last executing test programs: 9m46.684381073s ago: executing program 1 (id=315): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, &(0x7f00000004c0)="c74424000f000000c74424026a9e0000c7442406000000000f018414c1c1490fc7610dc442499e2bb9800000c00f3235004000000f30c7442402176c0000c7442406000000000fee1424240f682b430f785508b805000000b90e15900b0f01c1430f00d5c7442400654d0000c7442402f9ca00000f011424", 0x78}], 0x1, 0x5f, &(0x7f0000000540)=[@cr4={0x1, 0x9e2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m46.323824989s ago: executing program 1 (id=317): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x9, 0x0, 0xfbff, 0x2, 0x0, 0x20, 0x3c, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x2, 0x100000000000000}, 0x2}, {{@in=@private=0xa010100, 0x0, 0x6c}, 0x2, @in6=@private2, 0x0, 0x4}}, 0xe8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000240)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r6 = syz_open_pts(r5, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0) write$uinput_user_dev(r7, &(0x7f00000007c0)={'syz0\x00', {0x0, 0x0, 0x0, 0xaa20}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x2, 0x2000002, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0x8000e, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x10000000, 0x2, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x7, 0x3d523173, 0x81, 0x0, 0x2000000, 0xf, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0xfffffffc, 0x0, 0x3, 0x80, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x3, 0xffffffff, 0x0, 0xfffffffd, 0xb, 0xfffffffe, 0x0, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0x0, 0x2, 0x9, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x10, 0x5, 0xffff7ffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x4, 0x9, 0x4, 0x0, 0x0, 0x100, 0x4, 0x0, 0x1, 0xfffffffd, 0x8000000, 0x4, 0xffdfffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r7, 0x4004556d, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) write$uinput_user_dev(r7, &(0x7f0000000c40)={'syz1\x00', {0x5, 0x9, 0x80, 0x5}, 0x4f, [0xff, 0x1, 0x7, 0x9, 0x7fff, 0xffffff80, 0x66f, 0x104, 0x6, 0xf, 0x1, 0x3, 0xa, 0x8, 0x0, 0x5, 0xbc, 0xd6, 0x67fffe, 0x5, 0x3, 0xfffff800, 0x10, 0x8, 0x9, 0x5, 0x3, 0xf, 0x2, 0x3, 0x5, 0x3, 0x80, 0x4, 0xff, 0x0, 0x81, 0x0, 0x40, 0x7, 0x40, 0x9, 0x81, 0x9, 0x4, 0xffffff81, 0xffffffff, 0x7fffffff, 0x7, 0x6, 0xf6e5, 0x2, 0x6790, 0x5, 0xc60, 0x25, 0x9, 0x6, 0x800000, 0x0, 0x1, 0xfff, 0x2, 0x9], [0xffffff7b, 0x0, 0x3f, 0xc8, 0x5, 0x10, 0x3, 0xff, 0x9, 0x2, 0xffffff4d, 0x4, 0x16e0, 0x2, 0x10009514, 0x2, 0xa, 0x800, 0x3, 0x40000005, 0x29, 0x4, 0x7, 0xb21, 0x8, 0x1, 0xaaa, 0x6, 0xfff, 0xb, 0x8001, 0x3cba, 0x5, 0x4, 0x4, 0x1, 0x5, 0x0, 0xa, 0x1d, 0xb, 0x1, 0x10001, 0x5, 0x3, 0x7, 0x6, 0x4, 0x7ff, 0x0, 0x0, 0x1, 0x200081, 0x6, 0x36, 0x10000, 0x0, 0x6, 0x9, 0x1, 0x0, 0x2, 0x7fffffff, 0x3], [0xfffffff7, 0x20000, 0x6, 0xfffffffe, 0x6, 0x6, 0x9, 0x80, 0x200, 0xfffffffd, 0x6, 0x2, 0x8, 0x8, 0x5, 0x40, 0xf329, 0x9, 0xe, 0x8, 0x7, 0x100fff, 0x1000, 0x4, 0x1, 0x6, 0x1, 0xfffffffd, 0xfffff021, 0x3419, 0x6, 0xfffffb93, 0x5, 0x7, 0x80000004, 0x1, 0x5, 0xd, 0x200000, 0x101, 0x502, 0x9d, 0x7, 0x2, 0x9, 0x7, 0xfffffffe, 0x0, 0x3, 0x6, 0x0, 0x41a5, 0xe7, 0x12, 0x9a, 0x59a, 0xfffff7f1, 0x800, 0x4, 0x7, 0xecb, 0x40, 0x1000, 0xaaf], [0x4, 0x7, 0x6, 0x4ee3ae5c, 0x7f, 0x0, 0xf2c, 0x6, 0x9, 0x0, 0x9, 0x7, 0x2, 0x7f00000, 0xffff, 0x2, 0x3, 0xeb, 0x6, 0xe03, 0x3, 0xfffffff8, 0x5, 0x9, 0x0, 0x20000d, 0xffffffff, 0x5, 0x7, 0x1, 0x3, 0x400e2, 0x101, 0xf, 0x3, 0x1, 0x3d9, 0xef9, 0x9, 0x9, 0x5, 0x88a1, 0x9f, 0xb, 0x7, 0x800, 0x1, 0xff, 0x80000000, 0x1, 0x81, 0x9, 0xffffffff, 0xc8000000, 0x10000, 0x6, 0x7, 0x4, 0x5, 0x402, 0x7, 0x23e1, 0x3, 0x8]}, 0x45c) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000006c0)=0x13) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000700)={0xff7e, 0x0, 0x0, 0x7fff, 0x3, "db2d416fbecfb84b5452b768e08ee2df361089"}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000740)=0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e21, 0x40, @private1, 0x8}, 0x1a) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, 0x0}], 0x1, 0x7a, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='tmpfs\x00', 0x16, 0x0) mount$tmpfs(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x10840b2, &(0x7f0000000380)=ANY=[@ANYBLOB="75737271756f74615f626c6f636b5f686172646c696d69743d372c008bc9ae815caa9af5bd2378f5c1ac1a85fc7e9a3acc2820a18445108511591cd3ef047a8c29ab3607de083e7e33192e879940a3696d2c3083b5cec2d6dee22045ebd47623311fe91c57607cf5199bf93d6ed7ce695172c60585faccf9e9e8a79c7665d9494eb5c686d29b7c705e97a6a6b103ffda27d1a8dab08282e3a374ddc9bf42dc70afcfefcad0e583c0"]) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) 9m45.889718356s ago: executing program 1 (id=322): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./nfsd\x00', &(0x7f00000004c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001600010000000800000000000a0000000400010014000100fe80000000000000000000000000000b"], 0x2c}}, 0x4000) write(r0, &(0x7f00000007c0)='100', 0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x4cec2000) socket$nl_rdma(0x10, 0x3, 0x14) mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x110c230000, 0x27, 0x2, @thr={0x0, 0x0}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd\x00', 0x4001, 0x0) write(r2, &(0x7f0000000580)='tcp 2', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r3, &(0x7f0000000140)='27', 0x2) syz_io_uring_setup(0x78e6, &(0x7f0000000200)={0x0, 0x6bd2, 0x40, 0x0, 0x2d3, 0x0, r3}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) mkdirat(r2, &(0x7f0000000180)='./nfsd\x00', 0x1b4) 9m45.547892145s ago: executing program 1 (id=324): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000000c0)=0x200000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000001c0)={0x0, 0x500, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900fdffb5f175bb42f7"], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) write$vhost_msg_v2(r1, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xf2}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xe}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xffd5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x5}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x4c2}]}]}, 0x6c}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xf2}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xe}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xffd5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x5}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x4c2}]}]}, 0x6c}}, 0x0) 9m44.855748955s ago: executing program 1 (id=326): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./debug/tracing/trace_pipe\x00', 0x20480, 0x4) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000480)=0x3, 0x4) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e21, @broadcast}, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000500), 0x100, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r1, 0x3b70, 0x0) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000940)="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", 0x1e0, 0x91, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000680)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) mount(0x0, 0x0, &(0x7f0000000700)='debugfs\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000740)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_buf(r3, 0x0, 0x23, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./trace\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x108) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/SourceSink.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0xe7) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002100) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 9m44.171398421s ago: executing program 1 (id=329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000009c40)={0x2, 0x4e20, @local}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x8002, 0x58) write$cgroup_devices(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:* mr', @ANYRESOCT=r2], 0x9) write$UHID_INPUT2(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000004a7344a267e85be7d160696aa96f6618172c584bbc055f64b63f1cf0ddd12c57058626e3b2cdbce68e4a1e578da4e9ac8ac18108ba70128961265df1d77125001c75099b556d33d086bab4857f19d81cea31ae5c665cea4c8f"], 0x50) listen(r1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000009c80)='./cifs\x00', 0x1ff) mount(&(0x7f0000009cc0)=@filename='\\\\172.20.20.170\\share\x00', &(0x7f0000009d00)='./cifs\x00', &(0x7f0000009d40)='cifs\x00', 0x0, &(0x7f0000009d80)='vers=1.0,username=guest,password=,port=20000,soft\x00') close_range(r0, 0xffffffffffffffff, 0x0) 9m28.448088878s ago: executing program 32 (id=329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000009c40)={0x2, 0x4e20, @local}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x8002, 0x58) write$cgroup_devices(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:* mr', @ANYRESOCT=r2], 0x9) write$UHID_INPUT2(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000004a7344a267e85be7d160696aa96f6618172c584bbc055f64b63f1cf0ddd12c57058626e3b2cdbce68e4a1e578da4e9ac8ac18108ba70128961265df1d77125001c75099b556d33d086bab4857f19d81cea31ae5c665cea4c8f"], 0x50) listen(r1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000009c80)='./cifs\x00', 0x1ff) mount(&(0x7f0000009cc0)=@filename='\\\\172.20.20.170\\share\x00', &(0x7f0000009d00)='./cifs\x00', &(0x7f0000009d40)='cifs\x00', 0x0, &(0x7f0000009d80)='vers=1.0,username=guest,password=,port=20000,soft\x00') close_range(r0, 0xffffffffffffffff, 0x0) 7m33.815524951s ago: executing program 4 (id=725): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f00000001c0)={0x4000000, 0x5c, 0x0, 0x2, 0x2}) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000000c0)="780200373ff9f68d47a940e83f1b1f419b440e93a2edecbe3938160ce715c1572ba9", 0x22) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_SUBDINFO(r2, 0x80486402, &(0x7f0000000140)) syz_open_dev$usbmon(&(0x7f0000000000), 0xf4240, 0x6ca01) 7m33.780138032s ago: executing program 4 (id=727): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket$inet6_sctp(0xa, 0x1, 0x84) timerfd_create(0x8, 0x0) timerfd_create(0x9, 0x0) r1 = memfd_secret(0x80000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mmap$IORING_OFF_SQ_RING(0x0, 0xe, 0x3000005, 0x4010, r1, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000022c0)=@any_dev={0x1, 0x10f, 0x0, 0x0, 0x1000, 0x7c3}}}, &(0x7f0000002300)=0x0) syz_ublk_setup_queues(r1, r2, 0x0, &(0x7f0000000240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x2, 0x4000093}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x100, 0x2, 0x3ae, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3d00, 0x200, 0x40000005, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4a4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 7m33.721306581s ago: executing program 4 (id=728): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'pcl812\x00', [0x100, 0x2, 0x1, 0xfffffffa, 0x5, 0x5, 0x3, 0xa0000010, 0xfffffff9, 0xb, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x0, 0x7, 0xfe9, 0x401, 0x3, 0x2, 0x82, 0x1009, 0x48, 0x6a510ae3, 0x4, 0xea7a, 0x5, 0x0, 0x8]}) (fail_nth: 9) 7m33.386088598s ago: executing program 4 (id=730): mkdir(&(0x7f0000000000)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f00000002c0)='./file0/../file0\x00', 0x190) lstat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)) mount$bpf(0x200000000000, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000340)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000001f00)='.\x00', 0x0, 0x8b7840, 0x0) 7m33.332840267s ago: executing program 4 (id=731): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x7000, 0x0) write(0xca, &(0x7f00000000c0)="040e0c013d2000", 0x7) r3 = socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x1fb) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) syz_clone3(0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000280)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000002c0)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f00000003c0)={{}, {0x0, 0x989680}}, 0x0) r5 = add_key$user(&(0x7f0000001c00), &(0x7f0000001c40)={'syz', 0x1}, &(0x7f0000001c80)="c7b98d922ecddc85fdebfe3ccf60488c59b19017f45580d0d37dab61ebcb5ebbd2403c54aaba766f0f8d74be763979ab2abc91ca5e31deb227aa5e6e02776399e10751cfc3e58cfcb2cef79908a61fc4ae3df1480c7b08f2abb0d07286f5f237710e889a43554953a008c5e12b7e7d2d5fccfcf89bd21f2555772f03d2e6225079e7a23f83c4a1971f6733141b59463b4af9ea0126d747f39674843a7ec8f72a53bfffb6fa87639056d8e1f789c22546f4dc986909f603af90d2dee52c0a", 0xbe, 0x0) keyctl$dh_compute(0x17, &(0x7f0000001d40)={0x0, 0x0, r5}, &(0x7f0000001d80)=""/172, 0xac, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r9, 0x0, 0x39000, 0x0) r10 = memfd_create(&(0x7f0000000480)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1) splice(r8, 0x0, r10, 0x0, 0x2, 0x5) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r7, &(0x7f00000004c0)=ANY=[], 0xfffffe3e) r11 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/ieee80211/phy0/reset\x00', 0x1, 0x0) write(r11, 0x0, 0x118c) ioctl$TUNGETVNETHDRSZ(r9, 0x800454d7, &(0x7f00000004c0)) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000100)=@generic={0x2, 0x1, 0x1}) close(r2) getsockopt$bt_BT_RCVMTU(r1, 0x11, 0xd, 0x0, &(0x7f0000000000)=0x3) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'pcl812\x00', [0x100, 0x1, 0x1, 0xfffffffa, 0x25, 0x5, 0x3, 0xa0000010, 0xfffffff9, 0xfffffff2, 0x0, 0x4000, 0xfffffffe, 0x401, 0x10001, 0x1, 0x0, 0x7, 0xfe9, 0x401, 0x3, 0x2, 0x82, 0x1009, 0x48, 0x6a510ae3, 0x4, 0xea7a, 0x5, 0x0, 0x8]}) 7m32.894498528s ago: executing program 4 (id=735): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc008081) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000800)={0xc0, 0x0, 0x10000}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x26, 0x200047fd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000180)='bbr', 0x37) r7 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r7, &(0x7f00000001c0)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc000000000000000000000051d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000080)={0x7e, 0x3000, 0x8, r5}) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x109842, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r8, 0x80044dff, &(0x7f0000000280)) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0x5, 0xd000, 0x0, r5}) ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7) 7m32.710728042s ago: executing program 33 (id=735): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc008081) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000800)={0xc0, 0x0, 0x10000}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x26, 0x200047fd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000180)='bbr', 0x37) r7 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r7, &(0x7f00000001c0)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc000000000000000000000051d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000080)={0x7e, 0x3000, 0x8, r5}) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x109842, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r8, 0x80044dff, &(0x7f0000000280)) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0x5, 0xd000, 0x0, r5}) ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7) 5m49.887600432s ago: executing program 5 (id=1107): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f00000002c0)) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900030020000401a80016000a0011400600000003080000004dcf5c0468c1d67f6f94007134cf6e41ef52b49816277ce06bf600000069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7adf4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edab57a5025ccca85958fe24b14bf4e0040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a9e4c2fca8c310dd521a37ef81147", 0xd8}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f00000003c0)=""/4127, &(0x7f0000001400)=0x101f) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m', &(0x7f00000000c0)='+!\x00', 0x0]}) 5m49.608629442s ago: executing program 5 (id=1109): r0 = socket(0x2, 0x80805, 0x0) syz_usb_connect(0x3, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="12011001000000085f0500a800010000000109022e0001010080320904"], 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f00000004c0)={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x10}, 0x4}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203"], 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x44, r3, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8, 0x80, 0x4997a4f0, 0x8, {{0xf, 0x4, 0x3, 0xc, 0x3c, 0x68, 0x0, 0xfa, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@cipso={0x86, 0x1d, 0x1, [{0x7, 0x3, "fc"}, {0x7, 0x12, "a85c75e9c8e900bfea55c960b45c623f"}, {0x4, 0x2}]}, @generic={0x7, 0x5, "571b13"}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0x8, 0xf, 0x100, 0x0, @private0, @mcast1, 0x10, 0x7800, 0x9, 0x4}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="852de900", @ANYRES16=r3, @ANYBLOB="000828bd7000ffdbdf25010000001c000180060001000a000000060001000200000006000100020000001400068008000700", @ANYRESHEX=r4, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r5, @ANYBLOB="188fb677e3a36b4926d51595b4b218b220bd1a6be0d7a899e26311aee41de04ab84c5452924555fcb324c0f121a6071c7071520bd4caf216c4053fde6daa31c3"], 0x44}}, 0x4000000) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12015003e94d021200010ff950030904c201000101ae03"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) socket(0x2, 0x80805, 0x0) (async) syz_usb_connect(0x3, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="12011001000000085f0500a800010000000109022e0001010080320904"], 0x0) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) bind$inet6(r1, &(0x7f00000004c0)={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x10}, 0x4}, 0x1c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203"], 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x44, r3, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8, 0x80, 0x4997a4f0, 0x8, {{0xf, 0x4, 0x3, 0xc, 0x3c, 0x68, 0x0, 0xfa, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@cipso={0x86, 0x1d, 0x1, [{0x7, 0x3, "fc"}, {0x7, 0x12, "a85c75e9c8e900bfea55c960b45c623f"}, {0x4, 0x2}]}, @generic={0x7, 0x5, "571b13"}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0x8, 0xf, 0x100, 0x0, @private0, @mcast1, 0x10, 0x7800, 0x9, 0x4}}) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="852de900", @ANYRES16=r3, @ANYBLOB="000828bd7000ffdbdf25010000001c000180060001000a000000060001000200000006000100020000001400068008000700", @ANYRESHEX=r4, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r5, @ANYBLOB="188fb677e3a36b4926d51595b4b218b220bd1a6be0d7a899e26311aee41de04ab84c5452924555fcb324c0f121a6071c7071520bd4caf216c4053fde6daa31c3"], 0x44}}, 0x4000000) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12015003e94d021200010ff950030904c201000101ae03"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) (async) 5m47.833524257s ago: executing program 5 (id=1111): set_mempolicy(0x8001, &(0x7f00000000c0)=0x9, 0xd2) (async) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) (async) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick=0x101, {}, {}, @quote={{0x1, 0x1}, 0x6, &(0x7f0000000040)={0x2, 0x7, 0xea, 0x8, @tick=0x1, {0xd, 0x8}, {0xa, 0x4}, @control={0x40, 0x3172, 0x6}}}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) (async) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8, {}, {}, @raw32}, {0x0, 0x0, 0x8, 0x0, @tick, {0x0, 0xfe}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time={0x0, 0x68}}, {0x0, 0x0, 0x56, 0x0, @time={0x243}, {}, {}, @ext={0x6, &(0x7f0000000080)="45191ab441b8"}}, {0x0, 0x0, 0x0, 0x0, @tick=0x8, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick=0xa784, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x1, @time, {0xfd}, {0x1c}, @connect={{}, {0x0, 0x9}}}], 0xc4) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0x3, 0x7, 0x0, 0x1}}) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) 5m47.751508593s ago: executing program 5 (id=1112): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f00000004c0)='./file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x9801) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x75) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000007c0)='.