last executing test programs: 20m25.902835814s ago: executing program 1 (id=239): syz_usb_connect(0x2, 0x2d, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x1, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0xe43986f95b0e4309}) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0xdb, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000300)={0x1, {{0xa, 0x4e22, 0x9, @loopback, 0x400}}, {{0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x200}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) ioctl$TUNGETSNDBUF(r0, 0x400454dc, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) umount2(&(0x7f00000000c0)='./cgroup\x00', 0x8) 20m24.470845849s ago: executing program 1 (id=248): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xa, 0x0, 0x7fffffff}]}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x6, 0xa9613, 0x17e5e9}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r6 = dup2(r2, r1) close_range(r6, 0xffffffffffffffff, 0x0) 20m24.177252769s ago: executing program 1 (id=250): creat(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 20m24.030871314s ago: executing program 1 (id=251): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$kcm(0x10, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x119a00, 0x20, 0x21}, 0x18) getdents(r3, &(0x7f00000003c0)=""/214, 0xd6) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r4], 0x3c}}, 0x10) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000001c0)={0xc}) syz_genetlink_get_family_id$ieee802154(0x0, r0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) listxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/39, 0x27) 20m23.986649517s ago: executing program 1 (id=252): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x28200, 0x0) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) 20m23.718171167s ago: executing program 1 (id=256): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c4b20710200e01015a7a0102030109021b00010000000009040000012e6d0a150905ff"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x74) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 20m23.441593883s ago: executing program 32 (id=256): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c4b20710200e01015a7a0102030109021b00010000000009040000012e6d0a150905ff"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x74) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 18m0.278812826s ago: executing program 0 (id=1186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x21, 0x28, 0x64, 0x0, 0x4, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x30}}, {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x1, 0x0, 0x34}}}}, 0x36) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='debugfs\x00', 0x200000, 0x0) 17m59.928208747s ago: executing program 0 (id=1188): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x0) statx(r3, 0x0, 0x1000, 0x200, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x9, 0xb, 0x1ad, 0x3ff}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e00090434"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 17m56.850669831s ago: executing program 0 (id=1203): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x1f, 0x1, 0x0, 0x80000, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0x14, 0x3, 0x0, 0x0, @ipv6=@loopback}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b504681000000000000009ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc358"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x20000004}, 0x140000c4) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="92010000ffd26f10cb060600eb9a0102030109022400010000000009040001"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x810, r2, 0x2000) 17m54.942666204s ago: executing program 0 (id=1211): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="737461636b203aae86ad47aa0d9495e6d80f7bde2d18ffb36cf152aed2d408fb58e305fc8e2f2f7d91f81b621cc4214d4a27e1614fbee0beac8f4a045070b770212d46d4a2df096b791f2a4ba218e12cb76aa24945b70a7c9dd5edeac52b5a876f73cfbe66371a72f11f3d9544d6b59b4a5541dcef5cbf11ffff37dfd147cca3e5098a207be806ea7167101f8c1b5c8fe41e170fd0c775dbc5be0b6d3ab625ab702e5b1dc15f9c4b3d09be812f340e681e0694f5badf640da3fdfc2f929b4c2beb9a592c577287b6021bfeec24146c7f95608bb60a736207a09d"], 0x564) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) socket$kcm(0x29, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x82c1, 0x0) pwritev(r4, &(0x7f0000000280)=[{&(0x7f0000000480)="e1", 0x1}], 0x1, 0x7fffffffffffffff, 0x0) execveat(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000540)={[&(0x7f0000000080)='/dev/video#\x00', &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', &(0x7f0000000180)='[@\x00', &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', &(0x7f0000000380)='syz0\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/proc/thread-self/attr/exec\x00']}, &(0x7f0000000800)={[&(0x7f0000000580)='+\x1a{!$-\xa6][\xf3%\xe6-$\xeb++{%,\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='/dev/rnullb0\x00', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='\x00', &(0x7f0000000700)='-\x00', &(0x7f0000000740)='/dev/video#\x00', &(0x7f0000000780)='{[\x00', &(0x7f00000007c0)='*@#\x00']}, 0x100) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x5, 0x1, 0x4, 0x800, 0x7, {}, {0x2, 0xa, 0x5, 0x5, 0xc, 0x2, "b3848769"}, 0x5, 0x1, {0x0}, 0x8}) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000400000/0xc00000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) 17m54.06748568s ago: executing program 0 (id=1215): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x802) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) 17m53.962404s ago: executing program 0 (id=1216): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = socket$kcm(0x2d, 0x2, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1}) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r6}}, 0x10) close(r5) bind$xdp(r4, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x4, r7, 0x1f, r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0), 0x44, &(0x7f00000001c0)={[{@size={'size', 0x3d, [0x54]}}]}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfc, 0x800}, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000240)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000280)="f8aee78bca19d24ac2e433768a78068fc47d6c93bb", 0x15}, {&(0x7f0000000380)="363a76063c1627977f87916cf5fc88224b6560489a01bb2196c36bc729e8f2b7981fc7c88807073d740536f898171ea6bae7009e64f6e3d9b39fd44514692943c57c3d974d07349bc54f6b1e07b1acf5397b8632db83a760e3def94279afc747a1e84e568970163f699f9293b0c1bf0a6cfa070d912db30d808fe592bb4e7f1f22f4776a35e115451f8093e94bca1049bdf776b3b420d175f664dab13ccdab0afb125886ad31c98485e2a6f2fbd7ea54de0b9d4166b123181ed918e2b9c83dfa8cf30b95850c3102d40f5c9e311f0dd6be82656146198f993f5a4a7282b542dd5fe3c4cf5fdb13ac5edbc3f1f59cd10fc7d54f41d31ccf", 0xf7}, {&(0x7f00000002c0)="9b8050e82c62a2b1f882c700ee12ffc3b47363d97a51507199e266a0fa168871f1fa06b234014c25af1ea59443", 0x2d}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000000480)="e88b8e179c98b4cbc8ddee5ea50a6104f36f79cda89762fe553456f8861259b145185c647179fe77a14d27e9f28a7405423b2c74c5c7ba439e0e44ec7dd066b422560be06e0444d50adf3cf5806e1030fc28f7badcfd5da6aef8f68002c7d584d0f308f1a4303c6a768b6709b1400cdaec620ddc80d72cc1aefc93daa65713299db0f27be5e507f5aced2bbbc46d242c0ade34b7035d", 0x96}, {&(0x7f0000000300)="83c9aa64507e5960d546abf17d2d", 0xe}], 0x6, &(0x7f0000000640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xd5}}, @ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x635}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @private=0xa010100, @multicast1}}}, @ip_retopts={{0x54, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x96, 0x1, 0x1, [{@remote, 0xffffffff}, {@rand_addr=0x64010100}, {@dev={0xac, 0x14, 0x14, 0x29}, 0xfffffbff}, {@local, 0xae}]}, @timestamp_prespec={0x44, 0x14, 0x51, 0x3, 0x4, [{@broadcast, 0x3}, {@local, 0xffffff85}]}, @generic={0x94, 0xb, "f8177219a6a8aa62f2"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}], 0x128}, 0x800) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) r13 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r14 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r13}, 0x2c, {'wfdno', 0x3d, r14}}) socket$tipc(0x1e, 0x5, 0x0) close(r1) 17m38.604011961s ago: executing program 33 (id=1216): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = socket$kcm(0x2d, 0x2, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1}) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r6}}, 0x10) close(r5) bind$xdp(r4, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x4, r7, 0x1f, r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0), 0x44, &(0x7f00000001c0)={[{@size={'size', 0x3d, [0x54]}}]}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfc, 0x800}, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000240)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000280)="f8aee78bca19d24ac2e433768a78068fc47d6c93bb", 0x15}, {&(0x7f0000000380)="363a76063c1627977f87916cf5fc88224b6560489a01bb2196c36bc729e8f2b7981fc7c88807073d740536f898171ea6bae7009e64f6e3d9b39fd44514692943c57c3d974d07349bc54f6b1e07b1acf5397b8632db83a760e3def94279afc747a1e84e568970163f699f9293b0c1bf0a6cfa070d912db30d808fe592bb4e7f1f22f4776a35e115451f8093e94bca1049bdf776b3b420d175f664dab13ccdab0afb125886ad31c98485e2a6f2fbd7ea54de0b9d4166b123181ed918e2b9c83dfa8cf30b95850c3102d40f5c9e311f0dd6be82656146198f993f5a4a7282b542dd5fe3c4cf5fdb13ac5edbc3f1f59cd10fc7d54f41d31ccf", 0xf7}, {&(0x7f00000002c0)="9b8050e82c62a2b1f882c700ee12ffc3b47363d97a51507199e266a0fa168871f1fa06b234014c25af1ea59443", 0x2d}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000000480)="e88b8e179c98b4cbc8ddee5ea50a6104f36f79cda89762fe553456f8861259b145185c647179fe77a14d27e9f28a7405423b2c74c5c7ba439e0e44ec7dd066b422560be06e0444d50adf3cf5806e1030fc28f7badcfd5da6aef8f68002c7d584d0f308f1a4303c6a768b6709b1400cdaec620ddc80d72cc1aefc93daa65713299db0f27be5e507f5aced2bbbc46d242c0ade34b7035d", 0x96}, {&(0x7f0000000300)="83c9aa64507e5960d546abf17d2d", 0xe}], 0x6, &(0x7f0000000640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xd5}}, @ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x635}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @private=0xa010100, @multicast1}}}, @ip_retopts={{0x54, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x96, 0x1, 0x1, [{@remote, 0xffffffff}, {@rand_addr=0x64010100}, {@dev={0xac, 0x14, 0x14, 0x29}, 0xfffffbff}, {@local, 0xae}]}, @timestamp_prespec={0x44, 0x14, 0x51, 0x3, 0x4, [{@broadcast, 0x3}, {@local, 0xffffff85}]}, @generic={0x94, 0xb, "f8177219a6a8aa62f2"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}], 0x128}, 0x800) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) r13 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r14 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r13}, 0x2c, {'wfdno', 0x3d, r14}}) socket$tipc(0x1e, 0x5, 0x0) close(r1) 17m14.942727539s ago: executing program 3 (id=1447): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './cgroup\x00'}) write$vhost_msg(r0, &(0x7f0000000100)={0x1, {&(0x7f0000001280)=""/4105, 0x1009, &(0x7f00000000c0)=""/56, 0x3, 0x1}}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x18, 0x0, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x2, @empty, 'geneve1\x00'}}, 0x1e) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x5700, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) 17m14.881130105s ago: executing program 3 (id=1448): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="734b2b96ab45e2023a697a653d392c00120d334b2812513d714c839c30cc1d090aa42d0b02525b5f37e2b6886111c5f36703fdf3473217b74e9fb44c160d8bf8bd5fcc9124d8f50d163d948246b4d4ff758d61f7edd69efbe68e26549fd9ca38572fe3d7c510cd02fce7a6728a0e2905c50dec1692d893779a0225b88f8a2565ccaf9dfe908dce4b6ea7aa9607ac2eb0e12d1bc84ac42dfc2045432c4f685d7f61b877ecb8e85dfc011a8ab4758aad71c06b811f85a3418e8a9522764137a7f9431db04e4348c023c3"]) chdir(&(0x7f0000000140)='./file0\x00') ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000002c0)={@any, 0x9, 0x9600, 0x2, 0x9, 0x6, "da982d9cbe7234e7ae9e4629629fd16c45127b2bacf1ed724d8c4240f96fff51f9bd0a6e7829e9048d19121bb9d9ad8c403b54249acb908f3ff35b0766f56d115e74143ea9cb256802f175867cec183abc7d906785610466c871798e4073adf7298184396c627b2ece312622dabf0ccb8ed042868c28ad1e8a7033e5658e8f74"}) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14167e, 0xa0) fallocate(r0, 0x0, 0x0, 0x1000f4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17m14.785316633s ago: executing program 3 (id=1450): creat(&(0x7f0000000140)='./file0\x00', 0x71) (async) mount(&(0x7f0000000180)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ocfs2_dlmfs\x00', 0x208003, 0x0) 17m14.68757005s ago: executing program 3 (id=1452): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x10, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x41}, 0x2}}, 0x10) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000200)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000280)={@my=0x1}) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 17m14.534921275s ago: executing program 3 (id=1454): r0 = syz_open_dev$radio(&(0x7f00000004c0), 0x2, 0x2) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000500)={0x2, "8ad11c74233261c07f5f0200238e7246938e5801cc3dcafe826eea7d3c137c03"}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x891b) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f00000006c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000080)={0x33, 0x2, 0x0, "bc3e098e0000f4ba89591da86b97000000002b00030400"}) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) getpeername$inet(r3, 0x0, &(0x7f0000000300)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0xdc39c000) read(r2, &(0x7f0000000100)=""/159, 0xfffffe5a) 17m14.488495584s ago: executing program 3 (id=1456): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'dvmrp1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x280) r4 = syz_open_dev$usbfs(&(0x7f00000007c0), 0x73, 0x82) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000340)={0x80, 0x6}, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getrandom(&(0x7f00000001c0)=""/273, 0x111, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') close(r5) ioctl$VIDIOC_QUERY_DV_TIMINGS(r5, 0x80845663, &(0x7f00000013c0)={0x0, @reserved}) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f0000000180)={'ip6_vti0\x00', 0x8000}) getrandom(&(0x7f0000000300)=""/4096, 0x1000, 0x2) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1482, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r7, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x94}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) getsockopt$sock_buf(r2, 0x1, 0x3b, &(0x7f0000001300)=""/173, &(0x7f0000000140)=0xad) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, 0xffffffffffffffff, 0x2000) 16m59.403589723s ago: executing program 34 (id=1456): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'dvmrp1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x280) r4 = syz_open_dev$usbfs(&(0x7f00000007c0), 0x73, 0x82) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000340)={0x80, 0x6}, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getrandom(&(0x7f00000001c0)=""/273, 0x111, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') close(r5) ioctl$VIDIOC_QUERY_DV_TIMINGS(r5, 0x80845663, &(0x7f00000013c0)={0x0, @reserved}) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f0000000180)={'ip6_vti0\x00', 0x8000}) getrandom(&(0x7f0000000300)=""/4096, 0x1000, 0x2) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1482, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r7, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x94}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) getsockopt$sock_buf(r2, 0x1, 0x3b, &(0x7f0000001300)=""/173, &(0x7f0000000140)=0xad) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, 0xffffffffffffffff, 0x2000) 15m30.332253381s ago: executing program 6 (id=2045): r0 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x4000) ioctl$BLKGETDISKSEQ(r0, 0x80081280, &(0x7f00000002c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x240000c4) r2 = creat(&(0x7f0000001380)='./file0\x00', 0x12c) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r3, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x30) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000080)={r1}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x80, 0x2}, 'port1\x00', 0xe3, 0x1b1c07}) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/62, 0x3e}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) 15m2.183843284s ago: executing program 6 (id=2046): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0x6000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x3, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) r2 = socket$kcm(0x10, 0x2, 0x4) userfaultfd(0x80000) r3 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r4, 0x5452, &(0x7f0000000580)=0x5d4) write$sndseq(r4, &(0x7f0000001a80)=[{0x9, 0xc8, 0xd, 0xd2, @time={0x7, 0x1}, {0x9, 0xe}, {0x10, 0x8}, @note={0x7f, 0x2, 0x1, 0x6, 0x335cdaf3}}], 0x1c) ioctl$I2C_SLAVE(r4, 0x703, 0x17c) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1b7f000001bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a3200000000e4040000060a010400000000000000000500000008000b40000000000900010073797a300000000008000940"], 0x558}, 0x1, 0x0, 0x0, 0xa6975b0d20b3dc1e}, 0x40) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 15m2.180505299s ago: executing program 6 (id=2047): sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16], 0x14}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='ext4\x00', 0x8400a0, 0x0) 15m2.179853112s ago: executing program 6 (id=2048): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r1, &(0x7f0000000040)=[{0x41, 0x0, 0x0, 0xfd, @tick, {}, {0xf}, @addr={0x0, 0xf}}], 0x1c) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x204) (async, rerun: 64) r4 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 64) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) sendmsg$tipc(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x804) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400040) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000280)={0x5}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r7, 0x6b, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x4) (async, rerun: 32) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) (rerun: 32) getdents64(r8, 0x0, 0x0) (async) write$cgroup_devices(r8, &(0x7f0000000040)={'c', ' *:* ', 'wm\x00'}, 0x9) (async, rerun: 32) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x9d278000) (rerun: 32) 15m2.175431617s ago: executing program 6 (id=2049): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@local, 0x2}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xad4bb693ac87f75d) mount(&(0x7f0000001400)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x40, 0x0) 15m2.174884223s ago: executing program 6 (id=2051): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f00000000c0)) r1 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x1, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) tkill(r3, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4004094) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1) fchdir(r2) (async) fchdir(r2) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r7 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_init1(0x80800) inotify_add_watch(r5, &(0x7f00000002c0)='./cgroup\x00', 0x41000181) (async) inotify_add_watch(r5, &(0x7f00000002c0)='./cgroup\x00', 0x41000181) getdents64(r7, 0x0, 0x0) (async) getdents64(r7, 0x0, 0x0) mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r8, 0x6, 0x3, 0x0, &(0x7f0000000000)) (async) getsockopt$inet6_tcp_int(r8, 0x6, 0x3, 0x0, &(0x7f0000000000)) r9 = socket$packet(0x11, 0x2, 0x300) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)}], 0x1) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000240)=0x10, 0x1) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='gfs2meta\x00', 0x8, 0x0) mount(&(0x7f0000000100)=@sr0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0)='ntfs\x00', 0x4, &(0x7f0000000200)='#\x00') (async) mount(&(0x7f0000000100)=@sr0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0)='ntfs\x00', 0x4, &(0x7f0000000200)='#\x00') 15m2.171696413s ago: executing program 35 (id=2051): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f00000000c0)) r1 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x1, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) tkill(r3, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4004094) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1) fchdir(r2) (async) fchdir(r2) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r7 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_init1(0x80800) inotify_add_watch(r5, &(0x7f00000002c0)='./cgroup\x00', 0x41000181) (async) inotify_add_watch(r5, &(0x7f00000002c0)='./cgroup\x00', 0x41000181) getdents64(r7, 0x0, 0x0) (async) getdents64(r7, 0x0, 0x0) mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r8, 0x6, 0x3, 0x0, &(0x7f0000000000)) (async) getsockopt$inet6_tcp_int(r8, 0x6, 0x3, 0x0, &(0x7f0000000000)) r9 = socket$packet(0x11, 0x2, 0x300) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)}], 0x1) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000240)=0x10, 0x1) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='gfs2meta\x00', 0x8, 0x0) mount(&(0x7f0000000100)=@sr0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0)='ntfs\x00', 0x4, &(0x7f0000000200)='#\x00') (async) mount(&(0x7f0000000100)=@sr0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0)='ntfs\x00', 0x4, &(0x7f0000000200)='#\x00') 4m27.82552307s ago: executing program 5 (id=5266): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8"], 0x0) syz_usb_ep_write(r1, 0x8d, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x45c7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000000c0)=0xc) socket$inet(0x2, 0x4000000000000001, 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8"], 0x0) (async) syz_usb_ep_write(r1, 0x8d, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmmsg$inet6(r2, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x45c7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r2, 0x1) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, &(0x7f00000001c0)=0x8) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, 0x0, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) (async) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000000c0)=0xc) (async) 4m27.734294832s ago: executing program 5 (id=5267): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40ac2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) write$binfmt_misc(r2, &(0x7f00000001c0)="514650562b79e238a85b372bfbfe2f184a2eed45c6823a", 0x17) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000040)={0x1d, r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) capset(&(0x7f0000000080)={0x20071026}, 0x0) 4m27.603981513s ago: executing program 5 (id=5268): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000280)=[@cpuid={0x2, 0x18, {0x8000000, 0x9}}, @cpuid={0x2, 0x18, {0x8, 0x80000001}}, @cpuid={0x2, 0x18, {0x0, 0x3}}, @code={0x1, 0x7f, {"66440f3882910d00000066f6db66b8de000f00d8c443ad7df50448b8d92691a9bd30ad230f23c80f21f835080020000f23f8c74424000d000000c744240200000000c7442406000000000f011c2466bad10466edc7442400c9000000c744240200500000ff1c240f09c46281bcd3"}}, @cpuid={0x2, 0x18, {0x9, 0x8}}, @code={0x1, 0x44, {"0f01c80f01f80fb1c3c44260f22a2ef342ad66ba2000b000eec4811056360fc7380f214466baf80cb890f8c88fef66bafc0ced"}}, @uexit={0x0, 0x18, 0x6}, @cpuid={0x2, 0x18, {0x8, 0x6}}, @code={0x1, 0x63, {"c74424007acf0000c744240285cf2090c7442406000000000f011424c4e27d78af0000008067430f090f01c4b8010000000f01c10f01c2c442a59394090cbcabe4660f38818100000000650f2257460f01d1"}}, @code={0x1, 0x5f, {"67410fe3f7b9800000c00f3235001000000f3066430fa266baf80cb8b27a4189ef66bafc0c66ed36430f5bdf360f01c866b86f000f00d8c461e56dada81f164d64660f3880955f3e0000450f2185"}}, @code={0x1, 0x95, {"0f20e035000002000f22e048b86c957f4d000000000f23c00f21f83502000b000f23f80f019a5c2b0a4666baf80cb88013f286ef66bafc0cb800000000ef8f68c8a3bca40f00000000c744240000500000c744240230d40000c7442406000000000f011424c40144156701c4a2790f6e0036440f011bb9800000c00f3235004000000f30"}}, @code={0x1, 