last executing test programs: 9m0.573542304s ago: executing program 1 (id=2): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x58, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1000}, 0x0) 8m59.974144279s ago: executing program 1 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000b80)='./file0/file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) 8m59.623458054s ago: executing program 1 (id=8): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 8m58.647881517s ago: executing program 1 (id=12): r0 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x2f, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x100000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0xfffffffffffffffe, {0x400000000000005, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffffffffffc, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0x2000000, 0x200000, 0x0, 0x2000, 0x0, r2, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000002c0)='./file0/file0\x00', 0x2040, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) 2m28.975348216s ago: executing program 0 (id=2166): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r2, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev, 0x80000000, 0x1}, 0x80, 0x0}, 0x5b4}], 0x4e, 0x850) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x4) creat(&(0x7f0000001380)='./file0\x00', 0x4) socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x21, &(0x7f0000000000)=0xffffffff, 0x4) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x4003) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000001, 0x50, r0, 0x2000) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r8, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 2m28.603165663s ago: executing program 0 (id=2168): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x3, 0x2) sendfile(r1, r0, 0x0, 0x7ffff002) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) sendfile(r1, r0, &(0x7f0000000040)=0x3, 0x2) (async) sendfile(r1, r0, 0x0, 0x7ffff002) (async) 2m28.448826271s ago: executing program 0 (id=2169): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf6489000) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mount$9p_fd(0x0, 0x0, 0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="41c5f998115122"]) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x29}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000564000/0x4000)=nil, 0x4000}) connect$bt_rfcomm(r1, &(0x7f0000000180)={0x1f, @none, 0x15}, 0xa) 2m28.427707278s ago: executing program 0 (id=2170): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="3663ff3ac7333d1d", 0x8}, {&(0x7f0000000280)="e02584eeb69ae6b342b68d8be5414b8bad9da292edc320246d439cbe99d5435fcc9f629a115737e05b", 0x29}], 0x2, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x2004001) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r3, 0xc0105702, &(0x7f00000000c0)) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000300", @ANYRES32, @ANYBLOB="08000f"], 0x2c}}, 0x60800) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000300", @ANYRES32, @ANYBLOB="08000f"], 0x2c}}, 0x60800) io_setup(0xff, &(0x7f0000000380)) (async) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r4, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) socket$alg(0x26, 0x5, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000004e80)=[{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000340)="9c308a6f6832dfcd1a598313d27872beee6c196c2e01177da31f87cfef9f62fa2c192c38cdfae6378b391fa778ce36eb1c47baea93ff8f153eaa8a922a0d9e38045744c7364a1e04be50a635a700ed35bc0b479194b9cff93fb7fb783c13b49083bddb6cfc0c73dd1b89c406faee95e10836d475275cce3cc1fa1d2615551aab20a6df30632f3b08d86a", 0x8a}], 0x1, 0x0, 0x0, 0x40090}], 0x1, 0x4004041) (async) sendmmsg$alg(r6, &(0x7f0000004e80)=[{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000340)="9c308a6f6832dfcd1a598313d27872beee6c196c2e01177da31f87cfef9f62fa2c192c38cdfae6378b391fa778ce36eb1c47baea93ff8f153eaa8a922a0d9e38045744c7364a1e04be50a635a700ed35bc0b479194b9cff93fb7fb783c13b49083bddb6cfc0c73dd1b89c406faee95e10836d475275cce3cc1fa1d2615551aab20a6df30632f3b08d86a", 0x8a}], 0x1, 0x0, 0x0, 0x40090}], 0x1, 0x4004041) recvmmsg(r6, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/138, 0x8a}], 0x1}, 0x5f}], 0x1, 0x10100, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x88502, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x88502, 0x0) r7 = creat(&(0x7f0000001380)='./file0\x00', 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x44, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xba}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x20040041) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) 2m28.254984197s ago: executing program 0 (id=2171): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async, rerun: 32) mremap(&(0x7f0000d59000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000a91000/0x1000)=nil) (rerun: 32) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x7f) (async) writev(r1, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x138e065, 0x0) 2m13.078851455s ago: executing program 33 (id=2171): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async, rerun: 32) mremap(&(0x7f0000d59000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000a91000/0x1000)=nil) (rerun: 32) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x7f) (async) writev(r1, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x138e065, 0x0) 1m44.103279992s ago: executing program 4 (id=2359): syz_init_net_socket$ax25(0x3, 0x2, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ufs\x00', 0x200000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x7, 0x7fffffff, 0x7}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x4000172, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000001fc0)=ANY=[@ANYBLOB="42000000030000000000000000000000000000000000000021"], 0x42) lsm_set_self_attr(0x67, 0x0, 0x20, 0x20) recvfrom(r0, &(0x7f0000000280)=""/225, 0xe1, 0x1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x80) 1m43.948152579s ago: executing program 4 (id=2360): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000000c0)={0x3}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r4, 0x0, 0x10001, 0x0, 0x6, 0xa9613, 0x2de872}) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0) 1m40.995473424s ago: executing program 4 (id=2380): r0 = syz_open_dev$video(&(0x7f0000000100), 0x9, 0x1e3a00) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000000)={0x3, "c5c2a91e002b1b80000000003d5eff001000", 0x1, 0x7, 0x2, 0x200, 0x100, 0x2}) creat(&(0x7f0000001380)='./file0\x00', 0x12c) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) 1m40.768315965s ago: executing program 4 (id=2382): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000200)='./file0/file0\x00') pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x646c, 0x143002) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000000c0)={0x60, 0x0, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x6, 0x0, 0x12, 0x0, 0x2}) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000100)="30829ed86d", 0x5, 0xfffffffffffffffc) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) 1m40.583195023s ago: executing program 4 (id=2383): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x3, 0x8, 0xa3, 0x7, 0x2, 0x29, 0x5, 0x6b, 0x2, 0x0, 0x4, 0x9, 0x6, 0x8, 0x4a, 0x40}}) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000d40)={0x2020, 0x0, 0x0}, 0x2020) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000bc0)={'NETMAP\x00'}, &(0x7f0000000c00)=0x1e) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000b80)=""/32) (async) write$FUSE_STATX(r3, &(0x7f0000002f00)={0x130, 0x0, r4, {0x4, 0x1, 0x0, '\x00', {0x10000, 0x0, 0x7, 0x3d0, 0x0, 0x0, 0x6000, '\x00', 0x9, 0x4, 0x7, 0x9, {0x200, 0x78}, {0x6, 0x1}, {0x0, 0x3}, {0xb, 0x4}, 0xc221, 0x0, 0xe, 0x200}}}, 0x130) (async) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x1, 0x61, "aab628e613af4d0caae3e94f403b4389bf6f3e6ee07360cfebb77ebac50a12e3bb79aed6b2354a1d7de64046ff846c38453d80598ed10c21af1d48a9961036864fa9002d0e7788e92943208347446a99ebf87040ca5a267bc9c4d4aebc1ab5521d"}, 0x0}) syz_usb_control_io(r2, &(0x7f0000000600)={0x2c, &(0x7f0000000380)={0x0, 0x4, 0xee, {0xee, 0x4, "a77a382c36c77021ede2e05e5c724d027218b81dbc6abddac751ce38df923147571faa1825e003df2c4e6e9c5861b35475b24e3f576ced0084f437135fedaf23825e2cb40a196adbd42ce97029e1050c5b2c76dca7cdf97f6ffc79e78c46a1a0a84cf448ffdef0664790ef8b979519acc9504423d5df6662d9e9cd0d9745ac2b3a0728bc11bff88b412602a143fcbaa0d4cd46b4aaafb59eb99585ed940b6b4c848a463ee05f31176f92f2763b035699195fffef49909e8c1f1eaf7664b8896c8f6ed536130e5883cc6c17e1986f343df6c41f73f2c8019b9471ed3d17c3b9e590fdb457c373a3d5237a1784"}}, &(0x7f0000000480)={0x0, 0x3, 0x3b, @string={0x3b, 0x3, "a0b6e2d96457373267929768c1028457ca1422ebd0d3ecff260097b57d04c3c42afdfe745c653928f430c6b0e01d6e919061b04ac28feb8293"}}, &(0x7f0000000500)=ANY=[@ANYBLOB="000f50000000050f5000014b10036d8d13fa750854dc7198b4fe2254540fba335d38909e74365c46ff285cab101cbf35f849bf6f80b5f00eeb65e64e585ff7b1a1c6df0c260b2b398dafb800839e9868228d07732642"], &(0x7f0000000580)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x60, 0x1, 0x6, "bbc57da5", "08464cf4"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0x7, 0xff, 0xdd, 0x7, 0x8}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000640)={0x20, 0x32, 0x7c, "2e2206e5a1b3ac7fbaf78a47b28d6437dc90023b429f0fc6699225163d0d337712bbe1252cb0bdb94664a4f3331b40ecfbd21ef6fcd5f55bf35c7d0aa85d5f5a221ac26f0f85f0866cf01106397c851c373c8e81fdc5125df88fe1bdee44472247971daf9dfd8df8628e16366ab6b65208d61c008399b18421c3042e"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x20, 0x2}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000840)={0x40, 0x9, 0x1}, &(0x7f0000000880)={0x40, 0xb, 0x2, "034a"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000900)={0x40, 0x13, 0x6, @local}, &(0x7f0000000940)={0x40, 0x17, 0x6, @local}, &(0x7f0000000980)={0x40, 0x19, 0x2, "38f6"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0xdf}}) (async) syz_usb_control_io$hid(r1, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0022050000000b7407bd59c5635eb82e251081343b2474efc5a3de6619175a51be31a5126c874ea98c2fca368cdd5e1301ce013ff9da351293e89fbd2246fb674c9b66812b93ec5133728f06a347c2b28f688d6c5c4922e4f7ef835cf296bcf9"], 0x0}, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) (async, rerun: 32) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r8, 0xdf61fab1f3777c57, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x4008800) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r6) 1m40.191150737s ago: executing program 4 (id=2387): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x40, r1, 0x0, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4004014) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$key(0xf, 0x3, 0x2) recvmmsg(r4, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x285c, 0x4) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000240)={r5, 0xb}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x6, 0x1}, 0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in=@rand_addr=0x64010102, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r8, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x5, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc010}, 0x4004000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r2, 0x7dfff000) 1m39.699696406s ago: executing program 34 (id=2387): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x40, r1, 0x0, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4004014) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$key(0xf, 0x3, 0x2) recvmmsg(r4, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x285c, 0x4) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000240)={r5, 0xb}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x6, 0x1}, 0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in=@rand_addr=0x64010102, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r8, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x5, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc010}, 0x4004000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r2, 0x7dfff000) 4.222643928s ago: executing program 5 (id=2837): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[], 0x58}}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) close(r1) (async) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x80, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100"/52], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00"/27], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg(r2, &(0x7f0000000880)={0x0, 0x3200, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xffd1}], 0x11}, 0x800) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) (async) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 3.759331292s ago: executing program 2 (id=2839): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)="0e", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x4048884) recvmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000240)=@ax25={{}, [@remote, @default, @null, @netrom, @remote, @netrom, @rose, @null]}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/127, 0x7f}, {&(0x7f0000000100)=""/40, 0x28}], 0x2}, 0x5}, {{&(0x7f0000000380)=@nfc_llcp, 0x80, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/229, 0xe5}], 0x1}, 0x3e}, {{&(0x7f00000005c0)=@generic, 0x80, &(0x7f0000000440)=[{&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000740)=""/197, 0xc5}], 0x2, &(0x7f0000000840)}, 0x5}], 0x3, 0x10020, &(0x7f0000000940)) 3.752725597s ago: executing program 5 (id=2840): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x10002, 0x0) 3.50502065s ago: executing program 2 (id=2841): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f0000000b00)=[{&(0x7f0000000d00)=""/197, 0xc5}, {&(0x7f0000000500)=""/113, 0x71}], 0x2, 0x33, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') (async) preadv(r0, &(0x7f0000000b00)=[{&(0x7f0000000d00)=""/197, 0xc5}, {&(0x7f0000000500)=""/113, 0x71}], 0x2, 0x33, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) fstat(r2, &(0x7f0000000440)) (async) setreuid(0x0, r3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) (async) 3.131510545s ago: executing program 2 (id=2843): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x3, &(0x7f0000000200)=0x6, 0x5) (async) set_mempolicy(0x3, &(0x7f0000000200)=0x6, 0x5) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, 0xffffffffffffffff, 0x4000) pwritev(r0, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000001080)="2b97", 0x2}], 0x3, 0x0, 0xfffffffe) (async) pwritev(r0, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000001080)="2b97", 0x2}], 0x3, 0x0, 0xfffffffe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) 3.089146769s ago: executing program 5 (id=2844): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b4b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000018c0)={0x14, 0x0, &(0x7f00000017c0)={0x0, 0x3, 0x9, @string={0x9, 0x3, "1a359975b2b8c3"}}}, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x94, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffd, 0x2, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000200)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00100a"], 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648d000) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x11) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec80000ec00120c00014006040401060404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x1, 0x4, 0x2c, @private1, @loopback, 0x80, 0x10, 0x3f38, 0xf8d2}}) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x32, &(0x7f0000000c00)={0x0, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}}, {{0xa, 0x0, 0x20000002, @rand_addr=' \x01\x00'}}}, 0x108) bind$xdp(r5, &(0x7f0000000180)={0x2c, 0x6, r6, 0x7, r7}, 0x10) 2.920279894s ago: executing program 2 (id=2845): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) write$usbip_server(r0, &(0x7f0000000100)=@ret_submit={{0x3, 0x0, 0x0, 0x0, 0x4}, 0x1, 0x94, 0x5, 0x63, 0x0, 0x0, "a114ceda385a9551539a8f8ecacd5a83b439c16e3de325ccd8138d7a31de1e29629b92342d07df63731a55ce9bba7f20c74e1b016e2f5ee48daa1a1bd5b55912aa8298609ba25818c9eb8c3f112b22cf5464c230dafc9643a025b76c3dc31671e61abd930e2628a464b4941fdd1f5f559cbeaa26f31df33a94a42b72f5230a68666677268c1c5de5b37396bb61589ec451b22bbe", [{0x3a, 0xfffffff8, 0x4, 0xfdf}, {0x0, 0x5, 0x1, 0x7}, {0xb, 0xffffff62, 0x6, 0x4}, {0x0, 0x4, 0x400, 0x80000001}, {0x8001, 0x3, 0x5cd214c1, 0x504}, {0x4, 0x20000000, 0x6, 0x659}, {0x400, 0x0, 0x72f}, {0xf, 0x8, 0x7, 0x1}, {0x7, 0xfff, 0x1, 0x8001}, {0x8, 0x10000, 0x3, 0x7}, {0x9, 0x2, 0x6, 0x9e66}, {0x5, 0x8, 0x7, 0x8}, {0x9, 0x5, 0x28f5, 0x1}, {0x2, 0x1, 0x9f1, 0xfffffffb}, {0x6, 0xc2f, 0x6, 0x1432}, {0x0, 0x1000000, 0xcf}, {0x7, 0x800, 0xc, 0x3}, {0x2, 0xfffffff9, 0x3, 0x80000001}, {0x81, 0x9, 0x4, 0x8}, {0x9, 0x3, 0x6, 0xf3f}, {0xe3e, 0x2, 0xfffffffd, 0x8}, {0x5, 0x8, 0x7, 0x88d}, {0x3, 0x4800000, 0x80000000, 0x4}, {0x6, 0xfffffff4, 0x1, 0x7}, {0x3ff, 0xffffffe6, 0x8, 0xc6}, {0x10, 0xbe3e, 0xb, 0x3}, {0x80000000, 0x7, 0x8, 0x200}, {0x100, 0x72, 0x4, 0x7fffffff}, {0x4, 0xffff, 0x1, 0x1}, {0x5, 0x74a6, 0x8, 0x5}, {0x1, 0x9, 0x61ea, 0x7ff}, {0x4, 0xa94, 0x5, 0x4}, {0x700cc5e2, 0x7, 0x4, 0x5}, {0x0, 0x7ff, 0xb, 0x10000}, {0xffffffff, 0x9, 0x7fff, 0x6}, {0x9, 0x8, 0xb733, 0x3}, {0x5, 0x7, 0x4, 0x9}, {0x6, 0x9, 0xffff0000}, {0xfffffffc, 0x5, 0x9b0, 0x7}, {0x66ca, 0x7ff, 0x2, 0x1b}, {0x800, 0x7, 0x10, 0x8}, {0x7, 0xc3e, 0x1ff, 0x9}, {0x1, 0x100, 0x0, 0xffff8001}, {0x7, 0x3, 0x8, 0xffff}, {0x9, 0x5, 0xffff5153, 0xfffff686}, {0x2, 0x1, 0xf, 0x8}, {0x6, 0xa66, 0x7, 0x1000}, {0x4, 0x2, 0x2, 0xfff}, {0x1, 0x4, 0x0, 0x2}, {0x8, 0x8, 0x4, 0x101}, {0xf36, 0x2, 0xb, 0x81}, {0x8001, 0x3, 0x2, 0x5}, {0x10000, 0xc000, 0x7fff, 0x9}, {0x6, 0xca, 0x3, 0x100}, {0x0, 0x10000, 0xfffffffd}, {0x7, 0x29e, 0x5, 0xffffff05}, {0xe, 0x8, 0x80000000}, {0x401, 0x2, 0x9}, {0x40, 0x9, 0x1, 0x1}, {0xff, 0xe59, 0x78, 0x10}, {0x10, 0x7, 0xeb0a}, {0x200, 0x7ff, 0xda, 0xfffffff9}, {0x1, 0x2}, {0x200, 0x7, 0x8, 0x2}, {0x4, 0x400, 0x7fffffff, 0x8}, {0x7fffffff, 0x3, 0xc, 0xb}, {0x5, 0x1, 0x7, 0x1}, {0xffff, 0x0, 0x44, 0x60}, {0x0, 0x6, 0xe, 0xfffffffe}, {0xef, 0xfffffff0, 0x7bb9, 0x6}, {0x6, 0x10000, 0xb5a, 0xfffffff7}, {0x0, 0x6, 0x9, 0x7}, {0x48, 0xfffffffd, 0x1}, {0x5, 0x5, 0x0, 0x4cb}, {0x525, 0x8, 0x8000, 0x44d6}, {0x5, 0x9, 0xffffffff, 0x3}, {0x2, 0x0, 0x4, 0x37}, {0x8, 0xa, 0x4, 0x4}, {0x666, 0x5, 0x7, 0x5}, {0x0, 0x9, 0x101, 0x8}, {0x8, 0x7fff, 0x3, 0x8}, {0x7, 0x8, 0x20c2, 0xfffffffb}, {0x6, 0x10000, 0xffff, 0x5}, {0x6e, 0x6, 0x2, 0xa84}, {0xb, 0x8000, 0x7, 0x8000}, {0x1ff, 0x2, 0x5, 0x3}, {0x2, 0x1, 0xe8, 0x1ff}, {0xffffff80, 0x8, 0xe, 0x7}, {0x1, 0x9, 0x0, 0x8}, {0x80000000, 0x1000, 0xd, 0xcba}, {0x9, 0xc, 0x1, 0x4}, {0x243a0373, 0x7, 0xffff, 0xdb}, {0x1, 0xfffff9d4, 0x7, 0x883}, {0x5, 0xfffffff8, 0x7e24, 0x2}, {0xf7, 0x6, 0x66727750}, {0x1, 0x101, 0x1, 0x83}, {0x80000001, 0x10e, 0x7}, {0x4, 0x3, 0x3, 0x3}, {0x1, 0x9, 0x4}]}, 0x6f4) r1 = syz_open_dev$admmidi(&(0x7f0000000080), 0x2, 0x40002) ioctl$BLKCRYPTOPREPAREKEY(r0, 0xc040128b, &(0x7f0000000880)={&(0x7f0000000800)="4707c0ef8c6cceca5fe210d40f22bb84f21a250daf6de095fcb87b43", 0x1c, &(0x7f0000000840)=""/8, 0x8}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x40045730, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$khugepaged_scan(r3, &(0x7f0000000140), 0x8) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r2, 0x4}}, 0x10) 2.706615233s ago: executing program 2 (id=2846): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)={0xf0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6b05}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x49}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000000000)={0x77359400}) syz_usb_connect(0x2, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x38, 0xe2, 0xaa, 0x8, 0x2b73, 0x17, 0xa20e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0xdb, 0x4, 0x80, 0xe6, [{{0x9, 0x4, 0x0, 0x4, 0x0, 0xff, 0x9e, 0x4d, 0x5}}, {{0x9, 0x4, 0x0, 0x2, 0x2, 0xe2, 0xa5, 0xc6, 0xa, [], [{{0x9, 0x5, 0x4, 0x4, 0x8, 0x9, 0x2, 0x9}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x10, 0xf8, 0x7}}]}}]}}]}}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r1, 0xc3a51000) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0xfe33) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.126696652s ago: executing program 3 (id=2848): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80401, 0x0) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) 1.822457078s ago: executing program 3 (id=2849): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)="0e", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x4048884) recvmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000240)=@ax25={{}, [@remote, @default, @null, @netrom, @remote, @netrom, @rose, @null]}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/127, 0x7f}, {&(0x7f0000000100)=""/40, 0x28}], 0x2}, 0x5}, {{&(0x7f0000000380)=@nfc_llcp, 