\x00', 0xa880, 0x97) mkdirat(r1, &(0x7f0000000800)='./tracing\x00', 0x0) mount(0x0, &(0x7f0000000840)='./tracing\x00', &(0x7f0000000880)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./tracing/trace_clock\x00', 0x1, 0x0) write(r2, 0x0, 0x3f) fchdir(r0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='\x00', 0x89901) move_mount(r3, &(0x7f0000000740)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000780)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpu.stat\x00', 0x275a, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x6, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, 0x80, 0x80, 0x1, 0xffff}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x4, 0x1, 0x5b, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x40, 0x8, 0x8}}) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r5, 0x20, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8, 0x1, r9}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x448c0) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='.\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(r10, r10, 0x0) ioctl$FS_IOC_RESVSP(r4, 0xc0189436, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x5f, 0x3}) 5m47.395977332s ago: executing program 5 (id=1116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 5m46.996575052s ago: executing program 5 (id=1118): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000480)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000004c0)={0x48, 0x2, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000080)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000280)={0x0, 0xcc}, 0x8) sendmmsg$inet6(r3, &(0x7f0000000300)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0x1, @loopback, 0x280020}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000003c0)='d', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000400), 0x4) r4 = getpgid(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r5) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x34, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1111}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000001}]}]}, 0x34}}, 0x0) r7 = syz_pidfd_open(r4, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, &(0x7f0000000040)={0xfb}, 0x4) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f00000000c0)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg$inet(r9, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="f633", 0x2}], 0x1}}], 0x1, 0x4000000) ioctl$PPPIOCGCHAN(r9, 0x80047437, &(0x7f0000000200)) r10 = pidfd_getfd(r7, r7, 0x0) syz_open_dev$vcsn(&(0x7f0000000440), 0x3, 0x212000) process_madvise(r10, &(0x7f0000000180)=[{&(0x7f0000000000)="01", 0x1}], 0x1, 0x12, 0x0) 5m46.670729221s ago: executing program 34 (id=1118): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000480)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000004c0)={0x48, 0x2, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000080)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000280)={0x0, 0xcc}, 0x8) sendmmsg$inet6(r3, &(0x7f0000000300)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0x1, @loopback, 0x280020}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000003c0)='d', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000400), 0x4) r4 = getpgid(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r5) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x34, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1111}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000001}]}]}, 0x34}}, 0x0) r7 = syz_pidfd_open(r4, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, &(0x7f0000000040)={0xfb}, 0x4) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f00000000c0)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg$inet(r9, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="f633", 0x2}], 0x1}}], 0x1, 0x4000000) ioctl$PPPIOCGCHAN(r9, 0x80047437, &(0x7f0000000200)) r10 = pidfd_getfd(r7, r7, 0x0) syz_open_dev$vcsn(&(0x7f0000000440), 0x3, 0x212000) process_madvise(r10, &(0x7f0000000180)=[{&(0x7f0000000000)="01", 0x1}], 0x1, 0x12, 0x0) 5m6.476184896s ago: executing program 0 (id=1296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000000c0)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, 0x0) symlinkat(&(0x7f0000000100)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='10', 0x2) kexec_load(0x0, 0x1, &(0x7f00000004c0)=[{0x0, 0x0, 0x40000000, 0x1980000}], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') write(r1, &(0x7f0000000400)='dir .', 0x5) write(r1, &(0x7f0000000440)='bind', 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 5m6.023985239s ago: executing program 0 (id=1297): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000340)={[0x38, 0xfff, 0xfd, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x4, 0x4], 0xdddd0000, 0x1d4217}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000400)={[0x7, 0x9, 0x6, 0x5, 0x4, 0x4, 0xca, 0x71, 0x6, 0x9, 0x7, 0x400, 0xf, 0x401, 0x8, 0xf3], 0x4, 0x2}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x9, 0x8, '\x00', 0xe}, {0x5, 0x4, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x4d, 0x7f, '\x00', 0x40}, {0x0, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0xa3}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0x6, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0x10, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xa0, '\x00', 0x47}]}}) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x1, 0x9, 0xb9, 0x4f1b04e0, 0x1000}]}) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000800)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x4, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m5.741793143s ago: executing program 0 (id=1300): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x147) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./trace\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='enable_event', 0xc) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/usb/devices/usb1/interface_authorized_default\x00', 0x2, 0x0) write$vga_arbiter(r2, &(0x7f00000002c0)=ANY=[], 0x15) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x1b32, 0x4) sendto$inet(r0, &(0x7f00000000c0)="04440b7479869e2870b69133f47d75f547ea98a5f9defcffffffffffffffe9bf2cf99a1a88cd8d4d5ca28f0b9d28550dc51bc4fce36a97dc6985413fc4bb1623", 0x40, 0x4040044, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x39ca}], 0x1, 0x299eaf0600d3a4a5, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x60fe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x2, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x96, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="002218000000050c04a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000140)=ANY=[@ANYRES8=0x0, @ANYRES64=r0, @ANYRESDEC=r2], 0x0) 5m2.408891266s ago: executing program 0 (id=1312): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000080)={0x8, 0x1, 0x609152b0, 0x10000000, 0xe, "3eccd2000500"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000005c0)='./file0/file0\x00', 0x1001) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0/../file0\x00', &(0x7f0000000700), 0x0, 0x0) 5m2.132392101s ago: executing program 0 (id=1315): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000040)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000028c0)=""/66, 0x42, 0xdde, 0xffffffff, 0x4, 0x3, 0x10000000}}, 0x120) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/notes', 0x0, 0x2) read$char_usb(r2, &(0x7f0000000380)=""/182, 0xb6) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="0e000000", 0x4}, {&(0x7f00000002c0), 0x1000000}], 0x2) 5m1.632668421s ago: executing program 0 (id=1319): mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./proc\x00', 0x1ed) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000040)={0x1d, 0x4, 0x6, 0x3, "5d69efa984"}) mount(0x0, &(0x7f0000001e00)='./proc\x00', &(0x7f0000001e40)='proc\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000001e80)='./proc/fs/afs/cells\x00', 0x1, 0x24) write(r2, &(0x7f0000001ec0)='add syz0 127.0.0.1+', 0x13) 5m0.780502811s ago: executing program 35 (id=1319): mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./proc\x00', 0x1ed) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000040)={0x1d, 0x4, 0x6, 0x3, "5d69efa984"}) mount(0x0, &(0x7f0000001e00)='./proc\x00', &(0x7f0000001e40)='proc\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000001e80)='./proc/fs/afs/cells\x00', 0x1, 0x24) write(r2, &(0x7f0000001ec0)='add syz0 127.0.0.1+', 0x13) 2m53.255642651s ago: executing program 