0x4b, {"0f38c943a6640fc771030f01d1b8010000000f01c166baa000b054ee400f013b66b8bf008ee80f79d40f01cfb9800000c00f3235000100000f30"}}, @code={0x1, 0x7f, {"362e670f78c5c744240052000000c744240208000000ff1c24f3440f07660f3880a056000000c4a2410329b805000000b9010000000f01d9c4a2b9accd48b80b110a9b71de0f5b0f23d00f21f8350000000f0f23f8c4819bc2f10dc7442400d1000000c74424020f000000ff1c24"}}, @uexit={0x0, 0x18, 0x7fff}, @code={0x1, 0x60, {"66ba410066ed66baf80cb89483f382ef66bafc0c66ed430f0fba2e000000ae2bc0c462a19e8fae000000b805000000b9290000000f01c1b94d0600000f322e430f01c366ba410066edc4c3790810a8"}}], 0x3ec}) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r1, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x2, @remote}, 0x10) (async) connect$llc(r1, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x2, @remote}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) (async) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f00000000c0)=@x86={0xc8, 0xfa, 0x7, 0x0, 0x8, 0x80, 0x0, 0x4, 0x7, 0x8, 0x0, 0xf7, 0x0, 0x8, 0x9, 0x8, 0x0, 0x81, 0x6, '\x00', 0x5, 0xcef}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) eventfd2(0x81, 0x1) (async) eventfd2(0x81, 0x1) 4m27.510712827s ago: executing program 5 (id=5269): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101}}, './cgroup\x00'}) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="190015c60d3505624a09142559cd6bc273cbc88a9031b72fc82049566706df0520ca36b6bfa4f1d75c79878ab20c6e64246660a250e2478e19aefd2640781f73b6b78bc60988fb4efa59cba16a219a29054e95762db69403d02b8778bf251323848524fb605c7e26d4fbf81455c9415cfb74a37976bdabf8d54ddf5eaf4e07b1c34d1bd0761610d5f91169ddcf6f86b0886a761de975d238c8aab36bbe844eb025c3c841863ec32ed898da4006c906ba900b8b58ffd45d2ce427f6866749b4185f100bf479", 0xc5, r1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000040)={0xd000, 0x10000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r7, r6, 0x0, 0x80000000) close_range(r2, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)=@md0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 4m27.365218053s ago: executing program 5 (id=5270): io_setup(0xa, &(0x7f0000000240)=0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000001a00)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0x0, 0xff9, 0x0, 0x4}]) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x3) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) io_setup(0xa, &(0x7f0000000240)) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) io_submit(r0, 0x1, &(0x7f0000001a00)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0x0, 0xff9, 0x0, 0x4}]) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x3) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) (async) 4m27.054650188s ago: executing program 5 (id=5272): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="400d02000000e2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000001500)={0x3, 0x2, 0x94e6, 0x101, 0xc45b, 0xff}) r3 = socket(0x2, 0x3, 0xff) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg$inet6(r3, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="81367f995f01fdee3d332f5309ba6f78d7e03653", 0x14}], 0x1}}], 0x1, 0x4004004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001e0235f501a6d1d1f00fe880000000000000000000000000101ac1414bb0000000000000000fafba87100000000000000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000000000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000028bd7000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000"], 0x1a0}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x0, 0x1, 0x6, 0x6, 0x6, "e2182b010656940751010b278b00a06640eb18dfb64425c7062853f2cd60bd4205b07502679ae0ff467a51ced8f19e15438ed5b406e2e8766af9cb5c4e39fd", 0x3f}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="09853173c12e400e4d615a916695e61063073ef7300cf687facd31e8933000ffcb1a", 0x22}], 0x1, &(0x7f0000000280)=[{0x70, 0x10c, 0x2, "529b9d344a657d0204a944cf25a5650321524949d9e843b168fb9213110d55cf9bb3e0cca7636f5c5ffab0290a03af1176ac396fe0a6e3428a6032ae0f5000bfdc5af8bd95b4f193326e9bbe69e9f83c5293a4bdad48cfc8e82dd22f01"}, {0x1010, 0x10c, 0x45b, "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"}, {0x50, 0x3a, 0x8, "45e0011a72017931293bf53645b7d69087dd73b7369badbe6f1745d7691865b9c9d3afa2788cce98862e66bdf90298bd66ad07e6d55f41a810c1b34771d8"}, {0xa0, 0x118, 0x6, "ffd04bd26f43cbc9d23d10f7fcabaa2c309a9c201fdabe8017d015be6a69714b0e93d743bac3a2ddafcd1babd639853a6f63346d6b022233e16f460577d9833d1eb5b5963944a5ab206f62f410a5a72f4f243f319ef83a4191fc2cc59961903d1caae82e84d7eeab865cb46bb587fd765135bb3c1f95b6d71ee275bf7842c42f469cdfe710ad8356e5d448fe8b850839"}, {0x100, 0x110, 0x7, "5ab34ad5061947928b07035afc948e60e9ee86673721fc545514b0b26e810586a399db18c8c716848ff12616c1bcefaf2a546ffcd12ce4f626aa5a96fd21a195420482916fb15617367fd89bcd4160c20e6a0d3f3e0284b0275d81aedb3737998a7e5ff9e887cc94a701fa19b8265c0c6b580eefd767b2c04542be452c990248fba0261c206775ff373c4ed1f48bebcaf6ba5f350f1334037dc62890401048517978be0d8ef5a1bba836b6b0ec159d0c80604ac45c8f40d1f31a3a539fdad5aa553c10096b1d50c0d115859d804b37f7306acfb23d8fa9e7897c75f70e228649e1d2ac14c41b938657783f"}], 0x1270}, 0x4800) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) 4m26.928422821s ago: executing program 36 (id=5272): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="400d02000000e2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000001500)={0x3, 0x2, 0x94e6, 0x101, 0xc45b, 0xff}) r3 = socket(0x2, 0x3, 0xff) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg$inet6(r3, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="81367f995f01fdee3d332f5309ba6f78d7e03653", 0x14}], 0x1}}], 0x1, 0x4004004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001e0235f501a6d1d1f00fe880000000000000000000000000101ac1414bb0000000000000000fafba87100000000000000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000000000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000028bd7000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000"], 0x1a0}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x0, 0x1, 0x6, 0x6, 0x6, "e2182b010656940751010b278b00a06640eb18dfb64425c7062853f2cd60bd4205b07502679ae0ff467a51ced8f19e15438ed5b406e2e8766af9cb5c4e39fd", 0x3f}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="09853173c12e400e4d615a916695e61063073ef7300cf687facd31e8933000ffcb1a", 0x22}], 0x1, &(0x7f0000000280)=[{0x70, 0x10c, 0x2, "529b9d344a657d0204a944cf25a5650321524949d9e843b168fb9213110d55cf9bb3e0cca7636f5c5ffab0290a03af1176ac396fe0a6e3428a6032ae0f5000bfdc5af8bd95b4f193326e9bbe69e9f83c5293a4bdad48cfc8e82dd22f01"}, {0x1010, 0x10c, 0x45b, "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"}, {0x50, 0x3a, 0x8, "45e0011a72017931293bf53645b7d69087dd73b7369badbe6f1745d7691865b9c9d3afa2788cce98862e66bdf90298bd66ad07e6d55f41a810c1b34771d8"}, {0xa0, 0x118, 0x6, "ffd04bd26f43cbc9d23d10f7fcabaa2c309a9c201fdabe8017d015be6a69714b0e93d743bac3a2ddafcd1babd639853a6f63346d6b022233e16f460577d9833d1eb5b5963944a5ab206f62f410a5a72f4f243f319ef83a4191fc2cc59961903d1caae82e84d7eeab865cb46bb587fd765135bb3c1f95b6d71ee275bf7842c42f469cdfe710ad8356e5d448fe8b850839"}, {0x100, 0x110, 0x7, "5ab34ad5061947928b07035afc948e60e9ee86673721fc545514b0b26e810586a399db18c8c716848ff12616c1bcefaf2a546ffcd12ce4f626aa5a96fd21a195420482916fb15617367fd89bcd4160c20e6a0d3f3e0284b0275d81aedb3737998a7e5ff9e887cc94a701fa19b8265c0c6b580eefd767b2c04542be452c990248fba0261c206775ff373c4ed1f48bebcaf6ba5f350f1334037dc62890401048517978be0d8ef5a1bba836b6b0ec159d0c80604ac45c8f40d1f31a3a539fdad5aa553c10096b1d50c0d115859d804b37f7306acfb23d8fa9e7897c75f70e228649e1d2ac14c41b938657783f"}], 0x1270}, 0x4800) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) 3m27.218240545s ago: executing program 4 (id=5523): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000020000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048801}, 0x10) sync_file_range(r1, 0x1, 0x8, 0x2) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) bind$tipc(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES64=r1, @ANYRES8=r1, @ANYRESOCT=r3, @ANYRESHEX=r1], 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000007900)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000200)={0x42, 0x3, 0x3}, 0x10) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x14, r2, 0xb05, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000080)=0x651b) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) 3m26.533852828s ago: executing program 4 (id=5524): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000200)={0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000000c0)}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x3, r2, 0x0, 0x33c, 0x33, &(0x7f0000000400)="f5613134aaaca204b903d8f5f534f57b8c7f0fda78f37155943eded941863728a6de7128e1bfd697d746967e2e6ef13efbb7df"}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b670400d59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b6dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x400, {0x0, 0x0, 0x0, '\x00', {0x7ff, 0x1, 0xadf, 0x800, 0xee01, 0x0, 0x1000, '\x00', 0x6, 0x5, 0xb4e9, 0x3, {0x8001, 0x8}, {0x4000000000006, 0x3}, {0x0, 0x7}, {0x0, 0xa00}, 0x80008003, 0xa, 0x0, 0x6}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) 3m26.261100262s ago: executing program 4 (id=5529): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x19, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000001040101000000000000000003000001050001000300000094061c2e224173d99533252b0889e2ed9d7525919ac763160bd1ccedeaed880809cdb91e3f9d577601138085bfed87ebc381f9f671ae7391a1dc139c49b04b18b93fe38e6805cc80e291695f10349af754c9a0d3da5d2a95d323ba36649c8a2f8c2ca8fa4600"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1abf0737765c88b0) r3 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0xfffffffe}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) fsetxattr(r4, &(0x7f0000000180)=@known='security.selinux\x00', &(0x7f00000001c0)='exfat\x00', 0x6, 0x2) socket(0x2, 0x2, 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x19, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000001040101000000000000000003000001050001000300000094061c2e224173d99533252b0889e2ed9d7525919ac763160bd1ccedeaed880809cdb91e3f9d577601138085bfed87ebc381f9f671ae7391a1dc139c49b04b18b93fe38e6805cc80e291695f10349af754c9a0d3da5d2a95d323ba36649c8a2f8c2ca8fa4600"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1abf0737765c88b0) (async) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0xfffffffe}) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x5, 0xca) (async) fsetxattr(r4, &(0x7f0000000180)=@known='security.selinux\x00', &(0x7f00000001c0)='exfat\x00', 0x6, 0x2) (async) 3m26.086529446s ago: executing program 4 (id=5532): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r1 = socket$inet(0x2, 0xa, 0x0) bind$inet(r1, &(0x7f0000000800)={0x2, 0x4e24, @private=0xa010102}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0xfffffffe, @loopback, 0xfffffffd}, 0x1c) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) unshare(0x8020000) r3 = semget$private(0x0, 0x4000, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) semctl$SEM_STAT(r3, 0x4, 0x12, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000000)={0xa3e, 0x4, 0x5, 0x8, 0x6, 0x6, 0x4}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xfa}], 0x1) 3m25.862416923s ago: executing program 4 (id=5535): mremap(&(0x7f00000ab000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, "0076ba7d82000000002700000000f7ff6fd800"}) socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0xb9) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xb, 0x40000000, 0x3, 0x400000000, 0x800000000009, 0x0, 0x100, 0x3, 0x0, 0x7, 0x20000, 0x4, 0x2, 0x0, 0x0, 0x300000000000, 0x9, 0x8001, 0x5, 0x0, 0x3, 0x0, 0xe}) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) 3m25.322731024s ago: executing program 4 (id=5541): r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005242000000d240f0100000000000000000009058103200000000009058202080080000009050302"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_connect$uac1(0x6, 0xac, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010002000000ff6b1d01014000010203010901000000000000000904000000010100000a24010001bd020102082405040b769f1a08240704030003940904010000010200000904010101010200000e240202796c10000035affaed340c24020209000100038a8b791124020204000400080a9e827cb9ff3c8b09050109ff0306058107250181ff05000904020000010200000904020101010200000905820900020403080725010308000825796cef9ec40f70e03a0c819d797071e0df7fbdcc9edbec6b6473d8"], &(0x7f0000000380)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x4, 0x0, 0xf6, 0x8, 0x8}, 0x37, &(0x7f00000001c0)={0x5, 0xf, 0x37, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x8, 0xd, 0x8000}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xe, 0x3, 0x1}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "a112ab10d075dcc5fc6713df0e0616bf"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x0, 0x2, 0x8}]}, 0x2, [{0x93, &(0x7f0000000200)=@string={0x93, 0x3, "4ed8e5ea0c60c3a759c05dc003021ae15740d4c3d75b3ed0a0f75bca59a33345b1c8ba7ad981d240383490b9ae0ce0afd7a2b75a8d50e8aacf134f82e158ee2c9bb96cff6877f7342846392a2f8c98893b98daeb6f070cc525347308987a55ed755e55c85d282152d99470ec646364f9bb2247165b6b0f30c572ea7c6859f40c0826133eb15f057323202aa424bcc72363"}}, {0x2b, &(0x7f00000002c0)=@string={0x2b, 0x3, "3a76e13b4c48e5cd8a29a63c2c00572615d5c2f47bc79b352b455658b3d99c10601d6d55eafd8eae55"}}]}) (async, rerun: 64) mount(&(0x7f0000000000)=@md0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 3m25.080005742s ago: executing program 37 (id=5541): r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005242000000d240f0100000000000000000009058103200000000009058202080080000009050302"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_connect$uac1(0x6, 0xac, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010002000000ff6b1d01014000010203010901000000000000000904000000010100000a24010001bd020102082405040b769f1a08240704030003940904010000010200000904010101010200000e240202796c10000035affaed340c24020209000100038a8b791124020204000400080a9e827cb9ff3c8b09050109ff0306058107250181ff05000904020000010200000904020101010200000905820900020403080725010308000825796cef9ec40f70e03a0c819d797071e0df7fbdcc9edbec6b6473d8"], &(0x7f0000000380)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x4, 0x0, 0xf6, 0x8, 0x8}, 0x37, &(0x7f00000001c0)={0x5, 0xf, 0x37, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x8, 0xd, 0x8000}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xe, 0x3, 0x1}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "a112ab10d075dcc5fc6713df0e0616bf"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x0, 0x2, 0x8}]}, 0x2, [{0x93, &(0x7f0000000200)=@string={0x93, 0x3, "4ed8e5ea0c60c3a759c05dc003021ae15740d4c3d75b3ed0a0f75bca59a33345b1c8ba7ad981d240383490b9ae0ce0afd7a2b75a8d50e8aacf134f82e158ee2c9bb96cff6877f7342846392a2f8c98893b98daeb6f070cc525347308987a55ed755e55c85d282152d99470ec646364f9bb2247165b6b0f30c572ea7c6859f40c0826133eb15f057323202aa424bcc72363"}}, {0x2b, &(0x7f00000002c0)=@string={0x2b, 0x3, "3a76e13b4c48e5cd8a29a63c2c00572615d5c2f47bc79b352b455658b3d99c10601d6d55eafd8eae55"}}]}) (async, rerun: 64) mount(&(0x7f0000000000)=@md0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 21.023035593s ago: executing program 9 (id=6948): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b"]) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) 20.853169437s ago: executing program 9 (id=6949): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x2d, 'cpuset'}, {0x2d, 'freezer'}, {0x2d, 'rlimit'}, {0x2b, 'net_cls'}, {0x0, 'net_prio'}]}, 0x2c) 20.721219156s ago: executing program 9 (id=6950): mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x1000008, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000feaff9)={0x19980330}, &(0x7f0000000180)) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0xf648e000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x9e) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x260081, 0x0) fcntl$getflags(r3, 0x3) setsockopt$ax25_int(r2, 0x101, 0x5, &(0x7f0000000000)=0x780a, 0x4) 20.5867657s ago: executing program 9 (id=6951): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abdc2e2e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x20, 0x0, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000000f00)={0x0, 0x14, 0x4, "42467af9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r2, r1, 0xff, 0x0) vmsplice(r3, &(0x7f0000001700)=[{&(0x7f0000001340)="89", 0x1}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) munlock(&(0x7f00000f4000/0x4000)=nil, 0x4000) 19.796909376s ago: executing program 9 (id=6959): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) r1 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabh\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)r\xdc\x17\x99J\xaeE\xbdt\xe2L^2\xca\x8f\x1cZ\x84\xe3\xe6\x86iC\xcc\xa9\xbf\xeb\x92\r \xa86\x82\xc3\xa8\xf1\xb4\x0f\x9b\x88\x0f\xc8U\x99;\x9c\x17\xfc7\xdd\xd6\x8e%4\x17~\x9d\xe1\a\x00\x00\x00\xa5\x8fG\\\xd8\x80\x15\xcaw\x7f\xac\x063\xbaE\x11\xcc~Q\xcb/\x8bv\xf2B_\xc5\x8d\xb3\xdd\xbd\x1e\xde\x19\xb5\xc4\xcf%p\x89\xa2\xda\xc7', 0x2) r2 = fanotify_init(0x8, 0x1000) r3 = dup(r1) fanotify_mark(r2, 0x201, 0x48001038, r3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2) mount(&(0x7f0000000180)=@sr0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='ext3\x00', 0x8010, 0x0) 19.6748894s ago: executing program 9 (id=6960): creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='udf\x00', 0x9000, 0x0) 4.830841079s ago: executing program 2 (id=7010): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, 0x6, 0x6, 0xd51df4994cc05469, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x24000000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r3, 0x29, 0xcf, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x6000) r5 = signalfd4(r2, &(0x7f0000000080)={[0x10]}, 0x8, 0x800) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) write$rfkill(r6, &(0x7f00000001c0)={0x101, 0x0, 0x0, 0x0, 0x1}, 0x8) read$FUSE(r5, &(0x7f0000004380)={0x2020}, 0x3ff) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000200), &(0x7f0000000240)=0x4) read$FUSE(r4, &(0x7f0000000280)={0x2020}, 0x2020) 4.712295573s ago: executing program 2 (id=7012): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x141801) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x6, {0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x3, 0x8, 0xb748eb5dcd60ffce, "355aefe6589cab058440542f8aa52239ec53a09ac907fbe23cbac79a7d38727214472c912b98a731a02dab739a6d4aa8b4064e6454857110afc1d9c3f86c2338", "bcd3e1a1452cf8c0713de2a9831f8c2e197c6f0adc89e9d5ade8c1ba907798570fdaf8098f0a1d3a58e52ac3c7b0e364a84fc26fae6f9ed276a190ee69bacacc", "9ca2828e685e09595f68f768ecc619735bb9db161b939ef1312924c1375effbb", [0x6, 0x1]}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0xc0) syz_usb_connect$uac1(0x1, 0xb3, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x3, 0xb0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x8}, [@mixer_unit={0x6, 0x24, 0x4, 0x5, 0x6, '\a'}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x204, 0x2, 0x5, 0x6, 0x72, 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x307, 0x1, 0x3, 0x1}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x5, 0x2a, "bcfe257a"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x200, 0x2, 0x6, 0x5, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xbd, 0x3, 0x3, 0x1, "5120d3475e250ef4"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0x7, 0xff, {0x7, 0x25, 0x1, 0xc0, 0x0, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x10, 0x7, 0x0, {0x7, 0x25, 0x1, 0x1, 0x80, 0x8}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x201, 0x1, 0xf, 0x8, 0x10, 0xb}, 0x3c, &(0x7f00000004c0)={0x5, 0xf, 0x3c, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x0, 0x2, 0x9c}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xfd, 0x81, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "40ccd9cf12af7cde7da075ea1ce28072"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0xd, 0x4}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0xff, 0xd, 0xd, 0x83}]}, 0x3, [{0xe7, &(0x7f0000000500)=@string={0xe7, 0x3, "075253d65d797916ae2f83f87b3ca7a8430fe836e5c46700079bbcad2a4bb81a60321f3b59a9aa6d7ff65b5daedbd4c0c844faabca37b753ca3e7fed7f994d3792448b7feceaa53484d5bddd3afd19f790163e06b7814d8d2caa4966682eebf20e053d1199dc20c050191caf55e0ed1ab618fd5a7df2692ba4f3ce09fbd2341f00adda383d694285d0b0b4cbdb9b59153fedd199a5a43d75cdbed8d68847aa476e302df73ea98853a6d46a0f3ee711cb0bc8009fb9dfede66d8217318d2d51b7f3f3f7d3afbf094c48bec8312f0d388fcaa6c8af5c78dc05764c746951f1ed3c3300f4a7c7"}}, {0x78, &(0x7f0000000600)=@string={0x78, 0x3, "76413c82e4801005c2a1efe4e780bed335ba8227d82d9c89de487939587928c7eac9fa0f2ba37854a3c06d6df64472445209651603cbea8ac3c2b58f85c9a1725edfcc1dee583737e1d93d37cddce2733b622f0abc2011e8184109f045abbe461ae443945415ac76ae905324a387ff60eeaedd4c54f3"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x804}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0xf648e000) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) setsockopt$ax25_int(r4, 0x101, 0x5, &(0x7f0000000000)=0x780a, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x6c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1ff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000800}, 0x6000041) 3.436956341s ago: executing program 38 (id=6960): creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='udf\x00', 0x9000, 0x0) 3.180693207s ago: executing program 7 (id=7016): mount(&(0x7f00000000c0)=@md0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='9p\x00', 0x30dc061, 0x0) mount(&(0x7f00000000c0)=@md0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='9p\x00', 0x30dc061, 0x0) (async) 3.035751202s ago: executing program 7 (id=7017): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1000}, 0x1c) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvfrom$inet(r0, &(0x7f00000001c0)=""/195, 0xc3, 0x103, &(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010102}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000b80)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a40000000000000400b3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459ba9dcf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b22e", 0x90}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000006c0)=""/220, 0xdc}], 0x1}, 0x0) mount(&(0x7f0000001400)=@md0, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='qnx4\x00', 0x2000, 0x0) 2.782546509s ago: executing program 7 (id=7018): creat(&(0x7f0000000140)='./file0\x00', 0x71) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmmsg(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x48d4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x8000}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000380)={0x2, @pix={0x0, 0x0, 0x32315559}}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x1, 0x2, 0x67b}]}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x2f, 0x28, 0x10, 0x6, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x7800, 0x7800, 0x9, 0x80000000}}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000540)={@broadcast, @private=0xa010101, r5}, 0xc) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r6, 0xc0105502, &(0x7f0000002a40)) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r7, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195958c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f01a2bf98d708c1bf4fd2c2e3f8ea2617d0c69dc73c597a12ba4be2bb9439d7a518eac95b588776223bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70c", 0xe5}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a104ada4362c43d54fce970e", 0xb1}, {&(0x7f0000000840)="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", 0x1a4}, {&(0x7f00000001c0)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbdf8d45987e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc57adb3691cbe123cb43ed522a35874f4503d56d44c71c7ab62adc0", 0x69}, {&(0x7f0000000680)="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", 0x13a}, {&(0x7f0000000580)="ac6aed94fbb8c7fecccf1fad0f823f4711e4d4e5831b1172b79994156deeb8f47a21f6bd119ffeb486267bd8dbaa3b868deca95efc3fea013ea88ddd3222ff7cc2a3448434dca51f5bc1972720dc071c5c5e2358a62bb3d9ccb581431764476f92bc0dd581a715f7ff8cef23b35dceb9c44e588728dbe44a49301998f8bb11356809ab4bfbc85cd9eed4820e2a821913e94e49c898fca38824fef2d62ce3b44103e31a82b7c14ea5dae6b42906b14cc21e24fcb7b255b5fd8b3d9eda621defc3f398cc545fb03d6549353921bb4a52b3230008f967ddc1ad8635d5", 0xdb}, {&(0x7f0000002300)="0b41dae71fdbfbd927", 0x9}], 0x7}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002400)="036157dd45d9a56c0f33f53edcee705d061adaaf88a1fb", 0x17}, {&(0x7f0000002480)="9467776b9ec22f06151761843173440c3e9448d40384f222fec952053bd200bbc7ccef8e7c88fb0ae01fa531ad6deb000578a6c82661d5bf15bffe28cf236057bacc915533a7a58c9253414b4eea351e504828a7279ced0949ed778c25ae266f71689f85decb0b7cd62083d9dc4ff648d4fdd2e18f549308c1612433ea604d426ce3fe6b120bb7", 0x87}], 0x2}}], 0x3, 0x2000c044) sendto$inet(r7, 0x0, 0x0, 0x16000000, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000206010100f100"/20], 0x14}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e938462b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x4b}], 0x2) 1.374839012s ago: executing program 2 (id=7025): r0 = creat(&(0x7f0000000100)='\x00', 0x178) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) sendmmsg$inet(r1, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000880)="0694f321", 0x4}], 0x1}}], 0x1, 0x80) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0xe, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x34, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x1, 0x3, 0x7, 0x3, 0x800, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x4, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x7, 0x5, 0x4, 0x200001, 0x40], [0x10, 0x9, 0x8000012d, 0x8004, 0x8000005, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0x10, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x8, 0xcf1, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x2af, 0xff, 0x3, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x3, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x0, 0x3, 0xbc45, 0x5, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x7, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xb, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0xffffff6c, 0x3, 0x1, 0x2950bfaf, 0x80001000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x207ff, 0x12b, 0x4, 0x1, 0xb, 0x0, 0xe5, 0x1c, 0x120005, 0x3, 0x1, 0x80a2ed, 0x4, 0x29], [0xfffffffa, 0xbb33, 0xc000, 0xb, 0x5, 0x938, 0x6, 0xf41, 0x2b93, 0xb9, 0xce7, 0x1ff, 0xf0f6, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0x4, 0xd4cf, 0x4, 0x4, 0xcc, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x0, 0x8, 0x6, 0x226, 0x5, 0x4005, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x2, 0x6c1b, 0x0, 0x4, 0x5, 0xb0e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x3c, 0x0, 0x70bd27, 0x25dfdbfd, {0x10}, [@typed={0x4, 0x5a}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40400d1) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) 1.138944611s ago: executing program 8 (id=7027): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f00000007c0)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R\x11\xad\x89\xd1\xb8\xe0h\\.