0x80, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/229, 0xe5}], 0x1}, 0x3e}, {{&(0x7f00000005c0)=@generic, 0x80, &(0x7f0000000440)=[{&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000740)=""/197, 0xc5}], 0x2, &(0x7f0000000840)}, 0x5}], 0x3, 0x10020, &(0x7f0000000940)) 1.632135921s ago: executing program 3 (id=2850): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f000001f9c0)={0xa, {0x8000, 0x200, 0x0, 0x7}}) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x9, 0x0, 0xffffffff, 0x7fffffff}}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) 1.475023131s ago: executing program 3 (id=2851): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000040)) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000040)) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000000c0)=0x10, 0x800) connect$llc(r1, &(0x7f0000000100)={0x1a, 0x100, 0x2, 0x2, 0x10, 0xd, @broadcast}, 0x10) mkdir(&(0x7f0000000140)='./file0\x00', 0x192) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='squashfs\x00', 0x2100001, &(0x7f0000000240)='./binderfs/binder1\x00') (async) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='squashfs\x00', 0x2100001, &(0x7f0000000240)='./binderfs/binder1\x00') accept4$llc(r1, &(0x7f0000000280), &(0x7f00000002c0)=0x10, 0x80800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/binder1\x00', 0x800, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/binder1\x00', 0x800, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x6e, 0x800) (async) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x6e, 0x800) sendmsg$unix(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000400)="ae6835984b8f60b271257a1eaa21e48ac795b05fb17742404631863fee5d7ed48170384e8bfd90823351aa2e932f4d79f54a8e42582f49d5a264e2191cf24f07f320b68c6443b5bfb249c98dd211b5bf72322bc826618e8dd52b21ba1872a0dacf0f865853a731735d730b44d35204bdb1d35394b92033791ae087d5267f054cd8bc356ea99172aadb84eda3b98efe196c104bde473794450937c8468910f36bf84b3d90a755a40215a89b021c9166ce21c65f3cd47bf23c4ed78bbbc6482f21f731b79d07ce9e8c9ba5c9f718", 0xcd}, {&(0x7f0000000500)="5bd8ad8f1238df95fbbc4c7b9f467cb55370bd8ca6e52f433b8ff351f47f87ede04d848de5169573a4f237d82ac06c2eb8fd44fb2f21ba4baaa4a1fbec6ca5acb8a97eba9c396e4c8f594dff24f8a22f4fa359bc6608e83ade0ee1099b100d0e3988680f798d041b0ee335c87b5b7613a9c8282e8462c3e3bdff3c8eb33c27d7f6a39e2aa68c49a1e0df65d89183855d3e38ffb967aeaa0b602bb0caa557f80046125349ba23661dfee420e98c9737301bfcb1547116c90f3e695132849d51", 0xbf}, {&(0x7f00000005c0)="20839592e44de3ef81b7205046b7a4a5cdee8afc42d964c7a1819010bc3e46c5cb149a075989d30913b3ca73fc845e33ba68c7b096d7729e704ae2945899df1b5233d6e76ee10e38f7a7804839dbc9159ee803834e9690dcdd0da571d23737b71da46f", 0x63}, {&(0x7f0000000640)="2ea146cab4fa9a5198", 0x9}, {&(0x7f0000000680)="b9cc135158025be06a46bf4a946b96c5f34bfa173f60a352d0472c6f24d6fd3740654cc1310e65c0e17b8c28dc541e78f0fcbd737f508c2f6d0a5d0ff7aab3eaf4d3d13a10b0510e7c29ab7534185f3c60422640f936c99ce50f0ad5402c3beab9063fbac75afe10f9750e4cf3ee98b131a9eff03de76a9f28242b79717f", 0x7e}, {&(0x7f0000000700)="4aa6996ea812b418da112d7aa93e0984baec6b7321836e25d4a5442bb4ef85c64b519796ad7c53c9d60fb8ead06ef450198918058682baf331eb8b4ecd1e1fbccb7ab6fcde4d", 0x46}, {&(0x7f0000000780)="30ad58b1c87488fa29b0b8f97497c9e8e030551489fbc549924a66fbdbb0357f61a5ec14f3e52097c957cd5823671e99dccb827448c5f913fcaab1c9a4635c1ac8bc17f87930faab086228e3bd21289968b77c4c089d9492d795bc0858bb1618078848d26610701ffb477d7e8905065e31e09999e0c45e203ff80272a180aef4f73d5c7c3798018946762d48897bcee957637379148e5d1b8ed0e59a31b6098abcc37fbee6d8242853ce14145a22089ca45df04cabfeb919e4ceff1ef106af35336502d98eda6c4b66b57ca4708d0f", 0xcf}, {&(0x7f0000000880)="f6a3d7c26b479ea96aafaf36ab4cab9ce7cade961110ec3276fc850ed64f344df1ea8ad5a2fa24ea44b6502711eb31319da116d84322e9799b1dc7da7e3d004ba90906398a5109681a0a2bf9341af3de9476971f8eaa967639e7b3fc007b37064bb9037ee263712e1f6fdab477dad822904d89e2cc539cd0b4c57d6fd7589f27efd26040e090837a00992ea0b6813248d2cf80df850274e5ceb3afd80450f4d09de6ba6994beb58b245b8b2e77d9956898b73e50bff32a6e9949", 0xba}], 0x8, 0x0, 0x0, 0x24040011}, 0x0) write$cgroup_devices(r0, &(0x7f0000000a00)={'c', ' *:* ', 'w\x00'}, 0x8) pselect6(0x40, &(0x7f0000000a40)={0x1, 0xfffffffffffffe00, 0x21, 0x9472, 0x3, 0x7, 0x1000}, &(0x7f0000000a80)={0x42a9, 0x6, 0x7, 0x3, 0x7fff, 0x7, 0x2, 0x7fffffffffffffff}, &(0x7f0000000ac0)={0x3, 0xeee, 0x3, 0x3e, 0x2800000000000000, 0x2, 0x2, 0x401}, &(0x7f0000000b00)={0x77359400}, &(0x7f0000000b80)={&(0x7f0000000b40)={[0x7]}, 0x8}) (async) pselect6(0x40, &(0x7f0000000a40)={0x1, 0xfffffffffffffe00, 0x21, 0x9472, 0x3, 0x7, 0x1000}, &(0x7f0000000a80)={0x42a9, 0x6, 0x7, 0x3, 0x7fff, 0x7, 0x2, 0x7fffffffffffffff}, &(0x7f0000000ac0)={0x3, 0xeee, 0x3, 0x3e, 0x2800000000000000, 0x2, 0x2, 0x401}, &(0x7f0000000b00)={0x77359400}, &(0x7f0000000b80)={&(0x7f0000000b40)={[0x7]}, 0x8}) r3 = syz_open_dev$evdev(&(0x7f0000000bc0), 0xc, 0x4400) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000c00)=""/171) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000cc0)=0x40) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000d00), 0x559100, 0x0) (async) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000d00), 0x559100, 0x0) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000d40)=0x7ff) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000d80)=0xfffffffffffffffe, 0x4) geteuid() (async) r5 = geteuid() sendmsg$nl_generic(r4, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x7c, 0x15, 0x8, 0x70bd28, 0x25dfdbfc, {0x11}, [@typed={0x8, 0x2b, 0x0, 0x0, @uid=r5}, @generic="eb80c3b505ae80a2687d3fd9eea78a9f38fd913be26ea24a601eccab7ed29220282d38d4249d797647e9711a0d6f5712b829a9c411cc075d260b618f514ebb56c02e05c93bb9179402c80688b06897c0a5b776dc2ac03e54af00e0f0d13a4472"]}, 0x7c}}, 0x40010) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000fc0)={0x1, 0x0, 0x98, &(0x7f0000000f00)={0x7, 0x5, 0x4}}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000001000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$EVIOCGMTSLOTS(r6, 0x8040450a, &(0x7f0000001040)=""/97) (async) ioctl$EVIOCGMTSLOTS(r6, 0x8040450a, &(0x7f0000001040)=""/97) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000010c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000001100)={0x48, 0x2, r7}) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000001000/0x9000)=nil, 0x9000, 0xc, 0x1010, r6, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000003, 0x8010, r4, 0x10000000) (async) r9 = mmap$IORING_OFF_SQES(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000003, 0x8010, r4, 0x10000000) syz_io_uring_submit(r8, r9, &(0x7f0000001200)=@IORING_OP_CONNECT={0x10, 0x42, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000001180)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e22, 0x9, @local, 0x4}}}, 0x0, 0x0, 0x1}) (async) syz_io_uring_submit(r8, r9, &(0x7f0000001200)=@IORING_OP_CONNECT={0x10, 0x42, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000001180)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e22, 0x9, @local, 0x4}}}, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r6, 0xc01064c2, &(0x7f0000001240)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r6, 0xc01864cb, &(0x7f0000001300)={&(0x7f0000001280)=[r10], &(0x7f00000012c0)=[0x6, 0x9], 0x1}) 1.34273491s ago: executing program 3 (id=2852): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/sockstat6\x00') read$FUSE(r0, &(0x7f0000002280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capget(&(0x7f0000000100)={0x19980330, r4}, &(0x7f0000004340)={0x8d, 0xfffffffa, 0x2, 0x9, 0x42010001, 0x81}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[@ANYBLOB="700000000009010400000000000000000a00000008000540000000160900010073797a30000000003c0002000c00028005000100000000002c000180140003000000000000000000000000000000000014000400200100000000000000000000000000020c00048008000140000000009eb8cef9170fbc3b9d7c95f15ae6f95329fba0e6491f5a78d0", @ANYRESDEC=r1, @ANYRES32=r5], 0x70}, 0x1, 0x0, 0x0, 0x44}, 0x4008000) r6 = userfaultfd(0x801) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="fd8d00000000000000000300000008000300", @ANYRES32=r9], 0x30}}, 0x0) r10 = socket$inet(0xa, 0x801, 0x84) listen(r10, 0x8009) sendto$inet(r10, 0x0, 0x0, 0x2000c091, 0x0, 0x0) r11 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r11, &(0x7f0000000840)=ANY=[@ANYBLOB="320200007d01000005f100000000040005"], 0x232) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r12, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r13, r14, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000f40)={&(0x7f00000007c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x80000001, 0x1200000, 0x100, 0x5, 0x1000, 0x81, 0x0, 0x0, 0x100, 0x8}}, &(0x7f0000000380)={0x18, 0xfffffffffffffffe, 0x10000, {0x3}}, &(0x7f00000003c0)={0x18, 0xffffffffffffffda, 0x3, {0x5}}, &(0x7f0000000440)={0x18, 0x0, 0x8, {0x7f}}, &(0x7f00000004c0)={0x18, 0x0, 0x9, {0x10000}}, &(0x7f0000000500)={0x28, 0x0, 0x101, {{0x2, 0x9, 0x2, r4}}}, &(0x7f0000000540)={0x60, 0xffffffffffffffda, 0xff, {{0x5, 0x6, 0x10000, 0xbc2, 0x6, 0x3, 0x6a, 0x1e9}}}, &(0x7f00000005c0)={0x18, 0xffffffffffffffd1, 0xff800000000000, {0x6}}, &(0x7f0000000600)=ANY=[@ANYBLOB="11000000f5ffffff00000000"], &(0x7f0000000640)={0x20, 0x0, 0xfffffffffffffffd}, &(0x7f0000000700)={0x78, 0xfffffffffffffffe, 0xa00000000000000, {0x48, 0x19, 0x0, {0x1, 0x400, 0x8001, 0x6, 0x7fff, 0x0, 0x80000001, 0xff, 0x3, 0xa000, 0x3, r2, r3, 0x1ff, 0x8}}}, &(0x7f0000001000)={0x90, 0xfffffffffffffff5, 0x2, {0x4, 0x3, 0x1, 0x3, 0xffffff01, 0xd36, {0x3, 0x4bb, 0xcf, 0x7fff, 0x3, 0x5, 0x0, 0x5, 0xb, 0x8000, 0x10000, r2, r3, 0x4, 0x6}}}, &(0x7f0000000880)=ANY=[@ANYBLOB="1000000000000000000000000000000078a30170734f"], &(0x7f0000001a00)=ANY=[@ANYBLOB="e0030000000000000100000000000000000000000000000001000000000000000500000000000000050000000000000008000000040000000200000000000000060000000000000081000000000000000101000000000000070000000000000004000000000000000700000006000000a100000042b1a62e03000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0600000007000000000000000300000000000000000000000000000002000000000400002f2600000000000005000000000000000000000000000000f1efffffffffffff0600000000000000000800000900000001000000000000000300000000000000070000000000000001000000000000009e0000000000000009000000000000000000000004000000000200000080000005000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="720000000100008000000000040000000000000059e40000000000000c000000050000002f6465762f766964656f230000000000020000000000000001000000000000000ad8000000000000ffffffff0000000006000000060000000600000000000000ffffffffffffff7f0300000000000000001000000000000009000000000000000600000000000000a8080000df000000050000000020000004000000", @ANYRES32=r2, @ANYRES64=r2, @ANYBLOB="0101000000340000000000000000000000000000030000000000000007000000070000006261746164760000060000000000000002000000000000000000008000000000400000000000000003000000010100000300000000000000020000000000000005000000000000000e0000000000000001000000000000000500000000000000feffffff03000000050000000080000000000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200000000000000000000000400000000000000010000000000000004000000070000007d5e2f2d000000000600000000000000010000000000000098fea50f00000000090000000000000006000000020000000300000000000000e303000000000000590f000000000000060000000000000000000000000000006f0a0000000000000200000002000000090000000020000000000000", @ANYRESOCT=r2, @ANYRES32=r3, @ANYBLOB="000000fe2800000000000000000000000000000000000000000000000d000000000001002f6465762f726e756c6c6230000000000600000000000000030000000000000009000000000000000e0000000000000001000000070000000100000000000000010000000000000003000000000000000700000000000000ff07000000000000790000000000000006000000840000000101000000a0000004000000", @ANYRES32=0x0, @ANYBLOB="6431187aa08dac4cedb0b621750fd8ebd5ce18c3091d102b77407e5b4b2eecd90b619b346decb48659996426a975719bbfcfb052d4626699f3cbeafb603b07aa9d48cf974245ed0992659a3c7879b06e4d2eddfcc836f9c1955d6f4343f82cdc4921d047a2515e7b78d803d8dbd928b5298be08c76f0818be896942be113bf73bcda249682d0b84164b6d26a34b0dbd02ad90578e35465497af10a70", @ANYBLOB="0d00000003000000000000000400000000000000000000000000000005000000000400006766733200000000"], &(0x7f0000000d00)={0xa0, 0x0, 0xe96, {{0x6, 0x0, 0xb, 0x2, 0x5, 0x9, {0x4, 0x7, 0x1, 0x3, 0x6, 0x4, 0xedcd, 0x8, 0x8b, 0x4002, 0xb6b4, r2, r14, 0x3, 0x8}}, {0x0, 0x12}}}, &(0x7f0000000780)={0x20, 0xfffffffffffffff5, 0x2, {0x401, 0x0, 0x7f, 0x6}}, &(0x7f0000000e00)={0x130, 0xfffffffffffffff5, 0x8001, {0x8, 0x7fffffff, 0x0, '\x00', {0x52, 0xc, 0x5, 0xe, r13, r3, 0x6000, '\x00', 0xc, 0x5, 0xffffffff, 0x1, {0x0, 0x2e8}, {0xd, 0x1}, {0x20000004, 0xfffffc01}, {0x5, 0xdfbd}, 0x10000, 0x0, 0x0, 0x8}}}}) r15 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10001, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r15, 0xc0d05604, &(0x7f0000000100)={0x2, @raw_data="5100cd098943f5120c9ed91d2e04492394af238ec102cbeac258b1638b43facfdf488d11f5cabab696baa9fcf6102adf737891dad4cf2f87328d19651532f73bbeecf4fdcb2ae71bf36ed90845058acf12b50e7bffb31f5d0953ff4628d50a483a575b9ee08dfb95901607a162198779c28030f37c4f635a8d6a2c34871d298856b7e5dc054756f984a715d2393969888ef9de82fc84448a3e55de1ab87fab0f9942a7ea065d52cbd0e9dfd3642bbb9f426147a5bb3be5a168b644fca6b84795741e10d234cebba5"}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000400)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x7}) 1.258487251s ago: executing program 6 (id=2853): syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648d000) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002cbd7000fecddf253b0000000c009900060000005f0000005000330020940200080211000000ffffffffffff1222a02cbdcb276a1859ab7fd9adfa9508021100000009000c00cc4012100700080211000000000602020202020201002d1a0003000100dbdcd8454ef7054f010000000000030059001a0000"], 0x70}, 0x1, 0x0, 0x0, 0x24011}, 0x404c000) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20004804) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.030652395s ago: executing program 6 (id=2854): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/igmp\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/163, 0xa3}, {&(0x7f0000000240)=""/71, 0x47}], 0x2, 0x1, 0xe3d0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000a80)={0x1, 0x0, 0x0, 0x0, 'syz0\x00'}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) close_range(r3, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000002c0)='.\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) accept4$llc(r5, 0x0, 0x0, 0x80000) ioctl$BLKRRPART(r1, 0x125f, 0x0) 926.724593ms ago: executing program 6 (id=2855): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x4cdc2, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x3) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)=ANY=[]) ioctl$KVM_GET_VCPU_EVENTS(r3, 0xc048aeca, &(0x7f0000000180)) 895.813969ms ago: executing program 2 (id=2856): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newae={0x64, 0x1e, 0x77c59de70026b015, 0x70bd2d, 0x25dfdbff, {{@in=@multicast1, 0x4d3, 0x0, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x3500}, [@lifetime_val={0x24, 0x9, {0x3, 0x7, 0xa, 0x100000000}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20040004) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000600)={0x84, &(0x7f0000000200)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newae={0x64, 0x1e, 0x77c59de70026b015, 0x70bd2d, 0x25dfdbff, {{@in=@multicast1, 0x4d3, 0x0, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x3500}, [@lifetime_val={0x24, 0x9, {0x3, 0x7, 0xa, 0x100000000}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20040004) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000600)={0x84, &(0x7f0000000200)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) (async) 571.452988ms ago: executing program 3 (id=2857): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x8000000000000, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001], 0x1, 0x3c4210}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0xc048aeca, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000) 569.053914ms ago: executing program 6 (id=2858): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)="0e", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x4048884) recvmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000240)=@ax25={{}, [@remote, @default, @null, @netrom, @remote, @netrom, @rose, @null]}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/127, 0x7f}, {&(0x7f0000000100)=""/40, 0x28}], 0x2}, 0x5}, {{&(0x7f0000000380)=@nfc_llcp, 0x80, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/229, 0xe5}], 0x1}, 0x3e}, {{&(0x7f00000005c0)=@generic, 0x80, &(0x7f0000000440)=[{&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000740)=""/197, 0xc5}], 0x2, &(0x7f0000000840)}, 0x5}], 0x3, 0x10020, &(0x7f0000000940)) 531.209885ms ago: executing program 5 (id=2859): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x4601) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0) 427.479597ms ago: executing program 6 (id=2860): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}) (async) write$tun(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="0800080006000600000014000000450a0014006600000b8890786401fa01ffffffff"], 0x22) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000) 147.460742ms ago: executing program 5 (id=2861): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003780), 0x240, 0x0) fsetxattr$security_capability(r1, &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0x5, 0x8}, {0xfff, 0x3}]}, 0x17, 0x1) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendfile(r2, r0, 0x0, 0x7ffff002) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000040)=0x1, 0x4) 139.412393ms ago: executing program 6 (id=2862): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x15027815cf4b099a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648b000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000080)={0x3, {0x3, 0x2354, 0x8, 0xffffe038, 0x0, 0x800}}) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async, rerun: 64) r2 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async, rerun: 64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 64) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) 0s ago: executing program 5 (id=2863): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x1c, r1, 0x105, 0xf0bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200010d4}, 0x800) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000f5ed7c14e914b549d51afc789f406e702e02fd99f0e72621b4e92cc90060b42f05f36915c64341dada9aca63fd1d2a1e33deee2ea082d29da00f87fb0f41aa6469eb7483aeb20e0d020000000000006acaaea9105960e6151fc28736a235dd474301d318fa2f84f4725a95fc359a5b4957c9edf8389d8c7bcf49155377c5177d363d1362e862f6e475c4f2810180b20883218c747aea2cf61faca51221f8b35a4dcc2a35f7501c4554b7d5386d2694b2ed75f4ef0d4d69ac412debdc88c44980fbbac9bd5512e39cba7ced7c8afd128d206f2fb7530000000000000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r5, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) kernel console output (not intermixed with test programs): cket 1024 [ 515.202850][ T5931] usb 3-1: config 1 interface 0 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 515.233959][ T5931] usb 3-1: config 1 interface 0 has no altsetting 0 [ 515.250266][ T5931] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 515.273280][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.295313][ T5931] usb 3-1: Product: 溏ꀨ㫅Ꝥ⸈ퟫ䂯▜峌贄껼嚾묨⢮쳷籎鲉ჾ챯⥠䴂う࿴阉濶뾵흵ߚꅄ퀙檢⿈钉ￕぼ쨶禸匤䁵㎚㑃㡳꣕蚸瓃՝Ῡꢉ瀰圆㋯釣뽞葩ᱬ芀檒‼祿諅☏ꀪއৎ豋⎐ⶖ達⢉긫者镄꠾릜韫䙅誹콱㼰 [ 515.355446][ T5931] usb 3-1: Manufacturer: ᰁ [ 515.360122][ T5931] usb 3-1: SerialNumber: ࠾ [ 515.392231][T13381] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 515.409593][T13381] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 515.780038][T13386] netlink: 'syz.3.2276': attribute type 29 has an invalid length. [ 515.813088][T13386] netlink: 'syz.3.2276': attribute type 29 has an invalid length. [ 515.867012][ T5931] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 515.894868][T13387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2276'. [ 515.913810][ T5931] usb 3-1: USB disconnect, device number 10 [ 516.007949][T13391] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 516.137117][T13394] /dev/rnullb0: Can't open blockdev [ 516.506716][ T5900] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 516.594828][T13403] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2281'. [ 516.636719][T13403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2281'. [ 516.659363][T13403] syz.2.2281: attempt to access beyond end of device [ 516.659363][T13403] loop2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 516.683128][T13405] syz.5.2282: attempt to access beyond end of device [ 516.683128][T13405] loop5: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 516.692716][T13403] vxfs: unable to read disk superblock at 1 [ 516.713114][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.724664][ T5900] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 516.733761][T13405] gfs2: error -5 reading superblock [ 516.744536][T13403] syz.2.2281: attempt to access beyond end of device [ 516.744536][T13403] loop2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 516.757766][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.766914][T13403] vxfs: unable to read disk superblock at 8 [ 516.779362][ T5900] usb 5-1: config 0 descriptor?? [ 516.784643][T13403] vxfs: can't find superblock. [ 517.209846][ T5900] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 517.259167][ T5900] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0010/input/input23 [ 517.332843][T13417] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 517.357258][T13417] UDF-fs: Scanning with blocksize 4096 failed [ 517.474629][ T5900] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 517.548030][T13415] omfs: Invalid superblock (0) [ 517.757762][T13391] /dev/rnullb0: Can't open blockdev [ 517.803672][ T8475] usb 5-1: USB disconnect, device number 97 [ 517.851182][T13426] overlayfs: invalid origin (00000000d1d3e81a820eee8a94416592a5356da96db48150eae08457fbc30ece5e7e7e318cb2b4b22122226fe65c239a) [ 517.932352][T13426] /dev/rnullb0: Can't open blockdev [ 518.154181][ T5900] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 518.241015][T13436] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 518.257218][T13436] /dev/rnullb0: Can't open blockdev [ 518.329596][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.364838][ T5900] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 518.401517][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.424365][ T5900] usb 4-1: config 0 descriptor?? [ 518.641616][ T5900] usbhid 4-1:0.0: can't add hid device: -71 [ 518.653441][ T5900] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 518.686426][ T5900] usb 4-1: USB disconnect, device number 120 [ 518.822506][T13447] /dev/rnullb0: Can't open blockdev [ 519.203503][ T5914] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 519.356530][T13454] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2298'. [ 519.373813][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 519.390668][ T5914] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 519.403968][ T5914] usb 4-1: config 0 has no interface number 0 [ 519.424451][ T5914] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 519.441319][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.460050][ T5914] usb 4-1: Product: syz [ 519.471278][ T5914] usb 4-1: Manufacturer: syz [ 519.481592][ T5914] usb 4-1: SerialNumber: syz [ 519.506419][ T5914] usb 4-1: config 0 descriptor?? [ 519.530716][ T5914] smsc95xx v2.0.0 [ 519.549864][T13455] /dev/rnullb0: Can't open blockdev [ 519.647051][T13423] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 519.937696][T13449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.970491][T13449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.991037][T13449] 9pnet_fd: Insufficient options for proto=fd [ 520.798974][T13483] /dev/rnullb0: Can't open blockdev [ 520.833428][ T8477] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 520.997338][ T8477] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.010517][T13487] netlink: 'syz.2.2308': attribute type 21 has an invalid length. [ 521.026989][ T8477] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.034648][T13487] netlink: 'syz.2.2308': attribute type 1 has an invalid length. [ 521.055511][ T8477] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 521.066381][T13487] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2308'. [ 521.078014][ T8477] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.106926][ T8477] usb 5-1: config 0 descriptor?? [ 521.161413][T13487] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2308'. [ 521.456382][T13490] hpfs: Bad magic ... probably not HPFS [ 521.473472][ T5900] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 521.540387][ T8477] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 521.560010][ T8477] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 521.570683][ T8477] playstation 0003:054C:0DF2.0011: bogus close delimiter [ 521.578745][ T8477] playstation 0003:054C:0DF2.0011: item 0 2 2 10 parsing failed [ 521.589148][ T8477] playstation 0003:054C:0DF2.0011: Parse failed [ 521.596898][ T8477] playstation 0003:054C:0DF2.0011: probe with driver playstation failed with error -22 [ 521.646064][ T5900] usb 3-1: not running at top speed; connect to a high speed hub [ 521.664591][ T5900] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 521.684475][ T5900] usb 3-1: config 95 has no interface number 0 [ 521.701127][ T5900] usb 3-1: config 95 interface 1 has no altsetting 0 [ 521.724389][ T5900] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 521.742042][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.772704][ T5900] usb 3-1: Product: syz [ 521.789027][ T5900] usb 3-1: Manufacturer: syz [ 521.799026][T13498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.804719][ T5900] usb 3-1: SerialNumber: syz [ 521.839344][T13498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.878249][T13498] netlink: 'syz.4.2304': attribute type 1 has an invalid length. [ 521.903540][T13498] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2304'. [ 522.006138][ T5914] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 522.029739][ T5914] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 522.053829][ T5914] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 522.057222][T13487] dvmrp0: entered allmulticast mode [ 522.095419][ T8477] usb 5-1: USB disconnect, device number 98 [ 522.124023][ T5914] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 522.163582][ T5914] usb 4-1: USB disconnect, device number 121 [ 522.183025][T13501] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2311'. [ 523.334444][T13506] /dev/rnullb0: Can't open blockdev [ 523.384089][ T5914] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 523.393664][ T8475] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 523.566145][ T5914] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 523.585103][ T5914] usb 6-1: config 0 has no interface number 0 [ 523.599260][ T5914] usb 6-1: config 0 interface 29 has no altsetting 0 [ 523.617452][ T5914] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 523.635664][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.653420][ T5914] usb 6-1: Product: syz [ 523.661219][ T5914] usb 6-1: Manufacturer: syz [ 523.673403][ T5914] usb 6-1: SerialNumber: syz [ 523.691262][ T5914] usb 6-1: config 0 descriptor?? [ 523.912378][ T5914] peak_usb 6-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 524.116209][T13510] sit0: entered promiscuous mode [ 524.150935][ T5900] usb 3-1: USB disconnect, device number 11 [ 524.229434][T13510] netlink: 'syz.5.2314': attribute type 1 has an invalid length. [ 524.257737][T13510] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2314'. [ 524.333644][T11476] udevd[11476]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 524.612697][T13520] FAT-fs (rnullb0): bogus number of reserved sectors [ 524.613749][T13520] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 524.622583][ T5914] peak_usb 6-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 524.622617][ T5914] peak_usb 6-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 524.704417][ T5914] peak_usb 6-1:0.29: probe with driver peak_usb failed with error -71 [ 524.715284][ T5914] usb 6-1: USB disconnect, device number 6 [ 524.804293][ T8475] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 524.961859][ T8475] usb 3-1: config index 0 descriptor too short (expected 29442, got 56) [ 524.982830][T13532] NILFS (rnullb0): couldn't find nilfs on the device [ 524.983444][ T8475] usb 3-1: config 56 has too many interfaces: 170, using maximum allowed: 32 [ 525.017274][ T8475] usb 3-1: config 56 has an invalid descriptor of length 0, skipping remainder of the config [ 525.028968][ T8475] usb 3-1: config 56 has 0 interfaces, different from the descriptor's value: 170 [ 525.056918][ T8475] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 525.073405][ T8475] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.091734][ T8475] usb 3-1: Product: syz [ 525.103427][ T8475] usb 3-1: Manufacturer: syz [ 525.103452][ T8475] usb 3-1: SerialNumber: syz [ 525.243708][T13538] /dev/rnullb0: Can't open blockdev [ 525.756387][ T5900] usb 3-1: USB disconnect, device number 12 [ 525.973980][T13546] qnx4: no qnx4 filesystem (no root dir). [ 526.146518][T13550] syz.4.2329: attempt to access beyond end of device [ 526.146518][T13550] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 526.163945][T13550] gfs2: error -5 reading superblock [ 526.191189][T13551] openvswitch: netlink: IPv4 frag type 105 is out of range max 2 [ 526.463382][ T5900] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 526.653710][ T8475] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 526.659087][ T5900] usb 6-1: Using ep0 maxpacket: 32 [ 526.691776][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 526.733368][ T5900] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 526.762888][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.797652][ T5900] usb 6-1: config 0 descriptor?? [ 526.828888][ T5900] hub 6-1:0.0: USB hub found [ 526.833550][ T8475] usb 5-1: Using ep0 maxpacket: 16 [ 526.836047][ T8475] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 526.918727][ T8475] usb 5-1: config 0 has no interface number 0 [ 526.929719][ T8475] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 526.940385][ T8475] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 526.951044][ T8475] usb 5-1: config 0 interface 41 has no altsetting 0 [ 526.997034][ T8475] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 527.007049][T13576] /dev/rnullb0: Can't open blockdev [ 527.021947][ T5900] hub 6-1:0.0: 1 port detected [ 527.030441][ T8475] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.049128][ T8475] usb 5-1: Product: syz [ 527.059236][ T8475] usb 5-1: Manufacturer: syz [ 527.069370][ T8475] usb 5-1: SerialNumber: syz [ 527.084560][ T8475] usb 5-1: config 0 descriptor?? [ 527.095394][T13565] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 527.105792][T13565] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 527.312493][T13586] /dev/rnullb0: Can't open blockdev [ 527.349321][T13558] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 527.357835][T13558] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 527.463390][ T5914] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 527.603430][ T5914] usb 3-1: device descriptor read/64, error -71 [ 527.778257][ T8475] Error reading MAC address [ 527.788545][T13558] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 527.803848][T13558] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 527.845084][ T5914] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 527.851288][ T8462] usb 6-1: USB disconnect, device number 7 [ 527.859447][ T5900] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 527.994636][ T5914] usb 3-1: device descriptor read/64, error -71 [ 528.125757][ T5914] usb usb3-port1: attempt power cycle [ 528.226329][ T8475] sr9700 5-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 528.248174][ T8475] usb 5-1: USB disconnect, device number 100 [ 528.484344][ T5914] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 528.523020][ T5914] usb 3-1: device descriptor read/8, error -71 [ 528.783567][ T5914] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 528.828003][ T5914] usb 3-1: device descriptor read/8, error -71 [ 528.954175][ T5914] usb usb3-port1: unable to enumerate USB device [ 529.381780][T13616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2344'. [ 529.589985][T13616] XFS (rnullb0): Invalid superblock magic number [ 529.944436][T13625] XFS (rnullb0): Invalid superblock magic number [ 530.531418][ T6064] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 530.695490][ T5900] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 530.863706][ T5900] usb 6-1: Using ep0 maxpacket: 16 [ 530.915904][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.040781][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.134511][T13650] vxfs: WRONG superblock magic 00000000 at 1 [ 531.177211][ T5900] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 531.298139][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.402371][T13650] vxfs: WRONG superblock magic 00000000 at 8 [ 531.586138][ T5900] usb 6-1: config 0 descriptor?? [ 531.640220][T13650] vxfs: can't find superblock. [ 531.843797][T13643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.852654][T13643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.263954][ T8464] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 532.300583][ T5900] usbhid 6-1:0.0: can't add hid device: -32 [ 532.306788][ T5900] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 532.388804][T13671] ufs: You didn't specify the type of your ufs filesystem [ 532.388804][T13671] [ 532.388804][T13671] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 532.388804][T13671] [ 532.388804][T13671] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 532.423141][T13671] ufs: ufstype=old is supported read-only [ 532.429732][T13671] ufs: failed to set blocksize [ 532.436427][ T8464] usb 4-1: Using ep0 maxpacket: 8 [ 532.448228][ T8464] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 532.457499][ T8464] usb 4-1: config 0 has no interface number 0 [ 532.479739][ T8464] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 532.490530][ T8464] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.505526][ T8464] usb 4-1: Product: syz [ 532.514045][ T8464] usb 4-1: Manufacturer: syz [ 532.519964][ T8464] usb 4-1: SerialNumber: syz [ 532.531048][ T8464] usb 4-1: config 0 descriptor?? [ 532.562233][ T8464] usb 4-1: selecting invalid altsetting 2 [ 532.578275][ T8464] i2c-cp2615 4-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 532.682564][T13675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.692355][T13675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.813562][ T5914] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 532.905353][ T5931] usb 4-1: USB disconnect, device number 122 [ 532.975464][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.993034][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.009631][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 533.026144][ T5914] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 533.036344][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.062681][ T5914] usb 5-1: config 0 descriptor?? [ 533.496479][ T5914] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 533.511803][T13687] Can't find a SQUASHFS superblock on rnullb0 [ 533.533881][ T5914] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 533.903553][ T5931] usb 6-1: USB disconnect, device number 8 [ 534.021003][T13695] qnx4: no qnx4 filesystem (no root dir). [ 534.199445][T13697] hpfs: Bad magic ... probably not HPFS [ 534.215315][T13708] /dev/rnullb0: Can't open blockdev [ 534.290698][T13711] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2372'. [ 534.305855][T13711] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 534.335383][T13711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.349490][T13713] input: syz1 as /devices/virtual/input/input24 [ 535.602002][T13733] /dev/rnullb0: Can't open blockdev [ 535.608024][ T5914] usb 5-1: USB disconnect, device number 101 [ 535.791656][T13738] /dev/rnullb0: Can't open blockdev [ 536.333358][ T8472] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 536.384260][ T1170] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.474810][ T8472] usb 3-1: device descriptor read/64, error -71 [ 536.550173][ T1170] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.883382][ T8472] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 536.932390][ T1170] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.063649][ T8472] usb 3-1: device descriptor read/64, error -71 [ 537.116452][ T1170] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.178913][ T8472] usb usb3-port1: attempt power cycle [ 537.249359][T13756] /dev/rnullb0: Can't open blockdev [ 537.498741][T13759] /dev/sg0: Can't lookup blockdev [ 537.605876][ T1170] bridge_slave_1: left allmulticast mode [ 537.611590][ T1170] bridge_slave_1: left promiscuous mode [ 537.636089][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.643972][ T8472] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 537.664083][ T8472] usb 3-1: device descriptor read/8, error -71 [ 537.671522][ T1170] bridge_slave_0: left allmulticast mode [ 537.683752][ T1170] bridge_slave_0: left promiscuous mode [ 537.689722][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.898004][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 537.934620][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 537.945323][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 537.968796][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 537.976944][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 537.993417][ T8472] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 538.035212][ T8472] usb 3-1: device descriptor read/8, error -71 [ 538.154995][ T8472] usb usb3-port1: unable to enumerate USB device [ 539.503638][ T8477] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 539.513314][ T8472] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 539.651961][T13797] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 539.673444][ T8477] usb 4-1: Using ep0 maxpacket: 8 [ 539.683841][ T8472] usb 3-1: Using ep0 maxpacket: 32 [ 539.689622][T13797] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 539.697247][ T8477] usb 4-1: config 0 has no interfaces? [ 539.712533][ T8477] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 539.723152][ T1170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.724475][ T8472] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 539.750730][ T1170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.750755][ T8477] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.769942][ T1170] bond0 (unregistering): Released all slaves [ 539.773532][ T8472] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 539.793339][ T8477] usb 4-1: Product: syz [ 539.798247][ T8477] usb 4-1: Manufacturer: syz [ 539.802893][ T8477] usb 4-1: SerialNumber: syz [ 539.813368][ T8472] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 539.853006][ T8472] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 539.875936][ T8477] usb 4-1: config 0 descriptor?? [ 539.890613][ T8472] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 539.926991][T13799] qnx4: no qnx4 filesystem (no root dir). [ 539.945174][ T8472] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 539.972185][ T8472] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 539.991394][ T8472] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.008185][ T8472] usb 3-1: config 0 descriptor?? [ 540.053474][ T5166] Bluetooth: hci3: command tx timeout [ 540.104779][T13795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.123079][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 540.125538][ T5849] Bluetooth: hci5: unexpected event 0x09 length: 0 < 3 [ 540.144043][T13801] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 540.150993][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 540.164195][T13795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.179523][T13795] 9pnet_fd: Insufficient options for proto=fd [ 540.207487][T13801] VFS: Can't find a romfs filesystem on dev rnullb0. [ 540.207487][T13801] [ 540.236464][T13795] tipc: Trying to set illegal importance in message [ 540.254515][ T8472] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 540.329360][ T8472] usb 3-1: USB disconnect, device number 21 [ 540.351916][ T8472] usblp0: removed [ 540.510313][ T1170] hsr_slave_0: left promiscuous mode [ 540.527903][ T1170] hsr_slave_1: left promiscuous mode [ 540.534557][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.541982][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.569316][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.593395][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.645116][ T1170] veth1_macvtap: left promiscuous mode [ 540.650737][ T1170] veth0_macvtap: left promiscuous mode [ 540.656313][T13795] /dev/nullb0: Can't open blockdev [ 540.657688][ T1170] veth1_vlan: left promiscuous mode [ 540.669154][ T1170] veth0_vlan: left promiscuous mode [ 541.977413][ T1170] team0 (unregistering): Port device team_slave_1 removed [ 542.037370][ T1170] team0 (unregistering): Port device team_slave_0 removed [ 542.124111][ T5166] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 542.124895][ T5849] Bluetooth: hci3: command tx timeout [ 542.198133][T13834] syz.2.2404: attempt to access beyond end of device [ 542.198133][T13834] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 542.329253][ T8477] usb 4-1: USB disconnect, device number 123 [ 542.409604][T13841] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 542.417572][T13841] UDF-fs: Scanning with blocksize 4096 failed [ 543.004864][T13862] /dev/rnullb0: Can't open blockdev [ 543.193744][T13864] /dev/rnullb0: Can't open blockdev [ 543.259801][ T5849] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 543.320715][T13868] /dev/rnullb0: Can't open blockdev [ 543.919020][T13877] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2415'. [ 544.203546][ T5849] Bluetooth: hci3: command tx timeout [ 544.223551][T13865] syzkaller1: entered promiscuous mode [ 544.229374][T13865] syzkaller1: entered allmulticast mode [ 544.266247][T13878] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2415'. [ 544.303863][T13881] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2415'. [ 544.384333][T13882] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2415'. [ 544.694085][T13891] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2418'. [ 544.845249][T13761] chnl_net:caif_netlink_parms(): no params data found [ 544.876127][ T5839] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 544.983520][ T8477] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 545.069727][ T5839] usb 3-1: Using ep0 maxpacket: 32 [ 545.085432][ T5839] usb 3-1: config 0 interface 0 has no altsetting 0 [ 545.096296][ T5839] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 545.108867][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.123717][ T5839] usb 3-1: Product: syz [ 545.128038][ T5839] usb 3-1: Manufacturer: syz [ 545.132663][ T5839] usb 3-1: SerialNumber: syz [ 545.153504][ T5839] usb 3-1: config 0 descriptor?? [ 545.167621][ T8477] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 545.193495][ T8477] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.208236][ T8477] usb 4-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 545.218069][ T8477] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.254119][T13904] /dev/rnullb0: Can't open blockdev [ 545.254208][ T8477] usb 4-1: config 0 descriptor?? [ 545.307712][T13761] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.339256][T13761] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.358578][T13761] bridge_slave_0: entered allmulticast mode [ 545.387093][T13761] bridge_slave_0: entered promiscuous mode [ 545.415341][T13761] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.443342][T13761] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.463514][T13761] bridge_slave_1: entered allmulticast mode [ 545.494302][T13761] bridge_slave_1: entered promiscuous mode [ 545.608086][ T5839] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 545.630695][T13761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.662801][T13761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.709524][ T8477] ntrig 0003:1B96:0012.0013: item fetching failed at offset 2/5 [ 545.739209][ T8477] ntrig 0003:1B96:0012.0013: parse failed [ 545.760311][ T8477] ntrig 0003:1B96:0012.0013: probe with driver ntrig failed with error -22 [ 545.762620][T13761] team0: Port device team_slave_0 added [ 545.793347][ T5931] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 545.813103][T13761] team0: Port device team_slave_1 added [ 545.900651][T13891] /dev/rnullb0: Can't open blockdev [ 545.910405][T13891] tmpfs: Unknown parameter 'dont_measure' [ 545.953534][ T5931] usb 6-1: Using ep0 maxpacket: 8 [ 545.963785][ T5931] usb 6-1: config 0 has an invalid interface number: 78 but max is 0 [ 545.969627][ T8477] usb 4-1: USB disconnect, device number 124 [ 545.971909][ T5931] usb 6-1: config 0 has no interface number 0 [ 545.976275][ T5931] usb 6-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21 [ 546.036816][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.063480][ T5931] usb 6-1: Product: syz [ 546.067705][ T5931] usb 6-1: Manufacturer: syz [ 546.119372][ T5931] usb 6-1: SerialNumber: syz [ 546.185205][ T5931] usb 6-1: config 0 descriptor?? [ 546.206851][T13761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.228330][T13761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.286259][ T5849] Bluetooth: hci3: command tx timeout [ 546.306407][T13761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.348142][T13761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.396085][T13761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.415731][ T5931] usbhid 6-1:0.78: couldn't find an input interrupt endpoint [ 546.450147][T13909] /dev/rnullb0: Can't open blockdev [ 546.459119][ T5931] usb 6-1: USB disconnect, device number 9 [ 546.463401][T13761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.483311][ T8477] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 546.543785][ T5839] usb 3-1: USB disconnect, device number 22 [ 546.756982][T13761] hsr_slave_0: entered promiscuous mode [ 546.771574][T13761] hsr_slave_1: entered promiscuous mode [ 546.790955][T13931] /dev/rnullb0: Can't open blockdev [ 546.801709][T13933] qnx4: no qnx4 filesystem (no root dir). [ 546.971275][T13936] trusted_key: encrypted_key: insufficient parameters specified [ 547.032966][T13936] 9pnet: p9_errstr2errno: server reported unknown error "WX>, PK_Wz{gANBk&ہ|nWNiۅߕ󵽕r [ 547.098458][T13940] /dev/rnullb0: Can't open blockdev [ 547.202162][T13942] affs: Unknown parameter 'acl' [ 547.453560][ T8477] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 547.486055][T13761] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 547.545347][T13761] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 547.596816][T13761] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 547.624011][ T8477] usb 4-1: Using ep0 maxpacket: 32 [ 547.629317][T13761] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 547.646430][ T8477] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.678048][ T8477] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.709866][ T8477] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 547.752012][ T8477] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.786422][ T8477] usb 4-1: config 0 descriptor?? [ 547.822140][ T8477] hub 4-1:0.0: USB hub found [ 548.019892][T13967] /dev/rnullb0: Can't open blockdev [ 548.022356][ T8477] hub 4-1:0.0: 1 port detected [ 548.089213][T13761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.169040][T13761] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.209001][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.216421][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.289956][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.297236][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.499715][T13980] syz.5.2433: attempt to access beyond end of device [ 548.499715][T13980] loop5: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 548.630055][ T5839] hub 4-1:0.0: activate --> -90 [ 548.829584][T13990] /dev/sg0: Can't lookup blockdev [ 549.136755][T13997] /dev/sg0: Can't lookup blockdev [ 549.261507][T13761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.445210][ T8472] usb 4-1: USB disconnect, device number 126 [ 549.493571][ T5839] usb 4-1.1: new full-speed USB device number 127 using dummy_hcd [ 549.516828][ T5839] usb 4-1.1: parent hub has no TT [ 549.538527][ T5839] usb 4-1-port1: attempt power cycle [ 549.753314][ T5900] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 549.934398][ T5900] usb 3-1: config 7 has an invalid interface number: 252 but max is 0 [ 549.974854][ T5900] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 550.007908][ T5900] usb 3-1: config 7 has no interface number 0 [ 550.029934][ T5900] usb 3-1: config 7 interface 252 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 550.099076][ T5900] usb 3-1: config 7 interface 252 has no altsetting 0 [ 550.130779][ T5900] usb 3-1: string descriptor 0 read error: -22 [ 550.137296][ T5900] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 550.187951][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.425682][T13761] veth0_vlan: entered promiscuous mode [ 550.492814][T14028] omfs: Invalid superblock (0) [ 550.504937][T13761] veth1_vlan: entered promiscuous mode [ 550.553500][ T8475] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 550.636265][T13761] veth0_macvtap: entered promiscuous mode [ 550.683160][T13761] veth1_macvtap: entered promiscuous mode [ 550.733885][ T8475] usb 6-1: Using ep0 maxpacket: 8 [ 550.761054][ T8475] usb 6-1: unable to get BOS descriptor or descriptor too short [ 550.786044][T13761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.798582][ T8475] usb 6-1: config 4 interface 0 has no altsetting 0 [ 550.809426][ T8475] usb 6-1: string descriptor 0 read error: -22 [ 550.816909][ T8475] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 550.836313][T13761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.854073][ T8475] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 550.891281][ T8475] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 550.900135][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.936884][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.948877][ T8475] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 550.953900][ T5900] usb 3-1: USB disconnect, device number 23 [ 550.988452][ T8475] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 551.010980][ T8475] usb 6-1: media controller created [ 551.021504][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.090783][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.120154][ T8475] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 551.208524][ T8475] zl10353_read_register: readreg error (reg=127, ret==0) [ 551.392518][ T8475] usb 6-1: USB disconnect, device number 10 [ 551.435943][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.481411][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.592825][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.633293][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.356967][T14071] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2452'. [ 552.393465][ T5839] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 552.570713][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.597963][T14078] hpfs: Bad magic ... probably not HPFS [ 552.611485][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.653783][ T5839] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 552.769414][ T5839] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 552.802441][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.846584][ T5839] usb 3-1: config 0 descriptor?? [ 553.115235][T14093] /dev/rnullb0: Can't open blockdev [ 553.233359][ T5900] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 553.322937][ T5839] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 553.345334][ T5839] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 553.364882][ T5839] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 553.379523][ T5839] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 553.397674][ T5839] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 553.427751][ T5839] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 553.463651][ T5900] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.475207][ T5839] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 553.495646][ T5900] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 553.506250][ T5839] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 553.527232][T14098] /dev/rnullb0: Can't open blockdev [ 553.558631][ T5839] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 553.570972][ T5900] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 553.604312][ T5900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 553.608128][ T5839] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 553.635930][ T5900] usb 7-1: SerialNumber: syz [ 553.706183][ T5839] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 553.781062][ T5839] usb 3-1: USB disconnect, device number 24 [ 553.792271][T14109] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2461'. [ 553.894427][T14088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.903489][T14088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.941302][T14108] fido_id[14108]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 554.324637][T14114] kAFS: unparsable volume name [ 554.582116][T14124] /dev/rnullb0: Can't open blockdev [ 554.800400][T14128] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2465'. [ 555.048874][T14134] /dev/rnullb0: Can't open blockdev [ 555.584137][ T5839] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 555.593030][ T30] audit: type=1326 audit(1753651309.545:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0b538e9a9 code=0x7fc00000 [ 555.649217][ T8464] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 555.666359][ T30] audit: type=1326 audit(1753651309.545:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0b538e9a9 code=0x7fc00000 [ 555.743417][ T5839] usb 4-1: device descriptor read/64, error -71 [ 555.749908][ T30] audit: type=1326 audit(1753651309.545:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0b538e9a9 code=0x7fc00000 [ 555.772353][ C0] vkms_vblank_simulate: vblank timer overrun [ 555.827616][ T8464] usb 6-1: config 2 has an invalid interface number: 2 but max is 0 [ 555.837402][ T30] audit: type=1326 audit(1753651309.545:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0b538e9a9 code=0x7fc00000 [ 555.856803][ T8464] usb 6-1: config 2 has no interface number 0 [ 555.904435][ T8464] usb 6-1: config 2 interface 2 has no altsetting 0 [ 555.913519][ T30] audit: type=1326 audit(1753651309.555:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0b538e9a9 code=0x7fc00000 [ 555.935996][ C0] vkms_vblank_simulate: vblank timer overrun [ 555.980832][ T5900] usb 7-1: 0:2 : does not exist [ 555.995739][ T8464] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=7f.a4 [ 555.996090][ T30] audit: type=1326 audit(1753651309.555:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0b538e9a9 code=0x7fc00000 [ 556.026019][ T8464] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.029583][ T5839] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 556.075489][ T8464] usb 6-1: Product: syz [ 556.079709][ T8464] usb 6-1: Manufacturer: syz [ 556.121047][ T5900] usb 7-1: USB disconnect, device number 2 [ 556.126886][ T8475] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 556.152594][ T30] audit: type=1326 audit(1753651309.555:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0b538e9a9 code=0x7fc00000 [ 556.153972][ T8464] usb 6-1: SerialNumber: syz [ 556.205217][ T5839] usb 4-1: device descriptor read/64, error -71 [ 556.207104][ T5977] udevd[5977]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 556.253529][ T8475] usb 3-1: device descriptor read/64, error -71 [ 556.261530][ T30] audit: type=1326 audit(1753651309.555:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0b538e9a9 code=0x7fc00000 [ 556.299421][ T30] audit: type=1326 audit(1753651309.555:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0b538e9a9 code=0x7fc00000 [ 556.323118][ T30] audit: type=1326 audit(1753651309.555:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0b538e9a9 code=0x7fc00000 [ 556.343830][ T5839] usb usb4-port1: attempt power cycle [ 556.437425][T14160] Malformed UNC in devname [ 556.437425][T14160] [ 556.450455][T14160] CIFS: VFS: Malformed UNC in devname [ 556.503577][ T8475] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 556.532222][ T8464] usb 6-1: USB disconnect, device number 11 [ 556.643983][ T8475] usb 3-1: device descriptor read/64, error -71 [ 556.733766][ T5839] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 556.778430][ T8475] usb usb3-port1: attempt power cycle [ 556.788797][ T5839] usb 4-1: device descriptor read/8, error -71 [ 556.933378][ T5900] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 557.043562][ T5839] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 557.084062][ T5900] usb 7-1: device descriptor read/64, error -71 [ 557.091313][ T5839] usb 4-1: device descriptor read/8, error -71 [ 557.143551][ T8475] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 557.174679][ T8475] usb 3-1: device descriptor read/8, error -71 [ 557.206993][ T5839] usb usb4-port1: unable to enumerate USB device [ 557.323818][ T5900] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 557.425037][ T8475] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 557.470419][ T8475] usb 3-1: device descriptor read/8, error -71 [ 557.493659][ T5900] usb 7-1: device descriptor read/64, error -71 [ 557.547382][T14186] netlink: 'syz.5.2476': attribute type 1 has an invalid length. [ 557.559554][T14186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2476'. [ 557.578687][T14186] /dev/rnullb0: Can't open blockdev [ 557.603692][ T8475] usb usb3-port1: unable to enumerate USB device [ 557.603960][ T5900] usb usb7-port1: attempt power cycle [ 557.744303][T14189] /dev/rnullb0: Can't open blockdev [ 557.943959][T14193] /dev/rnullb0: Can't open blockdev [ 557.993528][ T5900] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 558.022095][T14196] /dev/rnullb0: Can't open blockdev [ 558.046292][ T5900] usb 7-1: device descriptor read/8, error -71 [ 558.293447][ T5900] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 558.352138][ T5900] usb 7-1: device descriptor read/8, error -71 [ 558.473694][ T5900] usb usb7-port1: unable to enumerate USB device [ 558.996817][T14216] Mount JFS Failure: -22 [ 559.449700][T14239] netdevsim netdevsim5: Firmware load for '../file0/file0' refused, path contains '..' component [ 559.751097][ T8475] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 559.807197][T14248] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2492'. [ 559.853307][ T8462] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 559.928998][ T8475] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 559.945057][ T8475] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 559.965072][ T8475] usb 3-1: SerialNumber: syz [ 559.991247][ T8475] usb 3-1: config 0 descriptor?? [ 560.039890][ T8462] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.098660][ T8462] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.134947][ T8462] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 560.151477][ T8462] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 560.197281][ T8462] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.234806][ T8462] usb 6-1: config 0 descriptor?? [ 560.343413][ T8472] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 560.457489][ T8475] ath6kl: Unsupported hardware version: 0x0 [ 560.474531][ T8475] ath6kl: Failed to init ath6kl core: -22 [ 560.486258][ T8475] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 560.503583][ T8472] usb 7-1: Using ep0 maxpacket: 8 [ 560.520571][ T8472] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 560.538368][ T8472] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.557888][ T8472] usb 7-1: Product: syz [ 560.569278][ T8472] usb 7-1: Manufacturer: syz [ 560.582656][ T8472] usb 7-1: SerialNumber: syz [ 560.595010][ T8472] usb 7-1: config 0 descriptor?? [ 560.685332][T14233] omfs: Invalid superblock (0) [ 560.697391][ T8475] usb 3-1: USB disconnect, device number 29 [ 560.810584][ T8472] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 561.096298][ T8462] usbhid 6-1:0.0: can't add hid device: -71 [ 561.102378][ T8462] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 561.136202][ T8462] usb 6-1: USB disconnect, device number 12 [ 561.418764][T14270] syz.3.2497: attempt to access beyond end of device [ 561.418764][T14270] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 561.461034][T14270] FAT-fs (nbd3): unable to read boot sector [ 561.476125][T14270] /dev/rnullb0: Can't open blockdev [ 561.554110][T14274] /dev/rnullb0: Can't open blockdev [ 561.846924][T14279] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 561.878110][T14279] binder: 14277:14279 ioctl c0306201 0 returned -14 [ 561.903735][T14279] binder: 14277:14279 ioctl c0306201 2000000000c0 returned -11 [ 562.228431][ T8472] usb write operation failed. (-71) [ 562.253388][ T8475] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 562.275294][ T8472] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 562.306294][ T8472] dvbdev: DVB: registering new adapter (Terratec H7) [ 562.320856][ T8472] usb 7-1: media controller created [ 562.333400][ T8472] usb read operation failed. (-71) [ 562.345674][ T8472] usb write operation failed. (-71) [ 562.357956][ T8472] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 562.384058][ T8472] usb 7-1: USB disconnect, device number 7 [ 562.456645][ T8475] usb 4-1: config 9 has an invalid interface number: 88 but max is 1 [ 562.466699][ T8475] usb 4-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 