3 (id=1883): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x1) ioctl$RTC_WIE_OFF(r0, 0x7010) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b00010001000b0904c80201030102030905d85f10"], 0x0) 2m50.371496885s ago: executing program 3 (id=1887): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000006c0)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r2, &(0x7f0000000180)='7', 0x1) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x2, 0x2, 0xf34}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="20014000000020"], 0x0}) 2m47.327984135s ago: executing program 3 (id=1896): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4e, 0xfffffffffffffffd, 0x4, 0xdb4e, 0x3, 0x800000000002, 0xa2, 0x100, 0x9, 0x80000004000084, 0x8000000, 0xb, 0x3, 0x80, 0x0, 0x8000], 0x1ffc, 0x3c5290}) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) syz_open_dev$sg(&(0x7f00000000c0), 0x5, 0x290000) 2m47.213011741s ago: executing program 3 (id=1898): add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000440)="3082055530820367a00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724400275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f04042dbc5587301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, 0xffffffffffffffff) r0 = syz_open_dev$media(&(0x7f0000000000), 0x7ffffffa, 0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config\x00', 0x1ff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000000a80)=ANY=[], 0xff2e) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000ac0)=0xfffffffffffffff9) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCXONC(r1, 0x540a, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000b00)=0x19) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)={0x14, 0x38, 0x301, 0x70bd27, 0xfffffffc, {0x4, 0x0, 0xec0}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x400c000) ioctl$TCXONC(r1, 0x540a, 0x2) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='f', 0x1) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}]}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000a00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f00000003c0)={0x24, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2010}, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x309, 0xe6, 0xe8, 0xdc, 0x40, 0x5e1, 0x408, 0xa4d6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xc, 0xb, 0x40, 0x9, "", [{{0x9, 0x4, 0x63, 0xe, 0x2, 0xb9, 0x12, 0xd0, 0x1, [], [{{0x9, 0x5, 0x2, 0x4, 0x8, 0x7, 0x10, 0x1}}, {{0x9, 0x5, 0xd, 0x0, 0x228, 0x7, 0xff, 0xaa}}]}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 2m45.591519383s ago: executing program 3 (id=1905): ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x84080) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0xffffce1b, 0x200, {}, {0xffffffffffffffff}, 0xffff, 0x5}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x110001, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '$!\''}}], [{@appraise_type}, {@uid_eq={'uid', 0x3d, r1}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x30, 0x64, 0x39, 0x39, 0x30, 0x64, 0x61], 0x2d, [0x36, 0x61, 0x62, 0x64], 0x2d, [0x66, 0x3b, 0x5, 0x38], 0x2d, [0x33, 0x64, 0x32, 0x35], 0x2d, [0x34, 0x32, 0x32, 0x63, 0x66, 0x63, 0x63, 0x34]}}}, {@dont_hash}, {@subj_role}, {@smackfsdef={'smackfsdef', 0x3d, '{^]'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000240)) r2 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[0x4, 0x5, 0x8000]}) r3 = syz_usb_connect$uac3(0x4, 0x101, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x15ca, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xef, 0x3, 0x1, 0x2, 0x30, 0x6, {0x8, 0xb, 0x2, 0x1, 0x1, 0x0, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x35}, [@cluster_info_segment={0x6, 0x20, 0x0, 0x29, 0xb}, @input_terminal={0x14, 0x24, 0x2, 0x3, 0x401, 0x2, 0x0, 0x8, 0xffff, 0x7, 0x5, 0xf553}, @extension_unit={0x9, 0x24, 0xa, 0x5, 0x2, [0x0]}, @selector_unit={0x8, 0x24, 0xc, 0x81, 0x3, "be1af9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x2, 0xf, 0x3, 0x5}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x2, 0xbf, 0x7, "", "fc52"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x9, 0x9d, 0x5}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x4, 0x1, 0x8, 0x2, "0f7e"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x9, 0x3, 0x3, 0xc, "b572abcb9e54429ece"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0x7f, 0xdd, {0xa, 0x25, 0x25, 0x15, 0x18, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x306c, 0x0, 0xc}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x3, 0x7, 0xf2, 0x7}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1, 0x2, 0xd6, 0x8, "92f792"}]}, {{0x9, 0x5, 0x82, 0x9, 0x4d9d3ec3cc75a45e, 0x5, 0xb, 0x2, {0xa, 0x25, 0x25, 0x9, 0x1, 0x8fea}}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x300, 0x2, 0x0, 0x3, 0x27, 0x99}, 0x1c, &(0x7f00000004c0)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "bc3ad54bbd26bf8f7d747d30e5ed7896"}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x440a}}, {0x31, &(0x7f0000000580)=@string={0x31, 0x3, "12f60ef23aaba64869fd7ec5c359bb7d02d4acd703e1bcb63f4c0b4bae9d17749cdbf4a8be2cec8c64f6a8c9cb62b2"}}]}) syz_usb_control_io$uac3(r3, &(0x7f00000006c0)={0x14, &(0x7f0000000600)={0x0, 0xc, 0x56, {0x56, 0x10, "17e25dcb5738abf0f2de19546830b4e227975ab176feb6a6905768e018bc7ee57822a5610cf94e2c0b8403cfcc9f2ad2f6f1df74d6d05bb7bec6405b3c861be98d027a9a43228993d74509d7a5f5b643eb0cacf4"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x40, 0xf, 0xbd, "af303b03b718a78b6c38058e22c38bfbe9ec38be08cbf86a863d6728b08563ca600372e6d57f0aa5777cffbb5a62216985260a71afed4230b98cdd034b860f49aeda30c261bc7ba622da5ea9876ee1bb095d56629149eaf10de9eb53340cf2ee0b0bb61956e35a5a60b00dc72cf0e9db55310c2b9ccf4657455f402578b7a02331a0ffa8b9b8ec1427ac5af1a446cd588d8d1efae40fe57d29ec58cbd5fde17f0c1c2dfc1c0f543f8ae66b24fc9a35b0f875a02ffc33dab76bfc4fad16"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000880)={0x20, 0x81, 0x2, "8f8c"}, &(0x7f00000008c0)={0x20, 0x82, 0x3, 'B}9'}, &(0x7f0000000900)={0x20, 0x83, 0x1, '\x00'}, &(0x7f0000000940)={0x20, 0x84, 0x2, "f4f1"}, &(0x7f0000000980)={0x20, 0x85, 0x3, "5cc8d2"}}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY(r2, 0xc008644c, &(0x7f0000000a40)) syz_usb_control_io$uac3(r3, &(0x7f0000000bc0)={0x14, &(0x7f0000000a80)={0x40, 0x21, 0xe8, {0xe8, 0x23, "3d7c776644745fd043b2cf79e2a0f1538a586ff91f427127d0c552979c4e9fe4e31558f6b582a079a9b49d6b49c201774260a47c67951051be6df97dc80e73646e16c326c4b3f2b93960a708610b0c33ea6cf8baf21e464f77f1791f8c1fe2f3aeeb3c7e5555b57dff019e946cd480beff14b0d330d9d1a31a27e74e0d9ce1a84ffcf8171764d54acd0abe03e75ca5d217e1929985058b8d2399a8f530025b663698d8a5cfa2e39fad773a6388b7b0dd8b17d4538fd334582697dae8c9799dbfdc4745066f8f1cf0d71b01f8a430116531af427bf9de55a5596134658b221a10e96eb47e7e14"}}, &(0x7f0000000b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x543f}}}, &(0x7f0000000e80)={0x44, &(0x7f0000000c00)={0x40, 0x8, 0xba, "1d642ddc7d33803e1b2f5ceb3c15d0178f0af32bb569bcdbe18dd20a3d42cc05ff15ce293c9105e2d0efc14d07529e24f47bf36f38f152ca520aa441bd0a6bc082f970b0967099e09c73a5e5e94fafdba5721eb0d3597592715194a84055e9a752e9d84e9e97c55970ada796e176bf3aa309734d81ae043a4bdd17fc594023807d4aea480a89430483aea57f86f91fdea7246c504dd24eb2bc0334c7a577f39798dab2fed88b5dbb1744600496b97e39d0baa3d732cf0ef63ccb"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x18}, &(0x7f0000000d00)={0x0, 0x8, 0x1}, &(0x7f0000000d40)={0x20, 0x81, 0x3, "39ea4c"}, &(0x7f0000000d80)={0x20, 0x82, 0x3, "f515e5"}, &(0x7f0000000dc0)={0x20, 0x83, 0x2, "5189"}, &(0x7f0000000e00)={0x20, 0x84, 0x3, "5d62c1"}, &(0x7f0000000e40)={0x20, 0x85, 0x3, "df61a5"}}) r4 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000f00)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xef, 0x56a, 0xc7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x80, 0x9, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x6c, {0x9, 0x21, 0x200, 0xfb, 0x1, {0x22, 0x92c}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x7, 0x81}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x9, 0xfa, 0x2}}]}}}]}}]}}, &(0x7f0000001140)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x110, 0x6d, 0xfd, 0x0, 0x40, 0x8}, 0xd3, &(0x7f0000000f80)={0x5, 0xf, 0xd3, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x8, 0xd}, @ss_container_id={0x14, 0x10, 0x4, 0xc0, "b65a4b367d3a6e4e0fabb38e0e0aed9e"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "4d30825fddc1644e504e2287b6b43cf9"}, @generic={0x8f, 0x10, 0xa, "ff1c046781fb6a7c8e53d046983dcffa6353fc53724178733135743d53a06008ca3ab89d2198241088ab20355dea8eff46eecd47fd98be424cdb281c39531697803ecb5f62237dff3fa3a28e25b7e71332c3ffdd2de1efccb7c1b07a3488292ad30682d69f6c5ac40a378faadd589b359237079938b1186b28388640b006b8ff16ff2a60affc81a0a16a0da0"}, @ssp_cap={0x10, 0x10, 0xa, 0xa, 0x1, 0xe27, 0xf00f, 0x9, [0xffc000]}]}, 0x1, [{0x9b, &(0x7f0000001080)=@string={0x9b, 0x3, "921954615f98d6e415efb94eeaa42d1986da87aebccfbeb0edd9eb21e9f8ae4a5d505c77297fd67387e28c67e3d44a6e002fda208c47cf915f1ac751abc877109c005cae68551ab18c5ddc9ed3901dd236232ce44fa501446b7a1fdead13fa311e9647d8b8b13f3ae5a19423794c82d677c5f3ada349d689636dc3cd2e105a9c2d20ea81ce741f0547857a4a982ce688c91a3c8a6d9017893a"}}]}) syz_usb_control_io$hid(r4, &(0x7f0000001380)={0x24, &(0x7f0000001180)={0x40, 0x22, 0x8c, {0x8c, 0x21, "2efae6e85d84568358c481e0402a14cc8d1975d009eca849b0032820a656d323426d199db51e24b701ea61a7d59df9703f1423c75f9131519b9af0aad9262d8c19302e2ca44a15a386632d61b8c8bc9dffaa8606dad4e3ceb75f51c5d4d1d857d56748aff989ffbed5d6fdd7518c84b95eaa02271e82761afb6bcc52e4f787c945a07c62402b4ac7242a"}}, &(0x7f0000001240)={0x0, 0x3, 0xa7, @string={0xa7, 