAX: ffffffff822e9d81 RBX: 000000000008619f RCX: ffff88802a500000 [ 1085.229126][ C0] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 0000000000000001 [ 1085.229139][ C0] RBP: ffff88801ede81b0 R08: ffff88801ede81af R09: 1ffff11003dbd035 [ 1085.229155][ C0] R10: dffffc0000000000 R11: ffffed1003dbd036 R12: 0000000000000001 [ 1085.229168][ C0] R13: 0000000000000000 R14: 000000000008619e R15: 0000000000000001 [ 1085.229181][ C0] ? page_table_check_set+0x431/0x730 [ 1085.229201][ C0] ? page_table_check_set+0x431/0x730 [ 1085.229236][ C0] ? page_table_check_set+0x18d/0x730 [ 1085.229254][ C0] copy_pmd_range+0x4439/0x71d0 [ 1085.229285][ C0] ? stack_depot_save_flags+0x40/0x860 [ 1085.229315][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 1085.229343][ C0] copy_page_range+0xc14/0x1270 [ 1085.229382][ C0] ? __lock_acquire+0xab9/0xd20 [ 1085.229410][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 1085.229435][ C0] ? up_write+0x1c4/0x420 [ 1085.229458][ C0] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 1085.229482][ C0] dup_mmap+0xf57/0x1ac0 [ 1085.229507][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 1085.229526][ C0] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1085.229549][ C0] ? mm_init+0xcc3/0xef0 [ 1085.229574][ C0] copy_mm+0x13c/0x4b0 [ 1085.229598][ C0] copy_process+0x1706/0x3c00 [ 1085.229626][ C0] ? copy_process+0x97f/0x3c00 [ 1085.229653][ C0] ? __pfx_copy_process+0x10/0x10 [ 1085.229679][ C0] kernel_clone+0x21e/0x840 [ 1085.229706][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1085.229734][ C0] ? do_futex+0x333/0x420 [ 1085.229762][ C0] __x64_sys_clone+0x18b/0x1e0 [ 1085.229790][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 1085.229824][ C0] ? __pfx___se_sys_futex+0x10/0x10 [ 1085.229839][ C0] ? __se_sys_chdir+0x1b9/0x280 [ 1085.229863][ C0] ? __pfx___se_sys_chdir+0x10/0x10 [ 1085.229884][ C0] ? rcu_is_watching+0x15/0xb0 [ 1085.229907][ C0] ? do_syscall_64+0xbe/0x3b0 [ 1085.229927][ C0] do_syscall_64+0xfa/0x3b0 [ 1085.229946][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1085.229964][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.229990][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1085.230012][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.230032][ C0] RIP: 0033:0x7fbf3f18ebe9 [ 1085.230049][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1085.230066][ C0] RSP: 002b:00007fbf400dcfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1085.230087][ C0] RAX: ffffffffffffffda RBX: 00007fbf3f3b5fa0 RCX: 00007fbf3f18ebe9 [ 1085.230102][ C0] RDX: 0000000000000000 RSI: 0000000000000050 RDI: 0000000000904000 [ 1085.230116][ C0] RBP: 00007fbf3f211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1085.230130][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1085.230143][ C0] R13: 00007fbf3f3b6038 R14: 00007fbf3f3b5fa0 R15: 00007ffd296f89e8 [ 1085.230164][ C0] [ 1085.230170][ C0] [ 1085.755908][ C0] Allocated by task 22712: [ 1085.760362][ C0] kasan_save_track+0x3e/0x80 [ 1085.765097][ C0] __kasan_kmalloc+0x93/0xb0 [ 1085.769806][ C0] __kmalloc_cache_noprof+0x230/0x3d0 [ 1085.775187][ C0] rose_add_node+0x23a/0xde0 [ 1085.779872][ C0] rose_rt_ioctl+0xa48/0xfb0 [ 1085.784643][ C0] rose_ioctl+0x3ce/0x8b0 [ 1085.788990][ C0] sock_do_ioctl+0xdc/0x300 [ 1085.793525][ C0] sock_ioctl+0x576/0x790 [ 1085.797879][ C0] __se_sys_ioctl+0xf9/0x170 [ 1085.802522][ C0] do_syscall_64+0xfa/0x3b0 [ 1085.807037][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.812966][ C0] [ 1085.815286][ C0] Freed by task 25493: [ 1085.819345][ C0] kasan_save_track+0x3e/0x80 [ 1085.824119][ C0] kasan_save_free_info+0x46/0x50 [ 1085.829180][ C0] __kasan_slab_free+0x5b/0x80 [ 1085.833954][ C0] kfree+0x18e/0x440 [ 1085.837850][ C0] rose_rt_device_down+0x473/0x4c0 [ 1085.842961][ C0] rose_device_event+0x603/0x6a0 [ 1085.847929][ C0] notifier_call_chain+0x1b6/0x3e0 [ 1085.853034][ C0] netif_close_many+0x29c/0x410 [ 1085.857883][ C0] netif_close+0x158/0x210 [ 1085.862297][ C0] dev_close+0x10a/0x220 [ 1085.866530][ C0] bpq_device_event+0x377/0x6a0 [ 1085.871372][ C0] notifier_call_chain+0x1b6/0x3e0 [ 1085.876486][ C0] __dev_notify_flags+0x18d/0x2e0 [ 1085.881511][ C0] netif_change_flags+0xe8/0x1a0 [ 1085.886445][ C0] dev_change_flags+0x130/0x260 [ 1085.891378][ C0] dev_ioctl+0x7b4/0x1150 [ 1085.895700][ C0] sock_do_ioctl+0x22c/0x300 [ 1085.900409][ C0] sock_ioctl+0x576/0x790 [ 1085.904766][ C0] __se_sys_ioctl+0xf9/0x170 [ 1085.909519][ C0] do_syscall_64+0xfa/0x3b0 [ 1085.914038][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.919944][ C0] [ 1085.922270][ C0] The buggy address belongs to the object at ffff88805880c800 [ 1085.922270][ C0] which belongs to the cache kmalloc-512 of size 512 [ 1085.936547][ C0] The buggy address is located 42 bytes inside of [ 1085.936547][ C0] freed 512-byte region [ffff88805880c800, ffff88805880ca00) [ 1085.950796][ C0] [ 1085.953157][ C0] The buggy address belongs to the physical page: [ 1085.959579][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805880c800 pfn:0x5880c [ 1085.969647][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1085.978152][ C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1085.986654][ C0] page_type: f5(slab) [ 1085.990630][ C0] raw: 00fff00000000240 ffff88801a841c80 ffffea0001eb0b10 ffffea0000bd7610 [ 1085.999208][ C0] raw: ffff88805880c800 000000000010000c 00000000f5000000 0000000000000000 [ 1086.007793][ C0] head: 00fff00000000240 ffff88801a841c80 ffffea0001eb0b10 ffffea0000bd7610 [ 1086.016625][ C0] head: ffff88805880c800 000000000010000c 00000000f5000000 0000000000000000 [ 1086.025298][ C0] head: 00fff00000000002 ffffea0001620301 00000000ffffffff 00000000ffffffff [ 1086.034069][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1086.042737][ C0] page dumped because: kasan: bad access detected [ 1086.049242][ C0] page_owner tracks the page as allocated [ 1086.054974][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5881, tgid 5881 (udevd), ts 85121918469, free_ts 23405781038 [ 1086.075718][ C0] post_alloc_hook+0x240/0x2a0 [ 1086.080486][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 1086.086027][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 1086.091824][ C0] alloc_pages_mpol+0x232/0x4a0 [ 1086.096679][ C0] allocate_slab+0x8a/0x370 [ 1086.101349][ C0] ___slab_alloc+0xbeb/0x1410 [ 1086.106130][ C0] __kmalloc_cache_noprof+0x296/0x3d0 [ 1086.111590][ C0] kernfs_fop_open+0x397/0xca0 [ 1086.116369][ C0] do_dentry_open+0x953/0x13f0 [ 1086.121142][ C0] vfs_open+0x3b/0x340 [ 1086.125225][ C0] path_openat+0x2ee5/0x3830 [ 1086.129891][ C0] do_filp_open+0x1fa/0x410 [ 1086.134385][ C0] do_sys_openat2+0x121/0x1c0 [ 1086.139064][ C0] __x64_sys_openat+0x138/0x170 [ 1086.143903][ C0] do_syscall_64+0xfa/0x3b0 [ 1086.148588][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.154507][ C0] page last free pid 1 tgid 1 stack trace: [ 1086.160407][ C0] __free_frozen_pages+0xbc4/0xd30 [ 1086.165634][ C0] free_contig_range+0x1bd/0x4a0 [ 1086.170606][ C0] destroy_args+0x69/0x660 [ 1086.175051][ C0] debug_vm_pgtable+0x39f/0x3b0 [ 1086.179909][ C0] do_one_initcall+0x233/0x820 [ 1086.184795][ C0] do_initcall_level+0x104/0x190 [ 1086.189774][ C0] do_initcalls+0x59/0xa0 [ 1086.194096][ C0] kernel_init_freeable+0x334/0x4b0 [ 1086.199287][ C0] kernel_init+0x1d/0x1d0 [ 1086.203786][ C0] ret_from_fork+0x3f9/0x770 [ 1086.208377][ C0] ret_from_fork_asm+0x1a/0x30 [ 1086.213130][ C0] [ 1086.215455][ C0] Memory state around the buggy address: [ 1086.221070][ C0] ffff88805880c700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1086.229126][ C0] ffff88805880c780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1086.237327][ C0] >ffff88805880c800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1086.245382][ C0] ^ [ 1086.250825][ C0] ffff88805880c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1086.258876][ C0] ffff88805880c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1086.267105][ C0] ================================================================== [ 1086.275382][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1086.282602][ C0] CPU: 0 UID: 0 PID: 27126 Comm: syz.2.6174 Not tainted 6.17.0-rc1-next-20250812-syzkaller #0 PREEMPT(full) [ 1086.294260][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1086.304479][ C0] Call Trace: [ 1086.307782][ C0] [ 1086.310642][ C0] dump_stack_lvl+0x99/0x250 [ 1086.315258][ C0] ? __asan_memcpy+0x40/0x70 [ 1086.319875][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1086.325102][ C0] ? __pfx__printk+0x10/0x10 [ 1086.329812][ C0] vpanic+0x281/0x750 [ 1086.333820][ C0] ? __pfx_vpanic+0x10/0x10 [ 1086.338623][ C0] ? irqentry_exit+0x74/0x90 [ 1086.343249][ C0] panic+0xb9/0xc0 [ 1086.346999][ C0] ? __pfx_panic+0x10/0x10 [ 1086.351537][ C0] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1086.357461][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1086.363407][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 1086.368554][ C0] check_panic_on_warn+0x89/0xb0 [ 1086.373540][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 1086.378685][ C0] end_report+0x78/0x160 [ 1086.382949][ C0] kasan_report+0x129/0x150 [ 1086.387573][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 1086.392719][ C0] rose_timer_expiry+0x471/0x4b0 [ 1086.397716][ C0] call_timer_fn+0x17e/0x5f0 [ 1086.402356][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1086.407859][ C0] ? call_timer_fn+0xbe/0x5f0 [ 1086.412569][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1086.417894][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1086.423126][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1086.428350][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1086.433851][ C0] __run_timer_base+0x61a/0x860 [ 1086.438996][ C0] ? ktime_get+0x3e/0x1f0 [ 1086.443363][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1086.448757][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 1086.455040][ C0] run_timer_softirq+0xb7/0x180 [ 1086.459930][ C0] handle_softirqs+0x283/0x870 [ 1086.464728][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1086.469610][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1086.474933][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1086.480175][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1086.484795][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1086.490111][ C0] irq_exit_rcu+0x9/0x30 [ 1086.494378][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1086.500043][ C0] [ 1086.502992][ C0] [ 1086.505942][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1086.512027][ C0] RIP: 0010:page_table_check_set+0x431/0x730 [ 1086.518116][ C0] Code: 99 e8 a3 c6 f4 ff 48 03 2d bc 20 c8 17 eb 10 e8 d5 5e 91 ff 48 89 df e8 cd e0 ff ff 48 89 c5 4c 89 e7 4c 89 fe e8 1f 61 91 ff <48> 85 ed 74 54 4d 39 fc 73 4f e8 b0 5e 91 ff 49 ff c4 e9 72 fe ff [ 1086.537828][ C0] RSP: 0018:ffffc900038d7348 EFLAGS: 00000297 [ 1086.543922][ C0] RAX: ffffffff822e9d81 RBX: 000000000008619f RCX: ffff88802a500000 [ 1086.551912][ C0] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 0000000000000001 [ 1086.560073][ C0] RBP: ffff88801ede81b0 R08: ffff88801ede81af R09: 1ffff11003dbd035 [ 1086.568076][ C0] R10: dffffc0000000000 R11: ffffed1003dbd036 R12: 0000000000000001 [ 1086.576155][ C0] R13: 0000000000000000 R14: 000000000008619e R15: 0000000000000001 [ 1086.584243][ C0] ? page_table_check_set+0x431/0x730 [ 1086.589732][ C0] ? page_table_check_set+0x431/0x730 [ 1086.595126][ C0] ? page_table_check_set+0x18d/0x730 [ 1086.600540][ C0] copy_pmd_range+0x4439/0x71d0 [ 1086.605428][ C0] ? stack_depot_save_flags+0x40/0x860 [ 1086.611022][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 1086.616258][ C0] copy_page_range+0xc14/0x1270 [ 1086.621152][ C0] ? __lock_acquire+0xab9/0xd20 [ 1086.626185][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 1086.631509][ C0] ? up_write+0x1c4/0x420 [ 1086.635877][ C0] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 1086.642757][ C0] dup_mmap+0xf57/0x1ac0 [ 1086.647109][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 1086.651817][ C0] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1086.657739][ C0] ? mm_init+0xcc3/0xef0 [ 1086.662011][ C0] copy_mm+0x13c/0x4b0 [ 1086.666105][ C0] copy_process+0x1706/0x3c00 [ 1086.670805][ C0] ? copy_process+0x97f/0x3c00 [ 1086.675596][ C0] ? __pfx_copy_process+0x10/0x10 [ 1086.680633][ C0] kernel_clone+0x21e/0x840 [ 1086.685202][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1086.690232][ C0] ? do_futex+0x333/0x420 [ 1086.694573][ C0] __x64_sys_clone+0x18b/0x1e0 [ 1086.699431][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 1086.704830][ C0] ? __pfx___se_sys_futex+0x10/0x10 [ 1086.710415][ C0] ? __se_sys_chdir+0x1b9/0x280 [ 1086.715441][ C0] ? __pfx___se_sys_chdir+0x10/0x10 [ 1086.720657][ C0] ? rcu_is_watching+0x15/0xb0 [ 1086.725520][ C0] ? do_syscall_64+0xbe/0x3b0 [ 1086.730200][ C0] do_syscall_64+0xfa/0x3b0 [ 1086.734701][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1086.739893][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.745963][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1086.750732][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.756680][ C0] RIP: 0033:0x7fbf3f18ebe9 [ 1086.761102][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1086.780804][ C0] RSP: 002b:00007fbf400dcfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1086.789413][ C0] RAX: ffffffffffffffda RBX: 00007fbf3f3b5fa0 RCX: 00007fbf3f18ebe9 [ 1086.797572][ C0] RDX: 0000000000000000 RSI: 0000000000000050 RDI: 0000000000904000 [ 1086.805553][ C0] RBP: 00007fbf3f211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1086.813519][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1086.821501][ C0] R13: 00007fbf3f3b6038 R14: 00007fbf3f3b5fa0 R15: 00007ffd296f89e8 [ 1086.829562][ C0] [ 1086.841887][ C0] Kernel Offset: disabled [ 1086.846293][ C0] Rebooting in 86400 seconds..