562.475935][ T8475] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 562.490244][ T8475] usb 4-1: config 9 has no interface number 1 [ 562.497222][ T8475] usb 4-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 562.512807][ T8475] usb 4-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 562.534665][ T1147] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 562.545188][ T8475] usb 4-1: config 9 interface 88 altsetting 9 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 562.557752][ T8475] usb 4-1: config 9 interface 88 has no altsetting 0 [ 562.569053][ T8475] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=50.80 [ 562.582121][ T8475] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.591599][ T8475] usb 4-1: Product: syz [ 562.600070][ T8475] usb 4-1: Manufacturer: syz [ 562.603326][ T8462] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 562.612410][ T8475] usb 4-1: SerialNumber: syz [ 562.758250][ T8462] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.783321][ T8462] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 562.809354][ T8462] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.835183][T14284] /dev/rnullb0: Can't open blockdev [ 562.851361][ T8462] usb 6-1: config 0 descriptor?? [ 562.872970][ T8475] qmi_wwan 4-1:9.88: skipping garbage [ 562.905958][ T8475] qmi_wwan 4-1:9.88: probe with driver qmi_wwan failed with error -22 [ 562.911769][T14294] /dev/rnullb0: Can't open blockdev [ 562.957392][ T8475] usb 4-1: USB disconnect, device number 9 [ 563.033804][T14296] /dev/rnullb0: Can't open blockdev [ 563.051490][T14296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 563.169531][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.192638][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.232144][T14302] /dev/rnullb0: Can't open blockdev [ 563.287131][ T8462] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor [ 563.318494][ T8462] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0015/input/input25 [ 563.583551][ T8462] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 563.667954][T14314] tipc: Enabling of bearer rejected, media not registered [ 563.714316][T14314] PKCS8: Unsupported PKCS#8 version [ 563.816185][T14321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.870547][T14321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.046762][ T8462] usb 6-1: USB disconnect, device number 13 [ 564.413487][ T5839] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 564.435847][T14341] ./cgroup: Can't lookup blockdev [ 564.573826][ T5839] usb 3-1: Using ep0 maxpacket: 16 [ 564.586660][ T5839] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 564.599958][ T5839] usb 3-1: config 0 has no interface number 0 [ 564.623411][ T5839] usb 3-1: config 0 interface 133 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 564.636791][T14343] mkiss: ax0: crc mode is auto. [ 564.643767][ T8462] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 564.657685][ T5839] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 564.681016][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.716036][ T5839] usb 3-1: Product: syz [ 564.724946][ T5839] usb 3-1: Manufacturer: syz [ 564.733582][ T5839] usb 3-1: SerialNumber: syz [ 564.752633][ T5839] usb 3-1: config 0 descriptor?? [ 564.829392][ T8462] usb 6-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 564.863383][ T8462] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.894490][ T8462] usb 6-1: config 0 descriptor?? [ 564.916119][ T8462] pwc: Creative Labs Webcam Pro Ex detected. [ 565.052069][T14353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.088709][T14353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.192134][ T5839] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 565.249952][ T5839] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 565.282676][ T5839] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 565.319927][ T5839] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 565.361158][ T5839] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 565.427570][ T5839] usb 3-1: USB disconnect, device number 30 [ 565.475102][ T5839] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 565.525756][ T5839] keyspan 3-1:0.133: device disconnected [ 565.613455][ T8464] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 565.826689][ T8464] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 565.843265][ T8464] usb 4-1: config 0 has no interface number 0 [ 565.865951][ T8464] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 565.890021][ T8464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.940118][ T8464] usb 4-1: config 0 descriptor?? [ 565.953884][ T8462] pwc: Failed to set LED on/off time (-71) [ 565.971775][ T8462] pwc: send_video_command error -71 [ 565.980706][ T8464] usb 4-1: selecting invalid altsetting 1 [ 565.993299][ T8462] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 566.004541][ T8464] dvb_ttusb_budget: ttusb_init_controller: error [ 566.010933][ T8464] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 566.023934][ T8462] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 566.035772][ T8462] usb 6-1: USB disconnect, device number 14 [ 566.118812][ T8464] DVB: Unable to find symbol cx22700_attach() [ 566.143445][ T8472] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 566.220797][ T8464] DVB: Unable to find symbol tda10046_attach() [ 566.228785][ T8464] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 566.259222][ T8464] usb 4-1: USB disconnect, device number 10 [ 566.305219][ T8472] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.328889][ T8472] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 566.348385][ T8472] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.374786][ T8472] usb 3-1: config 0 descriptor?? [ 566.800048][ T8472] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 566.873099][ T8472] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0016/input/input26 [ 567.065006][ T8472] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 567.663520][ T8462] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 567.824803][ T8475] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 567.833290][ T8462] usb 7-1: Using ep0 maxpacket: 8 [ 567.851936][ T8462] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 567.875586][T14400] /dev/rnullb0: Can't open blockdev [ 567.878333][ T8462] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.909987][ T8462] usb 7-1: Product: syz [ 567.920110][ T8462] usb 7-1: Manufacturer: syz [ 567.930491][ T8462] usb 7-1: SerialNumber: syz [ 567.975555][ T8462] usb 7-1: config 0 descriptor?? [ 568.226604][ T8462] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 568.256786][ T8475] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 568.293353][ T8475] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.306822][ T8475] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 568.323431][ T8475] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.345407][ T8475] usb 4-1: config 0 descriptor?? [ 568.383458][ T5900] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 568.563650][ T5900] usb 6-1: Using ep0 maxpacket: 32 [ 568.589009][ T5900] usb 6-1: config 0 has an invalid interface number: 246 but max is 0 [ 568.601059][ T5900] usb 6-1: config 0 has no interface number 0 [ 568.618121][ T5900] usb 6-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=1e.94 [ 568.637709][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.664307][ T5900] usb 6-1: Product: syz [ 568.673147][ T5900] usb 6-1: Manufacturer: syz [ 568.688392][ T5900] usb 6-1: SerialNumber: syz [ 568.724203][ T5900] usb 6-1: config 0 descriptor?? [ 568.754957][ T5900] as10x_usb: device has been detected [ 568.762046][ T8475] hid_parser_main: 5 callbacks suppressed [ 568.762108][ T8475] isku 0003:1E7D:319C.0017: unknown main item tag 0x0 [ 568.799063][ T8475] isku 0003:1E7D:319C.0017: unknown main item tag 0x0 [ 568.812872][ T5900] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 568.815867][ T8475] isku 0003:1E7D:319C.0017: unknown main item tag 0x0 [ 568.848819][ T8475] isku 0003:1E7D:319C.0017: unknown main item tag 0x0 [ 568.868670][ T8475] isku 0003:1E7D:319C.0017: unknown main item tag 0x0 [ 568.891372][ T8475] isku 0003:1E7D:319C.0017: unknown main item tag 0x0 [ 568.906989][ T5900] usb 6-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 568.926427][ T8475] isku 0003:1E7D:319C.0017: unknown main item tag 0x0 [ 568.980034][ T8475] isku 0003:1E7D:319C.0017: hidraw1: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 569.019069][ T8475] isku 0003:1E7D:319C.0017: couldn't init struct isku_device [ 569.035816][T14387] /dev/rnullb0: Can't open blockdev [ 569.058025][ T5900] as10x_usb: error during firmware upload part1 [ 569.059070][ T8475] isku 0003:1E7D:319C.0017: couldn't install keyboard [ 569.073028][ T8462] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 569.100230][ T5900] Registered device PCTV Systems picoStick (74e) [ 569.112058][ T5900] usb 6-1: USB disconnect, device number 15 [ 569.171810][ T8462] usb 7-1: USB disconnect, device number 8 [ 569.194385][ T8475] isku 0003:1E7D:319C.0017: probe with driver isku failed with error -71 [ 569.240205][ T8475] usb 4-1: USB disconnect, device number 11 [ 569.292770][ T5900] Unregistered device PCTV Systems picoStick (74e) [ 569.318740][ T5900] as10x_usb: device has been disconnected [ 569.650924][ T5900] usb 3-1: USB disconnect, device number 31 [ 569.697251][T14419] qnx4: no qnx4 filesystem (no root dir). [ 569.727390][T14420] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 569.733967][T14420] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 569.803017][T14420] vhci_hcd vhci_hcd.0: Device attached [ 569.993616][ T5839] vhci_hcd: vhci_device speed not set [ 570.007059][T14433] /dev/rnullb0: Can't open blockdev [ 570.033529][ T8475] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 570.065201][ T5839] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 570.204870][ T5900] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 570.205754][ T8475] usb 6-1: config 0 has no interfaces? [ 570.238711][ T8475] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 570.273700][ T8475] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.304691][ T8475] usb 6-1: config 0 descriptor?? [ 570.371925][ T5900] usb 3-1: unable to get BOS descriptor or descriptor too short [ 570.387756][ T5900] usb 3-1: config 6 has an invalid interface number: 200 but max is 0 [ 570.423253][ T5900] usb 3-1: config 6 has no interface number 0 [ 570.442167][ T5900] usb 3-1: config 6 interface 200 has no altsetting 0 [ 570.472678][ T5900] usb 3-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 570.500660][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.533471][T14421] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 570.544540][ T5900] usb 3-1: Product: syz [ 570.568153][ T5900] usb 3-1: Manufacturer: syz [ 570.588041][ T5900] usb 3-1: SerialNumber: syz [ 570.639360][ T148] vhci_hcd: stop threads [ 570.668545][ T148] vhci_hcd: release socket [ 570.710737][ T148] vhci_hcd: disconnect device [ 571.608076][T14444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2535'. [ 571.795030][T14444] /dev/rnullb0: Can't open blockdev [ 571.852071][T14449] /dev/sg0: Can't lookup blockdev [ 572.412095][T14455] /dev/rnullb0: Can't open blockdev [ 572.713934][ T8477] usb 6-1: USB disconnect, device number 16 [ 572.891486][ T5900] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 572.968191][ T5900] dvb-usb: bulk message failed: -71 (3/0) [ 572.999472][ T5900] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 573.034269][ T5900] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 573.053730][ T5900] usb 3-1: media controller created [ 573.179832][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 573.211173][ T8477] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 573.267778][T14471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2545'. [ 573.277202][ T5900] dvb-usb: bulk message failed: -71 (6/0) [ 573.304769][ T5900] dvb-usb: bulk message failed: -71 (6/0) [ 573.310690][ T5900] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 573.319958][T14472] /dev/rnullb0: Can't open blockdev [ 573.376608][ T5900] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input27 [ 573.383416][ T8475] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 573.398073][ T8477] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 573.408825][ T5900] dvb-usb: schedule remote query interval to 150 msecs. [ 573.440998][ T8477] usb 6-1: config 0 has no interface number 0 [ 573.453998][ T5900] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 573.463633][ T8477] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.486828][T14477] /dev/rnullb0: Can't open blockdev [ 573.495349][ T8477] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.517672][ T5900] usb 3-1: USB disconnect, device number 32 [ 573.527361][ T8477] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 573.560798][ T8477] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.592566][ T8477] usb 6-1: config 0 descriptor?? [ 573.619700][ T8475] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.648376][ T8475] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 573.673797][ T8475] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 573.689765][ T5900] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 573.722134][ T8475] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 573.782870][ T8475] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 573.806264][ T8474] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 573.818270][ T8475] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 573.840462][T14486] /dev/rnullb0: Can't open blockdev [ 573.845986][ T8475] usb 7-1: Product: syz [ 573.865324][ T8475] usb 7-1: Manufacturer: syz [ 573.870027][ T8475] usb 7-1: SerialNumber: syz [ 573.906174][ T8475] usb 7-1: config 0 descriptor?? [ 573.926191][ T8475] radio-si470x 7-1:0.0: could not find interrupt in endpoint [ 573.943390][ T8475] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 573.970217][ T8475] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 573.983353][ T8474] usb 4-1: Using ep0 maxpacket: 8 [ 574.000988][ T8474] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 574.030063][ T8474] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 574.072069][ T8474] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.095393][ T8477] input: HID 04d9:a055 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:04D9:A055.0018/input/input28 [ 574.132623][ T8474] usb 4-1: config 0 descriptor?? [ 574.548737][T14500] /dev/nullb0: Can't open blockdev [ 575.218240][ T8477] holtek_kbd 0003:04D9:A055.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.5-1/input1 [ 575.919276][ T5839] vhci_hcd: vhci_device speed not set [ 575.950668][ T8474] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 575.981127][ T8474] usb 4-1: USB disconnect, device number 12 [ 576.083086][T14519] /dev/rnullb0: Can't open blockdev [ 576.237687][ T5931] usb 7-1: USB disconnect, device number 9 [ 576.717033][ T8477] usb 6-1: USB disconnect, device number 17 [ 577.143326][ T5931] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 577.357050][ T5931] usb 7-1: Using ep0 maxpacket: 32 [ 577.380721][ T5931] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.400474][T14553] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 577.433265][ T5931] usb 7-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 577.484835][ T5931] usb 7-1: config 0 interface 0 has no altsetting 0 [ 577.509354][ T5931] usb 7-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 577.533283][ T5931] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.568302][ T5931] usb 7-1: config 0 descriptor?? [ 578.020514][ T5931] saitek 0003:0738:1705.0019: hidraw0: USB HID v0.00 Device [HID 0738:1705] on usb-dummy_hcd.6-1/input0 [ 578.240584][ T5839] usb 7-1: USB disconnect, device number 10 [ 579.265591][T14600] Mount JFS Failure: -22 [ 580.262432][T14637] /dev/nullb0: Can't open blockdev [ 580.301654][ T8477] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 580.485424][ T8477] usb 6-1: Using ep0 maxpacket: 32 [ 580.500395][ T8477] usb 6-1: unable to get BOS descriptor or descriptor too short [ 580.511202][ T8477] usb 6-1: config 248 has an invalid interface number: 98 but max is 0 [ 580.536758][ T8477] usb 6-1: config 248 has no interface number 0 [ 580.558346][ T8477] usb 6-1: config 248 interface 98 has no altsetting 0 [ 580.583028][ T8477] usb 6-1: New USB device found, idVendor=0421, idProduct=04e6, bcdDevice=15.a7 [ 580.626622][ T8477] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.648498][ T8477] usb 6-1: Product: syz [ 580.666260][ T8477] usb 6-1: Manufacturer: syz [ 580.695933][ T8477] usb 6-1: SerialNumber: syz [ 580.975585][T14630] vxfs: WRONG superblock magic 00000000 at 1 [ 580.993688][T14630] vxfs: WRONG superblock magic 00000000 at 8 [ 581.018256][T14630] vxfs: can't find superblock. [ 581.076435][ T8477] usb 6-1: bad CDC descriptors [ 581.105352][ T8477] cdc_acm 6-1:248.98: Zero length descriptor references [ 581.142903][ T8477] cdc_acm 6-1:248.98: probe with driver cdc_acm failed with error -22 [ 581.184047][T14660] loop2: detected capacity change from 0 to 1 [ 581.202719][ T8477] usb 6-1: USB disconnect, device number 18 [ 581.231082][T14660] Dev loop2: unable to read RDB block 1 [ 581.251342][T14660] loop2: unable to read partition table [ 581.302567][T14660] loop2: partition table beyond EOD, truncated [ 581.313666][T14660] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 581.863426][ T8477] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 581.891399][T14673] /dev/rnullb0: Can't open blockdev [ 582.111150][ T8477] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 582.133377][ T8477] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 582.183324][ T8477] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 582.253410][ T8477] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 582.273261][ T8477] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 582.311467][ T8477] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 582.332983][T14684] /dev/rnullb0: Can't open blockdev [ 582.341186][ T8477] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 582.372907][ T8477] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 582.397996][ T8477] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 582.430484][ T8477] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 582.487972][ T8477] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 582.512784][ T8477] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 582.560572][ T8477] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 582.588647][T14690] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 582.595479][T14690] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 582.597756][ T8477] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 582.640766][ T8477] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 582.646439][T14690] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 582.658366][T14690] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 582.676958][T14690] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 582.683472][T14690] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 582.710947][ T8477] usb 7-1: string descriptor 0 read error: -22 [ 582.721980][ T8477] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 582.738583][ T8477] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.765014][T14690] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 582.771511][T14690] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 582.803378][T14690] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 582.809883][T14690] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 582.820140][ T8477] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 583.085713][T14707] netlink: 'syz.2.2589': attribute type 29 has an invalid length. [ 583.095057][T14707] netlink: 'syz.2.2589': attribute type 29 has an invalid length. [ 583.658134][T14728] /dev/rnullb0: Can't open blockdev [ 583.743424][ T5931] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 583.904093][ T5931] usb 3-1: Using ep0 maxpacket: 32 [ 583.921537][ T5931] usb 3-1: unable to get BOS descriptor or descriptor too short [ 583.940127][ T5931] usb 3-1: config 248 has an invalid interface number: 98 but max is 0 [ 583.961154][ T5931] usb 3-1: config 248 has no interface number 0 [ 583.980736][ T5931] usb 3-1: config 248 interface 98 has no altsetting 0 [ 583.996337][ T5931] usb 3-1: New USB device found, idVendor=0421, idProduct=04e6, bcdDevice=15.a7 [ 584.019935][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.039279][ T5931] usb 3-1: Product: syz [ 584.049219][ T5931] usb 3-1: Manufacturer: syz [ 584.065124][ T5931] usb 3-1: SerialNumber: syz [ 