last executing test programs: 17m3.480390607s ago: executing program 32 (id=8): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002b715f08e11d02c1894d0000000109021200010000006c0904", @ANYRESHEX=0x0], 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(r2, 0x0, 0xc084) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x2000c81c}, 0x1) sendmsg$NL80211_CMD_START_AP(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x8b101a, 0x0) syz_usb_connect$midi(0x6, 0x7b, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x499, 0x105c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x1, 0x1, 0x8, 0xe0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x1, [@ms_header={0x7, 0x24, 0x1, 0x7f, 0x7}, @midi_out_jack={0x13, 0x24, 0x3, 0x0, 0xe, 0x6, [{0x66, 0xff}, {0x19, 0x4}, {0x7, 0x7}, {0x8, 0xe}, {0x3, 0x6}, {0x10, 0x9}], 0x28}, @ms_header={0x7, 0x24, 0x1, 0x50, 0x7}], [{{0x9, 0x5, 0x5, 0x0, 0x8, 0x2, 0x84, 0xd3, {0x12, 0x25, 0x1, 0xe, "ac03631268c5588c75597bc51355"}}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x7, 0xfc, 0xf9, {0x12, 0x25, 0x1, 0xe, "68f447aa93adde99df303fa9cb97"}}}]}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x310, 0x8, 0x82, 0x3, 0x40, 0xe}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x4ff}}, {0x5d, &(0x7f00000004c0)=@string={0x5d, 0x3, "b4fb9e754a968fe0298f3f1a4355c99116d67d14d4b8b7d76ef40e6797310195ff74ad3bd85cec9ec562fa379b052829ad2046f0005151a9d74e5e4c25d0c1fef775462856e3c70f3445acd2fe771b4cd64082cd5908dc9f31b911"}}, {0x4d, &(0x7f0000000540)=@string={0x4d, 0x3, "4a3d436b9a454f0f9ac819169fa3cff7a0d3a0031b4b4bbaa751b9a0095b12dfba857979c14b897c0aa93804951d2c3029d93ef65d69fffd9d4a046da922b4280349b63c6dd858ea6ecabe"}}, {0xd3, &(0x7f0000000680)=@string={0xd3, 0x3, "af80684a64a60deee16fda1581811180fb074439847c74770901a870870f03381547112129c6738d2a659eceff546642600313944dc2fc762cbbb60f9c43a6c3b1070e8ecd43fbf19152409898cb4d00525be7c5c6e91c3c53516e05192c0807aef84bd1c5d2d853857244f5acc5a56a18035a047e14dc8e9845960d4b673acc53f5ff3785b66456d2a0698cab95d556124b97559c4614dfcc93ae7f18cbac9468772eeba8ead66eacb9c72270dc5bfabfa7c12c1ec98582fc3c6c207fa28f63f62402460e53f91ae2113468a4b1b8c2f4"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x2c0a}}, {0xf5, &(0x7f00000007c0)=@string={0xf5, 0x3, "77dcd975db7e7679536220749db20b26de4180bb0f7a8bce35515c693b3a276313da719916ab07ae6db0b4cebe6d997005bf66238ed42f5b005eb64966095437729330105513845af1867b9a7a416aeaad3312664a7e0d6aad9e20ee533ebbe3eb184952a5038de16df77c89ad30549495a450b86b78f900af175516e543d8b1102dd91e62123ca9984f94e77238ba634cc3bfb6e648d87b106f9e6f31f482eda49158df361ee3f8c5aae143e5b650b33a2353974d34c518ec28113f69a05c692ab56e80c01ab2d95d31f0d8bb8e8766d8764b619007ed788138cbfffeebd40a77396d72d13cbc96e5d5a0f4770aa304518138"}}]}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000140)={0x20, 0xc, 0x1, 'Q'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_usb_connect(0x5, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="290a020000009c"], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$unix(0x1, 0x5, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r6, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x59}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000000) 17m0.650417968s ago: executing program 33 (id=19): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x5, &(0x7f0000002080)="84fff29ab187e0e7598238b73bb330b800b6a8dfb20858c411ff069d4e4b7617e77d2bee4113caeb90da3c5f72e6012834e060e9ec243030f1e204d17c2a46dd1276b2ce0d617a8b5ae78ad7ad44f03994a7d48c4988dcc38a59a9afc818413737f0f29bb6858832d56c17b21457381466e8ad258acbc4fdc2b0b9e941f37351ef0ab2bae2634b747f") ptrace$cont(0x21, r1, 0x80000001, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) chdir(&(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x100) setxattr$incfs_size(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000340), 0x0, 0x0, 0x1) 13m29.859167648s ago: executing program 34 (id=1018): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x2000c010) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) close(0x3) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)}, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, 0x0, &(0x7f0000000400)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7, 0x8000, 0x1, 0x243, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x103aa, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2bc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x97e8, 0x800, 0x14000001, 0xb2, 0x0, r5}}], 0x1, 0x0, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) 13m20.311753013s ago: executing program 35 (id=1058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x4004, 0x0, 0x8) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000340)={0x44, &(0x7f00000000c0)={0x20, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x6, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x8000000, 0xe67639cce1007364}) 12m14.214505769s ago: executing program 36 (id=1297): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x908a, 0x840) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) mount_setattr(r1, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r1}}, 0x20) umount2(&(0x7f0000000180)='./file0\x00', 0xa) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7a}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000500)={r4, 0x6, 0xa8, "005540b086bceb4000000000000000794b44622dcdba35cee4c1a68adfdf5cf4d117e8d7c56b194cf80bfe386c9eddb60aef46f38cde4e5eba37b986aef3152c5a554d5fe59d864df08066df27205f82be349ba111409c9efc85ee30dbdeaf30a82191149834d4d1fdd24e6c42c812ccc66241dd43a3063b19d5e492623e9a906171ac6738f9ba7bb10df9e6fef39ad329f2c2f6fdea9c3c9c16e8703fd35ce04908d7a0a0cc40057447c7d18b084f51b4"}, 0x36) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) ioctl$COMEDI_BUFINFO(0xffffffffffffffff, 0xc02c640e, &(0x7f0000000040)={0x2, 0xfffffff7, 0x0, 0x8, 0x1, 0x401, 0x4}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a04"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x207) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000240)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 11m28.543654175s ago: executing program 37 (id=1422): syz_open_dev$usbmon(&(0x7f00000000c0), 0x9, 0xa2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000080)={0x5, 0x5}) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x95, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x2, 0x1, 0x5, 0xa0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "11e703f7167b"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xa7, 0x9, 0x6, 0x2}, {0x6, 0x24, 0x1a, 0x3, 0x10}, [@mbim={0xc, 0x24, 0x1b, 0x4, 0xfff7, 0x8, 0xc, 0x401, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x10, 0x3, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0xf0, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x1, 0x1b}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x6, 0x77, 0x9, 0xff, 0x9}, 0x1af, &(0x7f0000000380)={0x5, 0xf, 0x1af, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x4, 0x0, 0x7fff, [0xff0000, 0xf, 0x0, 0x0]}, @generic={0x6b, 0x10, 0xa, "dede898b20b7a0de1eebb6cbfa1c554dd54408e858c65b1c7fa9e0efb9f900a5d7051f531ad0e77a94ddad22e3b66fd5747b7895350c874cbf3417744bf9ff0d38975bff6daf5cb9772d3691c2e99a1bc1126b50e43f71b8a40f94e2b4ba495260cdb26cf1c5e161"}, @generic={0xdc, 0x10, 0x1, "c5fb7813e8fa8adf8a8eafb942a7bb1f9b81d353c0e094f7d7ff9c45e3fd23febae1f105968175c141f924d43ed84c03ecd6359a6073d63b84c1365d1f5f750cdcb4e4c00450e421620350d3e4693f74e96475445b7ff0fc7d49ea59e5ce1cb613f0fad8cb9cb942af57943382359329529cdd1467b232454f5f158eb12b01048674a4cb136677288fe603b96be91e8822a7f09e1c44824491e24da9dcf3bbc21460bbf0bafdde8f4213280a0928be194abd9d48e2fecd6a92347c09a662d186aed3ef1864a5c09c0c89b720d82bffd71ed44b13d254d1f4f6"}, @generic={0x23, 0x10, 0x1, "5ed2f75f2c869e071fa8d975f5f68a43d3f96f47fbbb5c588198b3ee183aed5b"}, @generic={0x24, 0x10, 0x3, "2ea2d68ae5c3663d1ed00ceb342157cacb2fa88ecadd9d4dc9f509071e4bd0d659"}]}, 0x4, [{0x6, &(0x7f0000000540)=@string={0x6, 0x3, "32338197"}}, {0x6f, &(0x7f0000000580)=@string={0x6f, 0x3, "c737d6eee616751afff4185f46a0614811fddb5d02fd5fb90b898c62b88ee419c83151d04987b43eae51dfb8d5b57bac47dac7a0f8c4c9f1d99da0d55ce3934c8457a574a7f35aee93cb5a955253b2ef2b34fdba8f8bdac03eabcbbd565f621e35b38cd0e2ff3aee581f765cd6"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x402}}]}) r3 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x10, 0x10, 0x8, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x7f, 0xad, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x8, 0x2}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x0, 0x6, 0x10, 0x40, 0x5}, 0xc, &(0x7f0000000700)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0xb, 0xc, 0x2}]}, 0x1, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x140c}}]}) syz_usb_control_io(r3, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) 10m26.912862707s ago: executing program 38 (id=1768): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/kernel/mm/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0x2, 0x0) r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='ms_mode\x00', &(0x7f0000000100)='crc\x00', 0x0) r2 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) write$FUSE_IOCTL(r0, &(0x7f00000000c0)={0x20, 0x0, 0x0, {0x5, 0x4, 0x0, 0x8001}}, 0x20) 10m11.682317256s ago: executing program 39 (id=1835): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x40048c4, &(0x7f0000000100)={0xa, 0x4e23, 0x1, @mcast2, 0x38}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe000078009106000000000000004a073e"], 0xfe33) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000d80)={0x53, 0xfffffffffffffffb, 0x6, 0xc, @buffer={0x0, 0x33, 0x0}, &(0x7f0000000080)="fa000300fa99", &(0x7f0000003440)=""/4141, 0x0, 0x10, 0x1, 0x0}) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_int(r1, 0x29, 0xb, 0x0, 0x0) 9m54.941046445s ago: executing program 40 (id=1885): openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='file0', 0x5) (fail_nth: 8) 9m28.695449606s ago: executing program 41 (id=1919): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x1d9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3d206"], 0xdd12}], 0x1}, 0x20000400) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x1001000, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000140)={@val={0x0, 0x8917}, @void, @eth={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x79, 0x0, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x4, 0x100, @void}}}}}}}}, 0x36) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000240)="0400000000000000000000003801000000000000000000fffffffffffffffe000000000000000fffff000000000000002e2e") 9m10.219107497s ago: executing program 42 (id=2036): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}, 0xa8}], 0x1, 0x10022, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0xf) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2231, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x7810c2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f00000000c0)=0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getpgid(0x0) sendmmsg$unix(r4, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) 6m47.836487863s ago: executing program 43 (id=2807): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002240)={0x18c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xc0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}]}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_NAT={0xb8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 6m46.729508562s ago: executing program 44 (id=2748): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x14, r3, 0x331, 0x70bd2a, 0x25dfdbfb, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x2004c0c1}, 0x8004800) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}}, 0x20004410) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1) (async, rerun: 64) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000300)=0xa, 0x4) r4 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000980)={0x60, 0x14, 0x3, "be53c8"}, 0x0, 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/acpi/parameters/ec_event_clearing\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='\x00', 0x1) syz_usb_control_io(r4, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m53.552872835s ago: executing program 3 (id=4340): ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xc0010207, 0x0, 0x6}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x4f}) 3m53.285719189s ago: executing program 3 (id=4344): ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x8000, 0x1, 0x56555941, 0x3, 0x4, [{0x3, 0x10001}, {0x54, 0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x9, 0x5}, {0x2, 0x10000}, {0x5, 0x400}, {0xc, 0x3000000}], 0xd, 0x3, 0x3, 0x1, 0x7}}) 3m53.119825084s ago: executing program 3 (id=4347): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x2c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000001138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00multipath\x00\x00\x00\x00\x00\x00\x002 queue_mode bio 0 0 0\x00\x00', 0x40) ioctl(r0, 0xc138fd09, &(0x7f0000001000)="0400000000000010000000007801000038010000010000000000000000000000000000000000000000000000000000006d706174683000") 3m52.66742139s ago: executing program 3 (id=4350): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f00000004c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) listen(r1, 0xc) listen(r0, 0x0) (fail_nth: 1) 3m51.920455795s ago: executing program 3 (id=4352): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f00000004c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) listen(r1, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e3, &(0x7f0000000000)) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000001c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r5, 0x7af, &(0x7f00000000c0)={@hyper, 0x2}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r3, 0xffffffffffffffff, 0x0) r7 = eventfd2(0x5, 0x100000) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r8, 0x1, &(0x7f00000009c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x400, r2, 0x0, 0x0, 0x6, 0x0, 0x2, r7}]) io_pgetevents(r8, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) io_submit(r8, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r7}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0xfffffffffffffffe}]) io_getevents(r8, 0x2, 0x2, &(0x7f0000000c80)=[{}, {}], 0x0) shutdown(r2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c1ae10b00002600010126b82d2aa1ad9ab00008000e8004005280"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) listen(r0, 0x0) 3m51.500515083s ago: executing program 3 (id=4359): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x84c42, 0x1fa) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x143902, 0x0) sendfile(r2, r2, 0x0, 0x200000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) process_madvise(r7, 0x0, 0x0, 0x65, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m35.238280743s ago: executing program 45 (id=4359): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x84c42, 0x1fa) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x143902, 0x0) sendfile(r2, r2, 0x0, 0x200000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) process_madvise(r7, 0x0, 0x0, 0x65, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m56.784627384s ago: executing program 8 (id=4572): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x109302) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffe, 0x0, 0x6b, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0xfffffffc, 0x30520cf7f25f0c65, 0x0, 0x0}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000080)='./gadget/dummy_udc\x00', 0x26280, 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='proto\x00', &(0x7f0000000380)='proto\x00', 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='iso9660\x00', 0x89004, 0x0) 2m56.65426505s ago: executing program 8 (id=4574): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) 2m56.492866445s ago: executing program 8 (id=4576): r0 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x28) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_int(r1, 0x11a, 0x3, &(0x7f0000000080)=0x80, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x9, 0x0, 0x0) r3 = syz_io_uring_setup(0x1960, &(0x7f0000000000)={0x0, 0x1a80, 0x80, 0x1, 0x1f9}, &(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) r5 = fspick(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1) pread64(r5, &(0x7f00000015c0)=""/4096, 0x1000, 0x7) r6 = syz_ublk_setup_io_uring(0x2b71, &(0x7f00000002c0)={0x0, 0x563f, 0x2, 0x3, 0x3a, 0x0, r1}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)=0x0) syz_io_uring_submit(r4, 0x0, r7, &(0x7f0000000480)=@IORING_OP_URING_CMD128=@generic_cmd_sqes={0x2e, 0xa, 0x0, 0x0, {0x1}, {0x0, 0x3}, 0x0, 0x0, 0x0, {0x4, 0x0, 0x6ee7, 0x2}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000580)=""/4096, &(0x7f0000001580)=0x1000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x8000, 0x1, 0x56555941, 0x3, 0x4, [{0x3, 0x10001}, {0x54, 0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x9, 0x5}, {0x2, 0x10000}, {0x5, 0x400}, {0xc, 0x3000000}], 0xd, 0x3, 0x3, 0x1, 0x7}}) 2m56.244560387s ago: executing program 8 (id=4578): r0 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) r1 = socket$inet6(0xa, 0x80802, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) (async) fcntl$setstatus(r1, 0x4, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file2\x00', 0x1c8) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001180), 0xc0040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0xc, 0x1000005, 0x7ffffffc, 0x0, 0x1, 0x0, 0x7fffffffff7fffff, 0xffffffffffffff70, 0xa, 0x7f, 0x0, 0x80, 0x3, 0xfffffffffffffff8, 0x1, 0x1], 0xeeee0000, 0x300}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$inet6(r1, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) (async) sendmmsg$inet6(r1, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000140)=[{r1, 0x5}], 0x1, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 2m55.774844174s ago: executing program 8 (id=4579): r0 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000000)={0x2, 0x8003, 0x3}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x1000010) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0xc, @meta={0x58583444, 0x6891864c, 0x8138, 0x21c7, 0x6fda081c}}) 2m55.497893016s ago: executing program 8 (id=4580): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @local, 0x0, 0x0, 0x4, 0xfffffffbfffffffd, 0x30000000}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="80000000ffffffffffff080211000000080211800000000000000000000000006400010008000c006400000008000d00e94bc6f7c27720830040000031876aa3a3c664f071b3c988f64581e7a8e53f6a830a3a2eabb38f8704bf4f7c594b746c2ac676c91121cfbcbdb2df7323687a59e19fe68f508c4f41f06cd1508220c7eee9a4e72e9df6e892ac599931952a4a"], 0x5c}}, 0x0) 2m54.586091395s ago: executing program 46 (id=4580): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @local, 0x0, 0x0, 0x4, 0xfffffffbfffffffd, 0x30000000}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="80000000ffffffffffff080211000000080211800000000000000000000000006400010008000c006400000008000d00e94bc6f7c27720830040000031876aa3a3c664f071b3c988f64581e7a8e53f6a830a3a2eabb38f8704bf4f7c594b746c2ac676c91121cfbcbdb2df7323687a59e19fe68f508c4f41f06cd1508220c7eee9a4e72e9df6e892ac599931952a4a"], 0x5c}}, 0x0) 2m2.104460691s ago: executing program 0 (id=4813): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001900010000000000000000007f0000010000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000fcffffffffffffff00000000000000000000000000000000ffffffffffffffff08000000000000000000000000000000000000da84669c00000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000016c0)=ANY=[@ANYBLOB="110086dd0000110000000000000060ec970000382c00fe8000000000000000000000000000aaff02000000000000000000000000000104"], 0xfdef) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x1}, 0x1a) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_misc(r4, &(0x7f00000003c0)="7e08f821e65062113ec82d", 0xb) write(r0, &(0x7f0000000300)="060000000300030000", 0x9) 2m1.628567177s ago: executing program 0 (id=4817): ioctl$COMEDI_BUFINFO(0xffffffffffffffff, 0xc02c640e, &(0x7f0000000040)={0x2, 0xfffffff7, 0x0, 0x8, 0x1, 0x401, 0x4}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0017"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/mtd/mtd0/size\x00', 0x0, 0x0) read(r0, &(0x7f0000000200), 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r2, 0xd66771a5e8224ded, 0x0, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x24}}, 0x8040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x2c, r5, 0x101, 0x0, 0x800, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}]]}, 0x2c}}, 0x2400c800) r7 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) r8 = getpgid(0x0) r9 = getpid() r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r11 = fcntl$dupfd(r10, 0x406, r10) write$UHID_CREATE2(r11, &(0x7f00000004c0)=ANY=[], 0x119) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, r2, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x56}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x2e}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_PID={0x8, 0x52, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x4}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x59}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x71}}, @NL80211_ATTR_PID={0x8, 0x52, r9}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x8401) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r12, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 2m1.395450096s ago: executing program 9 (id=4819): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x46, &(0x7f0000000080)=0x80000001, 0x4) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r4, 0x4018aee2, &(0x7f0000000440)=@attr_pmu_filter={0x0, 0x1, 0x1, 0x0}) preadv(r0, &(0x7f0000002780)=[{&(0x7f0000000200)=""/245, 0xf5}], 0x1, 0x7fffffff, 0x5) 2m1.052582622s ago: executing program 9 (id=4820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4e}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x808}, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x42, 0x99) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x202100, 0x25) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x641, 0x800002e, r4, 0x0) fcntl$notify(r4, 0x402, 0x1a) openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x0, 0x0) ftruncate(r3, 0x200000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0xe7) 2m0.984666146s ago: executing program 0 (id=4821): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) io_setup(0x81, &(0x7f0000001100)=0x0) io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x1000, r1, 0x0}]) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 2m0.934309532s ago: executing program 9 (id=4822): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x2c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000001138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00multipath\x00\x00\x00\x00\x00\x00\x002 queue_mode bio 0 0 0\x00\x00', 0x40) ioctl(r0, 0xc138fd09, &(0x7f0000001000)="04000000000000005c0000007801000038010000010000000000000000000000000000000000000000000000000000006d706174683000") 2m0.724694926s ago: executing program 9 (id=4823): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) (async) sigaltstack(&(0x7f0000000200)={&(0x7f0000000000), 0x0, 0x2c00}, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'dummy0\x00'}) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/net/bonding_masters\x00', 0x2, 0x0) (rerun: 32) write(r1, &(0x7f0000000100)='+bond1\n\x00', 0x7) close(r1) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/net/bond1/bonding/mode\x00', 0x2, 0x0) (rerun: 32) write(r2, &(0x7f0000000180)='balance-alb\n\x00', 0xc) (async) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bond1/bonding/slaves\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='+dummy0\n\x00', 0x9) close(r3) ioctl(r0, 