0x3, "2960d2164dfdc7407e06efe8a1d4c97ecf857891b33e7c251156ed871199bd32b19f552edc534f70917af4fb598f527567bd4cd4f0ce42ac77bc25e9349e18a705e274c86e0a8c2b02edaae6f6334d8051e5cd4b15c21e298b660f2245659d855474adec2939fa0a93afbca30554dddb67f28ecb67b6231c44d8b43867b6161d82d675e8b4305b1c14c5a5a0a9fc7a7e2b640d5740306c102649f0a6caaecb0dba36743019"}}, &(0x7f0000001300)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "239b121b"}]}}, &(0x7f0000001340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0xfd}}}, &(0x7f0000001600)={0x2c, &(0x7f00000013c0)={0x60, 0x8, 0xad, "dc9ff89e25b5d0095abacd036659cba8192fa05d49c6fb5c297a8d5506a8ee834d715d4c4961561e8cf8a156929e7e0616b88e4b53312d83f4614658d08771efc36b268877819b448247632ed61f4d4ab2ac46693e9751b6fa1e4d1e9e24a03bfb5dbb81a40fe9b6be366f39664c8f347977564e15d1fdae445cb1c37ad7f4bc29d3d1c37a232805cabe5f5d26eee355bde770cefcb9140689fc864d6bf4fd8af3724d57aa40fb22f8be2bf64e"}, &(0x7f0000001480)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000014c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001500)={0x20, 0x1, 0xab, "515692f4be0fac1134465853635bb8e3951f8a8014cf354d28f3eab44a2b1d2abdc62a185d278bb2488cadc3a894c5ba1d6054f2908fdcdfb6355b8e12e7b29e10d2826897796fb43986a1035bfa131d8a2d5a24ee3ab23df10f64caf4d0b94cff5402f4bb53f256ceea63f72a88cec4a3f88d0c1be5053a19ea490bdd2566cd85244afecfcbeb8a67a228997633edea4517a65d6fc615f8ab41d52c9e6ba0cad948d28a1a9c97a3cd3283"}, &(0x7f00000015c0)={0x20, 0x3, 0x1, 0x9}}) splice(r2, &(0x7f0000001640)=0x5, 0xffffffffffffffff, &(0x7f0000001680)=0xf, 0x6, 0x0) syz_usb_connect(0x3, 0x811, &(0x7f00000016c0)={{0x12, 0x1, 0x310, 0x96, 0xf4, 0xa9, 0x20, 0x166a, 0x101, 0xdf22, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7ff, 0x2, 0x7, 0x2, 0xa0, 0x3, "", [{{0x9, 0x4, 0xb, 0x3, 0x8, 0xc, 0x47, 0x2d, 0x1, [@hid_hid={0x9, 0x21, 0xfffb, 0x7, 0x1, {0x22, 0x4b4}}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "192412288f"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x400, 0x9, 0x9}, {0x6, 0x24, 0x1a, 0x4a39, 0x2c}, [@obex={0x5, 0x24, 0x15, 0x832}]}], [{{0x9, 0x5, 0x0, 0xe, 0x40, 0x5, 0x3, 0x7}}, {{0x9, 0x5, 0x2, 0x1, 0x40, 0x7, 0xa, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7f, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x9}]}}, {{0x9, 0x5, 0xf, 0x4, 0x3ff, 0xcc, 0x4, 0x7f, [@generic={0x5e, 0x21, "4476de56656315437a142f03454374fa003bb2a38870ee175cfe8c5ebad15e023cee8d6fd079ccebd438c4bab0c0d0fdecf2d9dc0c24040b89f30fe2a4ec027b372fac3bff28d2c212364c10c6861b6a88bb6fa0ea3576bb46f793aa"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x0, 0x1, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0xe}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x1, 0x5, 0x79, [@generic={0xcf, 0x24, "93238f9da49373ec4cb0c2822a06b03fa438f83327cfce969f0bdf508b58682f0d4989de4df02ca1cdaff615cbdf48d4c62a36db4d053f3dbbcc3cbd9fc1512cdaeef34fbbb5879edf9f8dddb1aeca9b691e95b77a57872c2ec2e8fcb555893c51dd5ca1a5869cd4c5d8bf34e5454730f8b0f31fdf00463c58311b28a84833e2db13c25f354c468f7cd8acde3307a1ef0bbce17abfebd351466f2ac9e88de35aba6af4d354e5e7644d0692d9c689171eb5e0b4ab15893b2633d3b3b7c4e399fcee594532e342ddf7050ae43c20"}, @generic={0xc0, 0xc, "42de0718771596c848a684430b2e1d53f38daff6bdbc98a607b16945f19d310f56d058db0c203dcd02ec5d87dcd3de95628d4473a55e91a235b4f7ffb0c141b07595d0a9b0c56df810a11ef8efc463ddef0b773f74a38b5feab8b7dbce1a901af6c0b310d53d7d74816dd5c46615ca7e1533708ca5ca20449637eb8e1e6d9788f6c44551fd00a0bc3706033f9a51a9321ea0c5221c5616dc179e2fcca21e30e8411933e09198c157533eed4289ff2a933131abd6ed376646e739dbbe8572"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x3ff, 0x0, 0xe, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x7}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x1b, 0x5, 0x80, [@generic={0x83, 0xb, "59b983cac3deb3ef462e4625b69fe543ce821ec1713925b49288678511174f6fb65e4b9eddaec6fd1dffb8171d00a1f4bfa5b114220d021458e006947be35559ff8f629b12664a7763672bae43f96875f7ffdf030fd323e6e3de27e67b6ff1b4395917bbe99b72878867f59b4d16da6131cb60c5a0ca0e1ebb122bfce311f5147f"}, @generic={0x92, 0x10, "797801b53fd0016ce26e4547ab7955816c2015e3e6e2d6a663a0a027051879644d30d26fec7812abd628981313cab1d42dbfa65c13d969620f6a07cb0f04d2a82675ec82a58af0bba307c225e7052c3a66e0d33eef3a38b0ef1e646a7bc94d87633d623ff9c93fe8dbb6bb05c1eaaddbfe61f23eaa8adca7f99d9ee19056daf3e22cda4494d825f0414766257e49a8c3"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x40, 0x1, 0x8, 0x33, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x90, 0x5}, @generic={0x2b, 0x10, "935a6af0c7d7091f56717995b65bb85d39b7250d9d06906d55c4c118f334f83f567b12f1075c041871"}]}}]}}, {{0x9, 0x4, 0xb9, 0x81, 0xc, 0x3f, 0x2b, 0x97, 0x81, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "c0cc8cc1"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xc1, 0xdf7, 0x7, 0x8e}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7b9d, 0x0, 0x86}, @acm={0x4, 0x24, 0x2, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x4}, @mdlm_detail={0xe, 0x24, 0x13, 0x0, "f1f18a245d23a8fa061e"}]}], [{{0x9, 0x5, 0xf, 0x3, 0x400, 0x2, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x7}, @generic={0x3b, 0x21, "4c53c5d7292add8ef6170a02fa053d8f027fb0503ace904f3a8e9e177caab33bcf041d70af9d27bb8647d021dbb06f483eecd01b2dd2b0f714"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x10, 0x39, 0xff, 0x3, [@generic={0x88, 0x4, "46108ec632703da639b2df6e95451e34e78381b57bdda4e72422bfb4d4b0660002a321e6c14ae3134eaed6e7fe68c559ab7de169ab746bcfddfa1f095d720e82dd50b9a8f6796cd6cea9e973f395397eb07a1d5ec20e92b40d2992c1ed4a745a0795e2c29004b08cbe1d484278cff4dcfa5582a52dc476dd02516b470b907d388ce1e9f42736"}, @generic={0xd0, 0x11, "a8ee045b862891d6cec7d50361761b8a76a118a8058391f803ecf35289f029296d46b9492d3c0f69dfec4fc494225270e3cd442cca3a309f6e9f390b1888160154deeaac040fedf8276aa3e9a63322ce82cdef1ad31b94c9b8ccb3404def3057a6d97e0526bcacf56bdab71a317b0953bb096514fcbb991ab3633f9fe46b6afe5b22248bfb91edadb1224105baeb9e9787b4440a8e07e75c090303e775f7ac1bd24b9c96fe8bd78822ec32a41f507cb5c37db6e4350777497bfb3d32bfe12250a607c134cccc99fdd570ef40212f"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x5, 0x7f, 0x2, [@generic={0xd4, 0xa, "ee09f731f9919dd925cbff2ea7f35e01809d0849421ba81f57cd976a4c790c3101ecc95b80432e4b773599bf79aefa8ec6b9df8cb03f75f7fefcdf6b046e82f75d0a0e43a72485de414fb8807619ded462ad9d3439e2cbf1e711e2003197c4ed009205b61cba1702673002eb1d8a17fa0948bcb478f2fc51d1c150e7898f497cca59eb94d6204969ad323b7d0359f9996794ac0bd3e843b2792e8283e6a90e5df48f18029c4bd9dec74c8a0c7a47f7fd83f65f22142fbafa1723eb70ab5544993452b2b04b1abdd505ead7f75891d4d5f960"}, @generic={0x1d, 0x20, "50fafe3cd6a30f23ceaeb775f745463fe126b233f67d34ca2f6279"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x5e7, 0x0, 0x6, 0x2, [@generic={0x7c, 0x1, "2ca4cb29864f5fafd8ee345057dd3923e434d4b58f708849e33c3cfd923f4074ae5fe168d87a0338d3ba8527d749895a49fdaea6bfbd57d4d3cee24d2d5b0e7af8a8209b1f742924dc84e3901a64dd4b8d61bfa2c0ff8cd9b4b865e64fdbc2eb7954cf4892aa07695573c2700efdd084ac61d19d2563a2c54c7a"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x3, 0x6, 0x0, [@generic={0x56, 0xc, "480654431685d44abff0ffa81c25d2d70680f32bb361f6e8d1b5f9d46208e892aa3ba71486c4ed7712e1e7abeef9e515ddba4d4efcac8950cee80d0f3df9811b3f270e94e5d2f86bd7d451a00a144f31c63e926c"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0x2, 0x42, 0x6}}, {{0x9, 0x5, 0x3, 0x1, 0x10, 0x5, 0xff, 0x10, [@generic={0x12, 0x5, "72343264575e4ca248b7023c5caf265c"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x10, 0x8, 0x80}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x40, 0xd3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8a, 0x4}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x4, 0xb1, 0x1}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x5, 0x7, 0x3}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x7, 0x6, 0x9}}]}}]}}]}}, &(0x7f0000002040)={0xa, &(0x7f0000001f00)={0xa, 0x6, 0x311, 0xb1, 0x7, 0xd, 0x8, 0x7}, 0x46, &(0x7f0000001f40)={0x5, 0xf, 0x46, 0x3, [@generic={0x26, 0x10, 0x4, "c06fd8a6c31c60d5607653e1d98b4243c3fef6f26fb0db43410139c115c9cf6eaf97de"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xd, 0xa}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "d9700a0d4173e1d299f1ecbef1c2c255"}]}, 0x2, [{0x4, &(0x7f0000001fc0)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000002000)=@lang_id={0x4, 0x3, 0x402}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000002080)) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f00000020c0)=@req={0x7, 0x0, 0x4, 0xb8d9}, 0x10) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r2, 0xc0106441, &(0x7f0000002100)={0x0, 0x0, 0x3ff}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r2, 0xc028644b, &(0x7f0000002140)={r6, 0xfffffff8, 0x760000, 0x6, 0x7, 0x0, 0x5, 0x100000001}) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000002180), 0x230400, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r7, 0x800c5011, &(0x7f00000021c0)) syz_usb_control_io$uac3(r3, &(0x7f00000022c0)={0x14, &(0x7f0000002200)={0x40, 0x22, 0x6c, {0x6c, 0xa, "4891faad8095c56b03764733cc42d236181287f21281a17c37033d43148eab7cbe34f845ac01fe097e6e074d9bf1983c943bd2ccbd15e68a1b1d0b254358506607a792b4de08f15df5ec7233f1ba3bab59925b2af8bdc21ce2226fb290a2175fe854c865421663f1ab64"}}, &(0x7f0000002280)={0x0, 0x3, 0x1f, @string={0x1f, 0x3, "a59aefdf21e7bd3538c5e672c8a497f91b74c19165f11e79f139ebd143"}}}, &(0x7f0000002540)={0x44, &(0x7f0000002300)={0x0, 0x7, 0x51, "ea5733667bcd3206e59eeb9f1d084e943b7ee28f5ea3fc520f5f06fdd573be35d6b0d48e71410e405d18d7a193fc06510daa30d4074d964553ae47a3f079f637f12d36cf144022d8118498016b1c7a69c8"}, &(0x7f0000002380)={0x0, 0xa, 0x1, 