584.123753][ T8477] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 584.260645][ T8474] usb 7-1: USB disconnect, device number 11 [ 584.283777][ T8477] usb 4-1: device descriptor read/64, error -71 [ 584.300391][T14720] /dev/rnullb0: Can't open blockdev [ 584.347227][ T5931] usb 3-1: bad CDC descriptors [ 584.371546][ T5931] cdc_acm 3-1:248.98: Zero length descriptor references [ 584.387158][ T5931] cdc_acm 3-1:248.98: probe with driver cdc_acm failed with error -22 [ 584.411259][ T5931] usb 3-1: USB disconnect, device number 33 [ 584.544079][ T8477] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 584.703323][ T8477] usb 4-1: device descriptor read/64, error -71 [ 584.816604][ T8477] usb usb4-port1: attempt power cycle [ 585.093370][ T5931] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 585.174215][ T8477] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 585.200062][ T8477] usb 4-1: device descriptor read/8, error -71 [ 585.284336][ T5931] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 585.299305][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.341477][ T5931] usb 6-1: Product: syz [ 585.349454][ T5931] usb 6-1: Manufacturer: syz [ 585.355260][ T5931] usb 6-1: SerialNumber: syz [ 585.381643][ T5931] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 585.410629][ T5900] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 585.443349][ T8477] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 585.534054][ T8477] usb 4-1: device descriptor read/8, error -71 [ 585.652306][ T8477] usb usb4-port1: unable to enumerate USB device [ 586.645132][ T5855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 586.670320][ T5855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 586.680559][ T5855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 586.699033][ T5855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 586.710145][ T5855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 586.820463][ T8475] usb 6-1: USB disconnect, device number 19 [ 587.087778][ T5900] usb 6-1: Service connection timeout for: 258 [ 587.112666][ T5900] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 587.144791][ T5900] ath9k_htc: Failed to initialize the device [ 587.159584][ T8475] usb 6-1: ath9k_htc: USB layer deinitialized [ 587.304530][T14772] Mount JFS Failure: -22 [ 587.923447][ T8475] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 587.943575][ T8477] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 588.001907][ T1147] bridge_slave_1: left allmulticast mode [ 588.008323][T14781] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 588.019148][ T1147] bridge_slave_1: left promiscuous mode [ 588.035981][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.071411][ T1147] bridge_slave_0: left allmulticast mode [ 588.077390][ T1147] bridge_slave_0: left promiscuous mode [ 588.096227][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.106967][ T8475] usb 4-1: Using ep0 maxpacket: 32 [ 588.124242][ T8477] usb 7-1: Using ep0 maxpacket: 32 [ 588.140391][ T8475] usb 4-1: unable to get BOS descriptor or descriptor too short [ 588.156258][ T8477] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 588.186399][ T8475] usb 4-1: config 248 has an invalid interface number: 98 but max is 0 [ 588.214030][ T8475] usb 4-1: config 248 has no interface number 0 [ 588.220524][ T8477] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 588.243545][ T8475] usb 4-1: config 248 interface 98 has no altsetting 0 [ 588.250485][ T8477] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 588.259582][ T8477] usb 7-1: Product: syz [ 588.264848][T14783] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2610'. [ 588.267636][ T8475] usb 4-1: New USB device found, idVendor=0421, idProduct=04e6, bcdDevice=15.a7 [ 588.283816][ T8475] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.291844][ T8475] usb 4-1: Product: syz [ 588.303262][ T8477] usb 7-1: Manufacturer: syz [ 588.307908][ T8477] usb 7-1: SerialNumber: syz [ 588.321316][ T8475] usb 4-1: Manufacturer: syz [ 588.327247][ T8475] usb 4-1: SerialNumber: syz [ 588.342755][ T8477] usb 7-1: config 0 descriptor?? [ 588.366789][T14775] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 588.559637][ T1147] dvmrp0 (unregistering): left allmulticast mode [ 588.591581][ T8462] usb 7-1: USB disconnect, device number 12 [ 588.678417][T14786] vxfs: WRONG superblock magic 00000000 at 1 [ 588.689956][T14786] vxfs: WRONG superblock magic 00000000 at 8 [ 588.708656][T14786] vxfs: can't find superblock. [ 588.769996][ T5849] Bluetooth: hci5: command tx timeout [ 589.012983][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.036492][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.049881][T14790] exFAT-fs (rnullb0): invalid boot record signature [ 589.058136][ T1147] bond0 (unregistering): Released all slaves [ 589.064398][T14790] exFAT-fs (rnullb0): failed to read boot sector [ 589.070788][T14790] exFAT-fs (rnullb0): failed to recognize exfat type [ 589.102124][T14761] chnl_net:caif_netlink_parms(): no params data found [ 589.192198][ T8475] usb 4-1: bad CDC descriptors [ 589.234007][ T8475] cdc_acm 4-1:248.98: Zero length descriptor references [ 589.241053][ T8475] cdc_acm 4-1:248.98: probe with driver cdc_acm failed with error -22 [ 589.307354][ T8475] usb 4-1: USB disconnect, device number 17 [ 589.350031][ T1147] tipc: Left network mode [ 589.689393][T14761] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.705357][T14761] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.719323][T14761] bridge_slave_0: entered allmulticast mode [ 589.735252][T14761] bridge_slave_0: entered promiscuous mode [ 589.834078][T14761] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.841305][T14761] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.911308][T14761] bridge_slave_1: entered allmulticast mode [ 589.953487][T14761] bridge_slave_1: entered promiscuous mode [ 590.243004][T14761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.323035][T14815] Mount JFS Failure: -22 [ 590.333312][ T1147] hsr_slave_0: left promiscuous mode [ 590.333336][ T5900] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 590.354428][ T1147] hsr_slave_1: left promiscuous mode [ 590.367745][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.390664][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.413651][ T1147] veth1_vlan: left allmulticast mode [ 590.533964][ T5900] usb 4-1: Using ep0 maxpacket: 32 [ 590.550159][ T5900] usb 4-1: config 1 interface 0 altsetting 80 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 590.583383][ T5900] usb 4-1: config 1 interface 0 has no altsetting 0 [ 590.601537][ T5900] usb 4-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.40 [ 590.618818][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.645820][ T5900] usb 4-1: Product: 䴻詞ᅛઑ佽ﱬ꼥ꂪ뻈㖓宸☤⼇颺彽궴껣㳚䜑鲙⭰ᛵ牙頉벹뷑捦⚵๐ෆካ﮼읝剹ꠡ믹峅蹺ꮺ앞릷泟࿀⤿鞁淈㟺帛긍鎸溌뱳ᔞ날择䢭䊝 [ 590.671527][ T5900] usb 4-1: Manufacturer: Ο畫梼ឦ屜蛺᧸ዛ歞雅꿜諢㻮ṹ愂퍧꾂㎡仑焏뻝僷豃粈ᒰဣ姖긦ꍙ䮠ဋꉩ箬큌 [ 590.696065][ T5900] usb 4-1: SerialNumber: ࠒ [ 590.731994][ T1147] team0 (unregistering): Port device macvlan0 removed [ 590.848638][ T5849] Bluetooth: hci5: command tx timeout [ 591.270808][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 591.334230][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 591.349168][ T5900] usbhid 4-1:1.0: can't add hid device: -71 [ 591.358842][ T5900] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 591.378358][ T5900] usb 4-1: USB disconnect, device number 18 [ 592.302494][T14761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.617210][T14761] team0: Port device team_slave_0 added [ 592.665632][T14761] team0: Port device team_slave_1 added [ 592.827802][T14761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.851863][T14761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.921491][T14761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.924963][T14843] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20001 [ 592.939915][ T5849] Bluetooth: hci5: command tx timeout [ 592.970136][T14843] /dev/rnullb0: Can't open blockdev [ 592.990353][T14761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.000262][ T1147] IPVS: stop unused estimator thread 0... [ 593.006412][ T8475] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 593.020823][T14848] /dev/rnullb0: Can't open blockdev [ 593.034201][T14761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.129407][T14761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.164130][ T8475] usb 6-1: device descriptor read/64, error -71 [ 593.402272][T14761] hsr_slave_0: entered promiscuous mode [ 593.422534][ T8475] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 593.431722][T14761] hsr_slave_1: entered promiscuous mode [ 593.456017][T14761] debugfs: 'hsr0' already exists in 'hsr' [ 593.482192][T14761] Cannot create hsr debugfs directory [ 593.583311][ T8462] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 593.593905][ T8475] usb 6-1: device descriptor read/64, error -71 [ 593.605599][ T5900] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 593.716995][ T8475] usb usb6-port1: attempt power cycle [ 593.744941][ T8462] usb 7-1: Using ep0 maxpacket: 32 [ 593.762065][ T8462] usb 7-1: unable to get BOS descriptor or descriptor too short [ 593.791353][ T5900] usb 4-1: config 1 has too many interfaces: 235, using maximum allowed: 32 [ 593.808791][ T8462] usb 7-1: config 248 has an invalid interface number: 98 but max is 0 [ 593.821820][ T5900] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 593.846874][ T8462] usb 7-1: config 248 has no interface number 0 [ 593.861142][ T5900] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 235 [ 593.870919][ T8462] usb 7-1: config 248 interface 98 has no altsetting 0 [ 593.895453][ T5900] usb 4-1: config 1 has no interface number 0 [ 593.905107][ T8462] usb 7-1: New USB device found, idVendor=0421, idProduct=04e6, bcdDevice=15.a7 [ 593.918994][ T5900] usb 4-1: config 1 has no interface number 1 [ 593.925324][ T8462] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.937367][ T5900] usb 4-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 593.951738][ T8462] usb 7-1: Product: syz [ 593.965290][ T8462] usb 7-1: Manufacturer: syz [ 593.977758][ T8462] usb 7-1: SerialNumber: syz [ 593.983069][ T5900] usb 4-1: config 1 interface 105 has no altsetting 0 [ 594.014543][ T5900] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 594.035834][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.064389][ T5900] usb 4-1: Product: syz [ 594.080944][ T5900] usb 4-1: Manufacturer: syz [ 594.083549][ T8475] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 594.099221][ T5900] usb 4-1: SerialNumber: syz [ 594.134044][ T8475] usb 6-1: device descriptor read/8, error -71 [ 594.213798][T14853] /dev/rnullb0: Can't open blockdev [ 594.264804][ T8462] usb 7-1: bad CDC descriptors [ 594.286986][ T8462] cdc_acm 7-1:248.98: Zero length descriptor references [ 594.313739][ T8462] cdc_acm 7-1:248.98: probe with driver cdc_acm failed with error -22 [ 594.334600][ T5900] aqc111 4-1:1.105: probe with driver aqc111 failed with error -22 [ 594.351834][ T8462] usb 7-1: USB disconnect, device number 13 [ 594.408805][ T8475] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 594.455133][ T8475] usb 6-1: device descriptor read/8, error -71 [ 594.528734][ T1170] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 594.590271][ T8475] usb usb6-port1: unable to enumerate USB device [ 594.720120][ T8477] usb 4-1: USB disconnect, device number 19 [ 594.885835][T14761] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 594.928078][T14761] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 594.964103][T14761] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 594.981319][T14761] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 595.003461][ T5849] Bluetooth: hci5: command tx timeout [ 595.048253][T14871] binder: BINDER_SET_CONTEXT_MGR already set [ 595.054526][T14871] binder: 14870:14871 ioctl 4018620d 200000000040 returned -16 [ 595.068421][T14871] binder: 14870:14871 ioctl c0306201 0 returned -14 [ 595.308240][T14761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.361774][T14761] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.408770][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.416050][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.468983][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.476274][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.180509][T14761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.359215][T14761] veth0_vlan: entered promiscuous mode [ 596.406126][T14761] veth1_vlan: entered promiscuous mode [ 596.556798][T14761] veth0_macvtap: entered promiscuous mode [ 596.607954][T14761] veth1_macvtap: entered promiscuous mode [ 596.761116][T14761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.834405][T14761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.860089][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.896111][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.937199][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.974527][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.348802][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.390412][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.481459][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.509770][ T8474] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 597.517672][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.655840][ T8474] usb 7-1: device descriptor read/64, error -71 [ 597.878478][T14937] /dev/rnullb0: Can't open blockdev [ 597.924861][ T8474] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 597.990733][T14941] /dev/rnullb0: Can't open blockdev [ 598.103644][ T8474] usb 7-1: device descriptor read/64, error -71 [ 598.246707][ T8474] usb usb7-port1: attempt power cycle [ 598.455345][ T5839] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 598.593298][ T8474] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 598.613401][ T5839] usb 4-1: device descriptor read/64, error -71 [ 598.624163][ T8474] usb 7-1: device descriptor read/8, error -71 [ 598.865898][ T8474] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 598.873706][ T5839] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 598.914466][ T8474] usb 7-1: device descriptor read/8, error -71 [ 599.023283][ T5839] usb 4-1: device descriptor read/64, error -71 [ 599.032782][ T8474] usb usb7-port1: unable to enumerate USB device [ 599.153756][ T5839] usb usb4-port1: attempt power cycle [ 599.328334][ T5900] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 599.493344][ T5839] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 599.505981][ T5900] usb 6-1: Using ep0 maxpacket: 32 [ 599.527169][ T5900] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 599.534961][ T5839] usb 4-1: device descriptor read/8, error -71 [ 599.549779][ T5900] usb 6-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 599.575467][ T5900] usb 6-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 599.590213][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.603022][ T5900] usb 6-1: Product: syz [ 599.631268][ T5900] usb 6-1: Manufacturer: syz [ 599.648134][ T5900] usb 6-1: SerialNumber: syz [ 599.731445][T14984] usb usb8: usbfs: process 14984 (syz.2.2642) did not claim interface 0 before use [ 599.769236][T14985] /dev/rnullb0: Can't open blockdev [ 599.789012][T14984] /dev/rnullb0: Can't open blockdev [ 599.793573][ T5839] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 599.846273][ T5839] usb 4-1: device descriptor read/8, error -71 [ 599.963977][ T5839] usb usb4-port1: unable to enumerate USB device [ 600.134138][ T5900] usb 6-1: USB disconnect, device number 24 [ 602.543650][ T5839] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 602.650861][T15066] /dev/rnullb0: Can't open blockdev [ 602.705971][ T5839] usb 7-1: Using ep0 maxpacket: 16 [ 602.721917][ T5839] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 602.745544][ T5839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 602.776372][ T5839] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 602.791870][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.809592][T15068] MTD: Couldn't look up '/dev/sg0': -15 [ 602.815628][ T5839] usb 7-1: Product: syz [ 602.819917][ T5839] usb 7-1: Manufacturer: syz [ 602.825836][T15068] /dev/sg0: Can't lookup blockdev [ 602.831027][ T5839] usb 7-1: SerialNumber: syz [ 602.836683][T15068] MTD: Couldn't look up '/dev/sg0': -15 [ 602.853531][T15068] /dev/sg0: Can't lookup blockdev [ 602.859989][ T5839] usb 7-1: config 0 descriptor?? [ 602.879091][ T5839] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 602.903295][ T5839] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 602.963040][T15070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2671'. [ 602.982335][T15070] netlink: 33 bytes leftover after parsing attributes in process `syz.5.2671'. [ 602.993681][T15070] netlink: 33 bytes leftover after parsing attributes in process `syz.5.2671'. [ 603.068228][T15072] XFS (rnullb0): Invalid superblock magic number [ 603.484100][ T5839] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 603.492864][ T5839] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 603.603368][ T5900] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 603.715331][T15052] misc userio: Invalid payload size [ 603.734362][ T5839] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 603.742009][ T5839] em28xx 7-1:0.0: No AC97 audio processor [ 603.783315][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 603.799435][ T5900] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 603.810599][ T5839] usb 7-1: USB disconnect, device number 18 [ 603.812853][ T5900] usb 3-1: config 4 has no interface number 0 [ 603.846117][ T5900] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 603.847209][ T5839] em28xx 7-1:0.0: Disconnecting em28xx [ 603.874815][ T5900] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 603.896639][ T5839] em28xx 7-1:0.0: Freeing device [ 603.906052][ T5900] usb 3-1: config 4 interface 51 has no altsetting 0 [ 603.963823][ T5900] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 603.989668][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.011428][ T5900] usb 3-1: Product: syz [ 604.020929][ T5900] usb 3-1: Manufacturer: syz [ 604.045581][ T5900] usb 3-1: SerialNumber: syz [ 604.068815][T15086] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 604.088204][T15086] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 604.320825][T15086] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 604.329928][T15086] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 604.372351][ T5900] cdc_eem 3-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.2-1, CDC EEM Device, 72:5e:ec:81:f7:3b [ 604.812286][ T8462] usb 3-1: USB disconnect, device number 34 [ 604.820697][ T8462] cdc_eem 3-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.2-1, CDC EEM Device [ 605.510624][T15145] netlink: 'syz.5.2691': attribute type 27 has an invalid length. [ 605.711286][T15145] sit0: left promiscuous mode [ 605.906486][T15156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2693'. [ 605.933367][T15145] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.941199][T15145] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.205782][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 606.559207][T15145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.597597][T15145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.653404][ T5839] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 606.815738][ T5839] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.836393][ T5839] usb 7-1: config 0 has no interfaces? [ 606.850883][ T5839] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 606.870191][ T5839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.901155][ T6064] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.930128][ T6064] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.944762][ T5839] usb 7-1: config 0 descriptor?? [ 606.980416][ T6064] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.008613][ T6064] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.146132][T15182] /dev/rnullb0: Can't open blockdev [ 607.176568][ T8462] usb 7-1: USB disconnect, device number 19 [ 607.706873][T15206] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2702'. [ 607.710282][T15204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 607.793448][ T5839] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 607.983707][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.003900][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.020206][ T5839] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 608.040015][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.060981][ T5839] usb 4-1: config 0 descriptor?? [ 608.075442][T15215] tipc: Started