0x8983, &(0x7f0000000300)='\x00\x00\x00\x00bond1\x00'/27) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="2900001b903165e2c9956e26a75e83be38d61e788254f88abd6b51526e1b8d504dba548b884998a07a2eafe158e5c84e86fe246c7871d23dbe9390f946d1399a83a3ca7e79f80a09e76cb7131f9e3b97136af983a4761ae161ba25b6d573e6d0e236e27bac0e39485f2a54ff6067bb95dcbe2577e2c76b283dcbc616e43750dc92c18fc63175c656df77c3a7215e7613cbdb785b1534e8a830ea200000000000", @ANYRES16=r5, @ANYBLOB="1a002abd7000ffdbdf254f000000080003", @ANYRES32=r6, @ANYBLOB="0c009900400000001f000000"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x20000004) 1m59.21756051s ago: executing program 6 (id=4824): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) r2 = openat$cgroup(r1, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r3], 0x20) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000001340)={@empty, 0xffffffff, 0x2, 0x1, 0x2, 0x6}, 0x20) r6 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x3a, 0x1, 0x0, 0xc) setsockopt$inet_sctp6_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f0000000000)=0x85e, 0x4) r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f0000000100)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r8, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r8, &(0x7f0000000000)={0x2, 0x3}, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r6, 0x4020565b, 0x0) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000580)={0xc, @meta={0x58583444, 0x6891864c, 0x8138, 0x21c7, 0x6fda081c}}) 1m58.146484251s ago: executing program 6 (id=4828): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x58, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) 1m58.040472494s ago: executing program 7 (id=4829): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc0010006, 0x0, 0x8000000000000}]}) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) read$FUSE(r1, &(0x7f0000001400)={0x2020}, 0x2020) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x31, 0x2, 0x3, "d5470000002f1a0e0000000700", 0x30313953}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f00000003c0)={{r0}, "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"}) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x4000000000) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000040)={0x1000000000000058, 0x0, [{0x40000099, 0x0, 0x3}]}) r7 = openat$cgroup_ro(r0, &(0x7f0000003440)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000180)={0x1, 0x0, @pic={0x9, 0x7, 0xb3, 0xd7, 0x7, 0x3, 0x4, 0x3, 0xab, 0x0, 0x5, 0x1, 0x7, 0x3, 0x1}}) 1m58.035449487s ago: executing program 6 (id=4830): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000080)={0x2, 0x6, 0xc0f, 0x83, 0xffffffff}) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x189, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x46, &(0x7f0000000080)={0x0, 0x0}, 0x10) r1 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r3 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x8000, 0x1, 0x3032344d, 0x3, 0x4, [{0x3, 0x10001}, {0x54, 0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x9, 0x5}, {0x2, 0x10000}, {0x5, 0x400}, {0xc, 0x3000000}], 0xd, 0x3, 0x3, 0x1, 0x7}}) 1m57.955845134s ago: executing program 7 (id=4831): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000200)=0x7, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r0}) 1m57.816449419s ago: executing program 7 (id=4832): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048110) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r3, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) (async) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) (async) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) (async) connect$netlink(r1, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x2000}, 0x3) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x480000, 0x0) (async) sendmmsg$inet6(r6, &(0x7f0000000040), 0x0, 0x4008050) (async) setreuid(0x0, 0xee00) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80, 0x400e}}) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect(0x5, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f000000000009050300000000000009050cfeffff01060209050f000000000000090507c2"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r8, 0x0, 0x489, &(0x7f0000000380)={{0x84, @dev={0xac, 0x14, 0x14, 0x37}, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xd}, {@rand_addr=0x64010102, 0x4e23, 0x1, 0x8, 0x48001, 0x38}}, 0x44) (async) close(0x3) (async) r9 = dup(r0) sendmsg$inet(r9, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) recvmmsg(r9, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000001500)=""/4096, 0x1000}, {0x0, 0x40000}], 0x2}, 0x8000}], 0x2, 0x2, 0x0) (async) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc) 1m57.816058114s ago: executing program 6 (id=4833): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r2, &(0x7f00000002c0)={0x0, 0xfffffffffffffdeb, &(0x7f00000005c0)=[{&(0x7f0000000000)="64000000100001060000000000000000000000007fff0000000000000000000010000200766574682b000000000000002400120008000100766574681800020014000100000000007fff000002000000000066279b182300001000030076657468590000", 0x64}], 0x1}, 0x400400c) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000170000005400068014000300303132333435363738393031323334353c00040067636d286165732900000000000000000000000000000000000000000000000014"], 0x68}}, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000300)="060000000300030000", 0x9) 1m57.637745752s ago: executing program 0 (id=4834): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42402) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x40) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) lseek(r4, 0x0, 0x3) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x10, 0x140d, 0xd11, 0x70bd27, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r5, 0xc02864c3, &(0x7f0000000400)={&(0x7f00000001c0)=[r6], 0x12a05f200, 0x1, 0x2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r5, 0xc00864c5, &(0x7f0000000180)={&(0x7f0000000080)=[r6], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r4, 0xc01864c1, &(0x7f0000000000)={r6}) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r7, 0xc040565e, &(0x7f00000003c0)={0xb, 0x103, 0x4, {0x10, 0x52f, 0x6, 0x937}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000280)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r9, 0x1, 0x70bd36, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 1m57.51127214s ago: executing program 6 (id=4835): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000980)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2, @empty, 0x4}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='T', 0x1}], 0x1}}], 0x1, 0x5c) shutdown(r1, 0x1) (async) shutdown(r1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001e0021000000000000000700000005"], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000004) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r3) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x14, r4, 0x124, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x600808c4) (async) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x14, r4, 0x124, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x600808c4) 1m57.416827635s ago: executing program 0 (id=4836): arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x1ff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002780)=[{&(0x7f0000000200)=""/245, 0xf5}], 0x1, 0x7fffffff, 0x5) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f0000000080)=0xfffffffe, 0x4) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f00000005c0)={&(0x7f0000000180)=@canfd={{0x2, 0x1, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "c70e88260c7efc47770fec8b8498b71f007c423b6727a5f8dbc1f2625074053d0c3c91343f0cc9fb97434318efca5e4512b8efdde73c971d7826c7c08904b2a7"}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4044000) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket(0xa, 0x3, 0x3a) r5 = socket$kcm(0x21, 0x2, 0xa) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, 0x0, &(0x7f00000004c0)) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd0, 0x0, 0x4) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 1m57.41660635s ago: executing program 9 (id=4837): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x2c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000001138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00multipath\x00\x00\x00\x00\x00\x00\x002 queue_mode bio 0 0 0\x00\x00', 0x40) ioctl(r0, 0xc138fd09, &(0x7f0000001000)="0400000000002000000000007801000038010000010000000000000000000000000000000000000000000000000000006d706174683000") 1m57.34477797s ago: executing program 6 (id=4838): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x20010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="060000000300010000", 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x6, 0x3, ' \x00'}, @NFTA_MATCH_NAME={0x9, 0x1, 'dscp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x406, &(0x7f0000000180)={0x0}) close(0x3) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000"], 0xc8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000cc0)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xbc}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) sendfile(r0, r2, 0x0, 0x2000fb) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xcb) 1m57.257151812s ago: executing program 9 (id=4839): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000004000000) 1m57.11632608s ago: executing program 7 (id=4840): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r2, 0x409, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1}, @NL80211_ATTR_PMKID={0x14, 0x55, "b1d53541efd240344fbeede3bb1bf311"}, @NL80211_ATTR_PMK={0x14, 0xfe, "466b0d07691b259a2978d21948667463"}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x8810) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) writev(r4, &(0x7f0000003800)=[{&(0x7f00000017c0)="809fbb63270ba798b802e7331614a94f9c32c44f75b42eec924494ba435a389923a7b79660a621560cc1b6c4e83fb4b2cc2d4c2f70cdd3fd882079590fbab9a28ef75f414aff6d9d5a6255f9c6eb8d457af8693155b4ffea7e019f98b8e04c8052bd891852186ac2af60f83d4767f4c1bdcd5c8776ddab29744e323e064d2f89251b835f7edfa73437b062bbd870a33e88de045a946e30e4ac79fd5aaf04167e819caee25da9e31f447471e53ab832e41f701ba5d85043f60805bce0eea0191d3ed8c1c6e6b7f719f3f09c6a7d4cd367b5ee78dfba9022709ace40d93920894aaa283059d27f0cc822f78e32b8510186fba2e79dd3400e9cd1084f0ce5c7dbadb90ee56efa4809047d6cbdada8ab6cd2b44d5b507269076b2affee8dfc839b6250f4dfca0d009bbd73ce610774810420006d13ae0011ef1ae1f5585bb414fcd713954ea9ff11b5cee0d6cbf5cb9ccac22d55f399b0b27cde7eb6ea7354e3a39c3ff1bac03df243830896adda8ac87fac1ebc6ba76383b0226d729fe3958cbe5155e38294fdbd6d8921667a2d49c15b7b16ccc4b8385002a2d86ec962e56336f98e5cc7d30c40a7d1679475f51e2e5db71d2cead5ba5eabdc52e80b99b90e3db883fb1ec4bc9d4fca45d0b6d16aafb6e5feadce4ad0ce3b1fe5ae00f6cffe1c6c003dd89bc11a9df49296fb25bdf2bb1705c9728d33cb2aa915b8a544bc825169b1f4a0145bfde0682caa3685c02024456b34f03bf93894315c9f52d0a3726418d2c866d90b9262e057ffd13e1e46387474510938447cd1686e4541f5e752b0f018230731685669d3c198f2840852299021485477a05241edb72a3f396a86e04b62e9b81ba5584a35e166ea0188fd333fce044130746bdfd6c89d51f034c362a354d552cb4e84dabce4233687224a3e8b7ea112f262d1bbf6aa9abf8ae70364ea73760e0eb7a5ed5c042e678f4d73a8b1f2f88d1c870c2a25d3062c2ed66baeaf75a6453dee25215a3c4b265200adcffa86df8394a267c6c318770fbd1e9939db00820d4d2a770373d0486ad867733ca54b05976c09f2ff4a6e8ff1ab29d3713db3b3accf3716eb6f1d869ee0fcef6671d9cc9a79659ef3e96de88a2426d93d621d2dfbd7f3f0518721f909cf1d77d91a074aa7206a2d02fdaf97d90b5fa890e29da5aadcb75145f360fc77f946e8d8ac92ffc1da7277f23adb10a5d74be400e29e06b64ec0a956bf5975d8e7e4d6599498be392b84acc37534d0f4e68423608334aece4e30102952a429a5c67139e46210678453dd3d9fbcb23c7feb9c1e215120cc4a120418a09bcd76908b26b2c59240670fbec033846b13efa1bb73f00fe8a3adb9cb0fcb9033bc80e1b7f65618cd6be04ea9c19e478eccdc2ebcdebfff24de087380520ff1e82993a4587e7a1550a8c43a459d2d19dce19aaa503c9e6ccb0113d8a4acb0c466dee4850fda868a8e699e89662ee2f23d58291f57ee39a8e96df8915616b46938b924baf5d4ddbf3c10ec77cba62f10373622efd9ce3ae4da57dfe6693b08229593aabc96fe1abf95ac0f32dda8e2fa5aac0640337b985289a132141cd852df1fe4119665f770296c178f42af8654dbb25eac457b5949ef2b5cff9744bde78c1a75050e132cbc97d5d43ee613cb02789797e61f8c18222afc851799eda947106154a5c1873dc5af439a7544eb64450557c50caffa1106fe277bf882b4170b6966d2fdf02ab9a630deede4dd2d36eea158d00d71167b59fa6ca3beac9d2e9b5b2bb2026450061c4a7dc5f1fbd6520d069b83e91d8c5be36489c6b6d3f1eb8a8a1e0a492af8c3e5505fc48e3060b0d7d6976c0a125c7a8935ff34afdb778b4f3c2f887e7b1f05be342ec8f08d34bddd7782b0c9e1d98e0db8bfbe1d39a243a9a2e07fa1fa574c0bdf2fdfef4cf05c3a5291258456e56a6f57734958de69f3935118e04ae63d23e20a2c563bab79bbcb3c4d076f36bd3e35d34799136736a0d8dcfdac687b63f23364f67604200172c0e43bb24f116ebbbc9f347a7e1b9e6411f6d9940ee06675f0cfbcfc47f20c649c81ec71f97c0c6b3da84e4950c40495bb045fcc9df494d16a9b97e5b5240660da809d36c6e3754d1a29658cbc330d3e6041468275d3e3505fbc0ad3271189dacd580d6831ed016f286e6b4a1003ffeef2a9d3111374433f2175a4f0d57593256ff69d0eac049de9d3cdf30c7d593f2b400a93184ec209b39256a1e083589d15d2dd080cb73b59df04e212373c71df44aec6a11554216053a45e6184f863d6cf5d86847b2af137f5b9d6e043b893f9a120a03075ab94306cf5fdc111d2be0d4be6d1a94100a2d577cbcb7725e891c22d2404f672c2640a9afe71e43310de0d65b010121f9b414a9dd70dbbd65c6e5b09955578e66fe50f887b524b44ad5bc3805e6ba3dfd5425bfec87a70ef1063ca5e44bb66fd085f747d94a9c0dd8c004b58706e630b12194edec095f8967dfae2eeecf5f6a245d91031e5effea373cfff10b7f7d82ca102eb067a5c42226d15bbd0eb2eacb229b82bc61f6b08e08ffc6844f3496fdfc10d854a3d49f19d72898c9e8ed5c99bffd6be441ab1bbd8e9ab902ecc99dba08a643d63adfef9608c20863870fe8f0b710841762982a8033212c3ed4a49498b33e17d43b72d241757ea4e615a7b90cda523b51c46189b6f731843d077b80d3b88070ebaa1f53271ed4a495c88165a28bc1fa793abfa9467b21d4ea0a5a6b5bf549bf31852bd30016db321b708918fb41af38d557d07edaa234cca955b267bfc3c54507ee0ef9ba323164f57d1774cedc612663e09f4d1ab9b891e969b92c3d634c59ea950db42d344c2a123346e1acb87750c8142b70cfdb67f6ca2d228a845b4b395cdd0196a7cbe12341006908be70c0777dcd537588915797a5752d8a0a62f3624686f6db559a49391234952160dd356dff0e6d42fa6c179ea671f2b0c8f7f7424d86d7f3d770cf7e9f06f121b51736db49c1fb8d2217115fb54917e66c0f972776ae494cdb9073101b6971d5b5cff77209eb95c1dfa8ceb0fbe58f78a3dd2420c88ea392418c9b34384db0bd05bfd92bba01043d5b6ca8a601c399122116316feac76be31d1d89161fd6647bc09e1b4ee9776b442296443837e3d8c0cbaa551e9472c5d4aa53e1cedeb368c9c26906dc0457ca2006e62306235297bb84c909b8a310a801ab93c5db7429b9104853b3f5f9c1b340f53b252275233478db60cd113e38ffe8d696b128801f84a0e172bc33c111f1c5e17d88292937ca970612968063f56452668ece0d8be13b9d5a906a3b3b812304b425aefec0291ac5e282721359f86df6baca0a367d75c16ce51698fa509c86b23b1460b07a0e8483fbd535f732ef862da40362de6e7823d319079243996d5ed755cb56f76f40006fc1d6a85c25ee7aaf99083198a9e932192891391872639a5120ec35ae1101db7ab5bbf3af5699f0aa361d651c3d01bc99c9419a48c282f1ec263e49c7fac47afd2f0eb5ef8a6c49acb9913b3a5ddface5ab2de5b6e2f5fc7cdbdbd82ed65a343c7252e9f27623aae14eeb9ac8ceb4c83a3756c382f362b9fe8ccd78bfd5de9505058202e57b25a4b367c06d3092fe4c3fba8a99a2690ea7ca9b1b636a8e42873474b6b7b421c00bbbf812e27d9640ac89736748fa60f3427f1c2f20b777351d68f0a6ea44d049454039005fb132170ac77e59e33a2775792dc222b0d463aff055b8204ff5c762332e8e1c37b1c0e31742f4bc5cb3b496550ebefb9b18439bf23e460c69d8da8048b461af04693c0471614d0744976a8321651bb096e80a9ca9fb011fd3869f4a6771c1e05ad4b512338081fc874d61421722c1577d2a5544f828a9606910f70bdfcd8ca95e55216c9a30cd2670bfdb202e29458852371fdd5840c2df5eae3586884df96700106c971749ec4b7e94038a51064de7919c9c67c6e95068b6be5a5f55d70c05e388864a4a65a310d0fc6ce669c759bc08a5247bcf07ea1fa92e152ee3422e7cda421de71c59ad8b92cc0bebf002a22b1905d02dfc21527d2fec1b1904ee12e1fa94e1204565bca49ce416939a4a8b5e22c4d4768fe6284b6b1173275e4fb4834b40f3e850d1c864640107c928149c063560e98b7a1d559b4cb0b918f8cb9d8cf926f98f295ccea047a569fd84fcda00adc49256ca53e3bf1a9e9fc889dc3f25f7145ddc098f11aa1a3413160c929632a0d4d339962f65c7f3ca2cf76fbb262425eb92892801203ba3f28e55d33598d390bda531dc6c17658296ae55dfc7218710fc2051e670d1fbe7c111dfd7a92a3f0521223801ccf5efeac52df4349723b303ce9e4901803aeab179414c3b7c0555ddde5d0137796469006b58b683236884e65674d1517a25cfd68c14019bbf2df69bb0ac42138eac877e18ffb6dd4efe3ce3e7ba986833781600135ed50781bb8ba1d07376355af7cf9a0819bb57020af89ec5c310b64a60b1edd4202ae1f95b17edd9937b2cc598702885d1037520277e83dba18614ed84ae95bdb40b9804eabe34606c16e819f3b8f517eebf4dce0d29c1efdb9d1e48add6f9421408e64c0efffa5ac44e21b1bf519fd19656448abecde471b7fa8c9aebb28ba85082062eb6c13c697784c77e1d9a148e82c70a44d49d4cdcb2169319635c0ced29cfbaeb77b87f2b98ca5cf790b582870b8951a9998503ba4355c893c97d2d5c173516f5ee90dd59139661aae0940ba8851119b82553ab0f4ae731f49fd528db8b86dfd8abbacbf633cd221449747e0c02ac5f95263e16f847b38c0fca1b1b71a340bd2b268fc9704f8181b89c2ed45a62a4ac13979f14381abdebe87bd8bbf6ee8372a0be139dc3319228906a09e00303137d00663559fbb0afc4ca413b4c3471d116174b40846409adb7676ab48aa0c6b8f9baf6e5531590b17ca4be80ad0bab88f9c92c2ffea6566b73369418e86c697258aadf4a30ee43152fea262362979ace6ad090f42ecdfd3207e226386334c1595d93abafe835e890e1861e553f7e7c17c3e4558251df238c6a86c88dfaaca5a3abfa116edcccf792596ea1aae995ad181be7ec3a69e6f3e9853e6bbd475a4376f04d2a048c7fe24ba791d6949689fe5846a29bc61140312753496a127bc7215b4df16fccb6ec481a4e041031459febea5589d42b6f3930597071efb4d04975d7e7d0de2a5e67c94101bca35da81596ae20b169657d7139522750417c3414ad71a6eb25a47a12a4930c5e6030860414aed29b06f1e5f64dd43e7141cf443beb4f1004443f284f0c61d12f8d6ac7d985ce3aa54698b5c69bd60c74745898c6b7028b04b1bae5c1b70cb5d3f871fd18975b6bb3c2bd23d4697fdac86a5ea933ab1ffe925f24cfd054121f9c80bbe61740695e3851d010545cd0bad54f037d2e3db9e5c10e17623d7c41d5185dc1d01ea59bffbaea0bc9910b295408b0318c8febe1a2cab5c0ac21e1707470e0e765a7ec49a5a70e666df404a9b9b52beb13195108ad2b3fe892d356c430c69576ffa596ec46b5b9dee84fa6a511eeb992b841194d83ef1ee7e5a29f08ed49ff1d00e78e9ccdc671bb8371fe3afbf250aef62d36a06646150464c8586b46c7256a47cf9b8d5a52a5f1aaadefc6a755d2ee4c98b06443f8d92dfa3da9c9e4088c6d30e78ca86a36940dbf77c09e1a7d5e61b53a8e31e1c2446ac0d08477be784d204f874a39a339184f8e2753efad1fede874f03c046bc1f92cb8d4843e3a2bf3b6832b04b12739e2d388c98e0b898a410b6cbcd03a14552", 0x1000}], 0x1) ioctl$SOUND_MIXER_WRITE_RECSRC(r4, 0xc0044dff, &(0x7f0000000040)=0x1ff) connect$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xcb0}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 1m57.085898249s ago: executing program 7 (id=4841): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0xfd, 0x7fff7ff8}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r2, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x1}], 0x1, 0x1000000000000002) fcntl$setlease(r1, 0x400, 0x1) truncate(&(0x7f0000000100)='./file1\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) close_range(r0, r3, 0x2000000000000) 1m56.796591844s ago: executing program 7 (id=4842): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f0000000580)=[{0x17, '\x00', @data=0xfffffffe, 0x87}, {0x44, '\x00', @st={0x4, [{0x3, @svalue=0xfffffffffffff001}, {0x2, @svalue=0xffff}, {0x3, @uvalue=0x101}, {0x1, @uvalue=0x100000001}]}, 0x81}, {0x23, '\x00', @data=0x7, 0x20000a}, {0x40, '\x00', @st={0x4, [{0x1, @uvalue=0x6}, {0x1, @uvalue=0x952}, {0x3, @uvalue=0x9}, {0x0, @uvalue=0x8}]}, 0x2}]}) r3 = mq_open(&(0x7f00000007c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\v-\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avz\xf8\xa8?L\xf3s\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00x\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dv0:\xdd\x91yk\xecz\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:\xab\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbe\xbb@R=\xeb\'z\xee\xe5V\xc6\xb0a\xe8\xa0\xac\xbaD\x9e\xccO\x1fd!\x8cg\xba|\xb5\xcefD\r\x0f\xca\x7f\xd3 \xff\x0f\x03\x92\x81b`a\x88\xf0\x8b\xf9\xbf8[\xc9\x11\x83\xed\n&\\Rl\x1f\x1eZ;\t\xf8\f\xc0\x8d2\xc1\xa2\x1a\xe6h\xaf\xd4q\xeb\xbc\xea\x97\x83\xe2\x81\rC\x8d\x1c\x17\x17~\x0eG\xba\x01\xffT\xd1Y\xbest\x80\x06\xbd\xc3C\xd2\xef\x00\xd1Q\xedN\x16~\x88\xf8V\x8d\xb3\x9d\xfb`\xde\x83e\xc9\xbc\xb2bT\xa0\xad\x96\xac\xf7\xbc2\x91=w\xa0\xfe9\xd3\x92w\xf0\v\x14(R\xe4\x12\xe4', 0x40, 0x48, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x40, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) socket$netlink(0x10, 0x3, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9e9, 0x3ff}}, './file0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0xe, 0x44, 0xf6, 0x0, @link_local}, 0x10) prctl$PR_MCE_KILL(0x23, 0x2, 0x7fffffffeffe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0002003c0001802c00018014000300fe80000000000000000000000000002014000400ff010000000000000000000000008005000100010000003c0003800000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000200)={0x0, 0x0, 0x100, 0x3, {0x7, 0x1, 0x1, 0x3}}) r6 = syz_open_dev$vivid(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000580)={0xc, @win={{0x3, 0x7, 0xe1ec, 0x8}, 0x1, 0x2, &(0x7f00000001c0)={{0x36, 0x1, 0x101, 0x1}}, 0x2, &(0x7f0000000080)="35332a5aa28650b0872e7884b9387202424d7dfd983609deff2a9e7c189a062fd622178c925664ef39598f380e1e90b39263c2adab331f14c6794c4eced1b620ff760fec5d20e99070e46926611775bfd0cd59c6edbd93262391bf855c18b0c767bc0bc402924b3cd362b1290ac0055b02643f1e59a2805242040a7ee22b1788c545f383ed3656fa67015beb83b105bdd8abfe18b87f781b419bc137399122254cafc8076aefb252284ee0dcc411ee1baaa2cefb09d2ada716d5205ee02f90f6f09453", 0x8}}) 1m56.399711142s ago: executing program 0 (id=4843): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000300)="060000000300030000", 0x9) 1m36.399499804s ago: executing program 47 (id=4839): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000004000000) 1m36.021612418s ago: executing program 48 (id=4838): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x20010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="060000000300010000", 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x6, 0x3, ' \x00'}, @NFTA_MATCH_NAME={0x9, 0x1, 'dscp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x406, &(0x7f0000000180)={0x0}) close(0x3) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000"], 0xc8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000cc0)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xbc}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) sendfile(r0, r2, 0x0, 0x2000fb) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xcb) 1m35.886369196s ago: executing program 49 (id=4843): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000300)="060000000300030000", 0x9) 1m35.730243014s ago: executing program 50 (id=4842): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f0000000580)=[{0x17, '\x00', @data=0xfffffffe, 0x87}, {0x44, '\x00', @st={0x4, [{0x3, @svalue=0xfffffffffffff001}, {0x2, @svalue=0xffff}, {0x3, @uvalue=0x101}, {0x1, @uvalue=0x100000001}]}, 0x81}, {0x23, '\x00', @data=0x7, 0x20000a}, {0x40, '\x00', @st={0x4, [{0x1, @uvalue=0x6}, {0x1, @uvalue=0x952}, {0x3, @uvalue=0x9}, {0x0, @uvalue=0x8}]}, 0x2}]}) r3 = mq_open(&(0x7f00000007c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\v-\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avz\xf8\xa8?L\xf3s\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00x\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dv0:\xdd\x91yk\xecz\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:\xab\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbe\xbb@R=\xeb\'z\xee\xe5V\xc6\xb0a\xe8\xa0\xac\xbaD\x9e\xccO\x1fd!\x8cg\xba|\xb5\xcefD\r\x0f\xca\x7f\xd3 \xff\x0f\x03\x92\x81b`a\x88\xf0\x8b\xf9\xbf8[\xc9\x11\x83\xed\n&\\Rl\x1f\x1eZ;\t\xf8\f\xc0\x8d2\xc1\xa2\x1a\xe6h\xaf\xd4q\xeb\xbc\xea\x97\x83\xe2\x81\rC\x8d\x1c\x17\x17~\x0eG\xba\x01\xffT\xd1Y\xbest\x80\x06\xbd\xc3C\xd2\xef\x00\xd1Q\xedN\x16~\x88\xf8V\x8d\xb3\x9d\xfb`\xde\x83e\xc9\xbc\xb2bT\xa0\xad\x96\xac\xf7\xbc2\x91=w\xa0\xfe9\xd3\x92w\xf0\v\x14(R\xe4\x12\xe4', 0x40, 0x48, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x40, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) socket$netlink(0x10, 0x3, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9e9, 0x3ff}}, './file0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0xe, 0x44, 0xf6, 0x0, @link_local}, 0x10) prctl$PR_MCE_KILL(0x23, 0x2, 0x7fffffffeffe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0002003c0001802c00018014000300fe80000000000000000000000000002014000400ff010000000000000000000000008005000100010000003c0003800000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000200)={0x0, 0x0, 0x100, 0x3, {0x7, 0x1, 0x1, 0x3}}) r6 = syz_open_dev$vivid(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000580)={0xc, @win={{0x3, 0x7, 0xe1ec, 0x8}, 0x1, 0x2, &(0x7f00000001c0)={{0x36, 0x1, 0x101, 0x1}}, 0x2, &(0x7f0000000080)="35332a5aa28650b0872e7884b9387202424d7dfd983609deff2a9e7c189a062fd622178c925664ef39598f380e1e90b39263c2adab331f14c6794c4eced1b620ff760fec5d20e99070e46926611775bfd0cd59c6edbd93262391bf855c18b0c767bc0bc402924b3cd362b1290ac0055b02643f1e59a2805242040a7ee22b1788c545f383ed3656fa67015beb83b105bdd8abfe18b87f781b419bc137399122254cafc8076aefb252284ee0dcc411ee1baaa2cefb09d2ada716d5205ee02f90f6f09453", 0x8}}) 7.532635579s ago: executing program 4 (id=5049): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) fcntl$setpipe(r0, 0x407, 0x3) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x149181, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) write$proc_mixer(r2, &(0x7f0000000040)=[{'OGAIN', @val={' \'', 'Synth Capture Switch'}}], 0x32) syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x4, 0x2, 0x10, 0x20, 0x0, 0x7}, {0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x6, 0xfb}, {0x9, 0x5, 0xf, 0x3, 0x8, 0x3, 0x21, 0x5}}}}}}]}}, 0x0) 6.918676875s ago: executing program 4 (id=5053): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, '.