\xa3`fv\xdc\x8b\x18r\x8e\x9ac\x182q\xb8\xca\xb09Blk\x8e\xb1\xc3j\x03\xb7//\x00\x00\x00\x00\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\b\xe0R\x9d\x18\x19a:\xa2\xa1\xcb\xd7jx\x94\v1\xb7\xb5\xdb\x9a\b\xf9\xb4\x8c\xab{\x1dU \r\xc1\x19!\x86~\xa9\x01\xda\x020\xe7\xc0\x9b\xf8NtV\xf5\xe7\xb2\xc6\x16A\xa9\xe8\xea\x95?I\xf9}\a\xc66}a)\xb4\xa9C\xc4\xfa\xf9L\x8d}\xf2>\xc5p4\x16\x91G\xe3\x9ef\xe7\xdc9;\x1c|\x1b.q\xb2\xc7\xed\xa8{\xac\x0e\xe5\xb7\x9d\xa4\xa6\xdd\xe4\x16\a\x13+\'\x05i\x7f\xd2\xc0\xd0f&\xbc\xd0M\xe9\x0e\x819\x02\x9b\xe6\xef\xe0\x1fD=A\xdf\x10\xd5]\xcbL|-\xe8\xf4Q\xd1\x0e\x81v]\xb9\xfc\xf0\x89\"\xc2]{\xa7\xe6:\x87\r\xf2-\xd1Z\xbd\xef\xe04\xa2\'\xca\x92\xe1\x91uy\xe1\x1d\xa7\x00\x00\x00\x00\x00\x00\xbeE\a\xd2\x96\xb3_)*\x1c\xf8Z\xbd\xfaI\xe4\x9c\xc93f\xe5\xd8\xdeXh\x9a\xd5\xd9n\x80\x00\x02\xc0 =W\xbcq\x19\x90\xd9\xdb\x87!\xees\xcajZ^\x94\"k\xaeqg\x92\x90\xa3!Z\xb5\xac\x8f\x9e\x8c8\x83 DI\x8c5\x9cwX\xb1_\xb0S\x15\x0f{\x1fa\x92 \xfa\xfa\x16izQ\xeaw\x967V\'\x11=\xac\xd1V*\xfeUt\xf9`\xb1+\xcc\x7f&j\x15T\xe5r\x8a{#\xf3\x8f\x8c/:\xb8\xf7\xad\xdc1\xd1U)\x9e\xa1\xad|\xf3\x83\xe3%\xc0\xbc\x91\xeaZox \xac\xfa}A\xb5\"B\xe6\x7f\xe9\xf0\xfc\xf2\\S\x1c\xc8\xe1\xa5\x8c\x84p]\xa9C\x13D\x1fa\xb8\xb7&(\xe9\xfcqx\xf4\xfe\xec\xd7\x99Fa\xf8\xee\xb1\xc3\xbb\x04PO\x91)G\xa0\x9a\x8e\x89h\xd3lE\x03\x1eJ\xc2\xa8N\xcd\x1a\\o\xb6\xef\xa2q$\xbdu\xa9\xd2', 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)=0x1) 1.112186733s ago: executing program 8 (id=7028): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000280)={0x0, 0x0, 0x0}) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@sr0, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) 980.89843ms ago: executing program 8 (id=7029): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000140)=0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10}, 0x400, "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"}, 0x418}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) close(0x3) bind$bt_l2cap(r4, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xc01c}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) dup(r6) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r8) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="cf0426bd7000000000d03e00000008000300", @ANYRES32=r11], 0x1c}}, 0x0) write$6lowpan_enable(r7, &(0x7f0000000100)='0', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x10010, r1, 0x6b483000) 882.262682ms ago: executing program 7 (id=7030): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mount$9p_unix(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x200000, &(0x7f0000000540)) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) symlink(&(0x7f0000000200)='./file1\x00', &(0x7f0000000100)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) close_range(r0, r2, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000008100)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}], [{@fowner_eq}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000000)='./file0\x00', 0x0, r4) stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000004080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) statx(r3, &(0x7f0000000b40)='./file1\x00', 0x1000, 0x10, &(0x7f0000000b80)) read$FUSE(r2, &(0x7f00000060c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000c80)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000d80)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, &(0x7f0000000e00)=0xc) lstat(&(0x7f0000001040)='./bus\x00', &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getegid() syz_fuse_handle_req(r1, &(0x7f0000002080)="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", 0x2000, &(0x7f0000001340)={&(0x7f0000000240)={0x50, 0x0, 0x6f, {0x7, 0x2b, 0x2, 0x20000, 0x10, 0x3, 0x400, 0xe18e, 0x0, 0x0, 0x80, 0x8}}, &(0x7f00000001c0)={0x18, 0xfffffffffffffffe, 0xffffffffffff8000, {0x10000}}, &(0x7f00000004c0)={0x18, 0xfffffffffffffffe, 0x1, {0x74b7}}, &(0x7f0000000580)={0x18, 0x0, 0x6, {0x5}}, &(0x7f00000005c0)={0x18, 0xfffffffffffffffe, 0x8e53, {0x5}}, &(0x7f0000000600)={0x28, 0x0, 0x2, {{0x3, 0x6, 0x2}}}, &(0x7f0000000640)={0x60, 0x0, 0x934a, {{0x6, 0xfffffffffffffb42, 0x8000000000000000, 0x2, 0x4, 0x8, 0x0, 0x4}}}, &(0x7f00000006c0)={0x18, 0x0, 0x3ff, {0x100}}, &(0x7f0000000700)={0x12, 0x0, 0x3f80000000, {'$\x00'}}, &(0x7f0000000740)={0x20, 0x0, 0x6, {0x0, 0x18}}, &(0x7f0000000800)={0x78, 0x0, 0x4, {0x1e, 0x7, 0x0, {0x0, 0xfffffffffffffffb, 0x80000000, 0x6, 0x4, 0xffffffffffffffff, 0x1ff, 0x80, 0xfffffff7, 0xc000, 0x9, 0x0, r4, 0x30e9, 0x80}}}, &(0x7f0000000940)={0x90, 0x0, 0xc5e, {0x3, 0x3, 0x0, 0x1, 0x7, 0x7ff, {0x6, 0x0, 0x3, 0x10000, 0x3, 0x8, 0xfe, 0x1e, 0x32c, 0xa000, 0xfffffe01, r5, r6, 0x401, 0xc38}}}, &(0x7f0000000a00)={0x138, 0x0, 0x0, [{0x1, 0x1, 0x4, 0x0, '#{}]'}, {0x2, 0x10001, 0x2, 0x1ff, '/\''}, {0x6, 0x5, 0x8, 0x1, 'lowerdir'}, {0x6, 0xffffffff, 0x3, 0x40, '9p\x00'}, {0x3, 0xffffffffffffffff, 0x6, 0x7, 'exfat\x00'}, {0x1, 0x1000, 0x6, 0x100, 'exfat\x00'}, {0x1, 0x5, 0xa, 0x4a3, 'map_filer\x00'}, {0x4, 0x5, 0x3, 0x3, '$+]'}, {0x5, 0x3, 0x1, 0x4, '!'}]}, &(0x7f0000000e40)={0x1e8, 0x0, 0xce8, [{{0x3, 0x2, 0xa, 0x5, 0x6, 0xfffffffb, {0x4, 0x18000, 0xe5d, 0x401, 0x4, 0xc, 0x4, 0x2, 0x9, 0x2000, 0x671f, 0x0, r7, 0x9, 0x101}}, {0x4, 0x1, 0x0, 0x3097}}, {{0x0, 0x2, 0x8000, 0x6, 0x0, 0x6, {0x6, 0x7, 0x8df, 0x89, 0x3ff, 0x2, 0xaeb, 0x6ab5dda9, 0x800, 0x8000, 0x77dcb2a0, r8, r9, 0x9, 0x2}}, {0x3, 0x80000000, 0x1, 0xa, '('}}, {{0x2, 0x0, 0x8c92, 0x6, 0x1, 0x8, {0x3, 0x3c3f, 0xffff, 0xf057, 0x2, 0x4, 0x46bd, 0x0, 0x8, 0x8000, 0x37, 0xffffffffffffffff, 0x0, 0x80000001, 0x2}}, {0x3, 0x17c, 0x7, 0x8, 'workdir'}}]}, &(0x7f0000001100)={0xa0, 0xfffffffffffffff5, 0x6, {{0x3, 0x3, 0x5, 0x4, 0x4, 0x8, {0x4, 0x5, 0x4, 0xffffffffffff9f6a, 0x7, 0x7, 0x0, 0x7fffffff, 0xcc8b, 0x6000, 0x0, r10, r11, 0x8, 0x7fff}}}}, &(0x7f00000011c0)={0x20, 0x0, 0x2, {0x8000, 0x0, 0xffb, 0x86e1}}, &(0x7f0000001200)={0x130, 0x0, 0x9, {0x7f, 0x1, 0x0, '\x00', {0x40, 0x0, 0xe, 0x0, 0x0, 0xee00, 0x8000, '\x00', 0x6, 0x5, 0x4679, 0x8, {0xfffffffffffeffff, 0x40000}, {0x8, 0x67}, {0x7, 0xffffffe1}, {0x5ed, 0x6}, 0x2, 0xcbb2, 0x800, 0x5}}}}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 653.752431ms ago: executing program 7 (id=7031): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0x34, &(0x7f0000000280)=0x3, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={[&(0x7f00000000c0)='$\x00', &(0x7f0000000100)='/dev/rnullb0\x00', &(0x7f0000000140)='@\\)\x1d#.a!@@&\x00']}, &(0x7f00000002c0)={[&(0x7f00000001c0)='-%/#\x00', &(0x7f0000000200)='-@\x00', &(0x7f0000000240)='./binderfs/binder0\x00']}) 617.014301ms ago: executing program 8 (id=7032): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f00000000c0)=@v2={0x3, 0x2, 0x7, 0x5, 0x3, "1aadb9"}, 0xc, 0x2) r1 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = dup(r1) write$nbd(r2, &(0x7f0000000240)=ANY=[], 0x10) finit_module(r2, 0x0, 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f00000011c0), 0x0, 0x0, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) listxattr(&(0x7f0000001cc0)='./bus\x00', 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000000400)=""/243, 0xf3}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000000040)=""/74, 0x4a}, {&(0x7f00000000c0)=""/38, 0x26}], 0x5, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x128}}, {{&(0x7f00000006c0), 0x6e, &(0x7f0000000980)=[{&(0x7f0000000740)=""/134, 0x86}, {&(0x7f0000000880)=""/205, 0xcd}, {&(0x7f0000000240)=""/44, 0x2c}], 0x3, &(0x7f00000009c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000ac0)=""/98, 0x62}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000000c00)=""/106, 0x6a}, {&(0x7f0000000c80)=""/59, 0x3b}, {&(0x7f0000000cc0)=""/58, 0x3a}, {&(0x7f0000000d00)=""/18, 0x12}, {&(0x7f0000000d40)=""/184, 0xb8}, {&(0x7f0000000e00)=""/97, 0x61}, {&(0x7f0000000e80)=""/60, 0x3c}], 0x9, &(0x7f0000000f80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000001080), 0x6e, &(0x7f0000001180)=[{&(0x7f0000001100)=""/115, 0x73}], 0x1}}], 0x4, 0x8001, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000100)=0x30, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xcc42, 0x103) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc0) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:* rr'], 0x9) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r6, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x400, {0x0, 0x0, 0x0, '\x00', {0x7ff, 0x1, 0xadf, 0x800, 0xee01, r8, 0x1000, '\x00', 0x6, 0x5, 0xb4e9, 0x3, {0x8001, 0x8}, {0x4000000000006, 0x3}, {0x0, 0x7}, {0x0, 0xa00}, 0x80008003, 0xa, 0x2, 0x6}}}}) write$FUSE_INIT(r6, &(0x7f0000001200)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) 398.793548ms ago: executing program 8 (id=7033): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x2) r3 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r4 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) close(r4) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000600)={[&(0x7f0000000440)='=\'@\x96\x00']}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) 372.596156ms ago: executing program 7 (id=7034): prctl$PR_MCE_KILL(0x21, 0x1, 0x1000000) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e36, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x3) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000280)={r8, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x5], [0x7, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000300)={0x0, 0x8001, 0x0, 0x200, 0x9}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000380)={r11, 0x0, 0x47, "4d4efaf9fbe84c9b10ec4801c58497888a6d20a1b0d736a553b76f6d7b5fb3e6fe102c095d28fe19f302efc228472864edbb936fa68924a359c27998315744d757601d5d2850fc"}, 0x4f) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r10, 0x118, 0x1, &(0x7f0000000000)=0x3de, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r9}) r12 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt(r12, 0x75b6, 0x9c5c, 0x0, 0x0) r13 = semget$private(0x0, 0x7, 0x3c0) semop(r13, &(0x7f0000000080)=[{0x1, 0x4, 0x1000}, {0x0, 0xffff, 0x1000}], 0x2) semop(r13, &(0x7f0000000080)=[{0x0, 0x2, 0x800}], 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000140)={r9, 0x80000}) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x0, 0x8}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000140)={0x0, 0x0}) 348.626841ms ago: executing program 2 (id=7035): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @local, 0x1}, 0x1c) ppoll(&(0x7f0000000000)=[{r0, 0x1003}], 0x1, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r1, 0xf648e000) (async) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) setsockopt$ax25_int(r2, 0x101, 0x5, &(0x7f0000000000)=0x780a, 0x4) 138.844271ms ago: executing program 2 (id=7036): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x12, r0, 0x45809000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x201, &(0x7f0000000000)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000000)) 127.717434ms ago: executing program 8 (id=7037): creat(&(0x7f0000000140)='./file0\x00', 0x71) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmmsg(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x48d4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x8000}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000380)={0x2, @pix={0x0, 0x0, 0x32315559}}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x1, 0x2, 0x67b}]}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x2f, 0x28, 0x10, 0x6, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x7800, 0x7800, 0x9, 0x80000000}}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000540)={@broadcast, @private=0xa010101, r5}, 0xc) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r6, 0xc0105502, &(0x7f0000002a40)) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r7, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195958c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f01a2bf98d708c1bf4fd2c2e3f8ea2617d0c69dc73c597a12ba4be2bb9439d7a518eac95b588776223bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70c", 0xe5}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a104ada4362c43d54fce970e", 0xb1}, {&(0x7f0000000840)="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", 0x1a4}, {&(0x7f00000001c0)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbdf8d45987e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc57adb3691cbe123cb43ed522a35874f4503d56d44c71c7ab62adc0", 0x69}, {&(0x7f0000000680)="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", 0x13a}, {&(0x7f0000000580)="ac6aed94fbb8c7fecccf1fad0f823f4711e4d4e5831b1172b79994156deeb8f47a21f6bd119ffeb486267bd8dbaa3b868deca95efc3fea013ea88ddd3222ff7cc2a3448434dca51f5bc1972720dc071c5c5e2358a62bb3d9ccb581431764476f92bc0dd581a715f7ff8cef23b35dceb9c44e588728dbe44a49301998f8bb11356809ab4bfbc85cd9eed4820e2a821913e94e49c898fca38824fef2d62ce3b44103e31a82b7c14ea5dae6b42906b14cc21e24fcb7b255b5fd8b3d9eda621defc3f398cc545fb03d6549353921bb4a52b3230008f967ddc1ad8635d5", 0xdb}, {&(0x7f0000002300)="0b41dae71fdbfbd927", 0x9}], 0x7}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002400)="036157dd45d9a56c0f33f53edcee705d061adaaf88a1fb", 0x17}, {&(0x7f0000002480)="9467776b9ec22f06151761843173440c3e9448d40384f222fec952053bd200bbc7ccef8e7c88fb0ae01fa531ad6deb000578a6c82661d5bf15bffe28cf236057bacc915533a7a58c9253414b4eea351e504828a7279ced0949ed778c25ae266f71689f85decb0b7cd62083d9dc4ff648d4fdd2e18f549308c1612433ea604d426ce3fe6b120bb7", 0x87}], 0x2}}], 0x3, 0x2000c044) sendto$inet(r7, 0x0, 0x0, 0x16000000, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000206010100f100"/20], 0x14}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e938462b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x4b}], 0x2) 0s ago: executing program 2 (id=7038): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000300), 0x4) (async) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000300), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf250f00000008000300", @ANYRES32=r3, @ANYBLOB="0500330001000000cee0ddf297cc978ff024b18ad4a34af9f5f593136a9634dd9b99560800c948b3bd6c6900798ddb030b14f1cddc675cad2983520472c1a63ebea22639faff0968baf447e1d455ab047de116e5abfe18cc"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)="ed"}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r6, 0x851, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000040)=0x7, 0x4) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r7, 0x114, 0x5, &(0x7f0000000080)=0x1, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') (async) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r10, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000004200)={0x50, 0x0, r11, {0x7, 0x21, 0xffffffff, 0x50339398, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6}}, 0x50) (async) write$FUSE_INIT(r10, &(0x7f0000004200)={0x50, 0x0, r11, {0x7, 0x21, 0xffffffff, 0x50339398, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6}}, 0x50) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') (async) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r12, &(0x7f0000000f00)={0x2020}, 0x2020) (async) read$FUSE(r12, &(0x7f0000000f00)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}], {0x14}}, 0x74}}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1233.111427][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1233.124284][ T24] error writing reg: 0xff, val: 0x00 [ 1233.281345][ T24] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1233.334096][T15426] syzkaller1: entered promiscuous mode [ 1233.345675][T15426] syzkaller1: entered allmulticast mode [ 1233.447758][T15451] fuse: Unknown parameter 'grou00000000000000000000' [ 1233.833719][T15469] vxfs: WRONG superblock magic 00000000 at 1 [ 1233.860267][T15469] vxfs: WRONG superblock magic 00000000 at 8 [ 1233.866318][T15469] vxfs: can't find superblock. [ 1234.029191][ T24] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1234.083569][T15485] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1234.207124][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 1234.219501][ T24] usb 9-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 1234.239875][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.266893][ T24] usb 9-1: Product: syz [ 1234.280717][ T24] usb 9-1: Manufacturer: syz [ 1234.285374][ T24] usb 9-1: SerialNumber: syz [ 1234.316371][ T24] usb 9-1: config 0 descriptor?? [ 1234.335964][ T24] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1234.347496][T15492] fuse: Unknown parameter 'grou00000000000000000000' [ 1234.408581][ T24] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1234.516388][T11480] udevd[11480]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1234.578286][ T24] usb 9-1: USB disconnect, device number 41 [ 1234.974527][T15519] syzkaller1: entered promiscuous mode [ 1234.980896][T15519] syzkaller1: entered allmulticast mode [ 1235.205656][ T24] usb 3-1: USB disconnect, device number 97 [ 1235.552340][T15555] fuse: Unknown parameter 'group_i00000000000000000000' [ 1235.658889][ T24] usb 8-1: new high-speed USB device number 126 using dummy_hcd [ 1235.840784][ T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.863930][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1235.923437][ T24] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1235.936097][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1235.944866][ T24] usb 8-1: SerialNumber: syz [ 1236.194620][T15572] mkiss: ax0: crc mode is auto. [ 1236.196455][T15542] /dev/rnullb0: Can't open blockdev [ 1236.231470][ T24] usb 8-1: 0:2 : does not exist [ 1236.248521][ T24] usb 8-1: unit 255 not found! [ 1236.278988][ T24] usb 8-1: 5:0: cannot get min/max values for control 1 (id 5) [ 1236.312668][ T24] usb 8-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1236.333061][ T24] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1236.408812][ T24] usb 8-1: USB disconnect, device number 126 [ 1236.446808][T15592] netlink: 'syz.8.6145': attribute type 4 has an invalid length. [ 1236.459193][T15577] block nbd0: server does not support multiple connections per device. [ 1236.562663][T15577] block nbd0: shutting down sockets [ 1236.587672][T15572] netlink: 'syz.8.6145': attribute type 4 has an invalid length. [ 1236.728084][T15591] syzkaller1: entered promiscuous mode [ 1236.735041][T15591] syzkaller1: entered allmulticast mode [ 1236.863291][T15564] /dev/rnullb0: Can't open blockdev [ 1237.049656][T15622] fuse: Unknown parameter 'group_i00000000000000000000' [ 1237.303409][T15640] hpfs: Bad magic ... probably not HPFS [ 1237.449221][ T24] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1237.620116][ T5846] usb 8-1: new high-speed USB device number 127 using dummy_hcd [ 1237.631826][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1237.645164][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1237.693307][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1237.731109][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1237.747240][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.774747][ T24] usb 3-1: config 0 descriptor?? [ 1237.780433][ T5846] usb 8-1: device descriptor read/64, error -71 [ 1237.803952][T15656] syzkaller1: entered promiscuous mode [ 1237.814254][T15656] syzkaller1: entered allmulticast mode [ 1238.028982][ T5846] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1238.082153][T15677] fuse: Unknown parameter 'group_i00000000000000000000' [ 1238.193695][ T5846] usb 8-1: device descriptor read/64, error -71 [ 1238.263868][ T24] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0084/input/input81 [ 1238.313672][ T5846] usb usb8-port1: attempt power cycle [ 1238.325430][T15692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1238.339303][T15692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1238.413337][ T24] appleir 0003:05AC:8241.0084: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 1238.611227][T15708] /dev/rnullb0: Can't open blockdev [ 1238.663913][ T5846] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1238.689231][ T5846] usb 8-1: device descriptor read/8, error -71 [ 1238.803470][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.810119][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.945249][T15727] fuse: Unknown parameter 'group_id00000000000000000000' [ 1238.959862][ T5846] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1238.985188][T15719] syzkaller1: entered promiscuous mode [ 1238.992902][T15719] syzkaller1: entered allmulticast mode [ 1238.998752][ T5846] usb 8-1: device descriptor read/8, error -71 [ 1239.075964][T15730] Mount JFS Failure: -22 [ 1239.130827][ T5846] usb usb8-port1: unable to enumerate USB device [ 1239.405796][T15749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1239.417162][T15749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1239.468573][ T24] usb 3-1: reset high-speed USB device number 98 using dummy_hcd [ 1239.578666][ T5846] usb 9-1: new full-speed USB device number 42 using dummy_hcd [ 1239.767123][ T5846] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 1239.776755][ T5846] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1239.786025][ T5846] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1239.795303][ T5846] usb 9-1: config 1 has no interface number 0 [ 1239.801492][ T5846] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1239.812525][ T5846] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1239.825480][ T5846] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1239.834671][ T5846] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.853888][ T5846] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 1240.296341][T15777] fuse: Unknown parameter 'group_id00000000000000000000' [ 1240.383165][T15790] QAT: Invalid ioctl 21531 [ 1240.427710][ T5846] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 1240.621059][T15794] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 1240.634966][T15794] UDF-fs: Scanning with blocksize 4096 failed [ 1240.691144][ T5969] usb 9-1: USB disconnect, device number 42 [ 1240.702921][ T5969] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 1240.904239][T15832] syzkaller1: entered promiscuous mode [ 1240.919538][T15832] syzkaller1: entered allmulticast mode [ 1241.044578][ T5943] usb 3-1: USB disconnect, device number 98 [ 1241.046660][T15852] binder: 15851:15852 ioctl c018620b 200000000000 returned -14 [ 1241.169193][T15856] fuse: Unknown parameter 'group_id00000000000000000000' [ 1241.390305][T15875] binder: 15874:15875 ioctl c018620b 200000000000 returned -14 [ 1241.769858][T15892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1241.789016][T15892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1242.222747][T15908] kAFS: unparsable volume name [ 1242.523238][T15922] netlink: 'syz.8.6202': attribute type 16 has an invalid length. [ 1242.535931][T15918] fuse: Bad value for 'user_id' [ 1242.547076][T15922] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6202'. [ 1242.559795][T15918] fuse: Bad value for 'user_id' [ 1242.692485][T15914] syzkaller1: entered promiscuous mode [ 1242.698148][T15914] syzkaller1: entered allmulticast mode [ 1242.958465][ T5969] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 1243.099147][ T5969] usb 3-1: device descriptor read/64, error -71 [ 1243.338601][ T5969] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 1243.481478][ T5969] usb 3-1: device descriptor read/64, error -71 [ 1243.601542][ T5926] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1243.610234][ T5969] usb usb3-port1: attempt power cycle [ 1243.768702][ T5926] usb 8-1: Using ep0 maxpacket: 16 [ 1243.783099][ T5926] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1243.795803][ T5926] usb 8-1: config 3 has an invalid interface number: 216 but max is 0 [ 1243.819693][ T5926] usb 8-1: config 3 has no interface number 0 [ 1243.825887][ T5926] usb 8-1: config 3 interface 216 has no altsetting 0 [ 1243.828338][T15982] fuse: Bad value for 'user_id' [ 1243.843133][T15982] fuse: Bad value for 'user_id' [ 1243.853164][ T5926] usb 8-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=de.a6 [ 1243.861951][T15980] /dev/rnullb0: Can't open blockdev [ 1243.872706][ T5926] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.896208][ T5926] usb 8-1: Product: syz [ 1243.904380][ T5926] usb 8-1: Manufacturer: syz [ 1243.917006][ T5926] usb 8-1: SerialNumber: syz [ 1243.978535][ T5969] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 1244.023455][ T5969] usb 3-1: device descriptor read/8, error -71 [ 1244.081208][T15998] /dev/rnullb0: Can't open blockdev [ 1244.224939][T15995] syzkaller1: entered promiscuous mode [ 1244.232100][T15995] syzkaller1: entered allmulticast mode [ 1244.276742][ T5969] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 1244.327189][ T5969] usb 3-1: device descriptor read/8, error -71 [ 1244.440134][ T5969] usb usb3-port1: unable to enumerate USB device [ 1244.604979][T16019] libceph: resolve '4..' (ret=-3): failed [ 1244.779923][T16027] fuse: Bad value for 'user_id' [ 1244.784849][T16027] fuse: Bad value for 'user_id' [ 1244.903106][T16032] /dev/rnullb0: Can't open blockdev [ 1245.040426][T16039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.054999][T16039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1245.352994][ T5943] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1245.508915][ T5943] usb 9-1: Using ep0 maxpacket: 16 [ 1245.520146][ T5943] usb 9-1: config 15 has an invalid interface number: 107 but max is 0 [ 1245.529318][ T5943] usb 9-1: config 15 has no interface number 0 [ 1245.535557][ T5943] usb 9-1: config 15 interface 107 altsetting 8 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1245.546691][ T5943] usb 9-1: config 15 interface 107 has no altsetting 0 [ 1245.566582][ T5943] usb 9-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice= d.c3 [ 1245.576119][ T5943] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.585444][ T5943] usb 9-1: Product: syz [ 1245.589879][ T5943] usb 9-1: Manufacturer: syz [ 1245.594503][ T5943] usb 9-1: SerialNumber: syz [ 1245.988042][ T5943] usb 9-1: USB disconnect, device number 43 [ 1245.996090][T16058] syzkaller1: entered promiscuous mode [ 1246.014443][T16058] syzkaller1: entered allmulticast mode [ 1246.316504][ T5926] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:3.216/input/input82 [ 1246.353944][ T5209] bcm5974 8-1:3.216: could not read from device [ 1246.412940][ T5969] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1246.426164][ T5926] usb 8-1: USB disconnect, device number 5 [ 1246.441187][T16102] fuse: Bad value for 'fd' [ 1246.441728][ T5209] bcm5974 8-1:3.216: could not read from device [ 1246.588462][ T5969] usb 3-1: Using ep0 maxpacket: 32 [ 1246.595967][ T5969] usb 3-1: config 0 has an invalid interface number: 232 but max is 0 [ 1246.633865][ T5969] usb 3-1: config 0 has no interface number 0 [ 1246.649922][ T5969] usb 3-1: config 0 interface 232 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1246.663616][ T5969] usb 3-1: New USB device found, idVendor=2040, idProduct=651b, bcdDevice=29.5a [ 1246.682378][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.695724][ T5969] usb 3-1: Product: syz [ 1246.706318][ T5969] usb 3-1: Manufacturer: syz [ 1246.711976][ T5969] usb 3-1: SerialNumber: syz [ 1246.724810][ T5969] usb 3-1: config 0 descriptor?? [ 1246.737256][T16083] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1246.748885][ T5969] em28xx 3-1:0.232: New device syz syz @ 480 Mbps (2040:651b, interface 232, class 232) [ 1246.779711][ T5969] em28xx 3-1:0.232: Video interface 232 found: bulk [ 1246.878684][ T5943] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1247.009023][ T5969] em28xx 3-1:0.232: unknown em28xx chip ID (0) [ 1247.026489][T16141] sp0: Synchronizing with TNC [ 1247.054940][ T5943] usb 9-1: Using ep0 maxpacket: 32 [ 1247.061624][T16141] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1247.071157][T16140] [U] [ 1247.088501][ T5943] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1247.117030][ T5943] usb 9-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 1247.117733][ T5969] em28xx 3-1:0.232: reading from i2c device at 0xa0 failed (error=-5) [ 1247.141379][ T5969] em28xx 3-1:0.232: board has no eeprom [ 1247.149470][ T5943] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.166319][ T5943] usb 9-1: config 0 descriptor?? [ 1247.187081][T16142] syzkaller1: entered promiscuous mode [ 1247.193242][T16142] syzkaller1: entered allmulticast mode [ 1247.208493][ T5969] em28xx 3-1:0.232: Identified as Hauppauge WinTV HVR 950 (card=16) [ 1247.235539][ T5969] em28xx 3-1:0.232: analog set to bulk mode. [ 1247.242015][ T5926] em28xx 3-1:0.232: Registering V4L2 extension [ 1247.288944][ T5969] usb 3-1: USB disconnect, device number 103 [ 1247.330396][ T5969] em28xx 3-1:0.232: Disconnecting em28xx [ 1247.381538][ T5943] usb 9-1: string descriptor 0 read error: -22 [ 1247.423508][ T5926] em28xx 3-1:0.232: Config register raw data: 0xffffffed [ 1247.430840][ T5926] em28xx 3-1:0.232: AC97 chip type couldn't be determined [ 1247.438082][ T5926] em28xx 3-1:0.232: No AC97 audio processor [ 1247.446002][ T5926] em28xx 3-1:0.232: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 1247.457104][ T5926] em28xx 3-1:0.232: Binding DVB extension [ 1247.474783][ T5926] em28xx 3-1:0.232: no endpoint for DVB mode and transfer type 0 [ 1247.482675][ T5926] em28xx 3-1:0.232: failed to pre-allocate USB transfer buffers for DVB. [ 1247.491378][ T5926] em28xx 3-1:0.232: Registering input extension [ 1247.497866][ T5969] em28xx 3-1:0.232: Closing input extension [ 1247.516030][ T5969] em28xx 3-1:0.232: Freeing device [ 1247.538605][ T43] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1247.671791][T16179] fuse: Bad value for 'fd' [ 1247.719679][ T43] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 1247.733863][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1247.751483][ T43] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1247.768552][ T43] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1247.785314][ T43] usb 8-1: Manufacturer: syz [ 1247.811982][ T43] usb 8-1: config 0 descriptor?? [ 1247.819848][ T5943] aquacomputer_d5next 0003:0C70:F014.0085: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.8-1/input0 [ 1247.948645][ T43] rc_core: IR keymap rc-hauppauge not found [ 1247.954607][ T43] Registered IR keymap rc-empty [ 1247.972718][ T43] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1247.992879][T16117] omfs: Invalid superblock (0) [ 1248.003518][T16117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.031983][T16117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1248.037712][ T43] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input84 [ 1248.133269][ T43] usb 9-1: USB disconnect, device number 44 [ 1248.423298][T16223] syzkaller1: entered promiscuous mode [ 1248.430663][T16223] syzkaller1: entered allmulticast mode [ 1248.482694][T16244] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6250'. [ 1248.502678][T16244] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1248.524997][T16162] qnx4: no qnx4 filesystem (no root dir). [ 1248.539185][ T24] usb 8-1: USB disconnect, device number 6 [ 1248.678513][ T43] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1248.838812][ T43] usb 9-1: Using ep0 maxpacket: 32 [ 1248.847054][ T43] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 1248.861054][ T43] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1248.878661][ T43] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1248.888254][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024 [ 1248.902664][ T43] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1248.914420][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1248.924476][ T43] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1248.936953][ T43] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1248.959357][ T43] usb 9-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1248.979677][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.000434][ T43] usb 9-1: config 0 descriptor?? [ 1249.006095][T16221] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22 [ 1249.016367][ T43] usblp0: Disabling reads from problematic bidirectional printer [ 1249.224562][T16221] hfs: can't find a HFS filesystem on dev rnullb0 [ 1249.235837][ T43] usblp 9-1:0.0: usblp0: USB Unidirectional printer dev 45 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004 [ 1249.253999][ T43] usb 9-1: USB disconnect, device number 45 [ 1249.265900][ T43] usblp0: removed [ 1249.463041][T16319] fuse: Bad value for 'fd' [ 1249.470462][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.736849][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.793309][T16321] syzkaller1: entered promiscuous mode [ 1249.798990][T16321] syzkaller1: entered allmulticast mode [ 1249.804732][T16337] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6258'. [ 1249.870891][T16339] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1249.983133][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.047993][T16346] autofs: Bad value for 'fd' [ 1250.092027][T16348] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6262'. [ 1250.200930][T16351] fuse: Bad value for 'fd' [ 1250.238186][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.638704][ T9] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1250.826157][ T13] bridge_slave_1: left allmulticast mode [ 1250.833489][ T9] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1250.861642][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1250.877034][ T13] bridge_slave_1: left promiscuous mode [ 1250.885359][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.886035][T16386] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 1250.896353][ T9] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1250.914320][ T9] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1250.930110][ T13] bridge_slave_0: left allmulticast mode [ 1250.938016][ T9] usb 9-1: Product: syz [ 1250.947412][ T13] bridge_slave_0: left promiscuous mode [ 1250.956132][T16388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1250.968126][ T9] usb 9-1: Manufacturer: syz [ 1250.968158][T16388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1250.979326][ T9] usb 9-1: SerialNumber: syz [ 1250.986656][T16388] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1250.999078][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.015055][ T9] usb 9-1: config 0 descriptor?? [ 1251.034434][ T9] usb 9-1: selecting invalid altsetting 0 [ 1251.250171][T16356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1251.284189][T16356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1251.311653][ T9] usb 9-1: USB disconnect, device number 46 [ 1252.037984][T16442] fuse: Bad value for 'fd' [ 1252.495269][ T43] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1252.649023][ T43] usb 9-1: Using ep0 maxpacket: 16 [ 1252.660057][ T43] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 1252.679491][ T43] usb 9-1: config 0 has no interface number 0 [ 1252.685627][ T43] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1252.697286][ T43] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1252.710032][ T43] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1252.726216][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.735636][ T43] usb 9-1: Product: syz [ 1252.743539][T16464] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1252.745605][ T43] usb 9-1: Manufacturer: syz [ 1252.768470][ T43] usb 9-1: SerialNumber: syz [ 1252.786457][ T43] usb 9-1: config 0 descriptor?? [ 1252.797561][T16444] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1252.813065][T16444] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1253.023624][T16444] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1253.042649][T16444] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1253.055583][ T43] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1253.088724][ T43] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 1253.099718][ T43] asix 9-1:0.251: probe with driver asix failed with error -5 [ 1253.134783][ T43] usb 9-1: USB disconnect, device number 47 [ 1253.201213][T16487] fuse: Bad value for 'fd' [ 1253.412205][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1253.456862][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1253.490006][ T13] bond0 (unregistering): Released all slaves [ 1253.528259][T16491] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1254.070450][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1254.238452][ T9] usb 8-1: device descriptor read/64, error -71 [ 1254.378241][ T13] hsr_slave_0: left promiscuous mode [ 1254.410309][ T13] hsr_slave_1: left promiscuous mode [ 1254.432902][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1254.469022][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1254.472081][T16548] fuse: Invalid rootmode [ 1254.490035][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1254.520828][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1254.549566][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1254.638601][ T9] usb 8-1: device descriptor read/64, error -71 [ 1254.666456][ T13] veth1_macvtap: left promiscuous mode [ 1254.673170][ T13] veth0_macvtap: left promiscuous mode [ 1254.679404][ T13] veth1_vlan: left promiscuous mode [ 1254.684942][ T13] veth0_vlan: left promiscuous mode [ 1254.759012][ T9] usb usb8-port1: attempt power cycle [ 1254.919454][T16559] ./cgroup: Can't lookup blockdev [ 1254.948162][T16559] ./cgroup: Can't lookup blockdev [ 1255.108556][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1255.172054][ T9] usb 8-1: device descriptor read/8, error -71 [ 1255.214496][T16566] /dev/rnullb0: Can't open blockdev [ 1255.440003][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1255.469179][ T9] usb 8-1: device descriptor read/8, error -71 [ 1255.589280][ T9] usb usb8-port1: unable to enumerate USB device [ 1255.615855][T16586] /dev/rnullb0: Can't open blockdev [ 1255.863394][T16595] fuse: Invalid rootmode [ 1256.942834][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1257.092272][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1257.218763][ T43] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1257.378510][ T43] usb 8-1: Using ep0 maxpacket: 32 [ 1257.397590][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1257.409368][ T43] usb 8-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 1257.418526][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.430232][ T43] usb 8-1: config 0 descriptor?? [ 1257.863814][ T43] lg-g15 0003:046D:C225.0086: item fetching failed at offset 5/7 [ 1257.885830][ T43] lg-g15 0003:046D:C225.0086: probe with driver lg-g15 failed with error -22 [ 1258.103737][ T10] usb 8-1: USB disconnect, device number 11 [ 1258.829208][T16636] bio_check_eod: 3 callbacks suppressed [ 1258.829227][T16636] syz.7.6313: attempt to access beyond end of device [ 1258.829227][T16636] loop7: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 1258.849061][T16636] gfs2: error -5 reading superblock [ 1259.232670][T16658] XFS (rnullb0): Invalid superblock magic number [ 1259.365436][T16672] fuse: Invalid rootmode [ 1259.436576][T16652] syzkaller0: entered promiscuous mode [ 1259.442198][T16652] syzkaller0: entered allmulticast mode [ 1259.458805][ T43] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1259.650058][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 1259.706644][ T43] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1259.727642][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.748083][ T43] usb 3-1: config 0 descriptor?? [ 1259.755034][T16685] exFAT-fs (rnullb0): invalid boot record signature [ 1259.768555][T16685] exFAT-fs (rnullb0): failed to read boot sector [ 1259.780469][ T43] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1259.802908][T16685] exFAT-fs (rnullb0): failed to recognize exfat type [ 1260.077679][T16699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.093951][T16699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.114883][T16699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.148726][T16699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.522438][T16718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.535261][T16718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.994680][ T43] gspca_vc032x: reg_w err -71 [ 1260.999564][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1261.004868][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1261.027230][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1261.032886][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1261.038187][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1261.044112][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1261.049498][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1261.054790][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1261.060122][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1261.065449][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1261.070790][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1261.076098][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1261.081562][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1261.086869][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1261.093685][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1261.103662][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1261.110414][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1261.116478][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1261.123033][ T43] gspca_vc032x: Unknown sensor... [ 1261.128144][ T43] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 1261.156309][ T43] usb 3-1: USB disconnect, device number 104 [ 1261.845945][ T5846] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1262.000038][ T5846] usb 3-1: Using ep0 maxpacket: 16 [ 1262.007615][ T5846] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1262.018112][ T5846] usb 3-1: config 0 has an invalid interface number: 212 but max is 0 [ 1262.031784][ T5846] usb 3-1: config 0 has no interface number 0 [ 1262.039481][ T5846] usb 3-1: config 0 interface 212 has no altsetting 0 [ 1262.052019][ T5846] usb 3-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=15.c8 [ 1262.061373][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.075023][ T5846] usb 3-1: Product: syz [ 1262.082526][ T5846] usb 3-1: Manufacturer: syz [ 1262.087228][ T5846] usb 3-1: SerialNumber: syz [ 1262.095087][ T5846] usb 3-1: config 0 descriptor?? [ 1262.361857][ T5846] quatech2 3-1:0.212: Quatech 2nd gen USB to Serial Driver converter detected [ 1262.376279][ T5846] usb 3-1: qt2_attach - failed to power on unit: -71 [ 1262.384709][ T5846] quatech2 3-1:0.212: probe with driver quatech2 failed with error -71 [ 1262.397736][ T5846] usb 3-1: USB disconnect, device number 105 [ 1262.905229][T16751] fuse: Bad value for 'rootmode' [ 1263.298725][ T5943] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1263.450906][ T5943] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.464213][ T5943] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1263.474030][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.482097][ T5943] usb 3-1: Product: syz [ 1263.486314][ T5943] usb 3-1: Manufacturer: syz [ 1263.491979][ T5943] usb 3-1: SerialNumber: syz [ 1263.891615][ T5943] usb 3-1: probing VID:PID(0424:012C) [ 1263.899626][ T5943] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 1263.907846][ T5943] vub300 3-1:2.0: probe with driver vub300 failed with error -22 [ 1263.935585][ T5943] usb 3-1: USB disconnect, device number 106 [ 1264.642169][T16784] /dev/rnullb0: Can't open blockdev [ 1264.887675][T16790] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6332'. [ 1264.945897][T16795] /dev/rnullb0: Can't open blockdev [ 1265.122673][T16802] fuse: Bad value for 'rootmode' [ 1265.981277][T16819] CIFS mount error: No usable UNC path provided in device string! [ 1265.981277][T16819] [ 1265.992502][T16819] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1270.539182][ T30] audit: type=1326 audit(2000002195.059:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16848 comm="syz.7.6344" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f946f38e929 code=0x0 [ 1270.644503][T16862] fuse: Bad value for 'rootmode' [ 1270.656188][T16860] /dev/rnullb0: Can't open blockdev [ 1270.775275][T16866] /dev/rnullb0: Can't open blockdev [ 1270.838724][ T5943] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1271.019175][ T5943] usb 8-1: Using ep0 maxpacket: 8 [ 1271.031815][ T5943] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1271.058045][ T5943] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1271.072826][ T5943] usb 8-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1271.085456][ T5943] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.097816][ T5943] usb 8-1: config 0 descriptor?? [ 1271.218602][ T5926] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1271.279749][T16898] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1271.373307][ T5926] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1271.399097][ T5926] usb 9-1: config 66 interface 0 has no altsetting 0 [ 1271.410736][ T5926] usb 9-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1271.430866][ T5926] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.462000][ T5926] usb 9-1: Product: syz [ 1271.466231][ T5926] usb 9-1: Manufacturer: syz [ 1271.490493][ T5926] usb 9-1: SerialNumber: syz [ 1271.524905][ T5943] uclogic 0003:5543:0042.0087: unbalanced delimiter at end of report description [ 1271.542423][ T5943] uclogic 0003:5543:0042.0087: parse failed [ 1271.553427][ T5943] uclogic 0003:5543:0042.0087: probe with driver uclogic failed with error -22 [ 1271.737985][ T5926] ati_remote2 9-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 1271.758046][ T5926] usb 9-1: USB disconnect, device number 48 [ 1271.790852][T16913] syzkaller1: entered promiscuous mode [ 1271.797172][T16913] syzkaller1: entered allmulticast mode [ 1272.048134][T16947] /dev/rnullb0: Can't open blockdev [ 1272.196536][T16956] fuse: Unknown parameter 'use00000000000000000000' [ 1272.198856][T16955] binder: 16953:16955 ioctl c018620b 200000000000 returned -14 [ 1272.718667][T16982] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1272.725708][T16982] /dev/rnullb0: Can't open blockdev [ 1272.895099][T16994] syz.8.6362: attempt to access beyond end of device [ 1272.895099][T16994] nbd8: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1272.924874][T16994] hfs: can't find a HFS filesystem on dev nbd8 [ 1273.373222][T17003] syzkaller1: entered promiscuous mode [ 1273.380258][T17003] syzkaller1: entered allmulticast mode [ 1273.392860][T17026] fuse: Unknown parameter 'use00000000000000000000' [ 1273.465443][ T10] usb 8-1: USB disconnect, device number 12 [ 1273.726345][T17048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1273.741954][T17048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.011607][T17065] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 1274.018194][T17065] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1274.051113][T17068] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6375'. [ 1274.058473][T17065] vhci_hcd vhci_hcd.0: Device attached [ 1274.069959][T17067] vhci_hcd: connection closed [ 1274.072062][ T13] vhci_hcd: stop threads [ 1274.081815][ T13] vhci_hcd: release socket [ 1274.086352][ T13] vhci_hcd: disconnect device [ 1274.100260][T17068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1274.149688][T17068] /dev/rnullb0: Can't open blockdev [ 1274.160336][T17077] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6375'. [ 1274.281954][T17087] fuse: Unknown parameter 'use00000000000000000000' [ 1274.356226][T17090] program syz.8.6378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1274.438484][ T24] usb 3-1: new low-speed USB device number 107 using dummy_hcd [ 1274.544850][T17097] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6380'. [ 1274.627517][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1274.646893][ T24] usb 3-1: config 0 has no interface number 0 [ 1274.654304][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1274.671208][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1274.725040][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1274.751585][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.774462][T17106] /dev/rnullb0: Can't open blockdev [ 1274.790919][ T24] usb 3-1: config 0 descriptor?? [ 1274.796562][T17081] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1274.844623][ T24] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1275.040526][T17100] syzkaller1: entered promiscuous mode [ 1275.046054][T17100] syzkaller1: entered allmulticast mode [ 1275.059296][ T5969] usb 3-1: USB disconnect, device number 107 [ 1275.065396][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1275.343771][T17142] /dev/rnullb0: Can't open blockdev [ 1275.445722][T17145] fuse: Unknown parameter 'user_i00000000000000000000' [ 1275.995448][T17169] /dev/rnullb0: Can't open blockdev [ 1276.039287][T17169] /dev/rnullb0: Can't open blockdev [ 1276.049321][T17169] /dev/rnullb0: Can't open blockdev [ 1276.062038][T17169] /dev/rnullb0: Can't open blockdev [ 1276.090379][T17169] /dev/rnullb0: Can't open blockdev [ 1276.118354][T17169] /dev/rnullb0: Can't open blockdev [ 1276.127516][T17169] /dev/rnullb0: Can't open blockdev [ 1276.139270][T17169] /dev/rnullb0: Can't open blockdev [ 1276.159666][T17169] /dev/rnullb0: Can't open blockdev [ 1276.178220][T17169] /dev/rnullb0: Can't open blockdev [ 1276.185112][T17169] /dev/rnullb0: Can't open blockdev [ 1276.192563][T17169] /dev/rnullb0: Can't open blockdev [ 1276.200085][T17169] /dev/rnullb0: Can't open blockdev [ 1276.207836][T17169] /dev/rnullb0: Can't open blockdev [ 1276.214242][T17169] /dev/rnullb0: Can't open blockdev [ 1276.223747][T17169] /dev/rnullb0: Can't open blockdev [ 1276.263507][T17169] /dev/rnullb0: Can't open blockdev [ 1276.274670][T17169] /dev/rnullb0: Can't open blockdev [ 1276.289846][T17169] /dev/rnullb0: Can't open blockdev [ 1276.304059][T17169] /dev/rnullb0: Can't open blockdev [ 1276.320141][T17169] /dev/rnullb0: Can't open blockdev [ 1276.326259][T17169] /dev/rnullb0: Can't open blockdev [ 1276.334049][T17169] /dev/rnullb0: Can't open blockdev [ 1276.344897][T17169] /dev/rnullb0: Can't open blockdev [ 1276.353610][T17169] /dev/rnullb0: Can't open blockdev [ 1276.362918][T17169] /dev/rnullb0: Can't open blockdev [ 1276.381252][T17169] /dev/rnullb0: Can't open blockdev [ 1276.406044][T17169] /dev/rnullb0: Can't open blockdev [ 1276.416115][T17169] /dev/rnullb0: Can't open blockdev [ 1276.434284][T17169] /dev/rnullb0: Can't open blockdev [ 1276.441208][T17169] /dev/rnullb0: Can't open blockdev [ 1276.448271][T17169] /dev/rnullb0: Can't open blockdev [ 1276.455127][T17169] /dev/rnullb0: Can't open blockdev [ 1276.499248][T17169] /dev/rnullb0: Can't open blockdev [ 1276.517754][T17169] /dev/rnullb0: Can't open blockdev [ 1276.541399][T17183] netlink: 'syz.8.6394': attribute type 10 has an invalid length. [ 1276.559394][T17169] /dev/rnullb0: Can't open blockdev [ 1276.574177][T17183] netlink: 55 bytes leftover after parsing attributes in process `syz.8.6394'. [ 1276.599317][T17169] /dev/rnullb0: Can't open blockdev [ 1276.606468][T17169] /dev/rnullb0: Can't open blockdev [ 1276.616514][T17169] /dev/rnullb0: Can't open blockdev [ 1276.626148][T17189] /dev/rnullb0: Can't open blockdev [ 1276.626440][T17169] /dev/rnullb0: Can't open blockdev [ 1276.688192][T17169] /dev/rnullb0: Can't open blockdev [ 1276.710178][T17169] /dev/rnullb0: Can't open blockdev [ 1276.721833][T17169] /dev/rnullb0: Can't open blockdev [ 1276.727890][T17169] /dev/rnullb0: Can't open blockdev [ 1276.734125][T17169] /dev/rnullb0: Can't open blockdev [ 1276.741660][T17169] /dev/rnullb0: Can't open blockdev [ 1276.747797][T17169] /dev/rnullb0: Can't open blockdev [ 1276.755932][T17194] /dev/rnullb0: Can't open blockdev [ 1276.796405][T17169] /dev/rnullb0: Can't open blockdev [ 1276.816739][T17169] /dev/rnullb0: Can't open blockdev [ 1276.852391][T17169] /dev/rnullb0: Can't open blockdev [ 1276.858325][T17169] /dev/rnullb0: Can't open blockdev [ 1276.909828][T17169] /dev/rnullb0: Can't open blockdev [ 1276.916267][T17169] /dev/rnullb0: Can't open blockdev [ 1276.925425][T17169] /dev/rnullb0: Can't open blockdev [ 1276.931600][T17169] /dev/rnullb0: Can't open blockdev [ 1276.937549][T17169] /dev/rnullb0: Can't open blockdev [ 1276.959478][T17169] /dev/rnullb0: Can't open blockdev [ 1276.976363][T17169] /dev/rnullb0: Can't open blockdev [ 1276.982506][T17169] /dev/rnullb0: Can't open blockdev [ 1276.988675][T17169] /dev/rnullb0: Can't open blockdev [ 1276.995842][T17169] /dev/rnullb0: Can't open blockdev [ 1277.006884][T17169] /dev/rnullb0: Can't open blockdev [ 1277.012713][ T10] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1277.030771][T17169] /dev/rnullb0: Can't open blockdev [ 1277.036786][T17169] /dev/rnullb0: Can't open blockdev [ 1277.043223][T17169] /dev/rnullb0: Can't open blockdev [ 1277.134772][T17205] syzkaller1: entered promiscuous mode [ 1277.147445][T17205] syzkaller1: entered allmulticast mode [ 1277.180540][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1277.217517][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1277.233656][ T10] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1277.243092][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1277.252589][ T10] usb 9-1: SerialNumber: syz [ 1277.286911][T17218] fuse: Unknown parameter 'user_i00000000000000000000' [ 1277.443903][T17224] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 1277.510327][ T10] usb 9-1: 0:2 : does not exist [ 1277.553222][ T10] usb 9-1: USB disconnect, device number 49 [ 1277.632272][T16858] udevd[16858]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 1277.665023][T16858] udevd[16858]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 1277.817232][T17257] /dev/rnullb0: Can't open blockdev [ 1278.046476][T17270] /dev/rnullb0: Can't open blockdev [ 1278.054982][T17271] /dev/rnullb0: Can't open blockdev [ 1278.138196][T17272] /dev/rnullb0: Can't open blockdev [ 1278.193702][T17280] fuse: Unknown parameter 'user_i00000000000000000000' [ 1278.278539][ T43] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1278.450905][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 1278.457835][ T43] usb 3-1: config 0 has an invalid interface number: 63 but max is 0 [ 1278.488414][ T43] usb 3-1: config 0 has no interface number 0 [ 1278.494633][ T43] usb 3-1: config 0 interface 63 has no altsetting 0 [ 1278.539484][ T43] usb 3-1: New USB device found, idVendor=0921, idProduct=1000, bcdDevice=d7.7b [ 1278.567367][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.595921][ T43] usb 3-1: Product: syz [ 1278.614486][ T43] usb 3-1: Manufacturer: syz [ 1278.639363][ T43] usb 3-1: SerialNumber: syz [ 1278.647436][ T43] usb 3-1: config 0 descriptor?? [ 1279.024370][ T43] belkin_sa 3-1:0.63: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 1279.079749][ T43] usb 3-1: bcdDevice: d77b, bfc: 0 [ 1279.099443][ T43] usb 3-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 1279.150998][ T43] usb 3-1: USB disconnect, device number 108 [ 1279.179210][T17328] /dev/rnullb0: Can't open blockdev [ 1279.203558][ T43] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 1279.249493][ T43] belkin_sa 3-1:0.63: device disconnected [ 1279.763898][T17357] ./cgroup: Can't lookup blockdev [ 1279.782141][T17343] syzkaller1: entered promiscuous mode [ 1279.787823][T17343] syzkaller1: entered allmulticast mode [ 1280.119110][T17369] fuse: Unknown parameter 'user_id00000000000000000000' [ 1280.258800][T17373] fuse: Bad value for 'fd' [ 1280.439868][T17385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6426'. [ 1280.482809][T17385] /dev/rnullb0: Can't open blockdev [ 1280.593328][T17393] /dev/rnullb0: Can't open blockdev [ 1280.769114][T17402] overlayfs: conflicting lowerdir path [ 1280.781535][T17402] /dev/rnullb0: Can't open blockdev [ 1280.797584][T17404] fuse: Unknown parameter 'user_id00000000000000000000' [ 1280.900071][T17409] /dev/rnullb0: Can't open blockdev [ 1281.021299][T17407] syzkaller1: entered promiscuous mode [ 1281.027045][T17407] syzkaller1: entered allmulticast mode [ 1281.147164][T17423] netlink: 'syz.8.6435': attribute type 10 has an invalid length. [ 1281.169067][T17423] veth0_vlan: left promiscuous mode [ 1281.185918][T17423] veth0_vlan: entered promiscuous mode [ 1281.195640][T17423] team0: Device veth0_vlan failed to register rx_handler [ 1281.213023][T17430] /dev/rnullb0: Can't open blockdev [ 1281.369471][ T10] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1281.432246][T17444] overlayfs: failed to clone upperpath [ 1281.512858][T17448] fuse: Unknown parameter 'user_id00000000000000000000' [ 1281.560987][ T10] usb 3-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1281.601121][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1281.643702][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 1281.660046][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.664059][T17454] /dev/rnullb0: Can't open blockdev [ 1281.703168][ T10] usb 3-1: config 0 descriptor?? [ 1281.899756][T17465] netlink: 176 bytes leftover after parsing attributes in process `syz.7.6446'. [ 1281.910258][T17466] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1281.945486][T17422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.956629][T17443] /dev/rnullb0: Can't open blockdev [ 1281.963546][T17422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1282.007603][T17422] netlink: 312 bytes leftover after parsing attributes in process `syz.2.6436'. [ 1282.086033][ T10] usb 3-1: string descriptor 0 read error: -71 [ 1282.119877][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1282.146809][ T10] usb 3-1: USB disconnect, device number 109 [ 1282.293886][T17474] syzkaller1: entered promiscuous mode [ 1282.299855][T17474] syzkaller1: entered allmulticast mode [ 1282.427079][T17499] fuse: Bad value for 'fd' [ 1283.073815][T17534] fuse: Bad value for 'fd' [ 1283.173193][T17536] netlink: zone id is out of range [ 1283.188564][T17536] netlink: zone id is out of range [ 1283.203935][T17536] netlink: zone id is out of range [ 1283.219274][T17536] netlink: zone id is out of range [ 1283.224452][T17536] netlink: zone id is out of range [ 1283.271547][T17536] netlink: zone id is out of range [ 1283.276721][T17536] netlink: zone id is out of range [ 1283.278456][ T5926] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1283.306900][T17536] netlink: zone id is out of range [ 1283.324989][T17536] netlink: zone id is out of range [ 1283.338174][T17536] netlink: zone id is out of range [ 1283.429972][ T5926] usb 3-1: device descriptor read/64, error -71 [ 1283.475162][T17546] netlink: 244 bytes leftover after parsing attributes in process `syz.9.6465'. [ 1283.503112][T17546] /dev/rnullb0: Can't open blockdev [ 1283.513343][T17550] netlink: 244 bytes leftover after parsing attributes in process `syz.9.6465'. [ 1283.668666][ T5926] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1283.687560][T17561] /dev/rnullb0: Can't lookup blockdev [ 1283.808476][ T5926] usb 3-1: device descriptor read/64, error -71 [ 1283.855408][T17568] raw_sendmsg: syz.7.6470 forgot to set AF_INET. Fix it! [ 1283.910163][T17573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1283.921357][T17573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1283.932352][ T5926] usb usb3-port1: attempt power cycle [ 1283.937921][T17573] /dev/rnullb0: Can't open blockdev [ 1284.059563][T17580] fuse: Bad value for 'fd' [ 1284.281281][ T5926] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1284.320130][ T5926] usb 3-1: device descriptor read/8, error -71 [ 1284.379393][ T43] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1284.513590][T17600] /dev/rnullb0: Can't open blockdev [ 1284.528977][ T43] usb 9-1: Using ep0 maxpacket: 32 [ 1284.555945][ T43] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1284.568503][ T5926] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1284.583863][ T43] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1284.599740][ T43] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.602660][ T5926] usb 3-1: device descriptor read/8, error -71 [ 1284.614094][ T43] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1284.637012][ T43] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1284.678522][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.708962][ T43] usb 9-1: Product: syz [ 1284.713182][ T43] usb 9-1: Manufacturer: syz [ 1284.731281][ T43] usb 9-1: SerialNumber: syz [ 1284.738988][ T5926] usb usb3-port1: unable to enumerate USB device [ 1285.145506][ T43] usb 9-1: 0:2 : does not exist [ 1285.173516][T17631] fuse: Unknown parameter '0x0000000000000003' [ 1285.195532][ T43] usb 9-1: USB disconnect, device number 50 [ 1285.265490][T16858] udevd[16858]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1285.603796][T17655] syzkaller1: entered promiscuous mode [ 1285.620842][T17655] syzkaller1: entered allmulticast mode [ 1286.038786][T19954] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1286.039860][T17690] overlay: ./file0 is not a directory [ 1286.100634][T17692] fuse: Unknown parameter '0x0000000000000003' [ 1286.272411][T17702] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1286.323770][T17713] /dev/rnullb0: Can't open blockdev [ 1286.338996][T17712] /dev/rnullb0: Can't open blockdev [ 1286.528471][ T43] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1286.602276][T17719] /dev/rnullb0: Can't open blockdev [ 1286.695751][T17727] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6502'. [ 1286.710463][ T43] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1286.719496][ T43] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.745305][ T43] usb 3-1: config 220 has no interface number 2 [ 1286.768797][ T43] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1286.805366][ T43] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1286.813536][ T43] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1286.825522][ T43] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1286.836738][ T43] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1286.855478][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.873394][ T43] usb 3-1: Product: syz [ 1286.883490][ T43] usb 3-1: Manufacturer: syz [ 1286.891641][ T43] usb 3-1: SerialNumber: syz [ 1286.897838][T17725] syzkaller1: entered promiscuous mode [ 1286.903853][T17725] syzkaller1: entered allmulticast mode [ 1287.133924][T17702] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1287.147952][T17702] /dev/rnullb0: Can't open blockdev [ 1287.192630][T17743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1287.217362][T17743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1287.301333][ T43] usb 3-1: selecting invalid altsetting 0 [ 1287.343233][ T43] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1287.369246][ T43] usb 3-1: No valid video chain found. [ 1287.399910][ T43] usb 3-1: selecting invalid altsetting 0 [ 1287.422294][ T43] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1287.435586][T17765] fuse: Unknown parameter '0x0000000000000003' [ 1287.445070][ T43] usb 3-1: USB disconnect, device number 114 [ 1287.702360][T17774] /dev/rnullb0: Can't open blockdev [ 1288.149407][T17800] binder: 17795:17800 ioctl c018620b 200000000000 returned -14 [ 1288.172377][T17787] syzkaller1: entered promiscuous mode [ 1288.183595][T17787] syzkaller1: entered allmulticast mode [ 1288.210468][T17802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1288.248929][T17802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1288.436588][T17824] fuse: Unknown parameter '0xffffffffffffffff' [ 1288.475773][T17802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1288.489652][T17802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1288.535884][T17811] syzkaller1: entered promiscuous mode [ 1288.556806][T17811] syzkaller1: entered allmulticast mode [ 1289.225691][T17861] syzkaller1: entered promiscuous mode [ 1289.236332][T17861] syzkaller1: entered allmulticast mode [ 1289.245217][T17870] fuse: Unknown parameter '0x0000000000000003' [ 1289.517154][T17891] /dev/rnullb0: Can't open blockdev [ 1289.544793][T17893] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6530'. [ 1289.565153][T17893] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6530'. [ 1289.577602][T17893] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6530'. [ 1289.693777][T17900] /dev/rnullb0: Can't open blockdev [ 1289.706714][ T51] Bluetooth: hci0: link tx timeout [ 1289.713005][ T51] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 1289.724312][T17900] netlink: 'syz.9.6533': attribute type 1 has an invalid length. [ 1289.743841][T17904] /dev/rnullb0: Can't open blockdev [ 1289.753381][T17903] /dev/rnullb0: Can't open blockdev [ 1289.757994][T17906] fuse: Unknown parameter '0x0000000000000003' [ 1289.761299][T17900] netlink: 'syz.9.6533': attribute type 2 has an invalid length. [ 1289.798603][T17900] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6533'. [ 1289.810076][T17901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.823673][T17901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.844826][T17900] netlink: 72 bytes leftover after parsing attributes in process `syz.9.6533'. [ 1290.419143][ T5969] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1290.581697][ T5969] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 1290.590302][T17942] fuse: Unknown parameter 'fd0x0000000000000003' [ 1290.599169][ T5969] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1290.618514][ T5969] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1290.638519][ T5969] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1290.648039][ T5969] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1290.657776][ T5969] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1290.670381][ T5969] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1290.698462][ T5969] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1290.723974][ T5969] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1290.735218][ T5969] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1290.743885][ T5969] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1290.755831][T17945] /dev/rnullb0: Can't open blockdev [ 1290.778850][ T5969] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1290.807628][ T5969] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1290.836578][ T5969] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1290.860491][ T5969] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1290.890196][ T5969] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1290.900100][ T5969] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1290.911034][ T5969] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1290.938971][ T5969] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1290.955425][ T5969] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1291.000166][ T5969] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1291.050164][ T5969] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1291.071837][ T5969] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1291.092938][ T5969] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1291.125387][ T5969] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1291.160452][ T5969] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1291.196562][ T5969] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1291.213626][ T5969] usb 9-1: Product: syz [ 1291.219652][ T5969] usb 9-1: Manufacturer: syz [ 1291.228941][ T5969] usb 9-1: SerialNumber: syz [ 1291.250446][ T5969] usb 9-1: config 0 descriptor?? [ 1291.276183][ T5969] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 1291.468239][T17976] netlink: 'syz.2.6552': attribute type 1 has an invalid length. [ 1291.489618][T17976] netlink: 'syz.2.6552': attribute type 11 has an invalid length. [ 1291.502890][T17976] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6552'. [ 1291.537660][T17984] /dev/rnullb0: Can't open blockdev [ 1291.621000][T17985] binder: 17979:17985 ioctl c018620b 200000000000 returned -14 [ 1291.754697][T29146] Bluetooth: hci0: command 0x0406 tx timeout [ 1291.850628][T17994] fuse: Unknown parameter 'fd0x0000000000000003' [ 1291.947524][T17996] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6556'. [ 1291.956786][ C0] usb 9-1: yurex_control_callback - control failed: -2 [ 1292.063208][T18012] /dev/rnullb0: Can't open blockdev [ 1292.190126][T18019] /dev/rnullb0: Can't open blockdev [ 1292.358072][T17930] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1292.371555][T17930] /dev/rnullb0: Can't open blockdev [ 1292.380416][ T5969] usb 9-1: USB disconnect, device number 51 [ 1292.403606][ T5969] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 1292.489806][T18035] ./file0: Can't lookup blockdev [ 1292.843949][T18041] syzkaller1: entered promiscuous mode [ 1292.851351][T18041] syzkaller1: entered allmulticast mode [ 1293.026252][T18060] fuse: Unknown parameter 'fd0x0000000000000003' [ 1293.433710][T18079] ieee802154 phy0 wpan0: encryption failed: -22 [ 