0xd6}, &(0x7f00000023c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000002400)={0x20, 0x81, 0x3, "cb9327"}, &(0x7f0000002440)={0x20, 0x82, 0x2, "b5a5"}, &(0x7f0000002480)={0x20, 0x83, 0x3, "ef14fe"}, &(0x7f00000024c0)={0x20, 0x84, 0x4, "f6d976ba"}, &(0x7f0000002500)={0x20, 0x85, 0x3, "9fcad9"}}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f00000025c0)={0x1, 0x0, 0x346e, 0x8, 0x4, 0x7f}, 0x14) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002600)='syz0\x00', 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000002640)='cpu.stat\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r2, 0xc0386447, &(0x7f00000026c0)={{0x8, 0x2, &(0x7f0000002680)=[{0x3, 0x0, 0xb}, {0x80, 0x0, 0x2}]}, 0x7, 0x6, 0x5, 0x2, 0x0, 0xffff, 0x4, 0xfffffffffffffffe, r6, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01864c2, &(0x7f0000002740)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_PANTHOR_GROUP_SUBMIT(r10, 0xc0186449, &(0x7f0000002a40)={r11, 0x0, {0x28, 0x4, &(0x7f0000002980)=[{0x6, 0x9d54f758, 0x9041c9e3d365a480, 0x0, 0x0, {0x10, 0x0, &(0x7f0000002700)}}, {0x6, 0xb81344e0, 0x3385e1fdddab4800, 0x5, 0x0, {0x10, 0x3, &(0x7f0000002800)=[{0x80000000, r12, 0x1}, {0x1, 0x0, 0x4}, {0xff, 0x0, 0x8}]}}, {0x225, 0x19d001f0, 0x7973a2dc28b6ee40, 0x8, 0x0, {0x10, 0x1, &(0x7f0000002880)=[{0x80000000, 0x0, 0x3}]}}, {0x0, 0x289933b8, 0xf3b2d4889ff17640, 0x0, 0x0, {0x10, 0x2, &(0x7f0000002940)=[{0x1, 0x0, 0x3}, {0x1, 0x0, 0x8}]}}]}}) 2m42.407823021s ago: executing program 3 (id=1917): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS_V2(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e21, 0x9b00, @remote, 0x3}}, 0xe1a, 0x8000, 0x400}, &(0x7f0000000400)=0x90) (async) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtclass={0x90, 0x28, 0x300, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0x4, 0xc}, {0xc, 0x6}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xf7}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x3}}}, @c_cbq={{0x8}, {0x34, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0xf, 0x2, 0x8000, 0x0, 0x2, 0xfff7fffb}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x3, 0xffff}, 0x6, 0x33247944}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x2, 0x1, 0x3, 0x10, 0x82d, 0x3}}]}}]}, 0x90}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000440)={r2, 0x5, 0x8, 0x0, 0x4, 0x7}, &(0x7f0000000480)=0x14) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce02d5}, 0x9c) sync() (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000050000000060a010400000000000000000100000028000480240001800b00010072656a6563740000140002800800014000000002080001400000002108000b40000000000900010073797a30"], 0xd8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) (async) r6 = accept4$x25(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000500)=0x12, 0x80800) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000540)={0x47, 0x6, 0xc, 0x8, 0x8000}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000b000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe03, 0x5f1, 0x19, 0x2, 0x40, 0x6, 0x7}, &(0x7f0000000240)=0x9c) 2m27.076821074s ago: executing program 36 (id=1917): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS_V2(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e21, 0x9b00, @remote, 0x3}}, 0xe1a, 0x8000, 0x400}, &(0x7f0000000400)=0x90) (async) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtclass={0x90, 0x28, 0x300, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0x4, 0xc}, {0xc, 0x6}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xf7}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x3}}}, @c_cbq={{0x8}, {0x34, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0xf, 0x2, 0x8000, 0x0, 0x2, 0xfff7fffb}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x3, 0xffff}, 0x6, 0x33247944}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x2, 0x1, 0x3, 0x10, 0x82d, 0x3}}]}}]}, 0x90}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000440)={r2, 0x5, 0x8, 0x0, 0x4, 0x7}, &(0x7f0000000480)=0x14) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce02d5}, 0x9c) sync() (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000050000000060a010400000000000000000100000028000480240001800b00010072656a6563740000140002800800014000000002080001400000002108000b40000000000900010073797a30"], 0xd8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) (async) r6 = accept4$x25(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000500)=0x12, 0x80800) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000540)={0x47, 0x6, 0xc, 0x8, 0x8000}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000b000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe03, 0x5f1, 0x19, 0x2, 0x40, 0x6, 0x7}, &(0x7f0000000240)=0x9c) 1m30.801945403s ago: executing program 6 (id=2134): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000340)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private2}, 0x1c) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60040000", @ANYRES16=r2, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="08000c006400000008000d0002000000080026006c09000028000e0080000000ffffffffffff020000000000020000000000000000000000000064003104000004043381", @ANYBLOB="0400010004000100040001000400010004000100040001000400010004"], 0x460}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 1m29.80480655s ago: executing program 6 (id=2138): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x80001, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f00000000c0)={0xa000005, 0x0, &(0x7f0000000100), 0x6, 0xc}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='oom_adj\x00') write$cgroup_int(r4, &(0x7f0000002900)=0x800, 0x12) read$char_usb(r4, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x39, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000640)={0x2, 0x4e20, @broadcast}, 0x10) r6 = creat(&(0x7f0000000480)='./file0\x00', 0x0) close(r6) eventfd2(0x10, 0x80000) r7 = fanotify_init(0x12, 0x101000) mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x0, &(0x7f00000005c0)=ANY=[@ANYRESDEC, @ANYRES8=r7, @ANYBLOB="2c77666060d5ca657b775bff2a216e6f3d", @ANYRESHEX=r3, @ANYRES64]) read$FUSE(r6, &(0x7f00000008c0)={0x2020}, 0x2020) openat(0xffffffffffffffff, &(0x7f0000002ac0)='./file0\x00', 0x40002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x4008800) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000700)=""/191, &(0x7f00000007c0)=0xbf) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10) ioctl$KVM_CAP_X86_DISABLE_EXITS(r6, 0x4068aea3, &(0x7f00000004c0)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x4) syz_usb_connect$uac2(0x2, 0x92, &(0x7f0000002940)=ANY=[@ANYBLOB="120100030000064035122b82400001020301090280000301084006080b0001010120020904000000010120000924010000012000420b240604060f00ff0002000c24030103030e047f100006090401000002200009050109000405070208ff090402000001022000090402010101022000090582094000060607082501020644020000000000000000000000000000000000c16c79455336b7b1fc7ed8716f81715c17"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f00000003c0)=0xd, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000400)=[@timestamp, @window={0x3, 0x6, 0x4}, @window={0x3, 0x10, 0x6}, @timestamp, @mss={0x2, 0x4}, @sack_perm, @timestamp, @mss={0x2, 0x9}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000440), 0x4) 1m27.679947228s ago: executing program 6 (id=2146): r0 = socket(0xa, 0x3, 0x87) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000180)=0x6, 0x4) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000100)={[0x2b000, 0x200000, 0xfec00000, 0x5000], 0x9, 0xb8}) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_int(r5, 0x1, 0x28, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x32}, 0x55, r7}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@local, 0x18, r7}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000040), 0x4) 1m27.437688432s ago: executing program 6 (id=2147): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0xc0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setresgid(0x0, 0xee00, 0x0) r2 = semget$private(0x0, 0x4, 0x29b) semop(r2, &(0x7f0000000280)=[{0x1, 0xfffd}], 0x1) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f00000002c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x10, 0x2d49}, 0xfffffffffffffff8, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x101}) semctl$SETVAL(r2, 0x0, 0x10, 0x0) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x4f}}], 0x1, 0x40002162, 0x0) r3 = open(&(0x7f0000000000)='./proc\x00', 0x402b00, 0x24) r4 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) setns(r4, 0x2000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/net/eth0/threaded\x00', 0x2, 0x118) write(r0, &(0x7f0000000600)='27', 0x2) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f00000000c0)={0x1e, 0x4e21, @broadcast}, 0x10, 0x0}, 0x4000014) mount(0x0, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) 1m25.936015973s ago: executing program 6 (id=2150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x10000010) r3 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x40800) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000001c0), 0x4) r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) ioctl$DM_TABLE_LOAD(r4, 0xc138fd09, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x1a0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@integrity={0x0, 0xd0, 0x0, 0x68, 'integrity\x00', {{@ram={'/dev/ram', 0x0}, 0x20, '16'}, 0x20, '8', 0x20, 'I', ' 1 journal_mac:hmac(sha256):0123456789abcdef'}}]}) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000200)={0x3ff, 0x6, 0x8000, 0x7ff, 0x15, "b1d3cffaa0bd1c12"}) 1m25.521766958s ago: executing