\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)=0x400000, 0x4) ioctl(r0, 0x3, &(0x7f0000000040)) 6.70865119s ago: executing program 4 (id=5055): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000100)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) syz_usb_connect$midi(0x1, 0xc9, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x1, 0x1, 0x3, 0x120, 0xdf, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x30, 0x6, [@midi_out_jack={0xf, 0x24, 0x3, 0x1, 0x6, 0x4, [{0x7, 0x3}, {0x9, 0x7}, {0x0, 0x1}, {0x0, 0x6}], 0xf}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xfb, 0x3}], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0x4, 0x81, 0x4, {0x7, 0x25, 0x1, 0x3, "a9e650"}}}, {{0x9, 0x5, 0x5, 0xc, 0x0, 0xd, 0x10, 0x5, {0x8, 0x25, 0x1, 0x4, "2be99d5d"}}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x8, 0xe, 0x9, {0x5, 0x25, 0x1, 0x1, 'n'}}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0xf7, 0x4, 0x8, {0x6, 0x25, 0x1, 0x2, 'lq'}}}, {{0x9, 0x5, 0xc, 0x2, 0x8, 0xf7, 0x17, 0x7, {0xc, 0x25, 0x1, 0x8, "470304198bf125a1"}}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x2, 0x2, 0xcb, {0x6, 0x25, 0x1, 0x2, 'E_'}}}, {{0x9, 0x5, 0xe, 0xf, 0x10, 0xcf, 0xfa, 0x1, {0xd, 0x25, 0x1, 0x9, "f7e8ccf4a4865202d7"}}}, {{0x9, 0x5, 0x4, 0xc, 0x10, 0x81, 0x3, 0x5, {0xf, 0x25, 0x1, 0xb, "adc53dd330f506597334ee"}}}]}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x201, 0x7f, 0xc, 0x8, 0x10, 0x2}, 0x23, &(0x7f00000002c0)={0x5, 0xf, 0x23, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "5dc7660d9d927d23e823c205fb043123"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x9}]}, 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44f}}, {0xcf, &(0x7f0000000340)=@string={0xcf, 0x3, "61f3bdc146c7a551eac22aec9e8c4247227de5d7dcd30fb05b7e34bbce79058f9183d4a2a9f0dcd34d8b4054aeb6c870de72846d95d67068316cbf526d0a8f9c1e8cee279c23e963b5881b2b16965f7e21f13bd1a635967ee1caced330cfdbf96aa70687fc87cf1a0a6e39d6bfc1d7445b745469c7db6fd08691b4d04fc14579697e55e82aad623387826942bd08318c8a0e9821389b45efb9cd236c1556bc831d4945ecf99a44e00b73507f8cf91a9a2c1adb34a98b8fe66fb4906b749accc0b780b25b34d0bb2a6bef083785"}}, {0x95, &(0x7f0000000440)=@string={0x95, 0x3, "23913aadcf7c73154014a96b328920b3a5371fcccf733863a0a0ed42f1adef808a8096e21f6d3fb4a52c1363522b817a89da1d0e8d16b72bd3761c5c0bd77c7f959c464bfbbda397b75e4dc623fb9ab3a769429f36671fdb4594f1c01018f37769eff39ac238186be234cb2afc146ac041e2e75ed6652e4b3af3bedfcf9860fda028e2d4689b5537d6001a1a3d0b15fb933070"}}]}) 6.420486291s ago: executing program 5 (id=5058): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) (async) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) (async) munlockall() (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1f00, 0x12) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r4, 0x4188aea7, &(0x7f0000000480)={0x9, 0x0, [{0x8, 0x0, 0x5}, {0x8, 0x0, 0x3}, {0x6, 0x0, 0x2}, {0x6, 0x0, 0x9}, {0xb0e, 0x0, 0x2}, {0x3, 0x0, 0x4}, {0x5, 0x0, 0x8}, {0xffffff2c, 0x0, 0x8000}, {0x6, 0x0, 0x8000000000000001}, {0x6, 0x0, 0x6a}, {0x1, 0x0, 0xffffffffffffff01}, {0x0, 0x0, 0x8}, {0x800, 0x0, 0x289}, {0x7, 0x0, 0xa0000}, {0x5c, 0x0, 0xab}, {0x0, 0x0, 0x53e}]}) (async) recvmmsg(r0, &(0x7f0000001580), 0x0, 0x2001, &(0x7f0000000000)={0x77359400}) (async) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="6e94bd3f108a3ad7a27a6fe3267983881e37640911db5be94fcf42e0459f0a8ae5e09f14d6b4f1fcf5ffd643c60bff235214a78b9857cc642019bf8a5772c5", 0x3f}, {&(0x7f0000000240)="77d05be041146085cf51d4924658da05000000cf613a42f5e916c66a1b47135248f0c0b4e28530a0e492e38889d9bfd1dfde3964a59feb6834725f3cbb842a1df174a7a23fb8503557771129ffe3b3471e28ee43ff9b7ea5b3c697d24be6b4e5941177fea2a144fc6d4284791e3b8cfa08c32c9302d93a0ff87c7bde121f9dfc3c303eba0b1f0da53ac9c4123bb6f66bbac03a02c5c29fea44dbc3f177ed4e02d00830b5c30b66d9740cfe8ddbfb0607b458f762fefcc4df302cc3e0197eeaeb835d23c2aff02457f21d6a", 0xcb}, {&(0x7f0000000140)="834de3eb16af77b7c4a1e332b8f0ae797c2035f14ec30623b872b7c72ec60a1192ed531bc1c12d01b4634f2107fe8df10ca141231a97cc7c126191fb91266f65ecf5130c9a229549e69f", 0x4a}], 0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x10c) write(r7, &(0x7f0000000200)='\\x01020304 2000000000 0 \\', 0x19) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={@private0={0xfc, 0x0, '\x00', 0x1}, @remote, @loopback, 0x0, 0x0, 0x7, 0x0, 0xbc, 0x40002}) (async) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f0000000100)={{&(0x7f000083d000/0xf000)=nil, 0xf000}}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'team0\x00'}) (async) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0x1fd, 0x4) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000007000fcffffffffffff8a0c000c800100000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x42004}, 0x80000) 5.558904091s ago: executing program 5 (id=5059): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, r2, 0x100, 0x70bd25, 0x25dfdc02, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x274c43426311c644}, 0x4048801) r3 = inotify_init1(0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x28, r5, 0x1, 0x70bd25, 0x3, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x2400c046) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x50) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) syz_usb_connect(0x3, 0x41, &(0x7f0000001900)={{0x12, 0x1, 0x110, 0x36, 0x64, 0xc1, 0x20, 0x413c, 0x8196, 0x71fa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x9, 0x7, 0x50, 0x0, "", [{{0x9, 0x4, 0x1b, 0x5, 0x0, 0x2, 0x6, 0x0, 0x3, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x0, 0x1, 0x4}, {0x6, 0x24, 0x1a, 0x9, 0x15}}]}}]}}]}}, 0x0) 4.816990256s ago: executing program 2 (id=5063): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x28, r1, 0x1, 0x70bd66, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24881}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001600)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x28, r1, 0x1, 0x70bd66, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24881}, 0x800) (async) 4.561377633s ago: executing program 2 (id=5065): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r1, 0x4068aea3, &(0x7f0000000480)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x19f) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000000)='3', 0x4e) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000340)={&(0x7f0000000240)=""/235, 0xeb}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x1, 0x0, [{0x1, 0x4, 0x40080, 0xff, 0x2eaa}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000c40)={0x1, 0x0, [{0x480, 0x0, 0xffffffffffffffff}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x1, 0x401, 0x7, 0xff2, 0x7, 0x547, 0x9, 0x5, 0x0, 0x7fffffffffffffff, 0x5, 0xffffffffffffffff, 0x4, 0x3, 0x8946, 0x2], 0xffc}) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000140)) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="05000000738856d5a3489d0b000008000300", @ANYRES32=r11, @ANYBLOB="080005"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$FIBMAP(r8, 0x1, 0x0) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000540)) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x80040, 0x0) 3.996963847s ago: executing program 5 (id=5066): r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x8040) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000380)=0x8000) (async) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) (async) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0xff, 0x0, 0xfffffffa}, 0xc) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4e", 0xc8}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff", 0xd2}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b1", 0x24}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{0x0}], 0x1}}], 0x2, 0x0) (async) sendmsg$inet6(r1, 0x0, 0x84) (async) dup3(r0, r1, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x8240, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x59, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109dc8102c0c0"], 0x0}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/netdevsim/netdevsim0/health/break_health\x00', 0x1, 0x0) (async) write(r3, &(0x7f0000000240)="0700d353b0b20aac2364b060c6430f7a0144d3a1837ac43f0c16021afcd5c17da69771da55a52a6e29c1a0a34b48a5bf0ac93844351cf59e64f710631deff747459698ec7a8327dbd12b5f938f17dc96b141f4ca39b3b4f072385899dee9c9dbedf0a5699b640ea2c9a21ad408fb71df0b152074f93bbb5f1defa3dff74a0f04631c976a670d1a3a9967c9d5aad171ceebbf12fb68aec0a45a845fcca7cd", 0x9e) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) (async) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x20a00) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a01010000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020000030900010073797a30000000000900030073797a32"], 0x80}}, 0x0) 3.800060059s ago: executing program 2 (id=5067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000013108000c"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x4000000000010001, 0x1000000000000008, 0x400, 0x7}, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100ab51a0407b0500000000000000010902120001200000000904"], 0x0) 3.292499168s ago: executing program 4 (id=5068): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@broadcast, @private=0xa010102, 0x0, "606b177019716ea6ff1f2c7ed79c77e2e0f19a230000002007007c3d935f00", 0xfffffff8}, 0x3c) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x15, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0x0, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="240000001e005f1814fffffffffffff807000000b800000000000000060005000d000000", 0x24) openat$autofs(0xffffffffffffff9c, 0x0, 0x60700, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2e, &(0x7f0000000500)=""/188, &(0x7f00000005c0)=0xbc) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x40da36, 0x10, 0x2, 0x199}, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0, &(0x7f0000000140)=0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x18, 0x5, r8, 0x0, 0x0, 0x0, 0x10020, 0x1, {0x1}}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r9 = mmap$IORING_OFF_PBUF_RING(0x0, 0x2, 0x1, 0x10010, 0xffffffffffffffff, 0x84a806e3) syz_ublk_setup_io_uring(0x164, &(0x7f0000000000)={0x0, 0x27d4, 0x20, 0x2, 0xaf}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000300), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[{@cache_fscache}]}}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r5, r9, r10, &(0x7f0000000280)={0x2e, 0x5e, 0x0, r11, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffce, 0x0, r1, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@new_dev={0x2, 0xc9b, 0x0, 0x0, 0x1000, 0xffffffff, r13, 0x0, 0x140}}}, &(0x7f0000000300)) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r2, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8001) 2.704395768s ago: executing program 1 (id=5069): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$tun(r1, &(0x7f0000000080)={@void, @val={0x2, 0x80, 0xfffb, 0x4, 0x4, 0xffc0}, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, '^\vB', 0x18, 0x6, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, {[], @payload_conn={{{0x18, 0x0, 0x1, 0x1, 0x1, 0x6, 0x0, 0x2, 0x80, 0x0, 0x1, 0x7, 0x5, 0x0, 0xd5, 0xfffb, 0x2, 0x4e22, 0x4e24}}}}}}}, 0x4a) 2.482888895s ago: executing program 1 (id=5070): preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4090, 0xffa}], 0x1, 0xa, 0x203) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000004780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@prinfo={0x18, 0x84, 0x5, {0x28, 0x3}}], 0x18, 0x10}], 0x1, 0x4040000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000fab000/0x18000)=nil, &(0x7f0000001380)=[@textreal={0x8, 0x0}], 0x1, 0x3d, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000001300)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf48, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x9, '\x00', {0x9, 0x6, "9951a5", 0x3ff, 0x33, 0x0, @empty, @loopback, [@routing={0x2b, 0x0, 0x1, 0xf}], "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"}}}}}}, 0xf7e) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001640)={0x0, &(0x7f00000013c0)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x6e, 0xd, 0x627245bc, 0xa}}, @nested_amd_vmload={0x182, 0x18}, @in_dx={0x69, 0x20, {0xd9bc, 0x4}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_vmsave={0x183, 0x18}, @enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18, 0xc19}, @nested_vmresume={0x130, 0x18}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0x4753}}, @rdmsr={0x66, 0x18, {0x40000080}}, @in_dx={0x69, 0x20, {0x43ad, 0x2}}, @out_dx={0x6a, 0x28, {0x7e2f, 0x2, 0x10001}}, @nested_amd_invlpga={0x17d, 0x20, {0xffe, 0x56dc}}, @rdmsr={0x66, 0x18, {0x292}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x21, 0x7, 0x401, 0x6}}, @uexit={0x0, 0x18}, @wr_drn={0x68, 0x20, {0x7, 0xab6}}, @nested_amd_clgi={0x17f, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host_nat=0x6c10, 0xb, 0x6, 0x6}}], 0x270}) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000000)) 2.22448847s ago: executing program 4 (id=5071): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f", 0x801}], 0x1}, 0x0) syz_usb_connect$uac2(0x2, 0x9a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000200c201810400001020301090288000301018008080b0001010c200609040000000101200009240103000428000408240a05004000020c24030207030503050303001424060305"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) 2.112821341s ago: executing program 1 (id=5072): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000200)={'team_slave_0\x00', {0x2, 0x0, @dev}}) r2 = socket(0x10, 0x3, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x7fff, 0xa00) ioctl$BLKPG(r4, 0x1269, &(0x7f00000003c0)={0x3, 0x0, 0x98, &(0x7f0000000300)={0x4000, 0x5, 0x10}}) ioctl$TIOCMIWAIT(r3, 0x545c, 0x300) r5 = getpgid(0x0) setpriority(0x1, r5, 0x5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x7, r5}) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x1000, 0x4, 0x10000000, 0xc}, 0x10) sendto(r2, &(0x7f0000000600)="340000001a000100010000000000000002202000000000000000000008001b0001000000080002000001010108000100e1010203", 0x34, 0x10, 0x0, 0x0) r11 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x4}) r12 = getpid() r13 = syz_pidfd_open(r12, 0x0) ioctl$FS_IOC_GETVERSION(r13, 0xc040ff0b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b1a, &(0x7f0000000040)={'wlan1\x00'}) 807.586405ms ago: executing program 1 (id=5073): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x13, 0x81, 0x0, 0x2, 0x0, 0x70bd2d, 0x25dfdbfb}, 0x10}}, 0x14) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000680)={0x8, {"bcab78ef46fd470debffc2cb2ddd7226", "2cb5d354ed78a67f4e81e3610383649b", "104a066b033d3a12c9153201568ee73f"}, 0x0, 0x6}) 689.189674ms ago: executing program 4 (id=5074): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x82f41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000240)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x2b, 0x5, 0x2, 0x7, [{0x3, 0x6, "c760e1fc1508c56210cf6561cef1f0e468b764817187bb5e7146d17841b3c2fd834094a8b62ce5af0584ab75e055"}]}}}}}}}, 0x7a) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 614.604656ms ago: executing program 5 (id=5075): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0403, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) 481.530214ms ago: executing program 1 (id=5076): r0 = socket(0x2, 0x80805, 0x3) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) (async) kexec_load(0xffffffff, 0x1, &(0x7f0000000280)=[{0x0, 0x0, 0x3, 0x2}], 0x0) (async) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) (async, rerun: 32) setns(0xc9, 0x0) (async, rerun: 32) r2 = socket(0x8, 0x5, 0x5) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, 0x0, 0x0) (async) write(r1, &(0x7f0000000000)='7', 0x1) (async) r3 = eventfd(0x2) syz_clone(0x605000, 0x0, 0xfffffffffffffe5f, 0x0, 0x0, 0x0) (async) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r1, 0x6e85, 0x2, r3}) (async, rerun: 64) memfd_secret(0x80000) (async, rerun: 64) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 376.526441ms ago: executing program 2 (id=5077): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r0 = socket(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r1, 0x11a, 0x1, 0x0, 0x0) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x191801, 0x0) r3 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r3, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0x2}, {r3, 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x1ff) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f0000000800)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xe7, '\x00', "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"}}, 0xffffffd0) 312.373388ms ago: executing program 5 (id=5078): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$tun(r1, &(0x7f0000000080)={@void, @val={0x2, 0x80, 0xfffb, 0x4, 0x4, 0xff00}, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, '^\vB', 0x18, 0x6, 0x0, @loopback={0x20}, @private1={0xfc, 0x1, '\x00', 0x1}, {[], @payload_conn={{{0x18, 0x0, 0x1, 0x1, 0x1, 0x6, 0x0, 0x2, 0x80, 0x0, 0x1, 0x7, 0x5, 0x0, 0xd5, 0xfffb, 0x2, 0x4e22, 0x4e24}}}}}}}, 0x4a) 185.133863ms ago: executing program 2 (id=5079): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x13, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x41010}, 0x11) write(r0, &(0x7f0000000000)='3', 0x4e) lsetxattr(&(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)=@known='system.sockprotoname\x00', &(0x7f0000000300)='-/\'{\x00', 0x5, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 76.517445ms ago: executing program 5 (id=5080): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$xdp(0x2c, 0x3, 0x0) setns(0xc9, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0), 0x8) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x400a81, 0x9c) pipe2(&(0x7f00000001c0), 0x4000) write(r3, &(0x7f0000000000)='3', 0x4e) r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi1\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) (async) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r5, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r5, 0x5, 0x4) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000000)={'comedi_bond\x00', [0x4, 0x4004, 0x7fffffff, 0x8, 0x90000, 0x9, 0xed, 0x890, 0x280ffa, 0xfffffffc, 0x4, 0x1, 0x1030, 0x1000008, 0x4f, 0x40000009, 0xfff7ffa6, 0x3ff, 0x203, 0x9ea, 0x3, 0xb, 0x9, 0x101, 0x1, 0x990e, 0x5, 0x18, 0x7, 0x4, 0x77fd]}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) socket$nl_rdma(0x10, 0x3, 0x14) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000914000228bd7000fddbdf25081a0100000000000800d01ea887786ef65e06802b0300000000000000", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4048884) sendmsg$NFT_BATCH(r3, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x604}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000080900010073797a300000000030000000090a010800000000000000000300000508000f40000000080900020073797a300000000008000640ffffff006c010000050a01040000000000000000050000073800048008000240603c7e7108000140000000021400030076657468305f746f5f6873720000000008000140000000040800024047995bb80a000700726f75746500000025000c0015e84a55d3fb83ac180fd4546b31a70716aa8d609a7f002fa2c83d3e6fe0f6c9110000000900030073797a30000000004c0008800c00024000000000000000020c00024000000000000056730c00014000000000000000060c00024000000000000000050c000140000000000000000b0c0002400000000000000ca9400008800c00014000000000000000020c00014000c40b000000000000000140000000000000056c0c000140000000000000ffff0c00014000000000000000014c0008800c00014000000000000000080c000240000000000000000d0c00024000000000000000020c00014000000000ffffffff0c00014000000000000000060c000240000000000000000908000a4000000001280000000e0a040100000000000000000a00000008000440000000030900020073797a310000000028020000160a010200000000000000000a000007f8010380680003801400010070696d726567300000000000000000001400010076657468305f746f5f687372000000001400010076657468315f766c616e000000000000140001006e6963766630000000000000000000001400010064766d727031000000000000000000000800024000000008b80003801400010065727370616e300000000000000000001400010076657468315f6d6163767461700000001400010070696d3672656731000000000000000014000100697036677265746170300000000000001400010076657468315f766972745f77696669001400010076657468305f766972745f7769666900140001006e72300000000000000000000000000014000100726f73653000000000000000000000001400010076657468315f6d6163767461700000001800038014000100697036677265746170300000000000000800024000000009400003801400010000000000000000000000000000000000140001006873723000000000000000000000000014000100626174616476300000000000000000000800014000000000080002407fffffff080002400000000654000380140001007465616d5f736c6176655f30000000001400010076657468305f746f5f7465616d000000140001007866726d3000000000000000000000001400010076657468305f766972745f7769666900080007400000000208000740000000000900010073797a300000000064000000000a01040000000000000000020000050900010073797a30000000000900010073797a31000000000c00044000000000000000050c000440000000000000000508000240000000010900010073797a31000000000c00044000000000000000046c0100000b0a030000000000000000000500000108000c4000000a280c001040000000000000000408000f400000000744000980400002803c000180080001400000000008000140000000050800014000000000080001400000000708000140000000050800014000001400080001400000000508000c4000000003e7000d40fc941a5357a59868cb3cd56e7db82454f8d47ebef970bfb93d4869fecd22f7542978b8b7f4145e11e59da97492198611704afcab82e88f016ee7d823c8613a5d76d170e7bb1217b55aa7ad5ca588d69fffe069d3dab5e3b5d81436cff654167d4a944c8da87505829a730fab2dfaa33a522344d09d169f0f5a57dc6ec00c65f069410a74184a2eddcba674d4e305d4db758e3aa49d9764a0a499c54d23aa586a09d0a5ab5db3f322ab74416da9321accf859bfae4581a315e462c99912dc2d84fb969d445a58a6df9aba5a89efb9d195edb4dfb52aca72a2a57c2e529d7b6b16b4b167000800044000000004140000001100010000000000000000000300000a"], 0x604}, 0x1, 0x0, 0x0, 0x1}, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r7, 0x4b63, 0x5) 9.19286ms ago: executing program 1 (id=5081): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x2c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000001138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00multipath\x00\x00\x00\x00\x00\x00\x002 queue_mode bio 0 0 0\x00\x00', 0x40) ioctl(r0, 0xc138fd09, &(0x7f0000001000)="0400000000000000000004007801000038010000010000000000000000000000000000000000000000000000000000006d706174683000") 0s ago: executing program 2 (id=5082): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000480)="3f0d25f7fe898804ca7a950d4dd40dcfa6f8bec3bbee1df19620aa84aaac8ad6e180e52ada35d862040000000000000087338b3f3ab02742d19ab8b628a156f3de9950c5ba0dee7dc1eb2ae2dbaf8b47290ccf5ae75844f56f1d309c28377164700e48cbe00e1afd6f7adfdd1b7662664516e5762efcd353735c7cd930d313152152e3b2c68c4c50c81b5b0a737e1ac97fe0c20e95b53f1159919776be3dc4aa7eba59adf65f4fe238a383da8f67ab21d4d615ff9a09f508bef46c413c8d39c446cec9a391c28f68251191c44918f0c6b297a37d24da13418b5af2f7a356e41349d482e8fbd50000385779eff172b10fdfe48451e8fee2b8ed5bc7362d5f33080d05094c95333f48c9b092f97c638182ddf60fdb521ff9e5cd0e118d541e910b2566e17e", 