1293.442354][T18079] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1293.509187][T15314] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1293.792391][T18091] 9pnet_fd: Insufficient options for proto=fd [ 1293.852991][T18109] /dev/rnullb0: Can't open blockdev [ 1294.030400][T18124] /dev/rnullb0: Can't open blockdev [ 1294.384724][T18123] syzkaller1: entered promiscuous mode [ 1294.397049][T18123] syzkaller1: entered allmulticast mode [ 1294.696830][T18157] netlink: 'syz.8.6579': attribute type 21 has an invalid length. [ 1294.721301][T18157] netlink: 'syz.8.6579': attribute type 30 has an invalid length. [ 1294.738038][T18157] /dev/rnullb0: Can't open blockdev [ 1294.747294][T18162] netlink: 'syz.8.6579': attribute type 21 has an invalid length. [ 1294.770563][T18161] /dev/rnullb0: Can't open blockdev [ 1294.778024][T18162] netlink: 'syz.8.6579': attribute type 30 has an invalid length. [ 1295.567267][T18199] /dev/rnullb0: Can't lookup blockdev [ 1295.826481][T18197] syzkaller1: entered promiscuous mode [ 1295.837620][T18197] syzkaller1: entered allmulticast mode [ 1297.269027][T18279] /dev/rnullb0: Can't lookup blockdev [ 1297.657705][T18283] syzkaller1: entered promiscuous mode [ 1297.673812][T18283] syzkaller1: entered allmulticast mode [ 1297.960368][T18306] /dev/rnullb0: Can't lookup blockdev [ 1298.381356][T18344] /dev/rnullb0: Can't open blockdev [ 1298.473427][T18353] /dev/rnullb0: Can't open blockdev [ 1298.484052][T18353] /dev/rnullb0: Can't open blockdev [ 1298.509823][T18353] /dev/rnullb0: Can't open blockdev [ 1298.536191][T18353] /dev/rnullb0: Can't open blockdev [ 1298.550586][T18353] /dev/rnullb0: Can't open blockdev [ 1298.556572][T18353] /dev/rnullb0: Can't open blockdev [ 1298.563552][T18353] /dev/rnullb0: Can't open blockdev [ 1298.570281][T18353] /dev/rnullb0: Can't open blockdev [ 1298.576474][T18353] /dev/rnullb0: Can't open blockdev [ 1298.585390][T18353] /dev/rnullb0: Can't open blockdev [ 1298.592192][T18353] /dev/rnullb0: Can't open blockdev [ 1298.598120][T18353] /dev/rnullb0: Can't open blockdev [ 1298.614915][T18353] /dev/rnullb0: Can't open blockdev [ 1298.639827][T18353] /dev/rnullb0: Can't open blockdev [ 1298.661251][T18353] /dev/rnullb0: Can't open blockdev [ 1298.667459][T18353] /dev/rnullb0: Can't open blockdev [ 1298.684929][T18353] /dev/rnullb0: Can't open blockdev [ 1298.696650][T18353] /dev/rnullb0: Can't open blockdev [ 1298.704840][T18353] /dev/rnullb0: Can't open blockdev [ 1298.714492][T18353] /dev/rnullb0: Can't open blockdev [ 1298.735559][T18353] /dev/rnullb0: Can't open blockdev [ 1298.755870][T18353] /dev/rnullb0: Can't open blockdev [ 1298.769632][T18353] /dev/rnullb0: Can't open blockdev [ 1298.786934][T18353] /dev/rnullb0: Can't open blockdev [ 1298.808144][T18353] /dev/rnullb0: Can't open blockdev [ 1298.822243][T18353] /dev/rnullb0: Can't open blockdev [ 1298.831095][T18353] /dev/rnullb0: Can't open blockdev [ 1298.837549][T18353] /dev/rnullb0: Can't open blockdev [ 1298.851454][T18353] /dev/rnullb0: Can't open blockdev [ 1298.862725][T18353] /dev/rnullb0: Can't open blockdev [ 1298.873265][T18353] /dev/rnullb0: Can't open blockdev [ 1298.883473][T18353] /dev/rnullb0: Can't open blockdev [ 1298.893913][ T5846] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1298.899964][T18353] /dev/rnullb0: Can't open blockdev [ 1299.040116][ T5846] usb 3-1: device descriptor read/64, error -71 [ 1299.097245][T18376] /dev/rnullb0: Can't open blockdev [ 1299.329105][ T5846] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1299.468812][ T5846] usb 3-1: device descriptor read/64, error -71 [ 1299.552927][T18397] fuse: Bad value for 'fd' [ 1299.581960][ T5846] usb usb3-port1: attempt power cycle [ 1299.683066][T18407] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6629'. [ 1299.698173][ T30] audit: type=1326 audit(2000002224.219:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18403 comm="syz.7.6630" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f946f38e929 code=0x0 [ 1299.948800][ T5846] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1299.993662][ T5846] usb 3-1: device descriptor read/8, error -71 [ 1300.058894][ T10] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1300.235247][ T10] usb 9-1: config 0 has an invalid interface number: 179 but max is 0 [ 1300.243834][ T10] usb 9-1: config 0 has no interface number 0 [ 1300.250991][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.257482][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.258757][ T5846] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1300.274447][ T10] usb 9-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 1300.283985][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.293245][ T10] usb 9-1: Product: syz [ 1300.297751][ T10] usb 9-1: Manufacturer: syz [ 1300.302537][ T10] usb 9-1: SerialNumber: syz [ 1300.320338][ T10] usb 9-1: config 0 descriptor?? [ 1300.329481][ T10] usb-storage 9-1:0.179: USB Mass Storage device detected [ 1300.330327][ T5846] usb 3-1: device descriptor read/8, error -71 [ 1300.351487][ T10] usb-storage 9-1:0.179: device ignored [ 1300.463329][ T5846] usb usb3-port1: unable to enumerate USB device [ 1300.527086][T18415] /dev/rnullb0: Can't open blockdev [ 1300.536200][ T5846] usb 9-1: USB disconnect, device number 52 [ 1300.606514][T18449] /dev/rnullb0: Can't lookup blockdev [ 1301.501980][T18488] netlink: 'syz.7.6640': attribute type 6 has an invalid length. [ 1301.626957][T18497] netlink: 56 bytes leftover after parsing attributes in process `syz.9.6642'. [ 1301.651489][T18497] netlink: 56 bytes leftover after parsing attributes in process `syz.9.6642'. [ 1301.683621][T18497] netlink: 56 bytes leftover after parsing attributes in process `syz.9.6642'. [ 1301.983205][T18504] syzkaller1: entered promiscuous mode [ 1301.991617][T18504] syzkaller1: entered allmulticast mode [ 1302.491290][T18530] /dev/rnullb0: Can't open blockdev [ 1302.618711][T18534] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1303.568928][ T10] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1303.731961][ T10] usb 9-1: config 0 has an invalid interface number: 28 but max is 0 [ 1303.744624][ T10] usb 9-1: config 0 has no interface number 0 [ 1303.756156][ T10] usb 9-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1303.773708][ T10] usb 9-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1303.785309][ T10] usb 9-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 1303.801277][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.822417][ T10] usb 9-1: config 0 descriptor?? [ 1304.045735][T18599] /dev/rnullb0: Can't open blockdev [ 1304.056271][T18599] /dev/rnullb0: Can't open blockdev [ 1304.075966][T18599] /dev/rnullb0: Can't open blockdev [ 1304.090903][T18599] /dev/rnullb0: Can't open blockdev [ 1304.097251][T18599] /dev/rnullb0: Can't open blockdev [ 1304.125360][T18599] /dev/rnullb0: Can't open blockdev [ 1304.165440][T18599] /dev/rnullb0: Can't open blockdev [ 1304.174222][T18599] /dev/rnullb0: Can't open blockdev [ 1304.176480][T18604] /dev/rnullb0: Can't open blockdev [ 1304.194736][T18599] /dev/rnullb0: Can't open blockdev [ 1304.203402][T18599] /dev/rnullb0: Can't open blockdev [ 1304.214009][T18599] /dev/rnullb0: Can't open blockdev [ 1304.221570][T18599] /dev/rnullb0: Can't open blockdev [ 1304.227753][T18599] /dev/rnullb0: Can't open blockdev [ 1304.258293][ T10] logitech-djreceiver 0003:046D:C534.0088: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.8-1/input28 [ 1304.273918][T18599] /dev/rnullb0: Can't open blockdev [ 1304.280567][T18599] /dev/rnullb0: Can't open blockdev [ 1304.301924][T18599] /dev/rnullb0: Can't open blockdev [ 1304.310392][T18599] /dev/rnullb0: Can't open blockdev [ 1304.316347][T18599] /dev/rnullb0: Can't open blockdev [ 1304.350160][T18599] /dev/rnullb0: Can't open blockdev [ 1304.373580][T18599] /dev/rnullb0: Can't open blockdev [ 1304.399433][T18599] /dev/rnullb0: Can't open blockdev [ 1304.415355][T18599] /dev/rnullb0: Can't open blockdev [ 1304.435688][T18599] /dev/rnullb0: Can't open blockdev [ 1304.438945][T18567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1304.452710][T18599] /dev/rnullb0: Can't open blockdev [ 1304.458831][T18567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1304.473092][ T5846] usb 9-1: USB disconnect, device number 53 [ 1304.483708][T18599] /dev/rnullb0: Can't open blockdev [ 1304.489983][T18599] /dev/rnullb0: Can't open blockdev [ 1304.501385][T18599] /dev/rnullb0: Can't open blockdev [ 1304.515220][T18599] /dev/rnullb0: Can't open blockdev [ 1304.531792][T18599] /dev/rnullb0: Can't open blockdev [ 1304.552133][T18599] /dev/rnullb0: Can't open blockdev [ 1304.569275][T18599] /dev/rnullb0: Can't open blockdev [ 1304.585423][T18599] /dev/rnullb0: Can't open blockdev [ 1304.603519][T18599] /dev/rnullb0: Can't open blockdev [ 1304.615298][T18599] /dev/rnullb0: Can't open blockdev [ 1304.642316][T18599] /dev/rnullb0: Can't open blockdev [ 1304.648214][T18599] /dev/rnullb0: Can't open blockdev [ 1304.674276][T18599] /dev/rnullb0: Can't open blockdev [ 1304.674280][T18629] syzkaller1: entered promiscuous mode [ 1304.674301][T18629] syzkaller1: entered allmulticast mode [ 1304.686423][T18599] /dev/rnullb0: Can't open blockdev [ 1304.697812][T18599] /dev/rnullb0: Can't open blockdev [ 1304.715489][T18599] /dev/rnullb0: Can't open blockdev [ 1304.729416][T18599] /dev/rnullb0: Can't open blockdev [ 1304.735732][T18599] /dev/rnullb0: Can't open blockdev [ 1304.743434][T18599] /dev/rnullb0: Can't open blockdev [ 1304.749946][T18599] /dev/rnullb0: Can't open blockdev [ 1304.755920][T18599] /dev/rnullb0: Can't open blockdev [ 1304.762293][T18599] /dev/rnullb0: Can't open blockdev [ 1304.768086][T18599] /dev/rnullb0: Can't open blockdev [ 1304.777398][T18599] /dev/rnullb0: Can't open blockdev [ 1304.784690][T18599] /dev/rnullb0: Can't open blockdev [ 1304.791453][T18599] /dev/rnullb0: Can't open blockdev [ 1304.797785][T18599] /dev/rnullb0: Can't open blockdev [ 1304.804072][T18599] /dev/rnullb0: Can't open blockdev [ 1304.810154][T18599] /dev/rnullb0: Can't open blockdev [ 1304.816752][T18599] /dev/rnullb0: Can't open blockdev [ 1304.825495][T18599] /dev/rnullb0: Can't open blockdev [ 1304.831518][T18599] /dev/rnullb0: Can't open blockdev [ 1304.837272][T18599] /dev/rnullb0: Can't open blockdev [ 1304.843771][T18599] /dev/rnullb0: Can't open blockdev [ 1304.849849][T18599] /dev/rnullb0: Can't open blockdev [ 1304.855851][T18599] /dev/rnullb0: Can't open blockdev [ 1304.861788][T18599] /dev/rnullb0: Can't open blockdev [ 1304.867578][T18599] /dev/rnullb0: Can't open blockdev [ 1305.263544][T18656] /dev/rnullb0: Can't lookup blockdev [ 1305.274169][T18657] /dev/rnullb0: Can't lookup blockdev [ 1305.289482][T18659] /dev/rnullb0: Can't open blockdev [ 1305.397936][T18647] /dev/rnullb0: Can't open blockdev [ 1305.406418][T18664] fuse: Unknown parameter 'user_iHy˺NS [ 1305.964845][T18694] dump_stack_lvl+0x189/0x250 [ 1305.964880][T18694] ? __pfx____ratelimit+0x10/0x10 [ 1305.964903][T18694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1305.964934][T18694] ? __pfx__printk+0x10/0x10 [ 1305.964969][T18694] ? __pfx___might_resched+0x10/0x10 [ 1305.964998][T18694] should_fail_ex+0x414/0x560 [ 1305.965035][T18694] ? traverse+0xd9/0x570 [ 1305.965051][T18694] should_failslab+0xa8/0x100 [ 1305.965082][T18694] __kvmalloc_node_noprof+0x161/0x5f0 [ 1305.965102][T18694] ? traverse+0xd9/0x570 [ 1305.965126][T18694] traverse+0xd9/0x570 [ 1305.965148][T18694] ? __might_fault+0xb0/0x130 [ 1305.965187][T18694] seq_read_iter+0xcfe/0xe10 [ 1305.965205][T18694] ? __pfx_aa_file_perm+0x10/0x10 [ 1305.965228][T18694] ? __lock_acquire+0xab9/0xd20 [ 1305.965255][T18694] ? kernfs_fop_read_iter+0x13f/0x640 [ 1305.965285][T18694] do_iter_readv_writev+0x56e/0x7f0 [ 1305.965312][T18694] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1305.965346][T18694] ? rw_verify_area+0x2a6/0x4d0 [ 1305.965372][T18694] vfs_readv+0x253/0x850 [ 1305.965405][T18694] ? __pfx_vfs_readv+0x10/0x10 [ 1305.965449][T18694] ? __fget_files+0x2a/0x420 [ 1305.965479][T18694] ? __fget_files+0x3a0/0x420 [ 1305.965502][T18694] ? __fget_files+0x2a/0x420 [ 1305.965537][T18694] __x64_sys_preadv+0x197/0x2a0 [ 1305.965564][T18694] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1305.965585][T18694] ? rcu_is_watching+0x15/0xb0 [ 1305.965618][T18694] ? do_syscall_64+0xbe/0x3b0 [ 1305.965645][T18694] do_syscall_64+0xfa/0x3b0 [ 1305.965667][T18694] ? lockdep_hardirqs_on+0x9c/0x150 [ 1305.965688][T18694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1305.965712][T18694] ? clear_bhb_loop+0x60/0xb0 [ 1305.965738][T18694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1305.965758][T18694] RIP: 0033:0x7f6a5db8e929 [ 1305.965776][T18694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1305.965795][T18694] RSP: 002b:00007f6a5ea4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1305.965817][T18694] RAX: ffffffffffffffda RBX: 00007f6a5ddb5fa0 RCX: 00007f6a5db8e929 [ 1305.965833][T18694] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004 [ 1305.965846][T18694] RBP: 00007f6a5ea4d090 R08: 0000000000000004 R09: 0000000000000000 [ 1305.965859][T18694] R10: 0000000000000806 R11: 0000000000000246 R12: 0000000000000001 [ 1305.965871][T18694] R13: 0000000000000000 R14: 00007f6a5ddb5fa0 R15: 00007ffe29ea1ec8 [ 1305.965904][T18694] [ 1306.018074][T18698] netlink: 140 bytes leftover after parsing attributes in process `syz.8.6682'. [ 1306.264578][T18701] net_ratelimit: 168 callbacks suppressed [ 1306.264598][T18701] veth0_to_bridge: mtu less than device minimum [ 1306.306572][T18698] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1306.587180][T18712] binder: 18707:18712 ioctl c018620b 200000000000 returned -14 [ 1306.757503][T18715] /dev/rnullb0: Can't open blockdev [ 1307.621390][T18739] FAULT_INJECTION: forcing a failure. [ 1307.621390][T18739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1307.662896][T18739] CPU: 1 UID: 0 PID: 18739 Comm: syz.2.6695 Not tainted 6.16.0-rc5-next-20250711-syzkaller #0 PREEMPT(full) [ 1307.662928][T18739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1307.662940][T18739] Call Trace: [ 1307.662950][T18739] [ 1307.662959][T18739] dump_stack_lvl+0x189/0x250 [ 1307.663006][T18739] ? __pfx____ratelimit+0x10/0x10 [ 1307.663029][T18739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1307.663059][T18739] ? __pfx__printk+0x10/0x10 [ 1307.663104][T18739] should_fail_ex+0x414/0x560 [ 1307.663143][T18739] _copy_to_user+0x31/0xb0 [ 1307.663166][T18739] simple_read_from_buffer+0xe1/0x170 [ 1307.663193][T18739] proc_fail_nth_read+0x1df/0x250 [ 1307.663225][T18739] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1307.663257][T18739] ? rw_verify_area+0x2a6/0x4d0 [ 1307.663275][T18739] ? __lock_acquire+0xab9/0xd20 [ 1307.663298][T18739] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1307.663327][T18739] vfs_read+0x1fd/0x980 [ 1307.663352][T18739] ? __pfx___mutex_lock+0x10/0x10 [ 1307.663377][T18739] ? __pfx_vfs_read+0x10/0x10 [ 1307.663400][T18739] ? __fget_files+0x2a/0x420 [ 1307.663431][T18739] ? __fget_files+0x3a0/0x420 [ 1307.663455][T18739] ? __fget_files+0x2a/0x420 [ 1307.663489][T18739] ksys_read+0x145/0x250 [ 1307.663514][T18739] ? __pfx_ksys_read+0x10/0x10 [ 1307.663532][T18739] ? rcu_is_watching+0x15/0xb0 [ 1307.663566][T18739] ? do_syscall_64+0xbe/0x3b0 [ 1307.663593][T18739] do_syscall_64+0xfa/0x3b0 [ 1307.663617][T18739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.663637][T18739] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1307.663658][T18739] ? clear_bhb_loop+0x60/0xb0 [ 1307.663683][T18739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.663704][T18739] RIP: 0033:0x7f6a5db8d33c [ 1307.663723][T18739] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1307.663741][T18739] RSP: 002b:00007f6a5ea4d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1307.663763][T18739] RAX: ffffffffffffffda RBX: 00007f6a5ddb5fa0 RCX: 00007f6a5db8d33c [ 1307.663779][T18739] RDX: 000000000000000f RSI: 00007f6a5ea4d0a0 RDI: 0000000000000005 [ 1307.663793][T18739] RBP: 00007f6a5ea4d090 R08: 0000000000000000 R09: 0000000000000000 [ 1307.663806][T18739] R10: 0000000000000806 R11: 0000000000000246 R12: 0000000000000001 [ 1307.663819][T18739] R13: 0000000000000000 R14: 00007f6a5ddb5fa0 R15: 00007ffe29ea1ec8 [ 1307.663855][T18739] [ 1308.020760][T18742] /dev/rnullb0: Can't lookup blockdev [ 1308.463503][T18758] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6700'. [ 1308.501625][T18758] /dev/rnullb0: Can't open blockdev [ 1308.643289][T18766] nfs: Unknown parameter '' [ 1308.922571][T18781] /dev/rnullb0: Can't open blockdev [ 1309.123565][T18789] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6711'. [ 1309.135762][T18789] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6711'. [ 1309.147021][T18789] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6711'. [ 1309.268639][T18788] syzkaller1: entered promiscuous mode [ 1309.274272][T18788] syzkaller1: entered allmulticast mode [ 1309.367256][T18802] /dev/rnullb0: Can't lookup blockdev [ 1309.665864][T18822] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1309.686831][T18822] overlayfs: missing 'lowerdir' [ 1309.697535][T18822] befs: (nbd9): No write support. Marking filesystem read-only [ 1309.706303][T18822] syz.9.6718: attempt to access beyond end of device [ 1309.706303][T18822] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1309.720814][T18822] befs: (nbd9): unable to read superblock [ 1309.818856][T18829] /dev/rnullb0: Can't lookup blockdev [ 1310.287448][T18845] syzkaller1: entered promiscuous mode [ 1310.294574][T18845] syzkaller1: entered allmulticast mode [ 1310.580984][T18856] /dev/rnullb0: Can't open blockdev [ 1310.636768][T18859] /dev/rnullb0: Can't lookup blockdev [ 1310.927765][T18876] /dev/rnullb0: Can't open blockdev [ 1311.114956][T18891] /dev/rnullb0: Can't lookup blockdev [ 1311.172212][T18894] /dev/rnullb0: Can't open blockdev [ 1311.180429][T18880] syzkaller1: entered promiscuous mode [ 1311.186483][T18880] syzkaller1: entered allmulticast mode [ 1311.433497][T18913] /dev/rnullb0: Can't lookup blockdev [ 1311.508432][T18916] /dev/rnullb0: Can't open blockdev [ 1311.528488][ T5943] usb 9-1: new full-speed USB device number 54 using dummy_hcd [ 1311.700549][ T5943] usb 9-1: config 0 has an invalid interface number: 120 but max is 0 [ 1311.711429][ T5943] usb 9-1: config 0 has no interface number 0 [ 1311.718104][ T5943] usb 9-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1311.729612][ T5943] usb 9-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 4095, setting to 64 [ 1311.740925][ T5943] usb 9-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1311.756115][ T5943] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.769601][ T5943] usb 9-1: config 0 descriptor?? [ 1311.775380][T18894] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1311.820052][ T5943] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.120/input/input85 [ 1311.929278][T18936] /dev/rnullb0: Can't open blockdev [ 1312.386220][T18961] syz_tun: entered allmulticast mode [ 1312.644366][T18966] syzkaller1: entered promiscuous mode [ 1312.653963][T18966] syzkaller1: entered allmulticast mode [ 1312.754240][T18980] /dev/rnullb0: Can't lookup blockdev [ 1313.040009][T18994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6763'. [ 1313.078008][T18999] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1313.154789][T19004] /dev/rnullb0: Can't lookup blockdev [ 1313.405529][T19016] /dev/rnullb0: Can't lookup blockdev [ 1313.558453][ T5943] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 1313.690884][ T5943] usb 3-1: device descriptor read/64, error -71 [ 1313.931525][ T5943] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 1314.088738][ T5943] usb 3-1: device descriptor read/64, error -71 [ 1314.128054][ T5969] usb 9-1: USB disconnect, device number 54 [ 1314.219590][ T5943] usb usb3-port1: attempt power cycle [ 1314.588842][ T5943] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 1314.608467][ T5969] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1314.629995][ T5943] usb 3-1: device descriptor read/8, error -71 [ 1314.691431][T19077] /dev/rnullb0: Can't open blockdev [ 1314.765168][ T5969] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.789725][ T5969] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1314.790747][T19082] /dev/rnullb0: Can't open blockdev [ 1314.811975][ T5969] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1314.828398][ T5969] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1314.847826][ T5969] usb 9-1: SerialNumber: syz [ 1314.872569][ T5943] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 1314.929248][ T5943] usb 3-1: device descriptor read/8, error -71 [ 1315.058814][ T5943] usb usb3-port1: unable to enumerate USB device [ 1315.066165][T19059] CIFS mount error: No usable UNC path provided in device string! [ 1315.066165][T19059] [ 1315.087926][T19059] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1315.115028][ T5969] usb 9-1: 0:2 : does not exist [ 1315.149919][ T5969] usb 9-1: USB disconnect, device number 55 [ 1315.214813][T16858] udevd[16858]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1315.644592][T19130] syzkaller1: entered promiscuous mode [ 1315.654333][T19130] syzkaller1: entered allmulticast mode [ 1316.025527][T19144] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1316.043045][T19144] overlayfs: failed to set xattr on upper [ 1316.049440][T19144] overlayfs: ...falling back to redirect_dir=nofollow. [ 1316.056409][T19144] overlayfs: ...falling back to index=off. [ 1316.071966][T19144] overlayfs: ...falling back to uuid=null. [ 1316.083123][T19144] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1316.117860][T19151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.137195][T19151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.155792][T19151] /dev/rnullb0: Can't open blockdev [ 1316.416792][T19166] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:16x16 (0x47425247, 8, 0, 0, 0) [ 1316.451154][T19166] /dev/rnullb0: Can't open blockdev [ 1316.461200][T19170] /dev/rnullb0: Can't open blockdev [ 1316.589037][T19174] /dev/rnullb0: Can't lookup blockdev [ 1316.794489][T19196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.831906][T19196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.840303][T19180] syzkaller1: entered promiscuous mode [ 1316.845807][T19180] syzkaller1: entered allmulticast mode [ 1316.883995][T19176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.908482][ T10] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1316.918656][T19176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.930952][T19178] overlayfs: failed to resolve './file0': -2 [ 1316.934126][T19196] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1316.953759][T19196] /dev/rnullb0: Can't open blockdev [ 1317.076918][T19212] tipc: Started in network mode [ 1317.086028][T19212] tipc: Node identity , cluster identity 4711 [ 1317.092872][T19212] tipc: Failed to obtain node identity [ 1317.101626][T19212] tipc: Enabling of bearer rejected, failed to enable media [ 1317.328175][T19218] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6814'. [ 1317.346801][T19218] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1317.402089][T19220] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6815'. [ 1317.559776][T19224] batadv_slave_0: entered promiscuous mode [ 1317.567303][T19224] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6817'. [ 1317.582535][T19223] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1317.590222][T19224] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6817'. [ 1317.646228][T19224] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6817'. [ 1317.668673][T19224] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1317.741379][T19222] batadv_slave_0: left promiscuous mode [ 1317.756040][T19231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1317.767706][T19231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1317.805313][T19231] /dev/rnullb0: Can't open blockdev [ 1317.843635][T19240] virtio-fs: tag not found [ 1318.098575][ T10] usb 9-1: device descriptor read/64, error -71 [ 1318.338539][ T10] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1318.485573][T19246] netlink: 'syz.9.6824': attribute type 15 has an invalid length. [ 1318.496980][T19246] /dev/rnullb0: Can't open blockdev [ 1318.499174][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 1318.514854][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1318.530645][ T10] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1318.544524][ T10] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1318.556098][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.568113][ T10] usb 9-1: Product: 嚟퓡啖㜵䄳﹡緎࠼滭ꪢஸᅘࡆ葼涨౾采땵螕ﰴ債陼楧庻픤给鮖ᜬ랢盛轝螛恎渹ﰯꒊ᪆展烸꜠蜥︙㈅읎诤蓇臥᫚ᢍᓒࠗ☼꤅鍚턊ቴ쓧␩⑱ध퓙赊寧༓屢뙠⩽㶕畫툹⯲霗⟘鹋뤼뿮雓ﲭe戮ꪡ畹 [ 1318.596669][ T10] usb 9-1: Manufacturer: ఇ [ 1318.603260][ T10] usb 9-1: SerialNumber: и [ 1318.619607][T19250] /dev/rnullb0: Can't open blockdev [ 1318.679565][T19254] /dev/rnullb0: Can't open blockdev [ 1318.755547][T19257] MTD: Couldn't look up './file0': -15 [ 1318.831123][ T10] cdc_ncm 9-1:1.0: bind() failure [ 1318.837603][T19261] /dev/rnullb0: Can't open blockdev [ 1318.848044][ T10] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 1318.855741][ T10] cdc_ncm 9-1:1.1: bind() failure [ 1318.875508][ T10] usb 9-1: USB disconnect, device number 57 [ 1318.939627][T19273] Bluetooth: MGMT ver 1.23 [ 1318.948935][T19273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1318.964288][T19273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1318.983654][T19273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1318.999258][T19273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.024944][T19279] /dev/sg0: Can't lookup blockdev [ 1319.095633][T19281] /dev/rnullb0: Can't lookup blockdev [ 1319.429296][T19300] netlink: 'syz.7.6839': attribute type 3 has an invalid length. [ 1319.437743][T19300] netlink: 'syz.7.6839': attribute type 4 has an invalid length. [ 1319.452008][T19300] netlink: 'syz.7.6839': attribute type 5 has an invalid length. [ 1319.462195][T19300] netlink: 'syz.7.6839': attribute type 6 has an invalid length. [ 1319.473593][T19300] netlink: 'syz.7.6839': attribute type 7 has an invalid length. [ 1319.519327][T19300] netlink: 'syz.7.6839': attribute type 7 has an invalid length. [ 1319.561639][T19300] netlink: 12902 bytes leftover after parsing attributes in process `syz.7.6839'. [ 1319.721123][T19314] x_tables: duplicate underflow at hook 1 [ 1319.818795][ T10] usb 9-1: new full-speed USB device number 58 using dummy_hcd [ 1319.948535][ T10] usb 9-1: device descriptor read/64, error -71 [ 1320.199193][ T10] usb 9-1: new full-speed USB device number 59 using dummy_hcd [ 1320.266911][T19343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.294262][T19343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.310615][T19343] /dev/rnullb0: Can't open blockdev [ 1320.348607][ T9] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1320.356534][ T10] usb 9-1: device descriptor read/64, error -71 [ 1320.445609][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1320.456096][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1320.466151][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1320.473902][ T10] usb usb9-port1: attempt power cycle [ 1320.480470][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1320.490939][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1320.514934][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1320.526678][ T9] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1320.537108][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.560162][ T9] usb 3-1: Product: syz [ 1320.564395][ T9] usb 3-1: Manufacturer: syz [ 1320.576460][ T9] usb 3-1: SerialNumber: syz [ 1320.590868][T14682] syz_tun (unregistering): left allmulticast mode [ 1320.606724][ T9] usb 3-1: config 0 descriptor?? [ 1320.623358][ T9] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1320.830818][ T10] usb 9-1: new full-speed USB device number 60 using dummy_hcd [ 1320.847937][ T9] gp8psk: usb in 128 operation failed. [ 1320.885827][ T9] gp8psk: usb in 137 operation failed. [ 1320.893274][T19336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.909013][ T10] usb 9-1: device descriptor read/8, error -71 [ 1320.912783][T19336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.920548][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1320.949688][ T9] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 1320.953082][T19459] netlink: 300 bytes leftover after parsing attributes in process `syz.9.6852'. [ 1320.970710][ T9] usb 3-1: media controller created [ 1320.982235][T19346] chnl_net:caif_netlink_parms(): no params data found [ 1321.024799][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1321.084463][ T9] gp8psk_fe: Frontend revision 1 attached [ 1321.106744][ T9] usb 3-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 1321.127198][ T9] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1321.159326][ T10] usb 9-1: new full-speed USB device number 61 using dummy_hcd [ 1321.214679][ T10] usb 9-1: device descriptor read/8, error -71 [ 1321.283066][T19346] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.295250][T19526] /dev/rnullb0: Can't open blockdev [ 1321.295809][T19346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.309006][T19346] bridge_slave_0: entered allmulticast mode [ 1321.325984][T19346] bridge_slave_0: entered promiscuous mode [ 1321.330189][ T10] usb usb9-port1: unable to enumerate USB device [ 1321.336823][T19346] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.351198][T19346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1321.361259][T19346] bridge_slave_1: entered allmulticast mode [ 1321.376121][T19346] bridge_slave_1: entered promiscuous mode [ 1321.459857][T19346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1321.473783][T19346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1321.509993][ T9] gp8psk: usb in 137 operation failed. [ 1321.515786][ T9] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 1321.537902][ T9] gp8psk: found Genpix USB device pID = 201 (hex) [ 1321.560014][ T9] usb 3-1: USB disconnect, device number 123 [ 1321.632751][T19346] team0: Port device team_slave_0 added [ 1321.654142][T19346] team0: Port device team_slave_1 added [ 1321.716053][T19594] CIFS mount error: No usable UNC path provided in device string! [ 1321.716053][T19594] [ 1321.735168][T19594] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1321.737841][ T9] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 1321.749104][T19594] gfs2: gfs2 mount does not exist [ 1321.821512][T19346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1321.836908][T19346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1321.864566][T19346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1321.879785][T19346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1321.886769][T19346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1321.917596][T19346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1321.964976][T19621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.987358][T19621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.034292][T19346] hsr_slave_0: entered promiscuous mode [ 1322.043404][T19346] hsr_slave_1: entered promiscuous mode [ 1322.057583][T19346] debugfs: 'hsr0' already exists in 'hsr' [ 1322.067816][T19346] Cannot create hsr debugfs directory [ 1322.417480][T19346] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.525099][T19346] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.558752][ T51] Bluetooth: hci5: command tx timeout [ 1322.559110][T22714] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1322.641321][T19731] Malformed UNC in devname [ 1322.641321][T19731] [ 1322.648087][T19731] CIFS: VFS: Malformed UNC in devname [ 1322.656277][T19346] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.720009][T22714] usb 3-1: device descriptor read/64, error -71 [ 1322.830734][T19346] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.978887][T22714] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1323.144008][T19346] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1323.157011][T22714] usb 3-1: device descriptor read/64, error -71 [ 1323.172695][T19346] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1323.209391][T19346] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1323.231280][T19346] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1323.268686][T22714] usb usb3-port1: attempt power cycle [ 1323.424936][T19346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1323.448239][T19346] 8021q: adding VLAN 0 to HW filter on device team0 [ 1323.464017][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.471270][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1323.498124][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.505423][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1323.638749][ T9] usb 9-1: new full-speed USB device number 62 using dummy_hcd [ 1323.639162][T22714] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1323.699375][T22714] usb 3-1: device descriptor read/8, error -71 [ 1323.729784][T19770] /dev/rnullb0: Can't open blockdev [ 1323.770019][ T9] usb 9-1: device descriptor read/64, error -71 [ 1323.852644][T19346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1323.961386][T22714] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1323.992264][T22714] usb 3-1: device descriptor read/8, error -71 [ 1324.035227][ T9] usb 9-1: new full-speed USB device number 63 using dummy_hcd [ 1324.109138][T22714] usb usb3-port1: unable to enumerate USB device [ 1324.193176][ T9] usb 9-1: device descriptor read/64, error -71 [ 1324.323045][ T9] usb usb9-port1: attempt power cycle [ 1324.330671][T19346] veth0_vlan: entered promiscuous mode [ 1324.367323][T19346] veth1_vlan: entered promiscuous mode [ 1324.417170][T19346] veth0_macvtap: entered promiscuous mode [ 1324.436020][T19346] veth1_macvtap: entered promiscuous mode [ 1324.467541][T19346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1324.512636][T19346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1324.527628][T23122] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.540867][T23122] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.562649][T23122] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.583267][T23122] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.628736][ T51] Bluetooth: hci5: command tx timeout [ 1324.680365][ T9] usb 9-1: new full-speed USB device number 64 using dummy_hcd [ 1324.709706][ T9] usb 9-1: device descriptor read/8, error -71 [ 1324.744154][T23122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1324.754798][T23122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1324.822025][T23122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1324.832928][T23122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1324.965262][ T9] usb 9-1: new full-speed USB device number 65 using dummy_hcd [ 1325.015246][ T9] usb 9-1: device descriptor read/8, error -71 [ 1325.037604][T19795] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1325.044808][T19795] /dev/rnullb0: Can't open blockdev [ 1325.155731][ T9] usb usb9-port1: unable to enumerate USB device [ 1325.298098][T19804] /dev/rnullb0: Can't open blockdev [ 1325.311088][T19803] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1325.324736][T19803] /dev/rnullb0: Can't open blockdev [ 1325.410928][T19810] syz.9.6869: attempt to access beyond end of device [ 1325.410928][T19810] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1325.504281][T19814] /dev/rnullb0: Can't open blockdev [ 1325.861534][T19832] /dev/rnullb0: Can't open blockdev [ 1326.114195][T19848] syzkaller1: entered promiscuous mode [ 1326.124700][T19848] syzkaller1: entered allmulticast mode [ 1326.140351][T19848] /dev/rnullb0: Can't open blockdev [ 1326.566050][T19858] syz.8.6882: attempt to access beyond end of device [ 1326.566050][T19858] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1326.673638][ T51] Bluetooth: hci5: command tx timeout [ 1326.701885][T19862] binder: 19860:19862 ioctl c018620b 200000000000 returned -14 [ 1327.007309][T19877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1327.032088][T19877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1327.044235][T19877] /dev/rnullb0: Can't open blockdev [ 1327.148280][T19883] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1327.158924][T19883] /dev/rnullb0: Can't open blockdev [ 1327.278888][T19891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6890'. [ 1327.358352][ T43] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 1327.550604][ T43] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1327.570679][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.588495][ T43] usb 9-1: Product: syz [ 1327.594878][ T43] usb 9-1: Manufacturer: syz [ 1327.599532][ T43] usb 9-1: SerialNumber: syz [ 1327.607500][ T43] usb 9-1: config 0 descriptor?? [ 1327.823715][ T43] hso 9-1:0.0: Failed to find INT IN ep [ 1327.830529][ T43] usb-storage 9-1:0.0: USB Mass Storage device detected [ 1327.849163][ T5846] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1327.927954][ T43] usb 9-1: USB disconnect, device number 66 [ 1327.984871][T19926] /dev/rnullb0: Can't open blockdev [ 1327.991640][T19920] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6895'. [ 1328.027827][ T5846] usb 3-1: Using ep0 maxpacket: 16 [ 1328.041023][ T5846] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1328.056380][ T5846] usb 3-1: config 0 has no interface number 0 [ 1328.062774][ T5846] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1328.073339][ T5846] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1328.084073][ T5846] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1328.094293][ T5846] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1328.115700][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.139605][ T5846] usb 3-1: Product: syz [ 1328.143841][ T5846] usb 3-1: Manufacturer: syz [ 1328.153156][ T5846] usb 3-1: SerialNumber: syz [ 1328.165892][ T5846] usb 3-1: config 0 descriptor?? [ 1328.175678][T19896] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 1328.184914][T19896] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 1328.393863][T19896] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 1328.405290][T19896] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 1328.729780][ T51] Bluetooth: hci5: command tx timeout [ 1328.911780][ T10] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1328.979627][T19980] /dev/nullb0: Can't open blockdev [ 1329.032215][ T5846] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1329.059380][T19976] pim6reg9: entered allmulticast mode [ 1329.076524][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 1329.082074][T19976] /dev/rnullb0: Can't open blockdev [ 1329.107150][ T10] usb 9-1: config 5 has an invalid interface number: 69 but max is 0 [ 1329.119901][ T10] usb 9-1: config 5 has no interface number 0 [ 1329.126658][ T10] usb 9-1: config 5 interface 69 altsetting 16 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1329.143425][ T10] usb 9-1: config 5 interface 69 altsetting 16 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1329.156456][ T10] usb 9-1: config 5 interface 69 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16 [ 1329.167796][ T10] usb 9-1: config 5 interface 69 altsetting 16 endpoint 0x4 has an invalid bInterval 128, changing to 11 [ 1329.179307][ T10] usb 9-1: config 5 interface 69 has no altsetting 0 [ 1329.206910][ T10] usb 9-1: New USB device found, idVendor=19d2, idProduct=0067, bcdDevice=ca.aa [ 1329.219345][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.228359][ T10] usb 9-1: Product: ᠁ [ 1329.232705][ T10] usb 9-1: Manufacturer: ы [ 1329.238214][ T10] usb 9-1: SerialNumber: 䰫薡⮨䲱⇼맜ဿ覫㓢લ홮轥㋜뱰쁮䪇ấ姎漦㍇탎Ѫ㻆ᗖ㘚ꮚ᭷訞꥗㯌ࠆ챔痵흟砋챚꟯뀈뗎优弿縔㮴♡Ϧ螺씂諤ꎴ軟퍃␉褖埿쑃쾿꟯䶤ⶽ㫆퇪ﶂ鯕”枥⣋뢪䚼㗪⎰㜕첥쭏诠奤堡㸫䕱㊊ᘆ楙況똝⹵᫋췦蜣䦃盪毐ᅓ輒돮㉂᫉畸㩏﫞鍂﹆㐅閚h듪祼뻰 [ 1329.272913][ C0] vkms_vblank_simulate: vblank timer overrun [ 1329.292725][T19963] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1329.453046][T19996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.465588][T19996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.483986][T19996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.494731][T19996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.720141][T19963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.731044][T19963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.742329][T19963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.752684][T19963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.768861][ T10] option 9-1:5.69: GSM modem (1-port) converter detected [ 1329.793444][ T10] usb 9-1: USB disconnect, device number 67 [ 1329.813576][ T10] option 9-1:5.69: device disconnected [ 1330.343440][ T5846] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1330.360705][ T5846] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1330.386697][ T5846] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 1330.407995][ T5846] usb 3-1: USB disconnect, device number 2 [ 1331.070587][T20079] 9pnet_fd: Insufficient options for proto=fd [ 1331.157484][T20083] ./cgroup: Can't lookup blockdev [ 1331.248110][T20088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.258897][T20088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.326433][T20096] netlink: 'syz.9.6917': attribute type 1 has an invalid length. [ 1331.334311][T20096] netlink: 232 bytes leftover after parsing attributes in process `syz.9.6917'. [ 1331.345667][T20096] /dev/rnullb0: Can't open blockdev [ 1331.418630][ T5846] usb 9-1: new full-speed USB device number 68 using dummy_hcd [ 1331.480411][T22714] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1331.557413][ T5846] usb 9-1: device descriptor read/64, error -71 [ 1331.657126][T22714] usb 3-1: Using ep0 maxpacket: 16 [ 1331.668253][T22714] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1331.677433][T22714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.685749][T22714] usb 3-1: Product: syz [ 1331.690525][T22714] usb 3-1: Manufacturer: syz [ 1331.696476][T22714] usb 3-1: SerialNumber: syz [ 1331.704203][T22714] usb 3-1: config 0 descriptor?? [ 1331.712239][T22714] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1331.834439][ T5846] usb 9-1: new full-speed USB device number 69 using dummy_hcd [ 1331.929615][T20090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.956729][T20090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.970723][ T5846] usb 9-1: device descriptor read/64, error -71 [ 1332.085277][ T5846] usb usb9-port1: attempt power cycle [ 1332.113729][T20106] /dev/rnullb0: Can't open blockdev [ 1332.122566][T20107] /dev/rnullb0: Can't open blockdev [ 1332.322116][T20114] /dev/rnullb0: Can't open blockdev [ 1332.440378][ T5846] usb 9-1: new full-speed USB device number 70 using dummy_hcd [ 1332.462358][ T5846] usb 9-1: device descriptor read/8, error -71 [ 1332.604832][T20127] /dev/rnullb0: Can't open blockdev [ 1332.632818][T20090] /dev/rnullb0: Can't open blockdev [ 1332.653460][T22714] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 1332.691110][T22714] usb 3-1: USB disconnect, device number 3 [ 1332.721059][ T5846] usb 9-1: new full-speed USB device number 71 using dummy_hcd [ 1332.777146][ T5846] usb 9-1: device descriptor read/8, error -71 [ 1332.891768][ T5846] usb usb9-port1: unable to enumerate USB device [ 1333.069074][T20152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.091158][T20152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.291001][T20166] /dev/sg0: Can't lookup blockdev [ 1333.573896][ T5846] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1333.746170][ T5846] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1333.760756][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.779715][ T5846] usb 3-1: config 0 descriptor?? [ 1333.795838][ T5846] cp210x 3-1:0.0: cp210x converter detected [ 1333.913174][T20183] /dev/rnullb0: Can't open blockdev [ 1334.052829][T20190] /dev/rnullb0: Can't open blockdev [ 1334.215536][T20195] /dev/rnullb0: Can't open blockdev [ 1334.223469][ T5846] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 1334.332074][T20201] /dev/rnullb0: Can't open blockdev [ 1334.435183][T20203] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1334.449557][ T10] IPVS: starting estimator thread 0... [ 1334.517262][T20210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.539592][T20210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.558111][T20210] /dev/rnullb0: Can't open blockdev [ 1334.576125][T20204] IPVS: using max 29 ests per chain, 69600 per kthread [ 1334.598753][T20208] syzkaller1: entered promiscuous mode [ 1334.604311][T20208] syzkaller1: entered allmulticast mode [ 1334.652633][ T5846] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 1334.670266][ T5846] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1334.700936][T20223] /dev/rnullb0: Can't open blockdev [ 1334.703569][ T5846] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1334.730345][ T5846] usb 3-1: USB disconnect, device number 4 [ 1334.756763][ T5846] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1334.773355][ T5846] cp210x 3-1:0.0: device disconnected [ 1334.925515][ T5943] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 1334.965231][T20238] /dev/rnullb0: Can't open blockdev [ 1335.116109][ T5943] usb 9-1: Using ep0 maxpacket: 16 [ 1335.123369][ T5943] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 183, changing to 11 [ 1335.135005][ T5943] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 49769, setting to 1024 [ 1335.156265][T20251] /dev/rnullb0: Can't open blockdev [ 1335.164144][ T5943] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1335.167706][T20252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.171203][ T5943] usb 9-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1335.191374][T20252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.202749][T20251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.211345][ T5943] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.225805][T20251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.235701][ T5943] usb 9-1: config 0 descriptor?? [ 1335.675828][ T5943] hid (null): invalid report_size 58537 [ 1335.687313][ T5943] hid (null): unknown global tag 0xd [ 1335.694758][ T5943] hid (null): unknown global tag 0xc [ 1335.708184][ T5943] hid (null): invalid report_size 44048 [ 1335.716263][ T5943] hid (null): unknown global tag 0xd [ 1335.728629][ T5943] hid (null): unknown global tag 0x52 [ 1335.734937][ T5943] hid (null): unknown global tag 0xe [ 1335.744347][ T5943] hid (null): invalid report_size 222345300 [ 1335.753372][ T5943] hid (null): unknown global tag 0xf4 [ 1335.760431][ T5943] hid (null): unknown global tag 0xc [ 1335.776558][ T5943] cougar 0003:060B:500A.0089: usage count exceeds max: fixing up report descriptor [ 1335.799674][ T5943] cougar 0003:060B:500A.0089: unexpected long global item [ 1335.808333][ T5943] cougar 0003:060B:500A.0089: parse failed [ 1335.815419][ T5943] cougar 0003:060B:500A.0089: probe with driver cougar failed with error -22 [ 1335.901235][T20208] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1335.927507][T20208] /dev/rnullb0: Can't open blockdev [ 1335.930507][T20277] /dev/rnullb0: Can't open blockdev [ 1335.946338][ T5943] usb 9-1: USB disconnect, device number 72 [ 1336.111041][T20294] /dev/rnullb0: Can't open blockdev [ 1336.342977][T20305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1336.374527][T20305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1336.513220][T20305] /dev/rnullb0: Can't open blockdev [ 1336.882531][T20331] could not allocate digest TFM handle hmac(sha1-avx2) [ 1336.973686][T20338] snd_dummy snd_dummy.0: control 1:9:195:du:5 is already present [ 1337.036553][T20340] /dev/rnullb0: Can't open blockdev [ 1337.044423][T20341] /dev/rnullb0: Can't open blockdev [ 1337.343977][ T5926] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 1337.509075][ T5926] usb 9-1: config index 0 descriptor too short (expected 65069, got 45) [ 1337.530997][ T5926] usb 9-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1337.556263][ T5926] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.556290][ T5926] usb 9-1: config 0 has no interfaces? [ 1337.556324][ T5926] usb 9-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1337.556347][ T5926] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.561331][ T5926] usb 9-1: config 0 descriptor?? [ 1337.637306][T20360] /dev/rnullb0: Can't open blockdev [ 1339.390655][T20380] /dev/rnullb0: Can't open blockdev [ 1340.319249][T20383] /dev/rnullb0: Can't open blockdev [ 1340.349670][ T5926] usb 9-1: USB disconnect, device number 73 [ 1340.419621][T20390] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1340.428350][T20390] /dev/rnullb0: Can't open blockdev [ 1340.460060][T20392] /dev/rnullb0: Can't open blockdev [ 1340.784095][ T5926] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 1340.956692][ T5926] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.986934][ T5926] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1340.999265][ T5926] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1341.030241][ T5926] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.041437][ T5926] usb 9-1: config 0 descriptor?? [ 1341.352887][ T5926] usb 9-1: USB disconnect, device number 74 [ 1341.469795][T20417] /dev/rnullb0: Can't open blockdev [ 1341.995616][T20427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1342.016283][T20427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1342.017491][T20429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1342.052346][T20427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1342.078462][T20429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1342.101743][T20427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1342.235507][ T5943] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 1342.295905][T20416] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 1342.387795][ T5943] usb 9-1: device descriptor read/64, error -71 [ 1342.639027][T20441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1342.652932][T20441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1342.663789][ T5943] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1342.823236][ T5943] usb 9-1: device descriptor read/64, error -71 [ 1342.886959][T22714] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1342.951066][ T5943] usb usb9-port1: attempt power cycle [ 1343.036517][T22714] usb 3-1: device descriptor read/64, error -71 [ 1343.313743][T22714] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1343.324444][ T5943] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 1343.357240][ T5943] usb 9-1: device descriptor read/8, error -71 [ 1343.452773][T22714] usb 3-1: device descriptor read/64, error -71 [ 1343.570541][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 1343.570880][T22714] usb usb3-port1: attempt power cycle [ 1343.623474][ T5943] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 1343.664993][ T5943] usb 9-1: device descriptor read/8, error -71 [ 1343.795498][ T5943] usb usb9-port1: unable to enumerate USB device [ 1343.943788][T22714] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1343.965922][T22714] usb 3-1: device descriptor read/8, error -71 [ 1344.221779][T22714] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1344.255641][T22714] usb 3-1: device descriptor read/8, error -71 [ 1344.382019][T22714] usb usb3-port1: unable to enumerate USB device [ 1345.663941][ T9] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 1345.835001][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 1345.857947][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.878809][ T9] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1345.910841][ T9] usb 9-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1345.954594][ T9] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1345.971066][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.994942][ T9] usb 9-1: Product: syz [ 1346.000199][ T9] usb 9-1: Manufacturer: syz [ 1346.004843][ T9] usb 9-1: SerialNumber: syz [ 1346.346155][T20467] /dev/rnullb0: Can't open blockdev [ 1346.355720][T20504] /dev/rnullb0: Can't open blockdev [ 1346.379579][T22714] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1346.586881][T22714] usb 3-1: Using ep0 maxpacket: 8 [ 1346.594073][ T9] usb 9-1: USB disconnect, device number 79 [ 1346.601785][T22714] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1346.622979][T22714] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1346.641673][T22714] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1346.668562][T22714] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1346.699258][T22714] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1346.741624][T22714] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1346.765223][T19617] udevd[19617]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1346.790343][T22714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.060315][T20494] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1347.070190][T20494] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1347.149057][T22714] usb 3-1: usb_control_msg returned -71 [ 1347.154803][T22714] usbtmc 3-1:16.0: can't read capabilities [ 1347.204252][T22714] usb 3-1: USB disconnect, device number 9 [ 1347.383001][T20570] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6992'. [ 1347.393301][T20569] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6992'. [ 1347.410627][T20570] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6992'. [ 1347.429051][T20569] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1347.436103][T20569] /dev/rnullb0: Can't open blockdev [ 1347.525565][T20572] /dev/rnullb0: Can't open blockdev [ 1347.544322][ T9] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 1347.634258][T20576] /dev/rnullb0: Can't open blockdev [ 1347.644824][T20576] TCP: TCP_TX_DELAY enabled [ 1347.706729][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1347.713429][ T9] usb 9-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1347.737681][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.764707][ T9] usb 9-1: config 0 descriptor?? [ 1348.164524][ T5943] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 1348.304001][ T5943] usb 3-1: device descriptor read/64, error -71 [ 1348.570284][ T5943] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 1348.721046][ T5943] usb 3-1: device descriptor read/64, error -71 [ 1348.837843][ T5943] usb usb3-port1: attempt power cycle [ 1348.914693][ T9] video4linux radio48: keene_cmd_set failed (-71) [ 1348.946727][ T9] radio-keene 9-1:0.0: V4L2 device registered as radio48 [ 1348.979685][ T9] usb 9-1: USB disconnect, device number 80 [ 1349.233052][ T5943] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 1349.271063][ T5943] usb 3-1: device descriptor read/8, error -71 [ 1349.553989][ T5943] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 1349.610275][ T5943] usb 3-1: device descriptor read/8, error -71 [ 1349.725014][ T5943] usb usb3-port1: unable to enumerate USB device [ 1350.980005][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804d83e800: rx timeout, send abort [ 1350.996006][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804d83e800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1351.279598][T20633] /dev/rnullb0: Can't open blockdev [ 1351.412513][T20640] ./cgroup: Can't lookup blockdev [ 1351.424984][T20642] block nbd2: NBD_DISCONNECT [ 1351.437072][T20642] /dev/rnullb0: Can't open blockdev [ 1351.455891][T20643] block nbd2: NBD_DISCONNECT [ 1351.543462][T20641] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7002'. [ 1351.884356][ T43] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 1352.046764][ T43] usb 9-1: device descriptor read/64, error -71 [ 1352.167749][T20670] /dev/rnullb0: Can't open blockdev [ 1352.250094][T20672] nbd: must specify an index to disconnect [ 1352.332874][ T43] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 1352.495286][ T43] usb 9-1: device descriptor read/64, error -71 [ 1352.514671][ T10] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 1352.623934][ T43] usb usb9-port1: attempt power cycle [ 1352.681861][ T10] usb 3-1: config 1 has an invalid interface number: 5 but max is 2 [ 1352.692036][ T10] usb 3-1: config 1 has an invalid descriptor of length 122, skipping remainder of the config [ 1352.715080][ T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1352.737540][ T10] usb 3-1: config 1 has no interface number 1 [ 1352.746287][ T10] usb 3-1: config 1 interface 5 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1352.766873][ T10] usb 3-1: config 1 interface 5 has no altsetting 0 [ 1353.016890][ T43] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 1353.049601][ T43] usb 9-1: device descriptor read/8, error -71 [ 1353.282359][T20677] syzkaller1: entered promiscuous mode [ 1353.292149][T20677] syzkaller1: entered allmulticast mode [ 1353.316573][ T43] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 1353.359787][ T43] usb 9-1: device descriptor read/8, error -71 [ 1353.496109][ T43] usb usb9-port1: unable to enumerate USB device [ 1353.666921][ T43] usb 10-1: USB disconnect, device number 2 [ 1354.039407][T15314] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1354.050735][T15314] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1354.059370][T15314] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1354.069266][T15314] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1354.081642][T15314] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1354.428249][ T43] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 1354.559438][T20752] syzkaller1: entered promiscuous mode [ 1354.565154][T20752] syzkaller1: entered allmulticast mode [ 1354.609947][ T43] usb 9-1: device descriptor read/64, error -71 [ 1354.866270][ T43] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 1354.890180][ T36] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.914971][T20700] chnl_net:caif_netlink_parms(): no params data found [ 1355.051176][ T36] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.214040][ T36] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.344089][T20700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.363258][T20700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.377806][T20700] bridge_slave_0: entered allmulticast mode [ 1355.386854][T20700] bridge_slave_0: entered promiscuous mode [ 1355.441024][T20889] /dev/rnullb0: Can't open blockdev [ 1355.470640][ T36] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.492930][T20700] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.501254][T20700] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.507276][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1355.510760][T20700] bridge_slave_1: entered allmulticast mode [ 1355.526682][T20700] bridge_slave_1: entered promiscuous mode [ 1355.562429][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.570503][ T10] usb 3-1: Product: ࠄ [ 1355.612370][ T10] usb 3-1: can't set config #1, error -71 [ 1355.659750][ T10] usb 3-1: USB disconnect, device number 14 [ 1355.699442][T20700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1355.734361][T20700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1355.835029][T20700] team0: Port device team_slave_0 added [ 1355.847979][T20700] team0: Port device team_slave_1 added [ 1355.997511][T20700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1356.016461][T20700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1356.053687][T20700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1356.067320][T20700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1356.074887][T20700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1356.105732][T20700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1356.137403][T20991] 9pnet_fd: p9_fd_create_unix (20991): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1356.166546][ C0] vkms_vblank_simulate: vblank timer overrun [ 1356.191269][T20991] overlayfs: failed to resolve './file0': -2 [ 1356.310848][T15314] Bluetooth: hci4: command tx timeout [ 1356.352014][ T36] bridge_slave_1: left allmulticast mode [ 1356.359700][ T36] bridge_slave_1: left promiscuous mode [ 1356.367266][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.397497][ T36] bridge_slave_0: left allmulticast mode [ 1356.403286][ T36] bridge_slave_0: left promiscuous mode [ 1356.414021][T21018] Invalid ELF header len 16 [ 1356.427320][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.487436][T21021] binder: 21020:21021 ioctl c018620b 200000000000 returned -14 [ 1356.639745][T21024] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 1356.673834][T21024] UDF-fs: Scanning with blocksize 4096 failed [ 1356.873326][T21036] binder: 21035:21036 ioctl c018620b 200000000000 returned -14 [ 1357.058138][T21050] binder: 21048:21050 ioctl 4018620d 0 returned -22 [ 1357.218290][T21052] ================================================================== [ 1357.218327][T21055] Oops: general protection fault, probably for non-canonical address 0xe0c0fc3d800002f2: 0000 [#1] SMP KASAN PTI [ 1357.226395][T21052] BUG: KASAN: slab-out-of-bounds in mas_next_slot+0x8d7/0xcf0 [ 1357.238282][T21055] KASAN: maybe wild-memory-access in range [0x060801ec00001790-0x060801ec00001797] [ 1357.245722][T21052] Read of size 8 at addr ffff888079679300 by task syz.2.7038/21052 [ 1357.255079][T21055] CPU: 0 UID: 0 PID: 21055 Comm: syz.2.7038 Not tainted 6.16.0-rc5-next-20250711-syzkaller #0 PREEMPT(full) [ 1357.262990][T21052] [ 1357.263002][T21052] CPU: 1 UID: 0 PID: 21052 Comm: syz.2.7038 Not tainted 6.16.0-rc5-next-20250711-syzkaller #0 PREEMPT(full) [ 1357.263029][T21052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1357.263045][T21052] Call Trace: [ 1357.263056][T21052] [ 1357.263067][T21052] dump_stack_lvl+0x189/0x250 [ 1357.263106][T21052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1357.263137][T21052] ? lock_release+0x4b/0x3e0 [ 1357.263168][T21052] ? __virt_addr_valid+0x4a5/0x5c0 [ 1357.263203][T21052] print_report+0xca/0x230 [ 1357.263226][T21052] ? mas_next_slot+0x8d7/0xcf0 [ 1357.263244][T21052] kasan_report+0x118/0x150 [ 1357.263268][T21052] ? mas_next_slot+0x8d7/0xcf0 [ 1357.263290][T21052] mas_next_slot+0x8d7/0xcf0 [ 1357.263321][T21052] mas_find+0xb0e/0xd30 [ 1357.263344][T21052] lock_next_vma+0x101/0xdc0 [ 1357.263369][T21052] ? query_matching_vma+0x141/0x5c0 [ 1357.263402][T21052] ? __pfx_lock_next_vma+0x10/0x10 [ 1357.263422][T21052] ? query_matching_vma+0x2f7/0x5c0 [ 1357.263458][T21052] ? unlock_vma+0x134/0x180 [ 1357.263485][T21052] ? query_matching_vma+0x141/0x5c0 [ 1357.263512][T21052] query_matching_vma+0x319/0x5c0 [ 1357.263549][T21052] procfs_procmap_ioctl+0x3f9/0xd50 [ 1357.263579][T21052] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 1357.263613][T21052] ? __fget_files+0x2a/0x420 [ 1357.263641][T21052] ? __fget_files+0x2a/0x420 [ 1357.263666][T21052] ? __fget_files+0x3a0/0x420 [ 1357.263691][T21052] ? __fget_files+0x2a/0x420 [ 1357.263719][T21052] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1357.263749][T21052] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 1357.263778][T21052] __se_sys_ioctl+0xf9/0x170 [ 1357.263813][T21052] do_syscall_64+0xfa/0x3b0 [ 1357.263835][T21052] ? lockdep_hardirqs_on+0x9c/0x150 [ 1357.263859][T21052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.263880][T21052] ? clear_bhb_loop+0x60/0xb0 [ 1357.263905][T21052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.263927][T21052] RIP: 0033:0x7f6a5db8e929 [ 1357.263949][T21052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1357.263969][T21052] RSP: 002b:00007f6a5ea2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1357.263994][T21052] RAX: ffffffffffffffda RBX: 00007f6a5ddb6080 RCX: 00007f6a5db8e929 [ 1357.264012][T21052] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 000000000000000d [ 1357.264027][T21052] RBP: 00007f6a5dc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1357.264041][T21052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1357.264055][T21052] R13: 0000000000000000 R14: 00007f6a5ddb6080 R15: 00007ffe29ea1ec8 [ 1357.264079][T21052] [ 1357.264088][T21052] [ 1357.274515][T21055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1357.276838][T21052] Allocated by task 5997: [ 1357.288363][T21055] RIP: 0010:vma_start_read+0x84/0x3b0 [ 1357.298409][T21052] kasan_save_track+0x3e/0x80 [ 1357.301686][T21055] Code: c1 e9 03 48 b8 f1 f1 f1 f1 04 f3 f3 f3 48 89 0c 24 4a 89 04 29 e8 dc a9 b5 ff 4c 8d 73 28 4c 89 f0 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 4d 02 00 00 48 89 5c 24 10 4c 89 74 24 [ 1357.304615][T21052] __kasan_slab_alloc+0x6c/0x80 [ 1357.309280][T21055] RSP: 0018:ffffc9000477fa20 EFLAGS: 00010203 [ 1357.314484][T21052] kmem_cache_alloc_bulk_noprof+0x4e0/0x790 [ 1357.319062][T21055] [ 1357.324155][T21052] mas_dup_build+0x830/0xfe0 [ 1357.328565][T21055] RAX: 00c1003d800002f2 RBX: 060801ec0000176d RCX: ffff888050580000 [ 1357.333333][T21052] __mt_dup+0x137/0x220 [ 1357.337824][T21055] RDX: 0000000000000000 RSI: 060801ec0000176d RDI: ffff88806e70a800 [ 1357.342583][T21052] dup_mmap+0x3c5/0x1ac0 [ 1357.347161][T21055] RBP: ffffc9000477fad0 R08: ffff888050580000 R09: 0000000000000004 [ 1357.351314][T21052] copy_mm+0x13c/0x4b0 [ 1357.355893][T21055] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88805aee1340 [ 1357.361078][T21052] copy_process+0x16d3/0x3b80 [ 1357.366185][T21055] R13: dffffc0000000000 R14: 060801ec00001795 R15: ffff88806e70a800 [ 1357.371403][T21052] kernel_clone+0x21e/0x870 [ 1357.375899][T21055] FS: 00007f6a5ea0b6c0(0000) GS:ffff88812578f000(0000) knlGS:0000000000000000 [ 1357.381078][T21052] __x64_sys_clone+0x18b/0x1e0 [ 1357.386097][T21055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1357.391281][T21052] do_syscall_64+0xfa/0x3b0 [ 1357.396986][T21055] CR2: 00007f2680beee9c CR3: 0000000031712000 CR4: 00000000003526f0 [ 1357.401588][T21052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.406258][T21055] Call Trace: [ 1357.410919][T21052] [ 1357.410927][T21052] The buggy address belongs to the object at ffff888079679200 [ 1357.410927][T21052] which belongs to the cache maple_node of size 256 [ 1357.415495][T21055] [ 1357.420410][T21052] The buggy address is located 0 bytes to the right of [ 1357.420410][T21052] allocated 256-byte region [ffff888079679200, ffff888079679300) [ 1357.426133][T21055] ? __pfx_vma_start_read+0x10/0x10 [ 1357.430723][T21052] [ 1357.430731][T21052] The buggy address belongs to the physical page: [ 1357.435226][T21055] ? mas_find+0xb0e/0xd30 [ 1357.440407][T21052] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79678 [ 1357.446464][T21055] lock_next_vma+0x146/0xdc0 [ 1357.451129][T21052] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1357.457019][T21055] ? __pfx_lock_next_vma+0x10/0x10 [ 1357.461433][T21052] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1357.481028][T21055] ? query_matching_vma+0x2f7/0x5c0 [ 1357.489430][T21052] page_type: f5(slab) [ 1357.497406][T21055] ? unlock_vma+0x134/0x180 [ 1357.505370][T21052] raw: 00fff00000000040 ffff88801a891000 ffffea00014d3900 dead000000000004 [ 1357.513335][T21055] ? query_matching_vma+0x141/0x5c0 [ 1357.521304][T21052] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1357.529257][T21055] query_matching_vma+0x319/0x5c0 [ 1357.532276][T21052] head: 00fff00000000040 ffff88801a891000 ffffea00014d3900 dead000000000004 [ 1357.534598][T21055] procfs_procmap_ioctl+0x3f9/0xd50 [ 1357.544727][T21052] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1357.549043][T21055] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 1357.554406][T21052] head: 00fff00000000001 ffffea0001e59e01 00000000ffffffff 00000000ffffffff [ 1357.559069][T21055] ? __fget_files+0x2a/0x420 [ 1357.578659][T21052] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1357.583502][T21055] ? __fget_files+0x2a/0x420 [ 1357.589551][T21052] page dumped because: kasan: bad access detected [ 1357.595434][T21055] ? __fget_files+0x3a0/0x420 [ 1357.597761][T21052] page_owner tracks the page as allocated [ 1357.602334][T21055] ? __fget_files+0x2a/0x420 [ 1357.610319][T21052] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5300, tgid 5300 (v4l_id), ts 42578370535, free_ts 30431425020 [ 1357.614473][T21055] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1357.622444][T21052] post_alloc_hook+0x240/0x2a0 [ 1357.626677][T21055] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 1357.634642][T21052] get_page_from_freelist+0x21e4/0x22c0 [ 1357.638704][T21055] __se_sys_ioctl+0xf9/0x170 [ 1357.646668][T21052] __alloc_frozen_pages_noprof+0x181/0x370 [ 1357.651345][T21055] do_syscall_64+0xfa/0x3b0 [ 1357.659324][T21052] alloc_pages_mpol+0x232/0x4a0 [ 1357.663814][T21055] ? lockdep_hardirqs_on+0x9c/0x150 [ 1357.672729][T21052] allocate_slab+0x8a/0x370 [ 1357.677478][T21055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.684049][T21052] ___slab_alloc+0xbeb/0x1410 [ 1357.688539][T21055] ? clear_bhb_loop+0x60/0xb0 [ 1357.696500][T21052] kmem_cache_alloc_noprof+0x283/0x3c0 [ 1357.702388][T21055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.705660][T21052] mas_alloc_nodes+0x2e9/0x8e0 [ 1357.707978][T21055] RIP: 0033:0x7f6a5db8e929 [ 1357.721927][T21052] mas_preallocate+0x3ad/0x6f0 [ 1357.724864][T21055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1357.739329][T21052] commit_merge+0x1fd/0x700 [ 1357.744510][T21055] RSP: 002b:00007f6a5ea0b038 EFLAGS: 00000246 [ 1357.746827][T21052] vma_expand+0x40c/0x7e0 [ 1357.753222][T21055] ORIG_RAX: 0000000000000010 [ 1357.757535][T21052] vma_merge_new_range+0x6a3/0x860 [ 1357.766293][T21055] RAX: ffffffffffffffda RBX: 00007f6a5ddb6160 RCX: 00007f6a5db8e929 [ 1357.770868][T21052] mmap_region+0xd46/0x20c0 [ 1357.779367][T21055] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 000000000000000d [ 1357.784464][T21052] do_mmap+0xc45/0x10d0 [ 1357.791992][T21055] RBP: 00007f6a5dc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1357.797177][T21052] vm_mmap_pgoff+0x2a6/0x4d0 [ 1357.801147][T21055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1357.805638][T21052] ksys_mmap_pgoff+0x51f/0x760 [ 1357.814214][T21055] R13: 0000000000000000 R14: 00007f6a5ddb6160 R15: 00007ffe29ea1ec8 [ 1357.819398][T21052] page last free pid 1 tgid 1 stack trace: [ 1357.827977][T21055] [ 1357.832983][T21052] __free_frozen_pages+0xbc4/0xd30 [ 1357.841653][T21055] Modules linked in: [ 1357.846830][T21052] free_contig_range+0x1bd/0x4a0 [ 1357.855488][T21055] [ 1357.861193][T21052] destroy_args+0x7e/0x5d0 [ 1357.869942][ C0] vkms_vblank_simulate: vblank timer overrun [ 1357.874450][T21052] debug_vm_pgtable+0x404/0x420 [ 1357.885692][T21055] ---[ end trace 0000000000000000 ]--- [ 1357.887700][T21052] do_one_initcall+0x233/0x820 [ 1358.173047][T21052] do_initcall_level+0x137/0x1f0 [ 1358.178005][T21052] do_initcalls+0x69/0xd0 [ 1358.182338][T21052] kernel_init_freeable+0x3d9/0x590 [ 1358.187547][T21052] kernel_init+0x1d/0x1d0 [ 1358.191890][T21052] ret_from_fork+0x3f9/0x770 [ 1358.196505][T21052] ret_from_fork_asm+0x1a/0x30 [ 1358.201277][T21052] [ 1358.203606][T21052] Memory state around the buggy address: [ 1358.209236][T21052] ffff888079679200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1358.217295][T21052] ffff888079679280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1358.225369][T21052] >ffff888079679300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1358.233421][T21052] ^ [ 1358.237496][T21052] ffff888079679380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1358.245557][T21052] ffff888079679400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1358.253614][T21052] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1358.288215][T21055] RIP: 0010:vma_start_read+0x84/0x3b0 [ 1358.293656][T21055] Code: c1 e9 03 48 b8 f1 f1 f1 f1 04 f3 f3 f3 48 89 0c 24 4a 89 04 29 e8 dc a9 b5 ff 4c 8d 73 28 4c 89 f0 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 4d 02 00 00 48 89 5c 24 10 4c 89 74 24 [ 1358.319136][T21055] RSP: 0018:ffffc9000477fa20 EFLAGS: 00010203 [ 1358.329852][T21052] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1358.337444][T21052] Kernel Offset: disabled [ 1358.341772][T21052] Rebooting in 86400 seconds..