program 6 (id=2151): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x1ef) lsetxattr$security_capability(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000280)=@v3={0x3000000, [{0x3, 0x3}, {0x3, 0x1ff}], 0xee01}, 0x18, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x387) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x1920000, &(0x7f00000003c0)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="7c0000002600010022bd7008f9ffffff410000000800030047"], 0x7c}, 0x1, 0x0, 0x0, 0x1000c953}, 0x0) truncate(&(0x7f0000000400)='./file0/file1\x00', 0xe2) setrlimit(0x7, &(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x89901) landlock_create_ruleset(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffffff000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) sync() 1m10.17303054s ago: executing program 37 (id=2151): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x1ef) lsetxattr$security_capability(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000280)=@v3={0x3000000, [{0x3, 0x3}, {0x3, 0x1ff}], 0xee01}, 0x18, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x387) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x1920000, &(0x7f00000003c0)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="7c0000002600010022bd7008f9ffffff410000000800030047"], 0x7c}, 0x1, 0x0, 0x0, 0x1000c953}, 0x0) truncate(&(0x7f0000000400)='./file0/file1\x00', 0xe2) setrlimit(0x7, &(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x89901) landlock_create_ruleset(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffffff000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) sync() 34.959073316s ago: executing program 7 (id=2297): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000001, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$KVM_SET_TSC_KHZ_vm(0xffffffffffffffff, 0xaea2, 0x80) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x1b) io_setup(0x251, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x41, 0x1, 0x0, r0, 0x0, 0x0, 0x4000}]) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$nfs4(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='tcp']) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r2, 0x0, 0x20) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x8000, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2}, &(0x7f0000000240)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000280)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000000340)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000380)=0x400000d2, 0x4) shutdown(r4, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) 34.403578769s ago: executing program 7 (id=2302): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x50424752, 0x0, @discrete={0xff4e, 0x3}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa2000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x39) syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x50424752, 0x0, @discrete={0xff4e, 0x3}}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa2000, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x39) (async) 34.263325887s ago: executing program 7 (id=2303): syz_usb_connect(0x1, 0x4cd, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xf8, 0xa2, 0x43, 0x20, 0x12d1, 0x4117, 0xe313, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4bb, 0x3, 0x1, 0x8, 0x80, 0x0, "", [{{0x9, 0x4, 0x67, 0x9, 0x5, 0xff, 0x1, 0x32, 0x7, [], [{{0x9, 0x5, 0x1, 0x3, 0x400, 0x5, 0xbd, 0x9}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0xe, 0xfc, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x81, 0x310}, @generic={0x35, 0x23, "6a2e18a034732edb81e620ee441f9067e946564a04b56544a68923c5b81c7fcc09d59e3cc50e52878adbe836374a94b3bc911a"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x400, 0x17, 0xfa, 0x1}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0xa8, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x1b}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x4e}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x9, 0xc, 0x2, [@generic={0xdf, 0x23, "788a2d22a6f7489e40cd05bc14925715f4576ccf546346a4d198cc252dcf281e203ae3de58dadd5f4aae7dfe8e0daf167d9c84a854cb9921d7eff4029de9198e892441e8e8fff064ca7c872c2931d17dc57c3f58c8ef05399568acc8366a53a1d4ca1257529a31a027eea7f2ba16ad4a1fbc5b1bae1286960e0f9f9064dc2a6ff3c5015da32a9cfee7f7cd6f8e743c05556bc120625f722e30034c484c781277d549778e6b3f21bf226fd4bee41343c442009a9c0268a81a65f1a14aa16e23d0b654559f273676fc3c1e5557e75fd8a1d74f30f41ba9f07d81d510badd"}]}}]}}, {{0x9, 0x4, 0xfb, 0xa8, 0x4, 0xb, 0x7d, 0x36, 0x9, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "e67155b5"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0xc, 0x5, 0xe101, 0x85}, [@ncm={0x6, 0x24, 0x1a, 0x1000, 0x38}, @dmm={0x7, 0x24, 0x14, 0xe87, 0xfffe}, @mdlm_detail={0xc, 0x24, 0x13, 0x0, "5b268438d2201742"}, @mdlm={0x15, 0x24, 0x12, 0xca8f}]}, @uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xfe, 0x2, 0x8, 0x9, "", "bee6e3"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x40, 0x1f, 0x40, 0x2}, @as_header={0x7, 0x24, 0x1, 0x2, 0xe6, 0x1002}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x4, 0x6, 0x1, "a6d7", 'sC('}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x4, 0x7, 0x3, "", "ac59"}]}], [{{0x9, 0x5, 0x3, 0x0, 0x10, 0x2, 0xb9, 0x5, [@generic={0x68, 0x5, "758f7e6d913391e3a15426958f804a6069f95f434d0a3e8ce6efc96a815fe6dde66f646a1d04ecd0c03bced4fad7cc3a00a2102ce5267a8e254a385e077ac8c9bc6856108b37f0d77639c3674eaa630dbab5ea26af714005d4364a843cda513c2aa864f63b86"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf7, 0xff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x7, 0x7, 0x2, [@generic={0x64, 0x1, "c9d138e7e8eab69d0e7bd9530e6a858fca0e7b106b68921cd36ccbce4d2c7aa952bd5a6aca8e2f12b957c5d97a2e782d6e14f47f03a80500ec4920095e8c33f8b638516e4f48157085c386350806e4f9e7c5acbaf5a667cab070be9b3cdd084e1b21"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x40}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x9, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x5a1}, @generic={0x47, 0xd, "d661be5b800b9dbd347e2c13567b2f15d73a18eda26f617bbd2b0e509d66b40f33a7a7b370599109696aa9d512d5b1440bd9b85ba38b066eeb938b1cd0fcf34436d8ce8f45"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x0, 0xe4, 0x7, 0x9}}]}}, {{0x9, 0x4, 0x21, 0x7f, 0x4, 0x2, 0x2, 0xff, 0x1, [], [{{0x9, 0x5, 0x4, 0x10, 0x8, 0x3, 0x1, 0x0, [@generic={0x3e, 0x22, "9ecc288d436e5b6310a30582f13ab516f412f41bdacbcd9a7928ca92975c0c4b69dee2bed800cb6c66977bb58f9ebadffafb3bcbf868d587c129c896"}, @generic={0x34, 0x31, "3721993310b3ed7a4c18032fff794ab2fd5d735f1f5cafdb178ca429ba15ee3b81fe4e912332b35a3c975e90e27b7e48a0a1"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x240, 0x8, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x4}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x0, 0x75, 0xf, [@generic={0xd6, 0x5, "b4f0e30ccc8ec80f9a8f83d11d37a4e8d964b2591e9d09334d16976a98fcfc02638a2a978431d94d157cd85a0929c8592e0a3177b8dab7f7727475a58115b47d52634d112a42bb306e61db1bc00f0196bb0cedfdddfcaab9e847a6ee88924f22626b885bd44675dbac6d973ab3c4f65fe15c154ac48a6bddb1bf9a613c5741c3b7c157f82d25c54f236ab93d6e4020730351549e4fc260228321fa94276293d5fe5250e4afbb5605326e0c2d6010bca857b885b24805af14aa035dc7011461802b5efebbbeac6172730bafd518bf85eb70a0c6b3"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x1}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x8, 0xff, 0x8b}}]}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x200, 0x7, 0x1, 0xa1, 0x38, 0x23}, 0xdc, &(0x7f0000000540)={0x5, 0xf, 0xdc, 0x5, [@generic={0xaf, 0x10, 0x3, "1ec93fd7f22f279bc98e30d6d090fd5557634e69e39012caa54d2cbf0d96a7eee967646da7ee33ac21c7681d766cb85239e51818419375871868554eff7e531e57dd426c87c4097d5f2421ba6933aa877b5d43f1315b28194566926b9c2cf01d9a225ebafaf0e249bb2ec66e9457d19ed5a4a8159f5b6237b381ee13fd17e932c58690985c0ee3a4877c7a0ee4820ca71b63c3920c9eeea0a03ffe664483f34828d86499233a53fa688d8fcd"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x7, 0x2, 0x60ee}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "67262ef6edfe3d05f9eec1db7ecfe42c"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x1, 0x5}]}, 0x3, [{0xc9, &(0x7f0000000640)=@string={0xc9, 0x3, "d60c70f816e14af7113ef6b68ac8b6156cec54f5761969d8a90f1da7200aa8961df8e56b1f8026759bf251bcf5c523c4ea36f35aad3e588263616f0a795e44a5f9416b8be990ad420ee1716f9da7ffd0420d4572f3c8c4d8f3f7ead927578e8a66dcead79485a33c6d4487ed67151723633d258573970b23b5aedc5c5b6aa48f753c4940c468d888689e7581b87781770b59f1afd6849402ddd25c13cf3b9db5a13f5e08edc5e48aa3e40610ef433ff0025f88c7a4eddc4f3bf86f218ca3de1848e5d3702b4c6e"}}, {0x71, &(0x7f0000000740)=@string={0x71, 0x3, "99198e0814bc2fb1f9c327508bb7d2a3eb43c326e80f9f5d49fdd97fe6b3e25e9f03b8ad35e75b67d860e2cbb253ddd897addabea2a41c6cb838108d8b24bb0b4948b48e312abe6a36ea7a9adef7bedadad4dfafb8af536762718a1fe32646196a44955c161c1a870f186ea168e66b"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x40f}}]}) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x24b8, 0x20, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x67, 0x20, 0x5, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x97, 0x4, 0x1, {0x22, 0x4bd}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x7, 0x5}}}}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x250, 0x5, 0x0, 0x2, 0xff, 0x80}, 0xd0, &(0x7f00000008c0)={0x5, 0xf, 0xd0, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x3, 0x5c, 0x5, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x6a, 0x0, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "381f24ca8461cfeb568503e242108edc"}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x5, 0xff0f, 0x3, [0xfffff0, 0x0, 0xc0c0, 