in network mode [ 608.089850][T15215] tipc: Node identity , cluster identity 4711 [ 608.113961][T15215] tipc: Failed to obtain node identity [ 608.131156][T15215] tipc: Enabling of bearer rejected, failed to enable media [ 608.295242][ T5839] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 608.313435][ T5839] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 608.320729][ T5839] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 608.349194][ T5839] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 608.363265][ T5839] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 608.493326][ T5839] cm6533_jd 0003:0D8C:0022.001A: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 608.556696][ T5839] usb 4-1: USB disconnect, device number 24 [ 608.674823][T15222] fido_id[15222]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 609.297136][ T5900] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 609.470639][ T5900] usb 7-1: Using ep0 maxpacket: 32 [ 609.496881][ T5900] usb 7-1: config 6 has an invalid interface number: 140 but max is 0 [ 609.526473][ T5900] usb 7-1: config 6 has no interface number 0 [ 609.528227][T15259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.532632][ T5900] usb 7-1: config 6 interface 140 has no altsetting 0 [ 609.598254][ T5900] usb 7-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice= a.2b [ 609.608143][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.610593][T15259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.623303][ T5900] usb 7-1: Product: syz [ 609.643007][ T5900] usb 7-1: Manufacturer: syz [ 609.661714][ T5900] usb 7-1: SerialNumber: syz [ 609.757208][ T5839] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 609.899232][T15230] sctp: [Deprecated]: syz.6.2710 (pid 15230) Use of int in max_burst socket option. [ 609.899232][T15230] Use struct sctp_assoc_value instead [ 610.060551][ T5900] mvusb_mdio 7-1:6.140: probe with driver mvusb_mdio failed with error -5 [ 610.103777][ T5900] usb 7-1: USB disconnect, device number 20 [ 610.243701][ T5839] usb 6-1: device descriptor read/64, error -71 [ 610.488737][ T5839] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 610.643548][ T5839] usb 6-1: Using ep0 maxpacket: 8 [ 610.670910][ T5839] usb 6-1: too many configurations: 120, using maximum allowed: 8 [ 610.709930][ T5839] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 610.725999][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24 [ 610.755016][ T5839] usb 6-1: Product: syz [ 610.763388][ T5839] usb 6-1: Manufacturer: syz [ 610.772536][ T5839] usb 6-1: SerialNumber: syz [ 610.826750][ T5839] usb 6-1: config 0 descriptor?? [ 610.855983][ T5839] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 610.883293][T15292] overlayfs: failed to resolve './file0': -2 [ 610.893519][ T5839] usb 6-1: setting power ON [ 610.906091][ T5839] dvb-usb: bulk message failed: -22 (2/0) [ 610.946796][ T5839] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 610.968294][ T5839] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 611.001405][ T5839] usb 6-1: media controller created [ 611.127486][T15267] /dev/rnullb0: Can't open blockdev [ 611.133019][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 611.209297][ T5839] usb 6-1: selecting invalid altsetting 6 [ 611.251390][ T5839] usb 6-1: digital interface selection failed (-22) [ 611.259354][ T5839] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 611.279911][ T5839] usb 6-1: setting power OFF [ 611.312090][ T5839] dvb-usb: bulk message failed: -22 (2/0) [ 611.341794][ T5839] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 611.362671][ T5839] (NULL device *): no alternate interface [ 611.458739][T15300] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2727'. [ 611.540668][ T5839] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 611.584935][ T5839] usb 6-1: USB disconnect, device number 26 [ 611.884776][T15312] syzkaller1: entered promiscuous mode [ 611.890665][T15312] syzkaller1: entered allmulticast mode [ 611.932323][T15312] /dev/rnullb0: Can't open blockdev [ 612.128249][T15308] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 612.153713][T15308] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 612.159785][T15308] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 612.259089][T15308] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 612.273424][T15308] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 612.334613][T15308] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 612.354812][T15308] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 612.372401][T15308] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 612.393890][T15308] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 612.415103][T15308] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 612.423442][T15308] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 612.437691][T15308] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 612.695902][T15335] /dev/rnullb0: Can't open blockdev [ 612.701259][ T5900] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 612.713281][ T8464] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 612.875959][ T5900] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 612.889094][ T5900] usb 3-1: config 0 interface 0 has no altsetting 0 [ 612.925568][ T5900] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 612.937556][ T8464] usb 7-1: Using ep0 maxpacket: 8 [ 612.948150][ T8464] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 612.963434][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 612.971660][ T5900] usb 3-1: Product: syz [ 612.983258][ T8464] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 613.003376][ T5900] usb 3-1: Manufacturer: syz [ 613.008034][ T5900] usb 3-1: SerialNumber: syz [ 613.013386][ T8464] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 613.035784][ T5900] usb 3-1: config 0 descriptor?? [ 613.041977][ T8464] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 613.067969][ T5900] usb 3-1: selecting invalid altsetting 0 [ 613.084065][ T8464] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 613.093159][ T8464] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.117944][ T8474] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 613.251519][ T5839] usb 3-1: USB disconnect, device number 35 [ 613.273351][ T8474] usb 4-1: device descriptor read/64, error -71 [ 613.355448][ T8464] usb 7-1: GET_CAPABILITIES returned 0 [ 613.361010][ T8464] usbtmc 7-1:16.0: can't read capabilities [ 613.513355][ T8474] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 613.552570][T15308] /dev/rnullb0: Can't open blockdev [ 613.570468][ T8464] usb 7-1: USB disconnect, device number 21 [ 613.653423][ T8474] usb 4-1: device descriptor read/64, error -71 [ 613.773783][ T8474] usb usb4-port1: attempt power cycle [ 613.963646][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 614.125574][ T8474] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 614.156287][ T8474] usb 4-1: device descriptor read/8, error -71 [ 614.203376][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 614.283305][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 614.370416][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 614.393291][ T8474] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 614.414141][ T8474] usb 4-1: device descriptor read/8, error -71 [ 614.445637][ T5849] Bluetooth: hci5: command 0x0c1a tx timeout [ 614.518637][T15367] /dev/rnullb0: Can't open blockdev [ 614.527559][ T8474] usb usb4-port1: unable to enumerate USB device [ 614.673733][ T8477] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 614.835365][ T8477] usb 3-1: Using ep0 maxpacket: 8 [ 614.848572][ T8477] usb 3-1: New USB device found, idVendor=15c2, idProduct=0043, bcdDevice= 2.c9 [ 614.865920][ T8477] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.884235][ T8477] usb 3-1: Product: syz [ 614.891867][ T8477] usb 3-1: Manufacturer: syz [ 614.897922][ T8477] usb 3-1: SerialNumber: syz [ 614.912853][ T8477] usb 3-1: config 0 descriptor?? [ 614.929959][ T8477] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 614.953476][ T8477] imon 3-1:0.0: unable to initialize intf0, err -19 [ 614.976296][ T8477] imon:imon_probe: failed to initialize context! [ 614.991953][ T8477] imon 3-1:0.0: unable to register, err -19 [ 615.495051][ T8464] usb 3-1: USB disconnect, device number 36 [ 616.183869][T15416] /dev/rnullb0: Can't open blockdev [ 616.287516][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 616.299431][T15420] /dev/rnullb0: Can't open blockdev [ 616.363513][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 616.443326][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 616.515026][T15426] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2758'. [ 616.533338][ T5849] Bluetooth: hci5: command 0x0c1a tx timeout [ 616.704003][T15434] /dev/rnullb0: Can't open blockdev [ 617.798838][T15460] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2767'. [ 617.873515][ T5900] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 618.073475][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 618.095818][ T5900] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.133814][ T5900] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 618.189147][ T5900] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=58.31 [ 618.220361][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=22, SerialNumber=3 [ 618.244848][ T5900] usb 3-1: Product: syz [ 618.261932][ T5900] usb 3-1: Manufacturer: syz [ 618.271639][ T5900] usb 3-1: SerialNumber: syz [ 618.308730][ T5900] usb 3-1: config 0 descriptor?? [ 618.443320][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 618.523303][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 618.604403][ T5849] Bluetooth: hci5: command 0x0c1a tx timeout [ 618.648819][ T5900] usb 3-1: USB disconnect, device number 37 [ 618.793279][ T8474] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 618.894298][ T8477] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 618.966024][ T8474] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 618.983346][ T8474] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.010408][ T8474] usb 7-1: config 0 descriptor?? [ 619.037159][ T8474] cp210x 7-1:0.0: cp210x converter detected [ 619.065922][ T8477] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 619.081511][ T8477] usb 4-1: config 0 has no interface number 0 [ 619.113529][ T8477] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 619.143306][ T8477] usb 4-1: config 0 interface 200 has no altsetting 0 [ 619.168378][ T8477] usb 4-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 619.189021][ T8477] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.212245][ T8477] usb 4-1: Product: syz [ 619.216969][ T8477] usb 4-1: Manufacturer: syz [ 619.221815][ T8477] usb 4-1: SerialNumber: syz [ 619.249937][ T8477] usb 4-1: config 0 descriptor?? [ 619.256430][ T8474] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 619.273488][ T8474] cp210x 7-1:0.0: querying part number failed [ 619.301376][ T8474] usb 7-1: cp210x converter now attached to ttyUSB0 [ 619.460115][T15471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.481605][T15473] netlink: 'syz.3.2772': attribute type 7 has an invalid length. [ 619.486245][T15471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.504027][T15473] netlink: 'syz.3.2772': attribute type 5 has an invalid length. [ 619.511809][T15473] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2772'. [ 619.551875][T15473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2772'. [ 619.570508][ T8475] usb 7-1: USB disconnect, device number 22 [ 619.584312][ T8475] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 619.602214][ T8475] cp210x 7-1:0.0: device disconnected [ 619.617588][ T8477] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.200/input/input29 [ 619.629441][ T8474] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 619.683817][ T8477] usb 4-1: USB disconnect, device number 29 [ 619.810576][ T8474] usb 6-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 619.828735][ T8474] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.853292][ T8474] usb 6-1: Product: syz [ 619.857576][ T8474] usb 6-1: Manufacturer: syz [ 619.862224][ T8474] usb 6-1: SerialNumber: syz [ 619.904713][ T8474] usb 6-1: config 0 descriptor?? [ 620.457623][ T8477] usb 6-1: USB disconnect, device number 27 [ 620.723333][ T8474] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 620.802490][T15500] qrtr: Invalid version 43 [ 620.834702][T15503] sctp: [Deprecated]: syz.2.2782 (pid 15503) Use of int in maxseg socket option. [ 620.834702][T15503] Use struct sctp_assoc_value instead [ 620.915404][ T8474] usb 7-1: Using ep0 maxpacket: 32 [ 620.946418][ T8474] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.979041][ T8474] usb 7-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 621.037303][ T8474] usb 7-1: config 0 interface 0 has no altsetting 0 [ 621.058527][ T8474] usb 7-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 621.083340][ T8474] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.088093][T15509] /dev/rnullb0: Can't open blockdev [ 621.125149][ T8474] usb 7-1: config 0 descriptor?? [ 621.510473][T15519] net_ratelimit: 66 callbacks suppressed [ 621.510521][T15519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.594927][ T8474] saitek 0003:0738:1705.001B: item fetching failed at offset 0/3 [ 621.623752][ T8474] saitek 0003:0738:1705.001B: parse failed [ 621.637969][ T8474] saitek 0003:0738:1705.001B: probe with driver saitek failed with error -22 [ 621.771056][ T8475] usb 7-1: USB disconnect, device number 23 [ 621.983291][ T8474] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 622.165011][ T8474] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 622.182934][ T8474] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 622.225111][ T8474] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 622.245902][ T8474] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 622.293384][ T8474] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.315891][ T8474] usb 3-1: Product: syz [ 622.320144][ T8474] usb 3-1: Manufacturer: syz [ 622.345337][ T8474] usb 3-1: SerialNumber: syz [ 622.378471][ T8474] usb 3-1: config 0 descriptor?? [ 622.398451][T15524] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 622.417989][T15524] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 622.441749][ T8474] usb 3-1: ucan: probing device on interface #0 [ 622.623343][ T8464] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 622.803359][ T8464] usb 4-1: Using ep0 maxpacket: 16 [ 622.837165][ T8464] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 622.856472][ T8474] usb 3-1: ucan: device reported invalid tx-fifo size [ 622.885765][ T8464] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 622.894977][ T8474] usb 3-1: ucan: probe failed; try to update the device firmware [ 622.924077][ T8464] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.953471][ T8464] usb 4-1: Product: syz [ 622.963979][ T8464] usb 4-1: Manufacturer: syz [ 622.973438][ T8464] usb 4-1: SerialNumber: syz [ 622.999334][ T8464] usb 4-1: config 0 descriptor?? [ 623.263919][ T5900] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 623.296242][T15550] binder: 15549:15550 ioctl c0306201 2000000003c0 returned -14 [ 623.357399][ T8474] usb 3-1: USB disconnect, device number 38 [ 623.848458][T15557] overlayfs: failed to resolve './file0': -2 [ 623.976512][ T5900] usb 7-1: Using ep0 maxpacket: 8 [ 624.017360][ T5900] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 624.029772][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.063408][ T5900] usb 7-1: Product: syz [ 624.067645][ T5900] usb 7-1: Manufacturer: syz [ 624.072282][ T5900] usb 7-1: SerialNumber: syz [ 624.115407][ T5900] usb 7-1: config 0 descriptor?? [ 624.326584][ T5900] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 624.404040][ T8464] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 624.565678][ T8464] usb 3-1: Using ep0 maxpacket: 8 [ 624.578971][ T8464] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 624.599505][ T8464] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.612241][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.633412][ T8464] usb 3-1: Product: syz [ 624.637671][ T8464] usb 3-1: Manufacturer: syz [ 624.642312][ T8464] usb 3-1: SerialNumber: syz [ 624.659946][ T8464] usb 3-1: config 0 descriptor?? [ 624.681506][T15564] XFS (rnullb0): Invalid superblock magic number [ 624.692697][ T8464] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 624.860370][ T8474] usb 4-1: USB disconnect, device number 30 [ 624.905859][T15561] /dev/rnullb0: Can't open blockdev [ 624.912594][ T8464] gspca_vc032x: reg_r err -71 [ 624.921554][ T8464] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 624.935910][T15542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.953871][ T8464] usb 3-1: USB disconnect, device number 39 [ 624.957167][T15542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.227915][T15573] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2802'. [ 625.248985][T15573] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2802'. [ 625.560058][T15579] /dev/rnullb0: Can't open blockdev [ 625.589011][ T5900] usb write operation failed. (-71) [ 625.594271][ T8475] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 625.634253][ T5900] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 625.663773][ T5900] dvbdev: DVB: registering new adapter (Terratec H7) [ 625.673083][ T5900] usb 7-1: media controller created [ 625.692349][ T5900] usb read operation failed. (-71) [ 625.703745][ T5900] usb write operation failed. (-71) [ 625.724688][ T5900] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 625.744596][ T8475] usb 6-1: Using ep0 maxpacket: 8 [ 625.759948][ T8475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 625.773883][ T5900] usb 7-1: USB disconnect, device number 24 [ 625.786052][ T8475] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 625.808312][T15585] /dev/rnullb0: Can't open blockdev [ 625.828456][ T8475] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.851171][T15588] netlink: 'syz.3.2807': attribute type 1 has an invalid length. [ 625.860443][ T8475] usb 6-1: config 0 descriptor?? [ 625.897543][T15588] netlink: 'syz.3.2807': attribute type 101 has an invalid length. [ 625.914754][T15588] netlink: 564 bytes leftover after parsing attributes in process `syz.3.2807'. [ 626.100501][ T8475] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 626.117298][T15597] /dev/rnullb0: Can't open blockdev [ 626.526632][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 626.568716][T15577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.615185][T15577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.875013][ T8474] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 627.067578][ T8474] usb 7-1: unable to get BOS descriptor or descriptor too short [ 627.118567][ T8474] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 627.153007][ T8474] usb 7-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 627.175566][ T8474] usb 7-1: config 1 interface 0 has no altsetting 0 [ 627.191071][ T8474] usb 7-1: string descriptor 0 read error: -22 [ 627.205089][ T8474] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 627.225448][ T8474] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.279883][ T8474] usb 7-1: bad CDC descriptors [ 627.323480][T15612] /dev/rnullb0: Can't open blockdev [ 628.946904][ T8464] usb 7-1: USB disconnect, device number 25 [ 628.981852][ T5900] usb 6-1: USB disconnect, device number 28 [ 629.392838][T15639] /dev/rnullb0: Can't open blockdev [ 629.425554][T15643] /dev/rnullb0: Can't open blockdev [ 630.143589][T15661] /dev/rnullb0: Can't open blockdev [ 631.053322][ T5849] Bluetooth: hci1: Malformed Event: 0x13 [ 631.397163][T15687] /dev/rnullb0: Can't open blockdev [ 631.449405][T15687] /dev/rnullb0: Can't open blockdev [ 632.988876][ T8475] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 633.143357][ T8475] usb 4-1: Using ep0 maxpacket: 32 [ 633.164187][ T8475] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 633.183417][ T8475] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.203096][ T8475] usb 4-1: Product: syz [ 633.213242][ T8475] usb 4-1: Manufacturer: syz [ 633.225101][ T8475] usb 4-1: SerialNumber: syz [ 633.242961][T15719] /dev/rnullb0: Can't open blockdev [ 633.275289][ T8475] usb 4-1: config 0 descriptor?? [ 633.296362][ T8475] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 633.673264][ T8477] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 633.736405][ T5900] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 633.769115][ T8475] gspca_ov534_9: reg_w failed -71 [ 633.848761][ T8477] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 633.864027][ T8477] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 633.892616][ T8477] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 633.925679][ T8477] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 633.934708][ T5900] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.942329][ T8477] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 633.993246][ T5900] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 633.999156][ T8477] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 634.063246][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 634.073284][ T8477] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 634.084205][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 634.086084][ T8475] gspca_ov534_9: Unknown sensor 0000 [ 634.106198][ T8475] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 634.148766][ T8477] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 634.161965][ T8472] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 634.193259][ T5900] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 634.207375][ T8475] usb 4-1: USB disconnect, device number 31 [ 634.240226][ T5900] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 634.241633][ T8477] usb 7-1: string descriptor 0 read error: -22 [ 634.250864][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 634.276291][ T5900] usb 6-1: Product: syz [ 634.294938][ T8477] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 634.318873][ T8477] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.345907][ T8472] usb 3-1: unable to get BOS descriptor or descriptor too short [ 634.356190][ T5900] usb 6-1: Manufacturer: syz [ 634.360836][ T5900] usb 6-1: SerialNumber: syz [ 634.375355][ T8477] usb 7-1: config 0 descriptor?? [ 634.387288][ T8472] usb 3-1: not running at top speed; connect to a high speed hub [ 634.395812][ T5900] usb 6-1: config 0 descriptor?? [ 634.396504][ T8477] hub 7-1:0.0: bad descriptor, ignoring hub [ 634.429992][ T8472] usb 3-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 634.442113][ T8477] hub 7-1:0.0: probe with driver hub failed with error -5 [ 634.466399][ T8472] usb 3-1: config 219 interface 0 has no altsetting 0 [ 634.487082][ T8477] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input30 [ 634.499265][ T8472] usb 3-1: config 219 interface 0 has no altsetting 1 [ 634.520693][ T8472] usb 3-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 634.546619][ T8472] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.576205][ T8472] usb 3-1: Product: syz [ 634.586542][ T8472] usb 3-1: Manufacturer: syz [ 634.607798][ T5900] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 634.609282][ T8472] usb 3-1: SerialNumber: syz [ 634.623842][ T5900] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 634.657881][ T8477] usb 7-1: USB disconnect, device number 26 [ 634.663943][ C0] usb_acecad 7-1:0.0: can't resubmit intr, dummy_hcd.6-1/input0, status -19 [ 634.868774][T15739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.881563][T15739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.008714][ T8472] usb 3-1: selecting invalid altsetting 0 [ 635.026731][ T8472] usb 3-1: selecting invalid altsetting 0 [ 635.088861][ T8472] usb 3-1: USB disconnect, device number 40 [ 635.242086][ T5900] usb 6-1: USB disconnect, device number 29 [ 635.277457][T15772] netlink: 'syz.3.2852': attribute type 2 has an invalid length. [ 635.320214][T15772] netlink: 'syz.3.2852': attribute type 1 has an invalid length. [ 635.443721][T15775] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2852'. [ 635.903534][ T8464] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 636.119333][ T8464] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 636.136549][ T8464] usb 3-1: config 0 has no interface number 0 [ 636.153302][ T8464] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 636.164884][ T8464] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.182424][ T8464] usb 3-1: Product: syz [ 636.192520][ T8464] usb 3-1: Manufacturer: syz [ 636.203463][ T8464] usb 3-1: SerialNumber: syz [ 636.230064][ T8464] usb 3-1: config 0 descriptor?? [ 636.457953][ T8464] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 636.495483][T15797] netlink: 'syz.6.2862': attribute type 21 has an invalid length. [ 636.496350][ T8464] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 636.559083][ T8464] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 636.561815][T15797] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2862'. [ 636.573366][ T8464] usb 3-1: media controller created [ 636.676078][T15797] netlink: 'syz.6.2862': attribute type 21 has an invalid length. [ 636.698283][ T8464] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 636.742703][T15797] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2862'. [ 636.763555][ T31] INFO: task syz.0.2171:12815 blocked for more than 143 seconds. [ 636.771342][ T31] Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 [ 636.806940][ T31] Blocked by coredump. [ 636.811802][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 636.827101][ T31] task:syz.0.2171 state:D stack:25096 pid:12815 tgid:12815 ppid:5852 task_flags:0x40044c flags:0x00004004 [ 636.844180][T15797] netlink: 'syz.6.2862': attribute type 21 has an invalid length. [ 636.861817][ T31] Call Trace: [ 636.874390][ T31] [ 636.880756][ T31] __schedule+0x1737/0x4d30 [ 636.898119][ T31] ? __lock_acquire+0xab9/0xd20 [ 636.910671][T15797] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2862'. [ 636.916073][ T31] ? schedule+0x165/0x360 [ 636.952482][ T31] ? __lock_acquire+0xab9/0xd20 [ 636.973605][ T31] ? __pfx___schedule+0x10/0x10 [ 636.978556][ T31] ? schedule+0x91/0x360 [ 636.982858][ T31] schedule+0x165/0x360 [ 636.991656][T15797] netlink: 'syz.6.2862': attribute type 21 has an invalid length. [ 636.998032][ T31] schedule_preempt_disabled+0x13/0x30 [ 637.014296][T15809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.023113][T15809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.040857][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 637.048483][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 637.051560][T15797] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2862'. [ 637.054314][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 637.054351][ T31] ? exit_mm+0xcc/0x2c0 [ 637.090421][T15797] netlink: 'syz.6.2862': attribute type 21 has an invalid length. [ 637.115639][ T8462] usb 3-1: USB disconnect, device number 41 [ 637.129999][T15797] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2862'. [ 637.140347][ T31] ? __pfx_mm_release+0x10/0x10 [ 637.149674][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 637.157194][ T31] down_read+0x98/0x2e0 [ 637.161415][ T31] exit_mm+0xcc/0x2c0 [ 637.183641][T15797] netlink: 'syz.6.2862': attribute type 21 has an invalid length. [ 637.201276][ T31] ? __pfx_exit_mm+0x10/0x10 [ 637.216381][ T31] ? rcu_is_watching+0x15/0xb0 [ 637.221227][ T31] do_exit+0x648/0x2300 [ 637.225116][T15797] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2862'. [ 637.237213][ T31] ? do_raw_spin_lock+0x121/0x290 [ 637.242317][ T31] ? __pfx_do_exit+0x10/0x10 [ 637.265340][ T31] do_group_exit+0x21c/0x2d0 [ 637.270008][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 637.284015][ T31] get_signal+0x1286/0x1340 [ 637.288619][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 637.303408][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 637.309749][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 637.325003][ T31] exit_to_user_mode_loop+0x75/0x110 [ 637.330362][ T31] do_syscall_64+0x2bd/0x3b0 [ 637.343550][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 637.348836][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.387659][ T31] ? clear_bhb_loop+0x60/0xb0 [ 637.392688][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.403603][ T31] RIP: 0033:0x7f4e1898e9e3 [ 637.413397][ T31] RSP: 002b:00007ffd40ad0758 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 637.453264][ T31] RAX: fffffffffffffffc RBX: 00007f4e16ff76c0 RCX: 00007f4e1898e9e3 [ 637.461422][ T31] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 637.483263][ T31] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 637.492766][ T31] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffd40ad08b0 [ 637.517986][ T31] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 637.527249][ T31] [ 637.530367][ T31] INFO: task syz.0.2171:12817 blocked for more than 144 seconds. [ 637.568782][ T31] Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 [ 637.587009][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 637.613226][ T31] task:syz.0.2171 state:D stack:28152 pid:12817 tgid:12815 ppid:5852 task_flags:0x400040 flags:0x00004004 [ 637.643493][ T31] Call Trace: [ 637.646922][ T31] [ 637.649896][ T31] __schedule+0x1737/0x4d30 [ 637.663320][ T31] ? __lock_acquire+0xab9/0xd20 [ 637.671194][ T31] ? schedule+0x165/0x360 [ 637.678452][ T31] ? __lock_acquire+0xab9/0xd20 [ 637.692435][ T31] ? __pfx___schedule+0x10/0x10 [ 637.705424][ T31] ? schedule+0x91/0x360 [ 637.709753][ T31] schedule+0x165/0x360 [ 637.723843][ T31] schedule_preempt_disabled+0x13/0x30 [ 637.733874][ T31] rwsem_down_write_slowpath+0xbec/0x1030 [ 637.739667][ T31] ? rwsem_down_write_slowpath+0x7ec/0x1030 [ 637.763267][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 637.769626][ T31] ? __lock_acquire+0xab9/0xd20 [ 637.784840][ T31] ? userfaultfd_ioctl+0x20b1/0x4c80 [ 637.790225][ T31] ? __might_fault+0xb0/0x130 [ 637.813317][ T31] down_write+0x1ab/0x1f0 [ 637.817826][ T31] ? __pfx_down_write+0x10/0x10 [ 637.822739][ T31] userfaultfd_ioctl+0x20b1/0x4c80 [ 637.838459][ T31] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 637.853417][ T31] ? security_file_ioctl+0x10/0x2d0 [ 637.866970][ T31] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 637.882995][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 637.893120][ T31] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 637.899138][ T31] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 637.923215][ T31] ? do_vfs_ioctl+0xbe8/0x1430 [ 637.928157][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 637.938452][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 637.953230][ T31] ? __lock_acquire+0xab9/0xd20 [ 637.958189][ T31] ? __fget_files+0x2a/0x420 [ 637.973258][ T31] ? __fget_files+0x3a0/0x420 [ 637.978025][ T31] ? __fget_files+0x2a/0x420 [ 637.982703][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 638.003313][ T31] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 638.013122][ T31] __se_sys_ioctl+0xf9/0x170 [ 638.023374][ T31] do_syscall_64+0xfa/0x3b0 [ 638.033654][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 638.044539][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.061284][ T31] ? clear_bhb_loop+0x60/0xb0 [ 638.074629][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.093254][ T31] RIP: 0033:0x7f4e1898e9a9 [ 638.097764][ T31] RSP: 002b:00007f4e19734038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 638.122587][ T31] RAX: ffffffffffffffda RBX: 00007f4e18bb6080 RCX: 00007f4e1898e9a9 [ 638.146038][ T31] RDX: 0000200000000000 RSI: 00000000c020aa00 RDI: 0000000000000003 [ 638.154275][ T31] RBP: 00007f4e18a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 638.162300][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.171273][ T31] R13: 0000000000000001 R14: 00007f4e18bb6080 R15: 00007ffd40ad07b8 [ 638.182367][ T31] [ 638.186493][ T31] [ 638.186493][ T31] Showing all locks held in the system: [ 638.234653][ T31] 2 locks held by ksoftirqd/1/23: [ 638.241068][ T31] 1 lock held by khungtaskd/31: [ 638.250115][ T31] #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 638.262720][ T31] 2 locks held by getty/5610: [ 638.273221][ T31] #0: ffff888033d4e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 638.283064][ T31] #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 638.303048][ T31] 1 lock held by syz-executor/5834: [ 638.312867][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 638.327384][ T31] 1 lock held by syz.0.2171/12815: [ 638.332916][ T31] #0: ffff88807e9401e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 [ 638.348002][ T31] 1 lock held by syz.0.2171/12816: [ 638.353422][ T31] 1 lock held by syz.0.2171/12817: [ 638.358570][ T31] #0: ffff88807e9401e0 (&mm->mmap_lock){++++}-{4:4}, at: userfaultfd_ioctl+0x20b1/0x4c80 [ 638.376410][ T31] 1 lock held by syz.3.2857/15785: [ 638.403401][ T31] [ 638.405855][ T31] ============================================= [ 638.405855][ T31] [ 638.429575][ T31] NMI backtrace for cpu 0 [ 638.429603][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 638.429629][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 638.429642][ T31] Call Trace: [ 638.429652][ T31] [ 638.429662][ T31] dump_stack_lvl+0x189/0x250 [ 638.429700][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 638.429730][ T31] ? __pfx__printk+0x10/0x10 [ 638.429773][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 638.429803][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 638.429832][ T31] ? __pfx__printk+0x10/0x10 [ 638.429866][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 638.429894][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 638.429924][ T31] watchdog+0xf93/0xfe0 [ 638.429952][ T31] ? watchdog+0x1de/0xfe0 [ 638.429988][ T31] kthread+0x70e/0x8a0 [ 638.430023][ T31] ? __pfx_watchdog+0x10/0x10 [ 638.430044][ T31] ? __pfx_kthread+0x10/0x10 [ 638.430076][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 638.430103][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 638.430131][ T31] ? __pfx_kthread+0x10/0x10 [ 638.430162][ T31] ret_from_fork+0x3f9/0x770 [ 638.430191][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 638.430223][ T31] ? __switch_to_asm+0x39/0x70 [ 638.430241][ T31] ? __switch_to_asm+0x33/0x70 [ 638.430259][ T31] ? __pfx_kthread+0x10/0x10 [ 638.430291][ T31] ret_from_fork_asm+0x1a/0x30 [ 638.430327][ T31] [ 638.430335][ T31] Sending NMI from CPU 0 to CPUs 1: [ 638.582075][ C1] NMI backtrace for cpu 1 [ 638.582096][ C1] CPU: 1 UID: 0 PID: 15785 Comm: syz.3.2857 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 638.582117][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 638.582129][ C1] RIP: 0010:is_bpf_text_address+0xfa/0x2b0 [ 638.582158][ C1] Code: 8b 25 3a 08 52 0c 44 89 e3 83 e3 01 4c 8d 3c dd f0 13 21 8e 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 76 45 54 00 <4d> 8b 3f 4d 85 ff 0f 84 c1 00 00 00 4c 89 24 24 c1 e3 03 8d 2c 5b [ 638.582174][ C1] RSP: 0018:ffffc9000a6bf010 EFLAGS: 00000246 [ 638.582191][ C1] RAX: 1ffffffff1c4227e RBX: 0000000000000000 RCX: ffff88807b591e00 [ 638.582204][ C1] RDX: 0000000000000000 RSI: ffffffff8c04d3e0 RDI: ffffffff8c04d3a0 [ 638.582217][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff81cf0ad6 [ 638.582228][ C1] R10: ffffc9000a6bf0f8 R11: ffffffff81ac9660 R12: 0000000000000004 [ 638.582240][ C1] R13: dffffc0000000000 R14: 00007f1e3cf8e9a9 R15: ffffffff8e2113f0 [ 638.582254][ C1] FS: 0000000000000000(0000) GS:ffff8881258ab000(0000) knlGS:0000000000000000 [ 638.582269][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 638.582281][ C1] CR2: 00007f9013f83178 CR3: 000000007799e000 CR4: 00000000003526f0 [ 638.582297][ C1] Call Trace: [ 638.582304][ C1] [ 638.582311][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 638.582335][ C1] kernel_text_address+0xa5/0xe0 [ 638.582353][ C1] __kernel_text_address+0xd/0x40 [ 638.582370][ C1] unwind_get_return_address+0x4d/0x90 [ 638.582394][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 638.582420][ C1] arch_stack_walk+0xfc/0x150 [ 638.582451][ C1] stack_trace_save+0x9c/0xe0 [ 638.582476][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 638.582507][ C1] save_stack+0xf5/0x1f0 [ 638.582527][ C1] ? __pfx_save_stack+0x10/0x10 [ 638.582545][ C1] ? free_unref_folios+0xdbd/0x1520 [ 638.582566][ C1] ? folios_put_refs+0x559/0x640 [ 638.582591][ C1] ? truncate_inode_pages_range+0x346/0xda0 [ 638.582608][ C1] ? blkdev_flush_mapping+0x108/0x270 [ 638.582634][ C1] ? bdev_release+0x417/0x650 [ 638.582656][ C1] ? blkdev_release+0x15/0x20 [ 638.582680][ C1] ? __fput+0x449/0xa70 [ 638.582696][ C1] ? task_work_run+0x1d4/0x260 [ 638.582711][ C1] ? do_exit+0x6b5/0x2300 [ 638.582745][ C1] ? do_group_exit+0x21c/0x2d0 [ 638.582759][ C1] ? get_signal+0x1286/0x1340 [ 638.582783][ C1] ? arch_do_signal_or_restart+0x9a/0x750 [ 638.582803][ C1] ? exit_to_user_mode_loop+0x75/0x110 [ 638.582821][ C1] ? do_syscall_64+0x2bd/0x3b0 [ 638.582848][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.582868][ C1] ? page_ext_put+0x97/0xc0 [ 638.582890][ C1] __reset_page_owner+0x71/0x1f0 [ 638.582911][ C1] free_unref_folios+0xdbd/0x1520 [ 638.582938][ C1] ? folios_put_refs+0x299/0x640 [ 638.582964][ C1] folios_put_refs+0x559/0x640 [ 638.582996][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 638.583020][ C1] ? folio_mapping+0x16f/0x240 [ 638.583038][ C1] ? folio_unlock+0x101/0x160 [ 638.583067][ C1] truncate_inode_pages_range+0x346/0xda0 [ 638.583093][ C1] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 638.583125][ C1] ? has_bh_in_lru+0x307/0x340 [ 638.583143][ C1] ? __pfx_has_bh_in_lru+0x10/0x10 [ 638.583160][ C1] ? smp_call_function_many_cond+0xe4f/0x12d0 [ 638.583200][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 638.583231][ C1] ? __pfx_has_bh_in_lru+0x10/0x10 [ 638.583252][ C1] blkdev_flush_mapping+0x108/0x270 [ 638.583277][ C1] ? bdev_release+0x40f/0x650 [ 638.583301][ C1] bdev_release+0x417/0x650 [ 638.583329][ C1] ? __pfx_blkdev_release+0x10/0x10 [ 638.583360][ C1] blkdev_release+0x15/0x20 [ 638.583385][ C1] __fput+0x449/0xa70 [ 638.583409][ C1] task_work_run+0x1d4/0x260 [ 638.583426][ C1] ? __pfx_task_work_run+0x10/0x10 [ 638.583448][ C1] do_exit+0x6b5/0x2300 [ 638.583481][ C1] ? do_raw_spin_lock+0x121/0x290 [ 638.583509][ C1] ? __pfx_do_exit+0x10/0x10 [ 638.583542][ C1] do_group_exit+0x21c/0x2d0 [ 638.583558][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 638.583583][ C1] get_signal+0x1286/0x1340 [ 638.583614][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 638.583635][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 638.583661][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 638.583689][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 638.583709][ C1] exit_to_user_mode_loop+0x75/0x110 [ 638.583736][ C1] do_syscall_64+0x2bd/0x3b0 [ 638.583760][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 638.583784][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.583800][ C1] ? clear_bhb_loop+0x60/0xb0 [ 638.583820][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.583837][ C1] RIP: 0033:0x7f1e3cf8e9a9 [ 638.583852][ C1] Code: Unable to access opcode bytes at 0x7f1e3cf8e97f. [ 638.583861][ C1] RSP: 002b:00007f1e3dee2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 638.583879][ C1] RAX: 0000200000000000 RBX: 00007f1e3d1b5fa0 RCX: 00007f1e3cf8e9a9 [ 638.583892][ C1] RDX: 0000000003000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 638.583903][ C1] RBP: 00007f1e3d010d69 R08: 0000000000000003 R09: 0000000093774000 [ 638.583916][ C1] R10: 0000000000022052 R11: 0000000000000246 R12: 0000000000000000 [ 638.583926][ C1] R13: 0000000000000000 R14: 00007f1e3d1b5fa0 R15: 00007fffcbcf2d08 [ 638.583947][ C1] [ 638.594252][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 638.594277][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 638.594308][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 638.594324][ T31] Call Trace: [ 638.594334][ T31] [ 638.594348][ T31] dump_stack_lvl+0x99/0x250 [ 638.594386][ T31] ? __asan_memcpy+0x40/0x70 [ 638.594422][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 638.594457][ T31] ? __pfx__printk+0x10/0x10 [ 638.594505][ T31] vpanic+0x281/0x750 [ 638.594536][ T31] ? __pfx_vpanic+0x10/0x10 [ 638.594563][ T31] ? preempt_schedule+0xae/0xc0 [ 638.594598][ T31] ? preempt_schedule_common+0x83/0xd0 [ 638.594638][ T31] panic+0xb9/0xc0 [ 638.594666][ T31] ? __pfx_panic+0x10/0x10 [ 638.594694][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 638.594729][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 638.594763][ T31] watchdog+0xfd2/0xfe0 [ 638.594795][ T31] ? watchdog+0x1de/0xfe0 [ 638.594826][ T31] kthread+0x70e/0x8a0 [ 638.594864][ T31] ? __pfx_watchdog+0x10/0x10 [ 638.594890][ T31] ? __pfx_kthread+0x10/0x10 [ 638.594927][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 638.594957][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 638.594996][ T31] ? __pfx_kthread+0x10/0x10 [ 638.595032][ T31] ret_from_fork+0x3f9/0x770 [ 638.595064][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 638.595100][ T31] ? __switch_to_asm+0x39/0x70 [ 638.595121][ T31] ? __switch_to_asm+0x33/0x70 [ 638.595142][ T31] ? __pfx_kthread+0x10/0x10 [ 638.595177][ T31] ret_from_fork_asm+0x1a/0x30 [ 638.595218][ T31] [ 639.257712][ T31] Kernel Offset: disabled [ 639.262060][ T31] Rebooting in 86400 seconds..