0x124) getpeername(r0, 0x0, 0x0) r1 = open_tree(r0, &(0x7f00000000c0)='./config/usb_gadget/g1/max_speed\x00', 0x8900) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x20, 0x3fa, 0x800, 0x70bd28, 0x25dfdbff, {0x1, 0x1, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000280)='./config\x00', 0x81000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x181000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) write(r2, &(0x7f0000000640)='full-speed', 0xa) syz_ublk_setup_io_uring(0x25, &(0x7f0000000180)={0x0, 0x40432f, 0x800, 0x2, 0x162}, &(0x7f0000000400), &(0x7f00000002c0), &(0x7f0000000080)) kernel console output (not intermixed with test programs): lgdt330x_attach() [ 1054.290707][ T9139] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1054.436576][T11800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.436590][T11800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.468014][ T9139] rc_core: IR keymap rc-dvico-portable not found [ 1054.468025][ T9139] Registered IR keymap rc-empty [ 1054.468712][ T9139] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1054.508335][ T9139] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input122 [ 1054.523826][ T9139] dvb-usb: schedule remote query interval to 100 msecs. [ 1054.523841][ T9139] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1054.563431][T25857] veth0_macvtap: entered promiscuous mode [ 1054.589776][ T9139] usb 6-1: USB disconnect, device number 105 [ 1054.608382][T25857] veth1_macvtap: entered promiscuous mode [ 1054.726279][T25857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1054.778065][T25857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1054.825261][T17042] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.825315][T17042] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.825345][T17042] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.825364][T17042] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.966148][ T9139] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1055.351531][T26213] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.6029312.0), cmd(9) [ 1055.470344][T17042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.470356][T17042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.675053][T11786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.675072][T11786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.888227][T15860] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1055.922752][ T9] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1056.048653][T15860] usb 2-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1056.049461][T15860] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.049490][T15860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.051581][T15860] usb 2-1: config 0 descriptor?? [ 1056.098971][ T9] usb 6-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1056.099289][T15860] pwc: Askey VC010 type 2 USB webcam detected. [ 1056.132063][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.153124][ T9] usb 6-1: config 0 descriptor?? [ 1056.381336][ T9] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1056.521592][T15860] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1056.522254][T15860] pwc: recv_control_msg error -32 req 02 val 2700 [ 1056.522874][T15860] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1056.546654][T15860] pwc: recv_control_msg error -32 req 04 val 1000 [ 1056.547154][T15860] pwc: recv_control_msg error -32 req 04 val 1300 [ 1056.548493][T15860] pwc: recv_control_msg error -32 req 04 val 1400 [ 1056.715473][ T9] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 1056.715502][ T9] [drm] Initialized udl on minor 1 [ 1057.001261][T15860] pwc: recv_control_msg error -71 req 04 val 1500 [ 1057.001680][T15860] pwc: recv_control_msg error -71 req 02 val 2500 [ 1057.002760][T15860] pwc: recv_control_msg error -71 req 02 val 2400 [ 1057.004375][T15860] pwc: recv_control_msg error -71 req 02 val 2600 [ 1057.005168][T15860] pwc: recv_control_msg error -71 req 02 val 2900 [ 1057.005511][T15860] pwc: recv_control_msg error -71 req 02 val 2800 [ 1057.005929][T15860] pwc: recv_control_msg error -71 req 04 val 1100 [ 1057.006232][T15860] pwc: recv_control_msg error -71 req 04 val 1200 [ 1057.007379][T15860] pwc: Registered as video103. [ 1057.128349][T15860] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input123 [ 1057.158663][T15860] usb 2-1: USB disconnect, device number 121 [ 1057.282947][T26080] udevd[26080]: 'v4l_id /dev/video103' [26251] terminated by signal 11 (Segmentation fault) [ 1057.301023][ T2272] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1057.461001][ T2272] usb 5-1: Using ep0 maxpacket: 16 [ 1057.462040][ T2272] usb 5-1: New USB device found: idVendor=0eef, idProduct=72c4, bcdDevice=0.00 [ 1057.462064][ T2272] usb 5-1: too many configurations: 74, using maximum allowed: 8 [ 1057.463092][ T2272] usb 5-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config [ 1057.463138][ T2272] usb 5-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1057.463152][ T2272] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1057.464041][ T2272] usb 5-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config [ 1057.464066][ T2272] usb 5-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1057.464078][ T2272] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1057.464970][ T2272] usb 5-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config [ 1057.464994][ T2272] usb 5-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1057.465007][ T2272] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1057.465865][ T2272] usb 5-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config [ 1057.465904][ T2272] usb 5-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1057.465917][ T2272] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1057.466707][ T2272] usb 5-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config [ 1057.466731][ T2272] usb 5-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1057.466759][ T2272] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1057.467538][ T2272] usb 5-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config [ 1057.467573][ T2272] usb 5-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1057.467586][ T2272] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1057.468378][ T2272] usb 5-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config [ 1057.468416][ T2272] usb 5-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1057.468429][ T2272] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1057.470876][ T2272] usb 5-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config [ 1057.470901][ T2272] usb 5-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1057.470930][ T2272] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1057.470949][ T2272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.578378][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1057.684988][ T2272] usb 5-1: config 0 descriptor?? [ 1057.812783][ T2272] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1057.867130][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1057.867979][ T10] usb 3-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 1057.868833][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.868845][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1057.870579][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.870592][ T10] usb 3-1: Product: syz [ 1057.870600][ T10] usb 3-1: Manufacturer: syz [ 1057.870607][ T10] usb 3-1: SerialNumber: syz [ 1057.948110][ T10] usb 3-1: 0:2 : does not exist [ 1057.983398][T26254] 9p: Bad value for 'rfdno' [ 1058.161833][T26250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.162140][T26250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.187577][T26258] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.234881024.0), cmd(9) [ 1058.748558][ T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1058.972907][ T10] usb 3-1: USB disconnect, device number 53 [ 1059.062720][T26080] udevd[26080]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1059.349921][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1059.510168][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1059.511352][ T10] usb 3-1: New USB device found: idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1059.517039][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.517053][ T10] usb 3-1: Product: syz [ 1059.517060][ T10] usb 3-1: Manufacturer: syz [ 1059.517067][ T10] usb 3-1: SerialNumber: syz [ 1059.519064][ T10] usb 3-1: config 0 descriptor?? [ 1059.587832][ T10] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1059.816945][T26271] qnx6: unable to read the first superblock [ 1059.850998][T26271] qnx6: unable to read the first superblock [ 1059.851010][T26271] qnx6: unable to read the first superblock [ 1060.119596][ T9141] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1060.164945][ T9143] usb 5-1: USB disconnect, device number 67 [ 1060.291540][ T9141] usb 2-1: Using ep0 maxpacket: 8 [ 1060.295576][ T9141] usb 2-1: New USB device found: idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1060.320391][ T9141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.320407][ T9141] usb 2-1: Product: syz [ 1060.320415][ T9141] usb 2-1: Manufacturer: syz [ 1060.320422][ T9141] usb 2-1: SerialNumber: syz [ 1060.336857][ T9141] usb 2-1: config 0 descriptor?? [ 1060.363345][ T9141] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 1060.363373][ T9141] dvb-usb: bulk message failed: -22 (2/0) [ 1060.404236][ T9141] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1060.404768][ T9141] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 1060.404818][ T9141] usb 2-1: media controller created [ 1060.463495][ T10] gspca_sq930x: ucbus_write failed -71 [ 1060.484674][ T9141] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1060.704948][ T10] gspca_sq930x: Sensor ov9630 not yet treated [ 1060.705037][ T10] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 1060.729734][ T10] usb 3-1: USB disconnect, device number 54 [ 1060.829944][ T9141] cxusb: set interface failed [ 1060.829957][ T9141] dvb-usb: bulk message failed: -22 (1/0) [ 1060.940677][ T9141] DVB: Unable to find symbol mt352_attach() [ 1060.940704][ T9141] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 1061.118810][ T9141] rc_core: IR keymap rc-dvico-portable not found [ 1061.118837][ T9141] Registered IR keymap rc-empty [ 1061.217146][T26311] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.536870912.0), cmd(9) [ 1061.259764][ T9141] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1061.261153][ T9141] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input124 [ 1061.316511][ T9141] dvb-usb: schedule remote query interval to 100 msecs. [ 1061.316526][ T9141] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 1061.346978][ T9141] usb 2-1: USB disconnect, device number 122 [ 1061.531899][ T9141] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 1061.537746][T26318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4877'. [ 1061.873038][T26323] Invalid argument reading file caps for ./file0 [ 1061.873833][T26323] team0: No ports can be present during mode change [ 1062.140960][ T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1062.164342][ T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1062.182504][ T9141] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1062.189853][ T9] usb 6-1: USB disconnect, device number 106 [ 1062.342166][ T9141] usb 2-1: Using ep0 maxpacket: 32 [ 1062.344006][ T9141] usb 2-1: New USB device found: idVendor=0cac, idProduct=0a5b, bcdDevice=f1.2d [ 1062.344030][ T9141] usb 2-1: too many configurations: 148, using maximum allowed: 8 [ 1062.349105][ T9141] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1062.349125][ T9141] usb 2-1: can't read configurations, error -61 [ 1062.462456][ T10] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1062.484605][ T9141] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1062.553903][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1062.553921][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1062.553930][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x9ef6 instead [ 1062.553940][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xb1de instead [ 1062.553948][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1062.553956][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1062.553964][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1062.553974][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1062.553990][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1062.554005][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1062.554014][T26337] jffs2: Further such events for this erase block will not be printed [ 1062.554298][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1062.554315][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1062.554326][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x9ef6 instead [ 1062.554335][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xb1de instead [ 1062.554344][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1062.554352][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1062.554360][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1062.554381][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1062.554396][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1062.554412][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1062.554421][T26337] jffs2: Further such events for this erase block will not be printed [ 1062.554589][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 1062.554598][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 1062.554607][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x9ef6 instead [ 1062.554617][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xb1de instead [ 1062.554639][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 1062.554647][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 1062.554656][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x9ef6 instead [ 1062.554665][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xb1de instead [ 1062.554690][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 1062.554698][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 1062.554707][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x9ef6 instead [ 1062.554721][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xb1de instead [ 1062.554742][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 1062.554751][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 1062.554760][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x9ef6 instead [ 1062.554770][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xb1de instead [ 1062.554795][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 1062.554803][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 1062.554811][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x9ef6 instead [ 1062.554820][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xb1de instead [ 1062.554842][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 1062.554850][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 1062.554858][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x9ef6 instead [ 1062.554869][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xb1de instead [ 1062.554894][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 1062.554903][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 1062.554911][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x9ef6 instead [ 1062.554920][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xb1de instead [ 1062.554941][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 1062.554949][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 1062.554958][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x9ef6 instead [ 1062.554967][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xb1de instead [ 1062.554989][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 1062.554997][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 1062.555005][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x9ef6 instead [ 1062.555015][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xb1de instead [ 1062.555042][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 1062.555066][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 1062.555075][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x9ef6 instead [ 1062.555085][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xb1de instead [ 1062.555107][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 1062.555116][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 1062.555125][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x9ef6 instead [ 1062.555764][T10703] IPVS: starting estimator thread 0... [ 1062.607441][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xb1de instead [ 1062.607479][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 1062.607489][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 1062.607498][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x9ef6 instead [ 1062.607508][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xb1de instead [ 1062.607530][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 1062.607539][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 1062.607548][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x9ef6 instead [ 1062.607557][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xb1de instead [ 1062.607579][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 1062.607587][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 1062.607596][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x9ef6 instead [ 1062.607605][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xb1de instead [ 1062.607626][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 1062.607634][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 1062.607643][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x9ef6 instead [ 1062.607652][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xb1de instead [ 1062.607673][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 1062.607681][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 1062.607689][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x9ef6 instead [ 1062.607698][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xb1de instead [ 1062.607719][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 1062.607727][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 1062.607735][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x9ef6 instead [ 1062.607744][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xb1de instead [ 1062.607765][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 1062.607773][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 1062.607781][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x9ef6 instead [ 1062.607790][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xb1de instead [ 1062.607811][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 1062.607818][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 1062.607827][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x9ef6 instead [ 1062.607836][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xb1de instead [ 1062.607856][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 1062.607864][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 1062.607872][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x9ef6 instead [ 1062.607881][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xb1de instead [ 1062.607902][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 1062.607910][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 1062.607918][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x9ef6 instead [ 1062.607927][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xb1de instead [ 1062.607948][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1062.607956][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1062.607964][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x9ef6 instead [ 1062.607973][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xb1de instead [ 1062.607994][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1062.608002][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1062.608010][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x9ef6 instead [ 1062.608019][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xb1de instead [ 1062.608041][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1062.608049][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1062.608057][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x9ef6 instead [ 1062.608066][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xb1de instead [ 1062.608087][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1062.608095][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1062.608103][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x9ef6 instead [ 1062.608112][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xb1de instead [ 1062.608133][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1062.608141][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1062.608149][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x9ef6 instead [ 1062.608158][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xb1de instead [ 1062.608179][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1062.608187][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1062.608195][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x9ef6 instead [ 1062.608204][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xb1de instead [ 1062.608225][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1062.608233][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1062.608241][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x9ef6 instead [ 1062.608250][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xb1de instead [ 1062.608271][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1062.608279][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1062.608287][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x9ef6 instead [ 1062.608296][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xb1de instead [ 1062.608317][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1062.608325][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1062.608333][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x9ef6 instead [ 1062.608342][T26337] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xb1de instead [ 1062.608357][T26337] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1062.608363][T26337] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1062.619766][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1062.631371][ T10] usb 5-1: New USB device found: idVendor=0eef, idProduct=72c4, bcdDevice=0.00 [ 1062.644352][ T10] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.644374][ T10] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1062.644388][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1062.644406][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.658848][ T9141] usb 2-1: Using ep0 maxpacket: 32 [ 1062.705464][ T10] usb 5-1: config 0 descriptor?? [ 1062.719523][T26338] IPVS: using max 56 ests per chain, 134400 per kthread [ 1062.732541][ T9141] usb 2-1: New USB device found: idVendor=0cac, idProduct=0a5b, bcdDevice=f1.2d [ 1062.732566][ T9141] usb 2-1: too many configurations: 148, using maximum allowed: 8 [ 1062.779285][ T9] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1062.780426][ T9141] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1062.780447][ T9141] usb 2-1: can't read configurations, error -61 [ 1062.818636][ T9141] usb usb2-port1: attempt power cycle [ 1063.125965][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1063.172636][ T9] usb 6-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 1063.212662][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.212677][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1063.295984][ T9141] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1063.296278][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.296290][ T9] usb 6-1: Product: syz [ 1063.296298][ T9] usb 6-1: Manufacturer: syz [ 1063.296305][ T9] usb 6-1: SerialNumber: syz [ 1063.347853][ T9141] usb 2-1: Using ep0 maxpacket: 32 [ 1063.378112][ T9141] usb 2-1: New USB device found: idVendor=0cac, idProduct=0a5b, bcdDevice=f1.2d [ 1063.378136][ T9141] usb 2-1: too many configurations: 148, using maximum allowed: 8 [ 1063.452582][ T9141] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1063.452605][ T9141] usb 2-1: can't read configurations, error -61 [ 1063.611354][ T9] usb 6-1: 0:2 : does not exist [ 1063.651038][ T9141] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1063.775683][ T9141] usb 2-1: Using ep0 maxpacket: 32 [ 1063.800825][ T9141] usb 2-1: New USB device found: idVendor=0cac, idProduct=0a5b, bcdDevice=f1.2d [ 1063.800871][ T9141] usb 2-1: too many configurations: 148, using maximum allowed: 8 [ 1063.959097][ T9141] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1063.959122][ T9141] usb 2-1: can't read configurations, error -61 [ 1063.983534][ T9141] usb usb2-port1: unable to enumerate USB device [ 1064.204981][ T9] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1064.728304][T26344] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.1543503872.0), cmd(9) [ 1064.787457][ T10] hid-multitouch 0003:0EEF:72C4.004E: hiddev0,hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.4-1/input0 [ 1064.819436][ T10] usb 5-1: USB disconnect, device number 68 [ 1064.880194][ T9] usb 6-1: USB disconnect, device number 107 [ 1064.967909][T26352] overlayfs: failed to resolve './file2': -2 [ 1064.991778][T26080] udevd[26080]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1065.044376][T25995] udevd[25995]: 'fido_id' [26347] terminated by signal 11 (Segmentation fault) [ 1065.285770][T26355] FAULT_INJECTION: forcing a failure. [ 1065.285770][T26355] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1065.285790][T26355] CPU: 0 UID: 0 PID: 26355 Comm: syz.2.4887 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1065.285807][T26355] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1065.285812][T26355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1065.285819][T26355] Call Trace: [ 1065.285824][T26355] [ 1065.285829][T26355] dump_stack_lvl+0xe8/0x150 [ 1065.285850][T26355] should_fail_ex+0x3eb/0x540 [ 1065.285871][T26355] prepare_alloc_pages+0x21e/0x5f0 [ 1065.285887][T26355] __alloc_frozen_pages_noprof+0x17a/0x400 [ 1065.285901][T26355] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1065.285917][T26355] ? policy_nodemask+0x2cc/0x8e0 [ 1065.285933][T26355] alloc_pages_mpol+0x21e/0x390 [ 1065.285949][T26355] alloc_pages_noprof+0xb1/0x2b0 [ 1065.285963][T26355] get_zeroed_page_noprof+0x1a/0x90 [ 1065.285976][T26355] mon_bin_open+0x236/0x530 [ 1065.286066][T26355] chrdev_open+0x4d9/0x600 [ 1065.286082][T26355] ? __pfx_chrdev_open+0x10/0x10 [ 1065.286097][T26355] ? devcgroup_check_permission+0x31/0x8f0 [ 1065.286112][T26355] ? __pfx_chrdev_open+0x10/0x10 [ 1065.286125][T26355] do_dentry_open+0x80e/0x1360 [ 1065.286144][T26355] vfs_open_consume+0x4a/0x350 [ 1065.286156][T26355] ? path_openat+0x148a/0x1da0 [ 1065.286169][T26355] path_openat+0x14a6/0x1da0 [ 1065.286190][T26355] do_file_open+0x23e/0x4a0 [ 1065.286205][T26355] ? __pfx_do_file_open+0x10/0x10 [ 1065.286228][T26355] ? _raw_spin_unlock+0x28/0x50 [ 1065.286243][T26355] ? alloc_fd+0x6af/0x760 [ 1065.286262][T26355] do_sys_openat2+0x115/0x200 [ 1065.286283][T26355] ? __se_sys_futex+0x3a8/0x450 [ 1065.286300][T26355] ? __pfx_do_sys_openat2+0x10/0x10 [ 1065.286317][T26355] ? rcu_is_watching+0x16/0xb0 [ 1065.286334][T26355] __x64_sys_openat+0x138/0x170 [ 1065.286350][T26355] do_syscall_64+0x166/0x520 [ 1065.286361][T26355] ? trace_irq_disable+0x3b/0x140 [ 1065.286373][T26355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.286384][T26355] ? clear_bhb_loop+0x70/0xc0 [ 1065.286396][T26355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.286406][T26355] RIP: 0033:0x7f397fb5e98e [ 1065.286417][T26355] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1065.286425][T26355] RSP: 002b:00007f3980b40b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1065.286437][T26355] RAX: ffffffffffffffda RBX: 00007f3980b416c0 RCX: 00007f397fb5e98e [ 1065.286444][T26355] RDX: 0000000000000000 RSI: 00007f3980b40c00 RDI: ffffffffffffff9c [ 1065.286451][T26355] RBP: 00007f3980b40c00 R08: 0000000000000000 R09: 0000000000000000 [ 1065.286457][T26355] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1065.286465][T26355] R13: 00007f397fe26038 R14: 00007f397fe25fa0 R15: 00007fffe2f197c8 [ 1065.286480][T26355] [ 1065.668093][T26361] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4889'. [ 1065.954701][ T2272] usb 2-1: new low-speed USB device number 127 using dummy_hcd [ 1066.126036][ T2272] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1066.126068][ T2272] usb 2-1: New USB device found: idVendor=041e, idProduct=3000, bcdDevice=0.40 [ 1066.132264][ T2272] usb 2-1: config 1 has an invalid descriptor of length 252, skipping remainder of the config [ 1066.132281][ T2272] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1066.132292][ T2272] usb 2-1: config 1 has no interface number 0 [ 1066.132320][ T2272] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 0 [ 1066.296825][T26388] bridge0: port 3(syz_tun) entered blocking state [ 1066.296874][T26388] bridge0: port 3(syz_tun) entered disabled state [ 1066.297006][T26388] syz_tun: entered allmulticast mode [ 1066.298078][T26388] syz_tun: entered promiscuous mode [ 1066.355931][T26388] bridge0: port 3(syz_tun) entered blocking state [ 1066.358091][T26388] bridge0: port 3(syz_tun) entered forwarding state [ 1066.553103][T26392] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4898'. [ 1066.616755][ T9] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1066.648867][ T9143] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1066.776580][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1066.777081][ T9] usb 3-1: New USB device found: idVendor=0e8f, idProduct=0003, bcdDevice=0.00 [ 1066.778312][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1066.778333][ T9] usb 3-1: can't read configurations, error -61 [ 1066.809903][ T9143] usb 6-1: Using ep0 maxpacket: 16 [ 1066.816610][ T9143] usb 6-1: New USB device found: idVendor=0eef, idProduct=72c4, bcdDevice=0.00 [ 1066.833292][ T9143] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1066.833309][ T9143] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1066.833322][ T9143] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1066.833341][ T9143] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.881041][ T9143] usb 6-1: config 0 descriptor?? [ 1066.906453][ T9143] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1066.949720][ T9] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1067.131524][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1067.136257][ T9] usb 3-1: New USB device found: idVendor=0e8f, idProduct=0003, bcdDevice=0.00 [ 1067.156861][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1067.156903][ T9] usb 3-1: can't read configurations, error -61 [ 1067.157119][ T9] usb usb3-port1: attempt power cycle [ 1067.513991][ T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1067.537112][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1067.537537][ T9] usb 3-1: New USB device found: idVendor=0e8f, idProduct=0003, bcdDevice=0.00 [ 1067.538947][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1067.538966][ T9] usb 3-1: can't read configurations, error -61 [ 1067.675622][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1067.703950][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1067.711679][ T9] usb 3-1: New USB device found: idVendor=0e8f, idProduct=0003, bcdDevice=0.00 [ 1067.726738][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1067.726760][ T9] usb 3-1: can't read configurations, error -61 [ 1067.727062][ T9] usb usb3-port1: unable to enumerate USB device [ 1068.285673][T26412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.285980][T26412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.842833][ T2272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.864034][ T2272] usb 2-1: can't set config #1, error -71 [ 1068.866142][ T2272] usb 2-1: USB disconnect, device number 127 [ 1068.976490][T26414] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1069.362740][ T2272] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1069.483415][ T9] usb 6-1: USB disconnect, device number 108 [ 1069.523854][ T2272] usb 5-1: Using ep0 maxpacket: 32 [ 1069.524363][ T2272] usb 5-1: New USB device found: idVendor=046d, idProduct=c295, bcdDevice=0.00 [ 1069.526743][ T2272] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1069.526766][ T2272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.569958][ T2272] usb 5-1: config 0 descriptor?? [ 1069.633082][ T10] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 1069.770856][ T10] usb 2-1: device descriptor read/64, error -71 [ 1070.025188][ T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 1070.025319][ T2272] usbhid 5-1:0.0: can't add hid device: -71 [ 1070.025434][ T2272] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1070.034547][ T2272] usb 5-1: USB disconnect, device number 69 [ 1070.164208][ T10] usb 2-1: device descriptor read/64, error -71 [ 1070.282115][ T10] usb usb2-port1: attempt power cycle [ 1070.644994][ T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 1070.687410][ T10] usb 2-1: device descriptor read/8, error -71 [ 1070.955389][ T10] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 1070.976680][ T10] usb 2-1: device descriptor read/8, error -71 [ 1071.102063][ T10] usb usb2-port1: unable to enumerate USB device [ 1071.812951][ T9143] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1071.987824][ T9143] usb 3-1: New USB device found: idVendor=0e8f, idProduct=0003, bcdDevice=0.00 [ 1071.998758][ T9143] usb 3-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 1071.998785][ T9143] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1071.998799][ T9143] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 64 [ 1071.998811][ T9143] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 1071.998824][ T9143] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1071.998842][ T9143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.064057][ T9143] usb 3-1: config 0 descriptor?? [ 1072.064970][T26524] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1072.540932][ T9143] pantherlord 0003:0E8F:0003.004F: unknown main item tag 0x2 [ 1072.540954][ T9143] pantherlord 0003:0E8F:0003.004F: unknown main item tag 0x0 [ 1072.540970][ T9143] pantherlord 0003:0E8F:0003.004F: unknown main item tag 0x0 [ 1072.552240][ T9143] input: HID 0e8f:0003 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0E8F:0003.004F/input/input127 [ 1072.883747][T26540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1072.907499][T26540] PKCS8: Unsupported PKCS#8 version [ 1072.909484][T26540] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1072.964338][ T9143] pantherlord 0003:0E8F:0003.004F: input,hidraw0: USB HID v0.00 Keyboard [HID 0e8f:0003] on usb-dummy_hcd.2-1/input0 [ 1072.994300][ T9143] usb 3-1: USB disconnect, device number 59 [ 1073.221726][T25963] udevd[25963]: 'fido_id' [26544] terminated by signal 11 (Segmentation fault) [ 1073.351605][ T2272] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1073.404358][T26548] syzkaller1: entered promiscuous mode [ 1073.404373][T26548] syzkaller1: entered allmulticast mode [ 1073.530367][ T2272] usb 5-1: Using ep0 maxpacket: 16 [ 1073.535723][ T2272] usb 5-1: New USB device found: idVendor=0eef, idProduct=72c4, bcdDevice=0.00 [ 1073.539967][ T2272] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.539985][ T2272] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1073.539999][ T2272] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1073.540018][ T2272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.613372][ T2272] usb 5-1: config 0 descriptor?? [ 1073.625728][T26551] loop3: detected capacity change from 0 to 7 [ 1073.800524][T26554] FAULT_INJECTION: forcing a failure. [ 1073.800524][T26554] name failslab, interval 1, probability 0, space 0, times 0 [ 1073.800545][T26554] CPU: 0 UID: 0 PID: 26554 Comm: syz.5.4921 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1073.800561][T26554] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1073.800565][T26554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1073.800572][T26554] Call Trace: [ 1073.800577][T26554] [ 1073.800582][T26554] dump_stack_lvl+0xe8/0x150 [ 1073.800600][T26554] should_fail_ex+0x3eb/0x540 [ 1073.800618][T26554] should_failslab+0xa8/0x100 [ 1073.800633][T26554] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 1073.800651][T26554] ? __d_alloc+0x37/0x6f0 [ 1073.800661][T26554] ? __d_alloc+0x37/0x6f0 [ 1073.800675][T26554] __d_alloc+0x37/0x6f0 [ 1073.800687][T26554] d_alloc_pseudo+0x21/0xc0 [ 1073.800699][T26554] alloc_path_pseudo+0x107/0x220 [ 1073.800715][T26554] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 1073.800729][T26554] ? inode_set_ctime_current+0x287/0xb60 [ 1073.800745][T26554] alloc_file_pseudo+0xa8/0x1e0 [ 1073.800760][T26554] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1073.800773][T26554] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1073.800790][T26554] create_pipe_files+0x306/0x7a0 [ 1073.800805][T26554] __do_pipe_flags+0x46/0x1f0 [ 1073.800819][T26554] do_pipe2+0xaa/0x190 [ 1073.800833][T26554] ? __pfx_do_pipe2+0x10/0x10 [ 1073.800847][T26554] ? rcu_is_watching+0x16/0xb0 [ 1073.800865][T26554] __x64_sys_pipe2+0x5a/0x70 [ 1073.800877][T26554] do_syscall_64+0x166/0x520 [ 1073.800887][T26554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.800898][T26554] ? clear_bhb_loop+0x70/0xc0 [ 1073.800910][T26554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.800920][T26554] RIP: 0033:0x7f346339e159 [ 1073.800930][T26554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1073.800939][T26554] RSP: 002b:00007f3464298028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 1073.800950][T26554] RAX: ffffffffffffffda RBX: 00007f3463625fa0 RCX: 00007f346339e159 [ 1073.800958][T26554] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000 [ 1073.800964][T26554] RBP: 00007f346343506b R08: 0000000000000000 R09: 0000000000000000 [ 1073.800970][T26554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1073.800976][T26554] R13: 00007f3463626038 R14: 00007f3463625fa0 R15: 00007ffe6e06da48 [ 1073.800991][T26554] [ 1073.803865][T26551] Dev loop3: unable to read RDB block 7 [ 1073.803916][T26551] loop3: unable to read partition table [ 1073.804055][T26551] loop3: partition table beyond EOD, truncated [ 1073.804075][T26551] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 1074.133419][T26554] FAULT_INJECTION: forcing a failure. [ 1074.133419][T26554] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1074.133439][T26554] CPU: 0 UID: 0 PID: 26554 Comm: syz.5.4921 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1074.133455][T26554] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1074.133459][T26554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1074.133466][T26554] Call Trace: [ 1074.133470][T26554] [ 1074.133475][T26554] dump_stack_lvl+0xe8/0x150 [ 1074.133493][T26554] should_fail_ex+0x3eb/0x540 [ 1074.133513][T26554] get_futex_key+0xf12/0x1580 [ 1074.133533][T26554] ? __pfx_get_futex_key+0x10/0x10 [ 1074.133551][T26554] futex_wake+0x119/0x5f0 [ 1074.133564][T26554] ? __pfx_futex_wake+0x10/0x10 [ 1074.133579][T26554] ? mm_exit_exec_release+0x20/0x290 [ 1074.133594][T26554] do_futex+0x458/0x4e0 [ 1074.133610][T26554] ? __pfx_do_futex+0x10/0x10 [ 1074.133626][T26554] ? __might_fault+0xaf/0x130 [ 1074.133641][T26554] mm_exit_exec_release+0x10d/0x290 [ 1074.133654][T26554] exit_mm+0x50/0x240 [ 1074.133670][T26554] do_exit+0x6a8/0x2380 [ 1074.133688][T26554] ? __pfx_do_exit+0x10/0x10 [ 1074.133702][T26554] ? cgroup1_freezing+0x20/0x350 [ 1074.133718][T26554] ? cgroup1_freezing+0x20/0x350 [ 1074.133736][T26554] do_group_exit+0x22d/0x2f0 [ 1074.133749][T26554] ? _raw_spin_unlock_irq+0x23/0x50 [ 1074.133765][T26554] get_signal+0x1216/0x12c0 [ 1074.133787][T26554] arch_do_signal_or_restart+0xbb/0x860 [ 1074.133802][T26554] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1074.133823][T26554] exit_to_user_mode_loop+0x10e/0x770 [ 1074.133836][T26554] ? rcu_is_watching+0x16/0xb0 [ 1074.133852][T26554] do_syscall_64+0x328/0x520 [ 1074.133861][T26554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.133872][T26554] ? clear_bhb_loop+0x70/0xc0 [ 1074.133884][T26554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.133894][T26554] RIP: 0033:0x7f346339e159 [ 1074.133905][T26554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1074.133913][T26554] RSP: 002b:00007f34642980e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1074.133924][T26554] RAX: fffffffffffffe00 RBX: 00007f3463625fa8 RCX: 00007f346339e159 [ 1074.133931][T26554] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3463625fa8 [ 1074.133938][T26554] RBP: 00007f3463625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1074.133944][T26554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1074.133950][T26554] R13: 00007f3463626038 R14: 00007ffe6e06d960 R15: 00007ffe6e06da48 [ 1074.133965][T26554] [ 1074.469379][ T2272] hid-multitouch 0003:0EEF:72C4.0050: hiddev0,hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.4-1/input0 [ 1074.796573][ T2272] usb 5-1: USB disconnect, device number 70 [ 1074.836425][T25995] udevd[25995]: 'fido_id' [26568] terminated by signal 11 (Segmentation fault) [ 1074.919769][T26572] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4925'. [ 1075.198321][ T5703] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1075.358039][ T5703] usb 6-1: Using ep0 maxpacket: 8 [ 1075.359019][ T5703] usb 6-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1075.380083][ T5703] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1075.380099][ T5703] usb 6-1: config 0 has no interface number 0 [ 1075.380120][ T5703] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1075.380133][ T5703] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1075.380144][ T5703] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1075.380158][ T5703] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1075.380181][ T5703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.423877][ T5703] usb 6-1: config 0 descriptor?? [ 1075.487762][ T5703] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1075.677444][T26572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.677800][T26572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.728992][ T5703] usb 6-1: USB disconnect, device number 109 [ 1075.739075][ T5703] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1076.151030][T26589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4932'. [ 1076.534696][T26614] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:20000 [ 1076.640080][ T2272] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1076.796049][T26619] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4939'. [ 1076.815156][ T2272] usb 2-1: New USB device found: idVendor=0596, idProduct=0001, bcdDevice=5.f5 [ 1076.820734][ T2272] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 1076.820752][ T2272] usb 2-1: config 0 has no interface number 0 [ 1076.820774][ T2272] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1076.820788][ T2272] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1076.860479][ T2272] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1076.860494][ T2272] usb 2-1: Manufacturer: syz [ 1076.860502][ T2272] usb 2-1: SerialNumber: syz [ 1076.862110][ T2272] usb 2-1: config 0 descriptor?? [ 1076.961683][ T5703] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1077.091557][T26638] overlayfs: failed to resolve './file0': -2 [ 1077.120721][T26638] overlay: Unknown parameter 'memory.events' [ 1077.120814][ T5703] usb 3-1: Using ep0 maxpacket: 16 [ 1077.124493][ T5703] usb 3-1: New USB device found: idVendor=0eef, idProduct=72c4, bcdDevice=0.00 [ 1077.132136][ T5703] usb 3-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 1077.132164][ T5703] usb 3-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1077.132177][ T5703] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1077.132223][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.140137][ T5703] usb 3-1: config 0 descriptor?? [ 1077.241553][T26626] 9p: Bad value for 'rfdno' [ 1077.258084][T26638] overlay: Unknown parameter 'memory.events' [ 1077.272925][T26638] overlay: Unknown parameter 'memory.events' [ 1077.317065][T26638] overlay: Unknown parameter 'memory.events' [ 1077.329500][T26638] overlay: Unknown parameter 'memory.events' [ 1077.348474][T26638] overlay: Unknown parameter 'memory.events' [ 1077.352665][T26638] overlay: Unknown parameter 'memory.events' [ 1077.378085][T26638] overlay: Unknown parameter 'memory.events' [ 1077.385036][T26638] overlay: Unknown parameter 'memory.events' [ 1077.405290][T26638] overlay: Unknown parameter 'memory.events' [ 1077.422600][T26638] overlay: Unknown parameter 'memory.events' [ 1077.427769][T26638] overlay: Unknown parameter 'memory.events' [ 1077.448123][T26638] overlay: Unknown parameter 'memory.events' [ 1077.451295][T26638] overlay: Unknown parameter 'memory.events' [ 1077.451580][T26638] overlay: Unknown parameter 'memory.events' [ 1077.451802][T26638] overlay: Unknown parameter 'memory.events' [ 1077.478201][T26638] overlay: Unknown parameter 'memory.events' [ 1077.478420][T26638] overlay: Unknown parameter 'memory.events' [ 1077.478660][T26638] overlay: Unknown parameter 'memory.events' [ 1077.483764][ T5703] usb 3-1: string descriptor 0 read error: -71 [ 1077.515229][T26638] overlay: Unknown parameter 'memory.events' [ 1077.524998][ T5703] usb 3-1: USB disconnect, device number 60 [ 1077.539602][T26638] overlay: Unknown parameter 'memory.events' [ 1077.557356][T26638] overlay: Unknown parameter 'memory.events' [ 1077.605210][T26638] overlay: Unknown parameter 'memory.events' [ 1077.605642][T26638] overlay: Unknown parameter 'memory.events' [ 1077.618432][T26638] overlay: Unknown parameter 'memory.events' [ 1077.626368][ T2272] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input129 [ 1077.693814][T26638] overlay: Unknown parameter 'memory.events' [ 1077.711264][T26638] overlay: Unknown parameter 'memory.events' [ 1077.732455][T26638] overlay: Unknown parameter 'memory.events' [ 1077.737000][T26638] overlay: Unknown parameter 'memory.events' [ 1077.737265][T26638] overlay: Unknown parameter 'memory.events' [ 1077.737444][T26638] overlay: Unknown parameter 'memory.events' [ 1077.737611][T26638] overlay: Unknown parameter 'memory.events' [ 1077.944994][T26642] Invalid argument reading file caps for ./file0 [ 1078.557998][ T10] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1078.670824][ T5703] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1078.691671][ T10] usb 5-1: device descriptor read/64, error -71 [ 1078.832694][ T5703] usb 3-1: Using ep0 maxpacket: 16 [ 1078.856644][ T5703] usb 3-1: New USB device found: idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1078.880989][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.881007][ T5703] usb 3-1: Product: syz [ 1078.881015][ T5703] usb 3-1: Manufacturer: syz [ 1078.881022][ T5703] usb 3-1: SerialNumber: syz [ 1078.882717][ T5703] usb 3-1: config 0 descriptor?? [ 1078.920370][ T5703] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1078.925716][ T5703] usb 3-1: Detected FT-X [ 1078.948174][ T10] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1079.092995][ T10] usb 5-1: device descriptor read/64, error -71 [ 1079.135582][ T5703] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1079.172391][ T9] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1079.205096][ T10] usb usb5-port1: attempt power cycle [ 1079.312159][ T9] usb 6-1: device descriptor read/64, error -71 [ 1079.567978][ T10] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1079.573263][ T9] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1079.597651][ T10] usb 5-1: device descriptor read/8, error -71 [ 1079.613452][ T5703] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1079.680199][ T5703] usb 2-1: USB disconnect, device number 6 [ 1079.707437][ T9] usb 6-1: device descriptor read/64, error -71 [ 1079.824857][ T9] usb usb6-port1: attempt power cycle [ 1079.845996][ T10] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1079.867510][ T10] usb 5-1: device descriptor read/8, error -71 [ 1079.873980][ T9141] usb 3-1: USB disconnect, device number 61 [ 1079.903835][ T9141] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1079.909213][ T9141] ftdi_sio 3-1:0.0: device disconnected [ 1079.984831][ T10] usb usb5-port1: unable to enumerate USB device [ 1080.187582][ T9] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1080.211578][ T9] usb 6-1: device descriptor read/8, error -71 [ 1080.412139][ T9141] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 1080.467708][ T9] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1080.489061][ T9] usb 6-1: device descriptor read/8, error -71 [ 1080.550961][ T9141] usb 2-1: device descriptor read/64, error -71 [ 1080.606018][ T9] usb usb6-port1: unable to enumerate USB device [ 1080.808285][ T9141] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 1080.883144][ T10] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1080.949673][ T9141] usb 2-1: device descriptor read/64, error -71 [ 1081.042502][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1081.043619][ T10] usb 3-1: New USB device found: idVendor=0eef, idProduct=72c4, bcdDevice=0.00 [ 1081.045683][ T10] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1081.045699][ T10] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1081.045712][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1081.045729][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.050138][ T10] usb 3-1: config 0 descriptor?? [ 1081.116900][ T9141] usb usb2-port1: attempt power cycle [ 1081.481251][ T9141] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 1081.505687][ T9141] usb 2-1: device descriptor read/8, error -71 [ 1081.559713][T26687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.559998][T26687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.648913][ T10] hid-multitouch 0003:0EEF:72C4.0051: hiddev0,hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.2-1/input0 [ 1081.759314][ T9141] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1081.781781][ T9141] usb 2-1: device descriptor read/8, error -71 [ 1081.785326][T26537] udevd[26537]: 'fido_id' [26690] terminated by signal 11 (Segmentation fault) [ 1081.897593][ T9141] usb usb2-port1: unable to enumerate USB device [ 1081.911276][ T9141] usb 3-1: USB disconnect, device number 62 [ 1082.004250][ T9] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1082.182862][ T9] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 1082.195958][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.195973][ T9] usb 5-1: Product: syz [ 1082.195981][ T9] usb 5-1: Manufacturer: syz [ 1082.195988][ T9] usb 5-1: SerialNumber: syz [ 1082.411928][T26694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4956'. [ 1082.646051][T26700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4958'. [ 1083.002138][ T5703] kernel read not supported for file /dsp (pid: 5703 comm: kworker/0:6) [ 1083.313133][ T9] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1083.313149][ T9] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 1083.504065][T26716] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.536870912.0), cmd(9) [ 1083.536086][T26692] gfs2: Unknown parameter 'barrier 3v Cw20cȠM9$' [ 1083.536974][ T9] cdc_ncm 5-1:1.0: setting tx_max = 16384 [ 1083.620834][ T9] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1083.655627][ T9] usb 5-1: USB disconnect, device number 75 [ 1083.656581][ T9] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 1084.232241][T11800] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.398204][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1084.568979][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1084.569463][ T10] usb 2-1: New USB device found: idVendor=0eef, idProduct=72c4, bcdDevice=0.00 [ 1084.570358][ T10] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.570374][ T10] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1084.570387][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1084.570405][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.576883][ T10] usb 2-1: config 0 descriptor?? [ 1084.718550][ T9141] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1084.885506][ T9141] usb 6-1: Using ep0 maxpacket: 32 [ 1084.886803][ T9141] usb 6-1: New USB device found: idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1084.918877][ T9141] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.918894][ T9141] usb 6-1: Product: syz [ 1084.918908][ T9141] usb 6-1: Manufacturer: syz [ 1084.918920][ T9141] usb 6-1: SerialNumber: syz [ 1084.922427][ T9141] usb 6-1: config 0 descriptor?? [ 1084.961125][ T9141] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1084.961184][ T9141] dvb-usb: bulk message failed: -22 (4/0) [ 1084.961193][ T9141] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1084.961277][ T9141] dvb-usb: bulk message failed: -22 (5/0) [ 1084.961285][ T9141] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1085.023723][ T9141] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1085.036536][ T9141] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1085.036583][ T9141] usb 6-1: media controller created [ 1085.082130][T26734] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[25853] was attempted by ""[26734] [ 1085.092922][ T10] hid-multitouch 0003:0EEF:72C4.0052: hiddev0,hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.1-1/input0 [ 1085.131860][ T9141] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1085.258351][ T9141] usb 6-1: selecting invalid altsetting 3 [ 1085.258365][ T9141] ttusb2: set interface to alts=3 failed [ 1085.360757][ T9] usb 2-1: USB disconnect, device number 11 [ 1085.375262][T26080] udevd[26080]: 'fido_id' [26745] terminated by signal 11 (Segmentation fault) [ 1085.378468][ T9141] DVB: Unable to find symbol tda10086_attach() [ 1085.378477][ T9141] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1085.379376][ T9141] dvb-usb: bulk message failed: -22 (4/0) [ 1085.379387][ T9141] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1085.379450][ T9141] dvb-usb: bulk message failed: -22 (5/0) [ 1085.379457][ T9141] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1085.379492][ T9141] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1085.466535][ T10] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1085.467486][ T9141] usb 6-1: USB disconnect, device number 114 [ 1085.609642][ T9141] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1085.628582][ T10] usb 5-1: Invalid ep0 maxpacket: 9 [ 1085.767301][ T10] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1085.853746][T26748] netlink: 'syz.2.4969': attribute type 10 has an invalid length. [ 1085.909386][T26748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1085.914854][T26748] team0: Port device netdevsim1 added [ 1085.926556][ T10] usb 5-1: Invalid ep0 maxpacket: 9 [ 1085.926939][ T10] usb usb5-port1: attempt power cycle [ 1086.140334][T26753] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.1543503872.0), cmd(9) [ 1086.301307][ T10] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1086.323249][ T10] usb 5-1: Invalid ep0 maxpacket: 9 [ 1086.460289][ T10] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1086.482198][ T10] usb 5-1: Invalid ep0 maxpacket: 9 [ 1086.482406][ T10] usb usb5-port1: unable to enumerate USB device [ 1086.535118][ T9143] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1086.567337][ T9141] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1086.587602][ T9] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1086.674775][ T9143] usb 2-1: device descriptor read/64, error -71 [ 1086.727944][ T9141] usb 3-1: New USB device found: idVendor=1a34, idProduct=0802, bcdDevice=0.00 [ 1086.728737][ T9141] usb 3-1: config index 0 descriptor too short (expected 71, got 36) [ 1086.728751][ T9141] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1086.728772][ T9141] usb 3-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1086.728785][ T9141] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1086.728802][ T9141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.734437][ T9141] usb 3-1: config 0 descriptor?? [ 1086.750612][ T9141] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1086.792267][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1086.823654][ T9] usb 6-1: New USB device found: idVendor=05d1, idProduct=2001, bcdDevice=6.00 [ 1086.824683][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1086.836636][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.836651][ T9] usb 6-1: Product: syz [ 1086.836659][ T9] usb 6-1: Manufacturer: syz [ 1086.836666][ T9] usb 6-1: SerialNumber: syz [ 1086.888839][ T9] usb 6-1: config 0 descriptor?? [ 1086.890423][ T9] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1086.894677][ T9] usb 6-1: Detected FT232R [ 1086.975060][ T9143] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1087.113918][ T9143] usb 2-1: device descriptor read/64, error -71 [ 1087.122315][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1087.140292][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1087.143229][ T9] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 1087.160082][ T9] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1087.183191][ T9] usb 6-1: USB disconnect, device number 115 [ 1087.202036][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1087.202366][ T9] ftdi_sio 6-1:0.0: device disconnected [ 1087.230060][ T9143] usb usb2-port1: attempt power cycle [ 1087.594682][ T9143] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1087.620821][ T9143] usb 2-1: device descriptor read/8, error -71 [ 1087.873645][ T9143] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1087.894832][ T9143] usb 2-1: device descriptor read/8, error -71 [ 1088.011446][ T9143] usb usb2-port1: unable to enumerate USB device [ 1088.386481][ T9143] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 1088.549471][ T9143] usb 5-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 1088.550158][ T9143] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1088.550178][ T9143] usb 5-1: can't read configurations, error -71 [ 1088.701901][ T33] audit: type=1326 audit(1700000733.943:13388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26787 comm="syz.5.4976" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346339e159 code=0x7fc00000 [ 1089.473718][ T10] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1089.613042][ T10] usb 6-1: device descriptor read/64, error -71 [ 1089.655729][ T9143] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1089.816231][ T9143] usb 5-1: Using ep0 maxpacket: 32 [ 1089.816684][ T9143] usb 5-1: New USB device found: idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1089.819163][ T9143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.819177][ T9143] usb 5-1: Product: syz [ 1089.819184][ T9143] usb 5-1: Manufacturer: syz [ 1089.819192][ T9143] usb 5-1: SerialNumber: syz [ 1089.822933][ T9143] usb 5-1: config 0 descriptor?? [ 1089.873279][ T10] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1089.876324][ T9143] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1089.876384][ T9143] dvb-usb: bulk message failed: -22 (4/0) [ 1089.876392][ T9143] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1089.876474][ T9143] dvb-usb: bulk message failed: -22 (5/0) [ 1089.876482][ T9143] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1089.932929][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1089.947908][ T9143] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1089.949312][ T9143] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1089.949343][ T9143] usb 5-1: media controller created [ 1089.988179][ T9143] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1090.009400][ T10] usb 6-1: device descriptor read/64, error -71 [ 1090.015080][ T9143] usb 5-1: selecting invalid altsetting 3 [ 1090.015091][ T9143] ttusb2: set interface to alts=3 failed [ 1090.079952][ T9143] DVB: Unable to find symbol tda10086_attach() [ 1090.079964][ T9143] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1090.081573][ T9143] dvb-usb: bulk message failed: -22 (4/0) [ 1090.081585][ T9143] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1090.081645][ T9143] dvb-usb: bulk message failed: -22 (5/0) [ 1090.081652][ T9143] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1090.081685][ T9143] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1090.105926][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1090.135039][ T10] usb usb6-port1: attempt power cycle [ 1090.135841][ T9] usb 2-1: New USB device found: idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1090.148281][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.148314][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.199643][ T9] usb 2-1: config 0 descriptor?? [ 1090.207201][ T9143] usb 5-1: USB disconnect, device number 81 [ 1090.227996][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1090.366968][ T9141] usb 3-1: USB disconnect, device number 63 [ 1090.408308][ T9143] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1090.510445][ T10] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1090.535270][ T10] usb 6-1: device descriptor read/8, error -71 [ 1090.788192][ T10] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1090.811227][ T10] usb 6-1: device descriptor read/8, error -71 [ 1090.842608][ T9141] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1090.928297][ T10] usb usb6-port1: unable to enumerate USB device [ 1091.013786][ T9141] usb 3-1: Using ep0 maxpacket: 16 [ 1091.015502][ T9141] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1091.015530][ T9141] usb 3-1: New USB device found: idVendor=103d, idProduct=0100, bcdDevice=0.40 [ 1091.016347][ T9141] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.016383][ T9141] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1091.016402][ T9141] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1091.019431][ T9141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.019460][ T9141] usb 3-1: Product: syz [ 1091.019467][ T9141] usb 3-1: Manufacturer: syz [ 1091.019475][ T9141] usb 3-1: SerialNumber: syz [ 1091.248994][ T9143] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1091.358191][T26831] FAULT_INJECTION: forcing a failure. [ 1091.358191][T26831] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1091.358212][T26831] CPU: 0 UID: 0 PID: 26831 Comm: syz.1.4982 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1091.358227][T26831] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1091.358234][T26831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1091.358241][T26831] Call Trace: [ 1091.358246][T26831] [ 1091.358251][T26831] dump_stack_lvl+0xe8/0x150 [ 1091.358270][T26831] should_fail_ex+0x3eb/0x540 [ 1091.358288][T26831] get_futex_key+0x1b4/0x1580 [ 1091.358301][T26831] ? __lock_acquire+0x747/0x2de0 [ 1091.358317][T26831] ? trace_pelt_se_tp+0x3b/0x150 [ 1091.358330][T26831] ? __pfx_get_futex_key+0x10/0x10 [ 1091.358346][T26831] ? update_se+0x90/0x1080 [ 1091.358363][T26831] futex_wait_setup+0x4a/0x590 [ 1091.358376][T26831] ? __futex_wait+0xdb/0x470 [ 1091.358395][T26831] __futex_wait+0x175/0x470 [ 1091.358406][T26831] ? update_protect_slice+0x128/0x210 [ 1091.358419][T26831] ? __pfx___futex_wait+0x10/0x10 [ 1091.358432][T26831] ? __pfx_futex_wake_mark+0x10/0x10 [ 1091.358445][T26831] ? try_to_wake_up+0x8c5/0x14d0 [ 1091.358464][T26831] futex_wait+0x121/0x390 [ 1091.358475][T26831] ? __pfx_futex_wait+0x10/0x10 [ 1091.358495][T26831] do_futex+0x3e7/0x4e0 [ 1091.358511][T26831] ? __pfx_do_futex+0x10/0x10 [ 1091.358523][T26831] ? __fget_files+0x3a2/0x420 [ 1091.358533][T26831] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1091.358547][T26831] __se_sys_futex+0x3a8/0x450 [ 1091.358563][T26831] ? ksys_write+0x242/0x270 [ 1091.358574][T26831] ? __pfx___se_sys_futex+0x10/0x10 [ 1091.358588][T26831] ? __pfx_ksys_write+0x10/0x10 [ 1091.358602][T26831] ? __x64_sys_futex+0x21/0xf0 [ 1091.358617][T26831] do_syscall_64+0x166/0x520 [ 1091.358627][T26831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.358637][T26831] ? clear_bhb_loop+0x70/0xc0 [ 1091.358649][T26831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.358659][T26831] RIP: 0033:0x7fae0af9e159 [ 1091.358669][T26831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1091.358678][T26831] RSP: 002b:00007fae0be9c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1091.358690][T26831] RAX: ffffffffffffffda RBX: 00007fae0b225fa8 RCX: 00007fae0af9e159 [ 1091.358697][T26831] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fae0b225fa8 [ 1091.358704][T26831] RBP: 00007fae0b225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1091.358710][T26831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1091.358716][T26831] R13: 00007fae0b226038 R14: 00007fff58fd4820 R15: 00007fff58fd4908 [ 1091.358731][T26831] [ 1091.437296][ T9143] usb 5-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 1091.499853][ T9143] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.499883][ T9143] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1091.499894][ T9143] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1091.499905][ T9143] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1091.499951][ T9143] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.680039][ T9] gspca_vc032x: reg_r err -110 [ 1091.680089][ T9] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 1091.821377][ T9141] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1091.821674][ T9141] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1091.879888][ T9] usb 2-1: USB disconnect, device number 16 [ 1091.977424][ T9141] usb 3-1: USB disconnect, device number 64 [ 1092.595779][ T9141] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 1092.757897][ T9141] usb 3-1: New USB device found: idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1092.771169][ T9141] usb 3-1: config 0 has no interfaces? [ 1092.773668][ T9141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.773682][ T9141] usb 3-1: Product: syz [ 1092.773690][ T9141] usb 3-1: Manufacturer: syz [ 1092.773697][ T9141] usb 3-1: SerialNumber: syz [ 1092.814521][ T9141] usb 3-1: config 0 descriptor?? [ 1093.093389][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1093.093426][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1093.140945][T26856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.143454][T26856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.149120][ T9141] usb 3-1: USB disconnect, device number 65 [ 1093.176880][ T5703] usb 6-1: new full-speed USB device number 120 using dummy_hcd [ 1093.346023][ T5703] usb 6-1: not running at top speed; connect to a high speed hub [ 1093.346046][ T5703] usb 6-1: New USB device found: idVendor=0eb0, idProduct=9020, bcdDevice=7d.82 [ 1093.348531][ T5703] usb 6-1: config 35 has an invalid interface number: 212 but max is 1 [ 1093.348548][ T5703] usb 6-1: config 35 has an invalid interface number: 77 but max is 1 [ 1093.348558][ T5703] usb 6-1: config 35 has an invalid interface number: 245 but max is 1 [ 1093.348568][ T5703] usb 6-1: config 35 has 3 interfaces, different from the descriptor's value: 2 [ 1093.348579][ T5703] usb 6-1: config 35 has no interface number 0 [ 1093.348587][ T5703] usb 6-1: config 35 has no interface number 1 [ 1093.348595][ T5703] usb 6-1: config 35 has no interface number 2 [ 1093.348627][ T5703] usb 6-1: config 35 interface 212 altsetting 244 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1093.348639][ T5703] usb 6-1: config 35 interface 212 altsetting 244 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1093.348651][ T5703] usb 6-1: config 35 interface 212 altsetting 244 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1093.348663][ T5703] usb 6-1: config 35 interface 212 altsetting 244 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1093.348675][ T5703] usb 6-1: config 35 interface 212 altsetting 244 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1093.348694][ T5703] usb 6-1: config 35 interface 212 altsetting 244 has an invalid descriptor for endpoint zero, skipping [ 1093.348705][ T5703] usb 6-1: config 35 interface 212 altsetting 244 has a duplicate endpoint with address 0x9, skipping [ 1093.348717][ T5703] usb 6-1: config 35 interface 212 altsetting 244 has an invalid descriptor for endpoint zero, skipping [ 1093.348727][ T5703] usb 6-1: config 35 interface 212 altsetting 244 has an invalid descriptor for endpoint zero, skipping [ 1093.348744][ T5703] usb 6-1: config 35 interface 77 altsetting 10 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1093.348756][ T5703] usb 6-1: config 35 interface 77 altsetting 10 has a duplicate endpoint with address 0x9, skipping [ 1093.348768][ T5703] usb 6-1: config 35 interface 77 altsetting 10 has a duplicate endpoint with address 0x4, skipping [ 1093.348779][ T5703] usb 6-1: config 35 interface 77 altsetting 10 endpoint 0x8 has invalid maxpacket 20652, setting to 64 [ 1093.348792][ T5703] usb 6-1: config 35 interface 77 altsetting 10 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1093.348804][ T5703] usb 6-1: too many endpoints for config 35 interface 245 altsetting 217: 153, using maximum allowed: 30 [ 1093.348822][ T5703] usb 6-1: config 35 interface 245 altsetting 217 has a duplicate endpoint with address 0x2, skipping [ 1093.348833][ T5703] usb 6-1: config 35 interface 245 altsetting 217 has 1 endpoint descriptor, different from the interface descriptor's value: 153 [ 1093.348845][ T5703] usb 6-1: config 35 interface 212 has no altsetting 0 [ 1093.348854][ T5703] usb 6-1: config 35 interface 77 has no altsetting 0 [ 1093.348862][ T5703] usb 6-1: config 35 interface 245 has no altsetting 0 [ 1093.415997][ T5703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.416012][ T5703] usb 6-1: Product: 覔憶䧅냙밮ꯣ逽ꟖᙇṴᲬ㾎䰧魾쾚ᾡ⋰⣪哰쓗䤐᦯⏷ⓚ댚⣍澽웿橎鵞ⶁ㸧㖭뇺錬⬀司䕙 [ 1093.416022][ T5703] usb 6-1: Manufacturer: 膿홂ㄦ [ 1093.416029][ T5703] usb 6-1: SerialNumber: ဉ [ 1093.603179][T26864] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1093.603357][T26864] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1093.603428][T26864] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1093.603674][T26864] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1093.905548][ T9141] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1093.962756][ T5703] usb 6-1: USB disconnect, device number 120 [ 1094.071027][ T9141] usb 3-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 1094.071964][ T9141] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1094.071978][ T9141] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1094.071998][ T9141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.199999][ T10] usb 5-1: USB disconnect, device number 82 [ 1094.245375][ T9141] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 1094.806677][ T5703] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1094.968126][ T5703] usb 5-1: New USB device found: idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1094.973267][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1094.973282][ T5703] usb 5-1: Product: syz [ 1094.973290][ T5703] usb 5-1: Manufacturer: syz [ 1094.973297][ T5703] usb 5-1: SerialNumber: syz [ 1094.976344][ T5703] usb 5-1: config 0 descriptor?? [ 1095.018834][ T9141] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1095.034268][ T5703] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1095.034308][ T5703] dvb-usb: bulk message failed: -22 (2/0) [ 1095.038081][ T5703] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1095.038547][ T5703] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1095.038583][ T5703] usb 5-1: media controller created [ 1095.098525][ T5703] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1095.204977][ T9141] usb 6-1: Using ep0 maxpacket: 16 [ 1095.209253][ T9141] usb 6-1: New USB device found: idVendor=0eef, idProduct=72c4, bcdDevice=0.00 [ 1095.211746][ T9141] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.211763][ T9141] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1095.211776][ T9141] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1095.211794][ T9141] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.290869][ T5703] cxusb: set interface failed [ 1095.290882][ T5703] dvb-usb: bulk message failed: -22 (1/0) [ 1095.322585][ T9141] usb 6-1: config 0 descriptor?? [ 1095.400734][ T5703] DVB: Unable to find symbol mt352_attach() [ 1095.400821][ T5703] dvb-usb: bulk message failed: -22 (5/0) [ 1095.400833][ T5703] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1095.400862][ T5703] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1095.513199][ T5703] rc_core: IR keymap rc-dvico-mce not found [ 1095.513220][ T5703] Registered IR keymap rc-empty [ 1095.518890][ T5703] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1095.520508][ T5703] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input132 [ 1095.577655][ T5703] dvb-usb: schedule remote query interval to 100 msecs. [ 1095.577671][ T5703] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1095.583580][ T5703] usb 5-1: USB disconnect, device number 83 [ 1095.670698][ T5703] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1095.789308][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1095.950459][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1095.952205][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1095.952236][ T10] usb 2-1: New USB device found: idVendor=19d2, idProduct=075a, bcdDevice=bd.91 [ 1095.953080][ T10] usb 2-1: config 3 has an invalid interface number: 195 but max is 0 [ 1095.953093][ T10] usb 2-1: config 3 has no interface number 0 [ 1095.953115][ T10] usb 2-1: config 3 interface 195 altsetting 4 bulk endpoint 0xD has invalid maxpacket 8 [ 1095.953127][ T10] usb 2-1: config 3 interface 195 has no altsetting 0 [ 1095.957576][ T10] usb 2-1: string descriptor 0 read error: -22 [ 1095.957652][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.002063][T26888] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1096.070531][ T10] usb 2-1: No union descriptors [ 1096.226813][T26888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.227100][T26888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.253984][T26888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.254271][T26888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.281297][ T10] usb 2-1: USB disconnect, device number 17 [ 1096.530543][ T9141] hid-multitouch 0003:0EEF:72C4.0053: hiddev1,hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.5-1/input0 [ 1096.557086][ T9141] usb 6-1: USB disconnect, device number 121 [ 1096.584441][ T9] usb 3-1: USB disconnect, device number 66 [ 1096.607694][ T9] idmouse 3-1:1.0: disconnected [ 1096.620325][ T5703] usb 5-1: new low-speed USB device number 84 using dummy_hcd [ 1096.696902][T26080] udevd[26080]: 'fido_id' [26893] terminated by signal 11 (Segmentation fault) [ 1096.774348][ T5703] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1096.774381][ T5703] usb 5-1: New USB device found: idVendor=0711, idProduct=0210, bcdDevice=22.c2 [ 1096.775885][ T5703] usb 5-1: config 74 has an invalid interface number: 142 but max is 2 [ 1096.775899][ T5703] usb 5-1: config 74 has an invalid interface number: 72 but max is 2 [ 1096.775909][ T5703] usb 5-1: config 74 has an invalid interface number: 97 but max is 2 [ 1096.775919][ T5703] usb 5-1: config 74 has no interface number 0 [ 1096.775927][ T5703] usb 5-1: config 74 has no interface number 1 [ 1096.775935][ T5703] usb 5-1: config 74 has no interface number 2 [ 1096.775966][ T5703] usb 5-1: config 74 interface 142 altsetting 255 endpoint 0xB has invalid maxpacket 64, setting to 8 [ 1096.775979][ T5703] usb 5-1: config 74 interface 142 altsetting 255 endpoint 0x9 has an invalid bInterval 128, changing to 4 [ 1096.775992][ T5703] usb 5-1: config 74 interface 142 altsetting 255 endpoint 0x9 has invalid maxpacket 1024, setting to 0 [ 1096.776004][ T5703] usb 5-1: config 74 interface 142 altsetting 255 endpoint 0xD has invalid maxpacket 64, setting to 8 [ 1096.776022][ T5703] usb 5-1: config 74 interface 72 altsetting 255 endpoint 0x8 has invalid maxpacket 48, setting to 8 [ 1096.776040][ T5703] usb 5-1: config 74 interface 97 altsetting 148 has a duplicate endpoint with address 0xD, skipping [ 1096.776051][ T5703] usb 5-1: config 74 interface 142 has no altsetting 0 [ 1096.776059][ T5703] usb 5-1: config 74 interface 72 has no altsetting 0 [ 1096.776068][ T5703] usb 5-1: config 74 interface 97 has no altsetting 0 [ 1096.778757][ T5703] usb 5-1: string descriptor 0 read error: -22 [ 1096.778831][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.782746][T26892] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1096.782874][T26892] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1096.862314][ T5703] mct_u232 5-1:74.142: MCT U232 converter detected [ 1096.971832][ T5703] mct_u232 ttyUSB0: expected endpoint missing [ 1097.006003][ T5703] mct_u232 5-1:74.72: MCT U232 converter detected [ 1097.017701][ T5703] mct_u232 ttyUSB1: expected endpoint missing [ 1097.049052][ T5703] mct_u232 5-1:74.97: MCT U232 converter detected [ 1097.049738][ T5703] mct_u232 ttyUSB2: expected endpoint missing [ 1097.079534][ T5703] usb 5-1: USB disconnect, device number 84 [ 1097.096626][ T5703] mct_u232 5-1:74.142: device disconnected [ 1097.113573][ T5703] mct_u232 5-1:74.72: device disconnected [ 1097.127373][ T9141] usb 6-1: new full-speed USB device number 122 using dummy_hcd [ 1097.130947][ T5703] mct_u232 5-1:74.97: device disconnected [ 1097.286398][ T9141] usb 6-1: New USB device found: idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1097.287243][ T9141] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 959, setting to 64 [ 1097.287261][ T9141] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1097.288906][ T9141] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.288920][ T9141] usb 6-1: Product: syz [ 1097.288927][ T9141] usb 6-1: Manufacturer: syz [ 1097.288935][ T9141] usb 6-1: SerialNumber: syz [ 1097.295379][ T9141] usb 6-1: config 0 descriptor?? [ 1097.317347][T26895] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1097.406912][T26905] openvswitch: netlink: Geneve option length err (len 856, max 255). [ 1097.509809][T26907] md: couldn't update array info. -22 [ 1097.553312][ T9] usb 6-1: USB disconnect, device number 122 [ 1097.650877][T26909] netlink: 'syz.2.5004': attribute type 12 has an invalid length. [ 1097.651849][T26909] netlink: 'syz.2.5004': attribute type 4 has an invalid length. [ 1098.056004][ T9] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1098.221996][ T9] usb 3-1: New USB device found: idVendor=a257, idProduct=2013, bcdDevice=0.00 [ 1098.236123][ T9] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1098.236151][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1098.236164][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1098.274532][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.274548][ T9] usb 3-1: Product: syz [ 1098.274556][ T9] usb 3-1: Manufacturer: syz [ 1098.274563][ T9] usb 3-1: SerialNumber: syz [ 1098.297614][T26913] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1098.297698][T26913] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1098.567036][T26913] tipc: Started in network mode [ 1098.567056][T26913] tipc: Node identity 5a2575e4372f, cluster identity 4711 [ 1098.567208][T26913] tipc: Enabled bearer , priority 10 [ 1098.597661][T26912] tipc: Resetting bearer [ 1098.705490][T26912] tipc: Disabling bearer [ 1098.716788][T26934] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1098.716804][T26934] overlayfs: failed to set xattr on upper [ 1098.716809][T26934] overlayfs: ...falling back to redirect_dir=nofollow. [ 1098.716814][T26934] overlayfs: ...falling back to uuid=null. [ 1098.763735][ T9141] usb 3-1: USB disconnect, device number 67 [ 1098.859630][T26937] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1098.859648][T26937] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1098.860836][T26937] vhci_hcd vhci_hcd.0: Device attached [ 1099.112584][ T9] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1099.112684][ T5703] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 1099.274568][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1099.276679][T26938] usb 43-1: recv xbuf, 0 [ 1099.291934][T26937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.292222][T26937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.364920][T11786] vhci_hcd vhci_hcd.5: stop threads [ 1099.364934][T11786] vhci_hcd vhci_hcd.5: release socket [ 1099.364969][T11786] vhci_hcd vhci_hcd.5: disconnect device [ 1099.426309][ T5703] usb 43-1: device descriptor read/64, error -71 [ 1099.615158][ T5703] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1099.786657][ T9141] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1099.824597][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1099.824627][ T9] usb 6-1: New USB device found: idVendor=003c, idProduct=0000, bcdDevice=0.00 [ 1099.824647][ T9] usb 6-1: no configurations [ 1099.824654][ T9] usb 6-1: can't read configurations, error -22 [ 1099.947207][ T9141] usb 3-1: Using ep0 maxpacket: 32 [ 1099.947662][ T9141] usb 3-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 1099.948467][ T9141] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.948482][ T9141] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1099.948502][ T9141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.950422][ T9141] usb 3-1: config 0 descriptor?? [ 1099.956122][ T9141] hub 3-1:0.0: USB hub found [ 1100.074351][ T10] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1100.187399][ T9141] hub 3-1:0.0: 1 port detected [ 1100.235087][ T10] usb 2-1: New USB device found: idVendor=057e, idProduct=2009, bcdDevice=0.00 [ 1100.236094][ T10] usb 2-1: config 0 has an invalid descriptor of length 121, skipping remainder of the config [ 1100.236125][ T10] usb 2-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1100.236160][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1100.236179][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.242333][ T10] usb 2-1: config 0 descriptor?? [ 1100.307803][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1100.732076][ T10] hub 3-1:0.0: activate --> -90 [ 1101.165691][ T5703] usb 3-1: USB disconnect, device number 68 [ 1101.885059][T26971] usb usb8: usbfs: process 26971 (syz.4.5020) did not claim interface 0 before use [ 1102.007768][T26977] netlink: 'syz.2.5022': attribute type 46 has an invalid length. [ 1102.022035][ T33] audit: type=1807 audit(1700000746.398:13389): action=measure res=1 [ 1102.060131][T26975] ima: policy update completed [ 1102.060270][ T33] audit: type=1802 audit(1700000746.436:13390): pid=26975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.2.5022" res=1 errno=0 [ 1102.306539][ T33] audit: type=1800 audit(1700000746.669:13391): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31355 res=0 errno=0 [ 1102.336731][ T33] audit: type=1800 audit(1700000746.698:13392): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31378 res=0 errno=0 [ 1102.500130][ T5703] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1102.660943][ T5703] usb 3-1: Using ep0 maxpacket: 8 [ 1102.661852][ T5703] usb 3-1: New USB device found: idVendor=0451, idProduct=8140, bcdDevice=4.82 [ 1102.662678][ T5703] usb 3-1: config 0 has an invalid interface number: 69 but max is 1 [ 1102.662692][ T5703] usb 3-1: config 0 has no interface number 1 [ 1102.662730][ T5703] usb 3-1: config 0 interface 69 has no altsetting 0 [ 1102.662739][ T5703] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1102.664417][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.664429][ T5703] usb 3-1: Product: syz [ 1102.664437][ T5703] usb 3-1: Manufacturer: syz [ 1102.664444][ T5703] usb 3-1: SerialNumber: syz [ 1102.668369][ T5703] usb 3-1: config 0 descriptor?? [ 1102.748978][T18851] Bluetooth: hci0: command 0x1003 tx timeout [ 1102.763925][ T4926] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1102.789244][ T33] audit: type=1800 audit(1700000747.119:13393): pid=26537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=562433 res=0 errno=0 [ 1102.810431][ T33] audit: type=1800 audit(1700000747.128:13394): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4844 res=0 errno=0 [ 1102.850038][ T33] audit: type=1800 audit(1700000747.175:13395): pid=26537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=562465 res=0 errno=0 [ 1102.888893][ T33] audit: type=1800 audit(1700000747.222:13396): pid=26537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=562440 res=0 errno=0 [ 1102.888930][ T33] audit: type=1800 audit(1700000747.222:13397): pid=26537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=562441 res=0 errno=0 [ 1102.987877][ T5703] hub 3-1:0.69: Invalid hub with more than one config or interface [ 1102.987895][ T5703] hub 3-1:0.69: probe with driver hub failed with error -22 [ 1102.988384][ T5703] rndis_host 3-1:0.69: bogus CDC Union [ 1103.027632][ T5703] hub 3-1:0.0: Invalid hub with more than one config or interface [ 1103.027649][ T5703] hub 3-1:0.0: probe with driver hub failed with error -22 [ 1103.061210][ T5703] usb 3-1: USB disconnect, device number 69 [ 1103.100052][ T10] usb 2-1: USB disconnect, device number 18 [ 1103.103495][ T33] audit: type=1800 audit(1700000747.409:13398): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31305 res=0 errno=0 [ 1103.675837][ T10] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1103.728927][ T5703] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1103.836445][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1103.837947][ T10] usb 5-1: New USB device found: idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1103.838898][ T10] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 1103.838912][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.838921][ T10] usb 5-1: config 0 has no interface number 0 [ 1103.838942][ T10] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1103.838953][ T10] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 1103.838964][ T10] usb 5-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1103.838977][ T10] usb 5-1: config 0 interface 196 has no altsetting 0 [ 1103.844562][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.844577][ T10] usb 5-1: Product: syz [ 1103.844625][ T10] usb 5-1: Manufacturer: syz [ 1103.844633][ T10] usb 5-1: SerialNumber: syz [ 1103.913282][ T10] usb 5-1: config 0 descriptor?? [ 1104.270417][T27009] tipc: Can't bind to reserved service type 2 [ 1104.380142][T26985] coreboot_table pcspkr: probe with driver coreboot_table failed with error -22 [ 1104.391945][ T9141] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1104.407158][ T10] ipheth 5-1:0.196: Unable to find endpoints [ 1104.442265][ T10] usb 5-1: USB disconnect, device number 85 [ 1104.542998][ T9141] usb 2-1: device descriptor read/64, error -71 [ 1104.799611][ T9141] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1104.936883][ T9141] usb 2-1: device descriptor read/64, error -71 [ 1105.055509][ T9141] usb usb2-port1: attempt power cycle [ 1105.198916][T27025] sg_write: data in/out 262112/32 bytes for SCSI command 0x0-- guessing data in; [ 1105.198916][T27025] program syz.4.5031 not setting count and/or reply_len properly [ 1105.417650][ T9141] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1105.441409][ T9141] usb 2-1: device descriptor read/8, error -71 [ 1105.695671][ T9141] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1105.719706][ T9141] usb 2-1: device descriptor read/8, error -71 [ 1105.834561][ T9141] usb usb2-port1: unable to enumerate USB device [ 1106.929951][T27065] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5035'. [ 1107.334183][ T2272] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1107.503014][ T2272] usb 5-1: Using ep0 maxpacket: 16 [ 1107.503475][ T2272] usb 5-1: New USB device found: idVendor=046d, idProduct=c52b, bcdDevice=0.00 [ 1107.521463][ T2272] usb 5-1: config 0 has an invalid interface number: 7 but max is 0 [ 1107.521478][ T2272] usb 5-1: config 0 has no interface number 0 [ 1107.521500][ T2272] usb 5-1: config 0 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1107.521513][ T2272] usb 5-1: config 0 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1107.521535][ T2272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.550281][ T5703] usb 6-1: new full-speed USB device number 126 using dummy_hcd [ 1107.588808][ T2272] usb 5-1: config 0 descriptor?? [ 1107.591474][ T33] kauditd_printk_skb: 28 callbacks suppressed [ 1107.591484][ T33] audit: type=1800 audit(1700000751.620:13427): pid=26537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=562729 res=0 errno=0 [ 1107.633447][ T33] audit: type=1800 audit(1700000751.657:13428): pid=26537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=562758 res=0 errno=0 [ 1107.636857][ T33] audit: type=1800 audit(1700000751.657:13429): pid=26537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=562736 res=0 errno=0 [ 1107.683877][ T33] audit: type=1800 audit(1700000751.704:13430): pid=26537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=562737 res=0 errno=0 [ 1107.685274][ T33] audit: type=1800 audit(1700000751.704:13431): pid=26537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=562738 res=0 errno=0 [ 1107.754088][ T5703] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1107.754512][ T5703] usb 6-1: not running at top speed; connect to a high speed hub [ 1107.754530][ T5703] usb 6-1: New USB device found: idVendor=0424, idProduct=0002, bcdDevice=75.e7 [ 1107.754550][ T5703] usb 6-1: too many configurations: 12, using maximum allowed: 8 [ 1107.755745][ T5703] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1107.755764][ T5703] usb 6-1: can't read configurations, error -61 [ 1107.755922][ T5703] usb usb6-port1: attempt power cycle [ 1107.774965][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1107.835645][ T33] audit: type=1800 audit(1700000751.844:13432): pid=26537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=562787 res=0 errno=0 [ 1107.953472][ T10] usb 2-1: New USB device found: idVendor=0a12, idProduct=0001, bcdDevice=0.00 [ 1107.955708][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.955721][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1107.957367][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.957379][ T10] usb 2-1: Product: syz [ 1107.957387][ T10] usb 2-1: Manufacturer: syz [ 1107.957394][ T10] usb 2-1: SerialNumber: syz [ 1108.010857][ T33] audit: type=1800 audit(1700000752.013:13433): pid=26537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=562805 res=0 errno=0 [ 1108.049400][ T33] audit: type=1800 audit(1700000752.050:13434): pid=26537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=562837 res=0 errno=0 [ 1108.049447][ T33] audit: type=1800 audit(1700000752.050:13435): pid=26537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=562812 res=0 errno=0 [ 1108.102219][ T33] audit: type=1800 audit(1700000752.097:13436): pid=26537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=562813 res=0 errno=0 [ 1108.153500][ T5703] usb 6-1: new full-speed USB device number 127 using dummy_hcd [ 1108.172874][ T2272] logitech-djreceiver 0003:046D:C52B.0054: unknown main item tag 0x0 [ 1108.172899][ T2272] logitech-djreceiver 0003:046D:C52B.0054: unknown main item tag 0x0 [ 1108.172937][ T2272] logitech-djreceiver 0003:046D:C52B.0054: unknown main item tag 0x0 [ 1108.172952][ T2272] logitech-djreceiver 0003:046D:C52B.0054: unknown main item tag 0x0 [ 1108.172966][ T2272] logitech-djreceiver 0003:046D:C52B.0054: unknown main item tag 0x0 [ 1108.172981][ T2272] logitech-djreceiver 0003:046D:C52B.0054: unknown main item tag 0x0 [ 1108.172995][ T2272] logitech-djreceiver 0003:046D:C52B.0054: unknown main item tag 0x0 [ 1108.173010][ T2272] logitech-djreceiver 0003:046D:C52B.0054: unknown main item tag 0x0 [ 1108.173024][ T2272] logitech-djreceiver 0003:046D:C52B.0054: unknown main item tag 0x0 [ 1108.173039][ T2272] logitech-djreceiver 0003:046D:C52B.0054: unknown main item tag 0x0 [ 1108.262303][T27073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.262614][T27073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.297582][T27071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.297871][T27071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.298026][ T5703] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1108.301475][ T5703] usb 6-1: not running at top speed; connect to a high speed hub [ 1108.301494][ T5703] usb 6-1: New USB device found: idVendor=0424, idProduct=0002, bcdDevice=75.e7 [ 1108.301535][ T5703] usb 6-1: too many configurations: 12, using maximum allowed: 8 [ 1108.362226][ T5703] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1108.362248][ T5703] usb 6-1: can't read configurations, error -61 [ 1108.419952][ T2272] logitech-djreceiver 0003:046D:C52B.0054: hidraw0: USB HID v7f.fd Device [HID 046d:c52b] on usb-dummy_hcd.4-1/input7 [ 1108.498552][ T5703] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1108.541089][ T5703] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1108.541523][ T5703] usb 6-1: not running at top speed; connect to a high speed hub [ 1108.541543][ T5703] usb 6-1: New USB device found: idVendor=0424, idProduct=0002, bcdDevice=75.e7 [ 1108.541561][ T5703] usb 6-1: too many configurations: 12, using maximum allowed: 8 [ 1108.543218][ T5703] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1108.543252][ T5703] usb 6-1: can't read configurations, error -61 [ 1108.543442][ T5703] usb usb6-port1: unable to enumerate USB device [ 1108.620863][ T4926] Bluetooth: hci0: CSR: Local version failed (-71) [ 1108.639416][ T2272] usb 2-1: USB disconnect, device number 23 [ 1108.759311][T25995] udevd[25995]: 'fido_id' [27076] terminated by signal 11 (Segmentation fault) [ 1108.857667][ T5703] usb 5-1: USB disconnect, device number 86 [ 1109.285772][ T2272] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1109.424686][ T2272] usb 3-1: device descriptor read/64, error -71 [ 1109.617243][ T5703] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1109.681099][ T2272] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1109.777235][ T5703] usb 2-1: Using ep0 maxpacket: 16 [ 1109.778166][ T5703] usb 2-1: New USB device found: idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1109.780538][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.780553][ T5703] usb 2-1: Product: syz [ 1109.780560][ T5703] usb 2-1: Manufacturer: syz [ 1109.780568][ T5703] usb 2-1: SerialNumber: syz [ 1109.782292][ T5703] usb 2-1: config 0 descriptor?? [ 1109.784489][ T5703] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1109.824131][ T2272] usb 3-1: device descriptor read/64, error -71 [ 1109.905478][ T10] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1109.937883][ T2272] usb usb3-port1: attempt power cycle [ 1110.010847][ T5703] ssu100 2-1:0.0: probe with driver ssu100 failed with error -5 [ 1110.065736][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1110.066197][ T10] usb 5-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1110.067010][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1110.067033][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.069564][ T10] usb 5-1: config 0 descriptor?? [ 1110.298448][ T10] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1110.313303][ T2272] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1110.336339][ T2272] usb 3-1: device descriptor read/8, error -71 [ 1110.496102][T27095] sg_write: data in/out 262112/32 bytes for SCSI command 0x0-- guessing data in; [ 1110.496102][T27095] program syz.5.5046 not setting count and/or reply_len properly [ 1110.591491][ T2272] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1110.636523][ T2272] usb 3-1: device descriptor read/8, error -71 [ 1110.636826][T27098] sg_write: data in/out 447452/210 bytes for SCSI command 0x0-- guessing data in; [ 1110.636826][T27098] program syz.5.5047 not setting count and/or reply_len properly [ 1110.640877][T27098] sg_write: data in/out 447452/210 bytes for SCSI command 0x0-- guessing data in; [ 1110.640877][T27098] program syz.5.5047 not setting count and/or reply_len properly [ 1110.751380][ T2272] usb usb3-port1: unable to enumerate USB device [ 1110.759290][ T2272] usb 5-1: USB disconnect, device number 87 [ 1111.926582][T27114] kvm [27086]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1112.250407][T27123] 8021q: VLANs not supported on wg2 [ 1112.706336][ T2272] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 1112.790727][ T9141] usb 5-1: new low-speed USB device number 88 using dummy_hcd [ 1112.872249][ T2272] usb 3-1: New USB device found: idVendor=046d, idProduct=0850, bcdDevice=0.40 [ 1112.873858][ T2272] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 53, changing to 4 [ 1112.873883][ T2272] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1023 [ 1112.930964][ T9141] usb 5-1: device descriptor read/64, error -71 [ 1112.932348][ T2272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.932363][ T2272] usb 3-1: Product: syz [ 1112.932370][ T2272] usb 3-1: Manufacturer: syz [ 1112.932378][ T2272] usb 3-1: SerialNumber: syz [ 1112.975891][ T33] kauditd_printk_skb: 40 callbacks suppressed [ 1112.975903][ T33] audit: type=1800 audit(1700000756.664:13477): pid=26537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=563297 res=0 errno=0 [ 1113.025406][ T33] audit: type=1800 audit(1700000756.701:13478): pid=26537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=563329 res=0 errno=0 [ 1113.050077][ T33] audit: type=1800 audit(1700000756.729:13479): pid=26537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=563304 res=0 errno=0 [ 1113.081090][ T33] audit: type=1800 audit(1700000756.757:13480): pid=26537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=563305 res=0 errno=0 [ 1113.126590][ T33] audit: type=1800 audit(1700000756.795:13481): pid=27135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5058" name="resume" dev="sysfs" ino=1437 res=0 errno=0 [ 1113.169395][ T2272] gspca_main: STV06xx-2.14.0 probing 046d:0850 [ 1113.186235][ T9141] usb 5-1: new low-speed USB device number 89 using dummy_hcd [ 1113.194843][ T2272] usb 3-1: Can't get UAC3 power state for id 10 [ 1113.215516][ T2272] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 1113.256990][ T2272] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1113.257009][ T2272] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1113.257018][ T2272] usb 3-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 1113.357361][ T9141] usb 5-1: device descriptor read/64, error -71 [ 1113.452305][ T33] audit: type=1800 audit(1700000757.094:13482): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15598 res=0 errno=0 [ 1113.453933][ T33] audit: type=1800 audit(1700000757.094:13483): pid=26537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=563326 res=0 errno=0 [ 1113.475282][ T9141] usb usb5-port1: attempt power cycle [ 1113.476133][ T33] audit: type=1800 audit(1700000757.132:13484): pid=26537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=563327 res=0 errno=0 [ 1113.498531][ T33] audit: type=1800 audit(1700000757.150:13485): pid=26537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=563306 res=0 errno=0 [ 1113.552075][ T2272] usb 3-1: USB disconnect, device number 74 [ 1113.649022][ T33] audit: type=1800 audit(1700000757.291:13486): pid=26537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=563328 res=0 errno=0 [ 1113.706938][T26201] udevd[26201]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1113.847219][T27144] sg_write: data in/out 262112/32 bytes for SCSI command 0x0-- guessing data in; [ 1113.847219][T27144] program syz.2.5060 not setting count and/or reply_len properly [ 1113.866323][ T9141] usb 5-1: new low-speed USB device number 90 using dummy_hcd [ 1113.881077][ T9141] usb 5-1: device descriptor read/8, error -71 [ 1113.898079][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1114.052303][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1114.053196][ T10] usb 6-1: New USB device found: idVendor=413c, idProduct=8196, bcdDevice=71.fa [ 1114.054277][ T10] usb 6-1: config 9 has an invalid interface number: 27 but max is 0 [ 1114.054291][ T10] usb 6-1: config 9 has no interface number 0 [ 1114.054307][ T10] usb 6-1: config 9 interface 27 has no altsetting 0 [ 1114.055894][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.055908][ T10] usb 6-1: Product: syz [ 1114.055915][ T10] usb 6-1: Manufacturer: syz [ 1114.055923][ T10] usb 6-1: SerialNumber: syz [ 1114.148225][ T9141] usb 5-1: new low-speed USB device number 91 using dummy_hcd [ 1114.194243][ T9141] usb 5-1: device descriptor read/8, error -71 [ 1114.299335][ T10] qmi_wwan 6-1:9.27: bogus CDC Union: master=0, slave=1 [ 1114.299489][ T10] qmi_wwan 6-1:9.27: probe with driver qmi_wwan failed with error -22 [ 1114.315786][ T9141] usb usb5-port1: unable to enumerate USB device [ 1114.338967][ T10] usb 6-1: USB disconnect, device number 3 [ 1114.379584][ T2272] usb 2-1: USB disconnect, device number 24 [ 1114.503343][T27157] FAULT_INJECTION: forcing a failure. [ 1114.503343][T27157] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.503366][T27157] CPU: 0 UID: 0 PID: 27157 Comm: syz.2.5065 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1114.503382][T27157] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1114.503386][T27157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1114.503393][T27157] Call Trace: [ 1114.503398][T27157] [ 1114.503403][T27157] dump_stack_lvl+0xe8/0x150 [ 1114.503423][T27157] should_fail_ex+0x3eb/0x540 [ 1114.503441][T27157] should_failslab+0xa8/0x100 [ 1114.503455][T27157] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1114.503470][T27157] kmem_cache_alloc_noprof+0x9c/0x600 [ 1114.503486][T27157] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1114.503498][T27157] ? kmem_cache_alloc_noprof+0x151/0x600 [ 1114.503512][T27157] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1114.503529][T27157] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1114.503548][T27157] mmu_topup_memory_caches+0x21/0x1a0 [ 1114.503584][T27157] kvm_mmu_load+0x9d/0x21e0 [ 1114.503594][T27157] ? kvm_msr_allowed+0x9a/0x490 [ 1114.503609][T27157] ? kvm_msr_allowed+0x3f4/0x490 [ 1114.503623][T27157] ? kvm_msr_allowed+0x9a/0x490 [ 1114.503636][T27157] ? kvm_msr_allowed+0x9a/0x490 [ 1114.503653][T27157] ? kvm_apic_has_interrupt+0x740/0x770 [ 1114.503671][T27157] vcpu_run+0x4f60/0x7a70 [ 1114.503720][T27157] ? __pfx_vcpu_run+0x10/0x10 [ 1114.503733][T27157] ? lock_acquire+0x115/0x350 [ 1114.503753][T27157] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 1114.503768][T27157] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 1114.503782][T27157] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 1114.503799][T27157] kvm_vcpu_ioctl+0xa61/0xfd0 [ 1114.503816][T27157] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1114.503829][T27157] ? do_futex+0x458/0x4e0 [ 1114.503853][T27157] ? __fget_files+0x2a/0x420 [ 1114.503866][T27157] ? __fget_files+0x2a/0x420 [ 1114.503876][T27157] ? __fget_files+0x2a/0x420 [ 1114.503888][T27157] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1114.503901][T27157] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1114.503915][T27157] __se_sys_ioctl+0xfc/0x170 [ 1114.503928][T27157] do_syscall_64+0x166/0x520 [ 1114.503939][T27157] ? trace_irq_disable+0x3b/0x140 [ 1114.503950][T27157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.503961][T27157] ? clear_bhb_loop+0x70/0xc0 [ 1114.503973][T27157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.503984][T27157] RIP: 0033:0x7f397fb9e159 [ 1114.503995][T27157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1114.504004][T27157] RSP: 002b:00007f3980b41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1114.504015][T27157] RAX: ffffffffffffffda RBX: 00007f397fe25fa0 RCX: 00007f397fb9e159 [ 1114.504023][T27157] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 1114.504029][T27157] RBP: 00007f397fc3506b R08: 0000000000000000 R09: 0000000000000000 [ 1114.504036][T27157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1114.504042][T27157] R13: 00007f397fe26038 R14: 00007f397fe25fa0 R15: 00007fffe2f197c8 [ 1114.504060][T27157] [ 1114.846656][T27163] program syz.2.5065 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1114.920095][ T2272] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 1115.083659][ T2272] usb 2-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1115.086183][ T2272] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1115.086200][ T2272] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1115.122119][ T2272] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1115.122136][ T2272] usb 2-1: Product: syz [ 1115.122144][ T2272] usb 2-1: Manufacturer: syz [ 1115.122151][ T2272] usb 2-1: SerialNumber: syz [ 1115.157276][ T2272] usb 2-1: config 0 descriptor?? [ 1115.179200][ T2272] usb 2-1: selecting invalid altsetting 0 [ 1115.345405][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1115.386944][ T9141] usb 2-1: USB disconnect, device number 25 [ 1115.504985][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1115.505680][ T10] usb 6-1: New USB device found: idVendor=05ac, idProduct=8240, bcdDevice=0.00 [ 1115.506679][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1115.506713][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1115.506736][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.513083][ T10] usb 6-1: config 0 descriptor?? [ 1115.558909][ T2272] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1115.730209][ T2272] usb 3-1: New USB device found: idVendor=057b, idProduct=0000, bcdDevice=0.00 [ 1115.734188][ T2272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.762683][ T2272] usb-storage 3-1:32.0: USB Mass Storage device detected [ 1115.798534][ T2272] usb-storage 3-1:32.0: Quirks match for vid 057b pid 0000: 1 [ 1115.798551][ T2272] usb-storage 3-1:32.0: This device (057b,0000,0000 S 00 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 1115.798551][ T2272] Please send a copy of this message to and [ 1115.799021][ T10] input: HID 05ac:8240 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:8240.0055/input/input135 [ 1115.948382][ T10] appleir 0003:05AC:8240.0055: input,hiddev0,hidraw0: USB HID v0.00 Joystick [HID 05ac:8240] on usb-dummy_hcd.5-1/input0 [ 1116.169297][T26080] udevd[26080]: 'fido_id' [27183] terminated by signal 11 (Segmentation fault) [ 1116.394868][T27185] sg_write: data in/out 262112/32 bytes for SCSI command 0x0-- guessing data in; [ 1116.394868][T27185] program syz.1.5069 not setting count and/or reply_len properly [ 1117.139967][ T9] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 1117.302640][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1117.303069][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 1117.303088][ T9] usb 5-1: New USB device found: idVendor=200c, idProduct=1018, bcdDevice=0.40 [ 1117.303959][ T9] usb 5-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config [ 1117.303972][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1117.306171][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.306186][ T9] usb 5-1: Product: syz [ 1117.306193][ T9] usb 5-1: Manufacturer: syz [ 1117.306201][ T9] usb 5-1: SerialNumber: syz [ 1117.419802][T27193] netlink: 'syz.1.5072': attribute type 27 has an invalid length. [ 1117.573320][ T9] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 1117.607022][ T9] usb 5-1: 3:0: cannot get min/max values for control 2 (id 3) [ 1117.607041][ T9] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1117.607050][ T9] usb 5-1: [3] FU [LFE Playback Volume] ch = 2, val = 0/1/1 [ 1117.638734][ T9] usb 5-1: 3:0: cannot get min/max values for control 2 (id 3) [ 1117.638752][ T9] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1117.638783][ T9] usb 5-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 1117.669105][ T9] usb 5-1: 3:0: cannot get min/max values for control 3 (id 3) [ 1117.684281][ T9] usb 5-1: 3:0: cannot get min/max values for control 3 (id 3) [ 1117.724350][ T9] usb 5-1: 3:0: cannot get min/max values for control 4 (id 3) [ 1117.735899][ T9] usb 5-1: 3:0: cannot get min/max values for control 5 (id 3) [ 1117.737096][ T9] usb 5-1: 3:0: cannot get min/max values for control 5 (id 3) [ 1117.738553][ T9] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 1117.764354][ T9] usb 5-1: 3:0: failed to get current value for ch 1 (-71) [ 1117.766793][ T9] usb 5-1: 3:0: cannot get min/max values for control 11 (id 3) [ 1117.768268][ T9] usb 5-1: 3:0: cannot get min/max values for control 11 (id 3) [ 1117.769440][ T9] usb 5-1: 3:0: cannot get min/max values for control 12 (id 3) [ 1117.770915][ T9] usb 5-1: 3:0: failed to get current value for ch 1 (-71) [ 1117.913182][ T9] usb 5-1: 3:0: cannot get min/max values for control 3 (id 3) [ 1117.915235][ T9] usb 5-1: 3:0: cannot get min/max values for control 5 (id 3) [ 1117.973504][ T9] usb 5-1: USB disconnect, device number 92 [ 1118.320881][ T10] usb 6-1: USB disconnect, device number 4 [ 1118.373310][ T33] kauditd_printk_skb: 74 callbacks suppressed [ 1118.373322][ T33] audit: type=1800 audit(1700000761.708:13561): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 1118.500785][ T33] audit: type=1800 audit(1700000761.829:13562): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15598 res=0 errno=0 [ 1118.509483][ T9] usb 3-1: USB disconnect, device number 75 [ 1118.700674][ T2272] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1118.763351][T27214] sg_write: data in/out 262112/32 bytes for SCSI command 0x0-- guessing data in; [ 1118.763351][T27214] program syz.5.5078 not setting count and/or reply_len properly [ 1118.840428][ T2272] usb 5-1: device descriptor read/64, error -71 [ 1118.900971][ T33] audit: type=1800 audit(1700000762.194:13563): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15598 res=0 errno=0 [ 1119.096302][ T2272] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1119.100751][T27225] [ 1119.110630][T27225] ====================================================== [ 1119.117628][T27225] WARNING: possible circular locking dependency detected [ 1119.124638][T27225] syzkaller #0 Tainted: G L Y [ 1119.130674][T27225] ------------------------------------------------------ [ 1119.137668][T27225] syz.2.5082/27225 is trying to acquire lock: [ 1119.143703][T27225] ffff88802c4bf080 (&buffer->mutex){+.+.}-{4:4}, at: configfs_read_iter+0x70/0x620 [ 1119.152989][T27225] [ 1119.152989][T27225] but task is already holding lock: [ 1119.160332][T27225] ffff8880291d4690 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7d0/0x1c10 [ 1119.170938][T27225] [ 1119.170938][T27225] which lock already depends on the new lock. [ 1119.170938][T27225] [ 1119.181317][T27225] [ 1119.181317][T27225] the existing dependency chain (in reverse order) is: [ 1119.190305][T27225] [ 1119.190305][T27225] -> #4 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 1119.198876][T27225] __mutex_lock+0x197/0x15a0 [ 1119.203976][T27225] ima_file_truncate+0xb6/0x170 [ 1119.209327][T27225] security_file_truncate+0x118/0x240 [ 1119.215200][T27225] path_openat+0x15ce/0x1da0 [ 1119.220291][T27225] do_file_open+0x23e/0x4a0 [ 1119.225292][T27225] do_sys_openat2+0x115/0x200 [ 1119.230469][T27225] __x64_sys_creat+0x8f/0xc0 [ 1119.235573][T27225] do_syscall_64+0x166/0x520 [ 1119.240673][T27225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.247081][T27225] [ 1119.247081][T27225] -> #3 (sb_writers#5){.+.+}-{0:0}: [ 1119.254453][T27225] sb_start_write+0x48/0x1c0 [ 1119.259548][T27225] mnt_want_write+0x41/0x90 [ 1119.264550][T27225] lookup_open+0x1e6/0x1a40 [ 1119.269556][T27225] path_openat+0x673/0x1da0 [ 1119.274559][T27225] do_file_open+0x23e/0x4a0 [ 1119.279558][T27225] filp_open+0x16d/0x1d0 [ 1119.284335][T27225] fsg_lun_open+0x6c/0xdf0 [ 1119.289257][T27225] fsg_store_file+0x19e/0x400 [ 1119.294453][T27225] configfs_write_iter+0x337/0x430 [ 1119.300073][T27225] vfs_write+0x612/0xba0 [ 1119.304835][T27225] ksys_write+0x150/0x270 [ 1119.309690][T27225] do_syscall_64+0x166/0x520 [ 1119.314781][T27225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.321175][T27225] [ 1119.321175][T27225] -> #2 (&common->filesem){+.+.}-{4:4}: [ 1119.328895][T27225] down_write+0x91/0x200 [ 1119.333643][T27225] fsg_store_file+0x163/0x400 [ 1119.338852][T27225] configfs_write_iter+0x337/0x430 [ 1119.344461][T27225] vfs_write+0x612/0xba0 [ 1119.349208][T27225] ksys_write+0x150/0x270 [ 1119.354033][T27225] do_syscall_64+0x166/0x520 [ 1119.359118][T27225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.365513][T27225] [ 1119.365513][T27225] -> #1 (&p->frag_sem){.+.+}-{4:4}: [ 1119.372868][T27225] down_read+0x45/0x320 [ 1119.377526][T27225] configfs_write_iter+0x238/0x430 [ 1119.383165][T27225] vfs_write+0x612/0xba0 [ 1119.387905][T27225] ksys_write+0x150/0x270 [ 1119.392734][T27225] do_syscall_64+0x166/0x520 [ 1119.397819][T27225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.404208][T27225] [ 1119.404208][T27225] -> #0 (&buffer->mutex){+.+.}-{4:4}: [ 1119.411744][T27225] __lock_acquire+0x164c/0x2de0 [ 1119.417108][T27225] lock_acquire+0x115/0x350 [ 1119.422127][T27225] __mutex_lock+0x197/0x15a0 [ 1119.427217][T27225] configfs_read_iter+0x70/0x620 [ 1119.432658][T27225] __kernel_read+0x4ca/0x960 [ 1119.437743][T27225] integrity_kernel_read+0x89/0xd0 [ 1119.443352][T27225] ima_calc_file_hash+0x451/0x890 [ 1119.448889][T27225] ima_collect_measurement+0x51b/0xa00 [ 1119.454843][T27225] process_measurement+0x1272/0x1c10 [ 1119.460640][T27225] ima_file_check+0xdc/0x130 [ 1119.465738][T27225] security_file_post_open+0xb3/0x260 [ 1119.471607][T27225] path_openat+0x14e9/0x1da0 [ 1119.476692][T27225] do_file_open+0x23e/0x4a0 [ 1119.481690][T27225] do_sys_openat2+0x115/0x200 [ 1119.486868][T27225] __x64_sys_openat+0x138/0x170 [ 1119.492214][T27225] do_syscall_64+0x166/0x520 [ 1119.497297][T27225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.503686][T27225] [ 1119.503686][T27225] other info that might help us debug this: [ 1119.503686][T27225] [ 1119.513897][T27225] Chain exists of: [ 1119.513897][T27225] &buffer->mutex --> sb_writers#5 --> &ima_iint_mutex_key[depth] [ 1119.513897][T27225] [ 1119.527527][T27225] Possible unsafe locking scenario: [ 1119.527527][T27225] [ 1119.534975][T27225] CPU0 CPU1 [ 1119.540319][T27225] ---- ---- [ 1119.545660][T27225] lock(&ima_iint_mutex_key[depth]); [ 1119.551006][T27225] lock(sb_writers#5); [ 1119.557664][T27225] lock(&ima_iint_mutex_key[depth]); [ 1119.565551][T27225] lock(&buffer->mutex); [ 1119.570618][T27225] [ 1119.570618][T27225] *** DEADLOCK *** [ 1119.570618][T27225] [ 1119.578840][T27225] locks held by syz.2.5082/27225: 1, last CPU#0: [ 1119.585166][T27225] #0: ffff8880291d4690 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7d0/0x1c10 [ 1119.596215][T27225] [ 1119.596215][T27225] stack backtrace: [ 1119.602116][T27225] CPU: 0 UID: 0 PID: 27225 Comm: syz.2.5082 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1119.613477][T27225] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1119.619260][T27225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1119.629298][T27225] Call Trace: [ 1119.632563][T27225] [ 1119.635562][T27225] dump_stack_lvl+0xe8/0x150 [ 1119.640135][T27225] print_circular_bug+0x2e2/0x300 [ 1119.645147][T27225] check_noncircular+0x12f/0x150 [ 1119.650065][T27225] __lock_acquire+0x164c/0x2de0 [ 1119.654891][T27225] ? lock_acquire+0x115/0x350 [ 1119.659570][T27225] lock_acquire+0x115/0x350 [ 1119.664063][T27225] ? configfs_read_iter+0x70/0x620 [ 1119.669153][T27225] __mutex_lock+0x197/0x15a0 [ 1119.673735][T27225] ? configfs_read_iter+0x70/0x620 [ 1119.678825][T27225] ? stack_trace_save+0xa9/0x100 [ 1119.683755][T27225] ? configfs_read_iter+0x70/0x620 [ 1119.688842][T27225] ? __pfx___mutex_lock+0x10/0x10 [ 1119.693850][T27225] ? stack_depot_save_flags+0x33/0x7f0 [ 1119.699303][T27225] ? kasan_save_track+0x4f/0x80 [ 1119.704143][T27225] ? kasan_save_track+0x3e/0x80 [ 1119.708972][T27225] ? __kasan_kmalloc+0x93/0xb0 [ 1119.713713][T27225] ? ima_calc_file_hash+0x40f/0x890 [ 1119.718892][T27225] ? ima_collect_measurement+0x51b/0xa00 [ 1119.724501][T27225] ? process_measurement+0x1272/0x1c10 [ 1119.729935][T27225] ? ima_file_check+0xdc/0x130 [ 1119.734676][T27225] configfs_read_iter+0x70/0x620 [ 1119.739606][T27225] __kernel_read+0x4ca/0x960 [ 1119.744217][T27225] ? __pfx___kernel_read+0x10/0x10 [ 1119.749312][T27225] ? rcu_is_watching+0x16/0xb0 [ 1119.754053][T27225] integrity_kernel_read+0x89/0xd0 [ 1119.759150][T27225] ? __pfx_integrity_kernel_read+0x10/0x10 [ 1119.764947][T27225] ? __kmalloc_cache_noprof+0x148/0x600 [ 1119.770470][T27225] ? ima_calc_file_hash+0x40f/0x890 [ 1119.775641][T27225] ? ima_calc_file_hash+0x40f/0x890 [ 1119.780815][T27225] ima_calc_file_hash+0x451/0x890 [ 1119.785820][T27225] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 1119.791346][T27225] ? generic_fillattr+0x575/0x840 [ 1119.796352][T27225] ima_collect_measurement+0x51b/0xa00 [ 1119.801788][T27225] ? __pfx_ima_collect_measurement+0x10/0x10 [ 1119.807746][T27225] ? trace_contention_end+0x3d/0x140 [ 1119.813018][T27225] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1119.818456][T27225] process_measurement+0x1272/0x1c10 [ 1119.823721][T27225] ? __pfx_process_measurement+0x10/0x10 [ 1119.829337][T27225] ? __configfs_open_file+0x66a/0x7d0 [ 1119.834692][T27225] ima_file_check+0xdc/0x130 [ 1119.839256][T27225] ? file_ra_state_init+0x3d/0xc0 [ 1119.844278][T27225] ? __pfx_ima_file_check+0x10/0x10 [ 1119.849454][T27225] security_file_post_open+0xb3/0x260 [ 1119.854809][T27225] path_openat+0x14e9/0x1da0 [ 1119.859383][T27225] do_file_open+0x23e/0x4a0 [ 1119.863865][T27225] ? __pfx_do_file_open+0x10/0x10 [ 1119.868874][T27225] ? _raw_spin_unlock+0x28/0x50 [ 1119.873727][T27225] ? alloc_fd+0x6af/0x760 [ 1119.878039][T27225] do_sys_openat2+0x115/0x200 [ 1119.882699][T27225] ? __se_sys_futex+0x3a8/0x450 [ 1119.887530][T27225] ? __pfx_do_sys_openat2+0x10/0x10 [ 1119.892707][T27225] ? rcu_is_watching+0x16/0xb0 [ 1119.897453][T27225] __x64_sys_openat+0x138/0x170 [ 1119.902283][T27225] do_syscall_64+0x166/0x520 [ 1119.906846][T27225] ? trace_irq_disable+0x3b/0x140 [ 1119.911846][T27225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.917903][T27225] ? clear_bhb_loop+0x70/0xc0 [ 1119.922556][T27225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.928422][T27225] RIP: 0033:0x7f397fb9e159 [ 1119.932814][T27225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1119.952397][T27225] RSP: 002b:00007f3980b41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1119.960794][T27225] RAX: ffffffffffffffda RBX: 00007f397fe25fa0 RCX: 00007f397fb9e159 [ 1119.968741][T27225] RDX: 0000000000000002 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 1119.976691][T27225] RBP: 00007f397fc3506b R08: 0000000000000000 R09: 0000000000000000 [ 1119.984652][T27225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1119.992599][T27225] R13: 00007f397fe26038 R14: 00007f397fe25fa0 R15: 00007fffe2f197c8 [ 1120.000555][T27225] [ 1120.006991][T27221] comedi comedi1: Minor 16388 is invalid! [ 1120.645232][ T2272] usb 5-1: device descriptor read/64, error -71 [ 1120.763498][ T2272] usb usb5-port1: attempt power cycle [ 1121.470080][ T33] audit: type=1800 audit(1700000764.581:13564): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15598 res=0 errno=0 [ 1121.567008][ T2272] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1121.623376][ T2272] usb 5-1: device descriptor read/8, error -71 [ 1121.651057][ T33] audit: type=1800 audit(1700000764.777:13565): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 1121.747263][ T33] audit: type=1800 audit(1700000764.871:13566): pid=27225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5082" name="max_speed" dev="configfs" ino=205475 res=0 errno=0