0xc03f, 0x30, 0xc0]}, @generic={0x7e, 0x10, 0xb, "0dca5fdbd14e7ad5ca810bccdf62d10067166f4d222b4e1877929240415dd21219cf9208a023e40b7ecb0d930755ce583ebebd1fb9c69b59e3078e33a4906b02c2a64441590e108124ff10f062c5e9e69143bb0fd748e2cf1d020ce78959b60495e4dc82c3a7d60ec1ab9d78c1278b45fc95f1e528627d93d57f72"}]}, 0x1, [{0xf4, &(0x7f00000009c0)=@string={0xf4, 0x3, "42153e3146169c420f3c8c50743fd3f61ad5b118834f5f528ca81c4c12f6e9c59d6976126b7ed8ea18e7f2d5ed87befa7147a668f89e7bff379e444a7e6cf82fc487d711693e93fdc45f96e87066ad48684e00c5eddc7e67a609ed3090698f03e7573efd386174959fba8d97e21ce357485606abcb8e342d9d2ebebece615ae6f88bb17a9d1ed2cdb1a4d7f5ca6b50e2e72fb01210794503e030741b17922b661b51d0f8dc9d084a2a9fa526c614c9705fcd05fc13692a26b3de9e97b63bf56ab4afa2de1afd084110f4782449e1409c7ab3a7863b7ee44e985c0e60f22286f79ac0ed1d85348ad1b0005bd82a04e8ef9eb5"}}]}) syz_usb_connect$uac1(0x5, 0xc1, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x582, 0xb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf, 0x3, 0x1, 0x1, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x3a}, [@feature_unit={0x11, 0x24, 0x6, 0x3, 0x3, 0x5, [0x7, 0x6, 0x8, 0x1, 0x1], 0x1}, @mixer_unit={0xb, 0x24, 0x4, 0x1, 0x8, "2e05cb8e24e3"}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x3, 0xe, "a6"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x101, 0x2, 0xd5, 0x1b5, 0x9, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xa5d2, 0x800, 0x8, "af07"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x200, 0x3, 0x3}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x3, 0x0, 0x6, "f5", 'f'}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xc, 0x6, 0x2, {0x7, 0x25, 0x1, 0x4, 0x1, 0x74f5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x2, 0x7, {0x7, 0x25, 0x1, 0xc, 0x9, 0x9}}}}}}}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000c00)={0xa, 0x6, 0x110, 0xf, 0x2, 0x3, 0x10, 0x6}, 0x31, &(0x7f0000000c40)={0x5, 0xf, 0x31, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x98, 0x6, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "0cb9b121cb8432c5b80a02530c486103"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1f, 0x9, 0x5, 0x1, 0x4}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x300a}}, {0x13, &(0x7f0000000dc0)=@string={0x13, 0x3, "9d06ac73120741151812973b056bc1c837"}}]}) r0 = syz_open_dev$dvb_demux(&(0x7f0000000e80), 0x6, 0x282000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000ec0)={0x3, 0x1, 0x1, 0x10}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000f00)={0x1}, &(0x7f0000000f40)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000f80)={r2, 0x10001}, &(0x7f0000000fc0)=0x8) fcntl$getownex(r1, 0x10, &(0x7f0000001000)={0x0, 0x0}) sched_setscheduler(r3, 0x6, &(0x7f0000001040)=0x1) r4 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000001080)='./dm1\x00', 0x80000, 0x0) ioctl$BLKFRAGET(r4, 0x1265, &(0x7f00000010c0)) r5 = syz_clone(0x18000, &(0x7f0000001100)="4d553198d26f2b71b2fdb8df31b578f736c59125632b724f72bf0eb5a297fd51326a920cef27dd95c8f5031a44519f0dca73053503cd8887c7e1cd54915efe08412f2d01ebbdfecbaf4842c08816d4560a318e1aefe89fa9db8fe736c2e4701e8740fe06cf39b0219d6b1f5ba64a2cc3b394dba1d75ef4adcb886f6234974a2e473f90c8bd4c45fd5fd4624c50c144d8666d8143ee4f163821d8661c5a517852c5b022fbb5ddddc643a2c517f5c8066ba029f71f956db70738a5aa96bdd59fbe0fe7fa5dd0e1a31dd024cc7d158c520214c9dfcd90f4eff2b8e2b751b038190b26cd0e97284cf99726557a64768b49104b6ca0d300e7", 0xf6, &(0x7f0000001200), &(0x7f0000001240), &(0x7f0000001280)="b2f1b02510ab4c5d8ce8d4c7cb6e1152819d367d61a4fa1f6ed7d1fd730b0b33bdb0131aa104a027c3bf14c55fdb7423842aa4766b87430e5331a74516acd511235753056c8dd62db657ce51bb4c80ebd0a79ea6600b5cafab5d853f51c5b82c83f49a45b54a6a649287a25c7c5b2073b4050f4a4c8caf8643369f69c8d872bb92df4a8a35771a59ce13e67fc26292acee754b2978b6d7a9b46564de30bce6bb91e61c63e1df13e0944a30642e4ab8136b87") r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001340), 0x24900, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r0) setsockopt(r1, 0x4, 0x5, &(0x7f0000001380)="4dedad5072cc4430c82497c0e357ca8a399c53fd5c376e8ca77c0659b9a730a2e52fdd59afeaebc7dcf49f6b7121cc156333edaf092651f9f56602dc5998fda6a98a0cd4f08b6d0fbbd16faa787a91bfadf55dd24f4842cb1e15ea4b3a55287eadaf171d8b5669f6c46190ac42736cd9276f22ed601a", 0x76) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000001400)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1b1c, 0x1c04, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb8, 0xa0, 0x0, "", [{{0x9, 0x4, 0x0, 0x86, 0x2, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x92, 0xe8, 0x1, {0x22, 0x59e}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000001780)={0xa, &(0x7f0000001440)={0xa, 0x6, 0x201, 0x1, 0x1, 0x1, 0x8, 0x9}, 0x4c, &(0x7f0000001480)={0x5, 0xf, 0x4c, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0xed, 0x7f, 0x0, 0x8, 0xf}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "8cec98616cc426a1c4871be29f7e41a1"}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x683, 0x0, 0x1, [0xfe40c0, 0xffc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "4872540e961da19f4fdc8359ce4260ef"}]}, 0x6, [{0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x437}}, {0x52, &(0x7f0000001540)=@string={0x52, 0x3, "e107cfffe453e8ebe52bd633a72ced57bac890008ddcf3d45fc8578e3619b1b5f446a5829bdeed70bcd77700b472d966366031e6f4e59a45c74f77e1d6e22fa2012787d3a0fcf29d06d1a17ceb561deb"}}, {0xd6, &(0x7f00000015c0)=@string={0xd6, 0x3, "29c8b347e4c0e3febf99ba61e33e280b5d66514b8c28bd0a32fbcefa27d97ff4e9366d21264a45e5a14c0872e14a36501d0126ca7e3e3bab0f196e31a97f8fe1cf866225bc79090ee8a01d660d49fc58b2c57ea38744293460d9da45b2df916ad18cacb2a282d50c2b0027a9d1a80fa4527b08e2c33a334fde2253c0bedab5bb44e383a6db1e0f0541ab6791458b9bc0f746062415486da973fba209d6ee0ea9572d257d40951c300e8979b7a091a832ccd8d75933fb1b9b6ccb6042fe922568da17497b916e49a081535d79a829aa224d71e88a"}}, {0xe, &(0x7f00000016c0)=@string={0xe, 0x3, "11a30472de03bc08706aea98"}}, {0x6, &(0x7f0000001700)=@string={0x6, 0x3, "a7a3a036"}}, {0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x3409}}]}) r7 = fcntl$dupfd(r6, 0x0, r1) ioctl$HIDIOCSREPORT(r7, 0x400c4808, &(0x7f0000001800)={0x1, 0x200, 0xe87}) mmap$snddsp_control(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x4010, 0xffffffffffffffff, 0x83000000) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001880), r7) sendmsg$DEVLINK_CMD_SB_POOL_SET(r7, &(0x7f0000001b00)={&(0x7f0000001840), 0xc, &(0x7f0000001ac0)={&(0x7f00000018c0)={0x1fc, r8, 0x10, 0x70bd2c, 0x4, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8d6a}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0xfffffff7}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x9}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0x1}, {0x8}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6}, {0x8, 0x13, 0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x80}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffb}, {0x6, 0x11, 0x80fb}, {0x8, 0x13, 0x80}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6}, {0x8, 0x13, 0x9}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x3}, {0x5}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x8004}, 0x20000010) syz_usb_connect(0x5, 0x49f, &(0x7f0000001b40)={{0x12, 0x1, 0x110, 0x72, 0x5, 0x72, 0xff, 0x1199, 0x9011, 0x9f90, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48d, 0x3, 0x1, 0x93, 0x40, 0xff, "", [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x52, 0xb0, 0x29, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x4, 0x4b, 0x2}}], [{{0x9, 0x5, 0x1, 0x0, 0x20, 0x2, 0x9c, 0x1}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x9, 0xdd, 0xd}}, {{0x9, 0x5, 0x1, 0x4, 0x20, 0x55, 0xbd, 0xc}}]}}, {{0x9, 0x4, 0x63, 0x77, 0x8, 0xbc, 0x1, 0x6e, 0x2, [], [{{0x9, 0x5, 0xd, 0x10, 0x40, 0x7, 0x6, 0x1, [@generic={0x60, 0x21, "501dfa04a116d83c1291ff998051c8870a857292e7206988f1b4fa91ca548b222a027f4ea9d32781ad1d25a7b40a36b5b606e765c70b823d5479dff0957cf72b716644463e7ec5e493f1e597c245b9236f934ca3047253af45d7b1ad5dca"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xa, 0x7}]}}, {{0x9, 0x5, 0x6, 0xc, 0x40, 0x7f, 0x37, 0x2f}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0xf8, 0xf2, 0x2, [@generic={0xcf, 0x7, "44a629457551bb83d7a3ea7c63955cf17b8dff7a1f065e7d36426c9ec6d310ff5e7badafe61f96eb713cab6aad8d8a834131f4232aba2a4654203401cdc0f8ca4c7ebed208fb618728b7c38057a4e4322cc4347b0e6eb211b9c03ed62b0a024c6c74ec1ea8677bc875e59df75c9561f14e82c9651766426259b76f033930eced247d1e473823b9c05620b1c9c7f34e28515f93b8dbddf468655834662895afd0169d07ad26b20465b444e187347edd395cf0f7e5da1ecf55c590dc75e5d620ac370fe1062d6d2dcf2291a743f3"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x0, 0x0, 0x7}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x9, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xa7}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0xfc, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x2e}]}}, {{0x9, 0x5, 0x0, 0x3, 0x200, 0x83, 0x7, 0x95, [@generic={0xda, 0x21, "71d8bba464d72230bd6c05218ffb60227d7493a3e46bf4a9a852612d36c5a852af98acc033562e3c4e66fac765fea3e5e1abe06be924e1e7bbdef53480f3d4b8bcfe2cd5223805d848ad2b59400bc80a3c28a4e4e7ab146d301bbf46af5d00561f40594c1f2924124c138d8ec1b28f80a669910bc9c5b110372436a12173fbc903aaee50a4425ea5c4d3971a84d68a4414794f98957100a947b8cd3cff919698ca7454837e64eca2ba2be685471232aca07acf8de798ce865a8b38882da7763e728f95e02f624efcbdfc107e9a064b8b81b6d93a1a69a166"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x2, 0xe4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x4}]}}]}}, {{0x9, 0x4, 0x2b, 0x9, 0xb, 0xff, 0xff, 0xff, 0xc, [@generic={0x22, 0x6, "10ea53bcc0959e8be345b49e2c3380d35c6479a23a947158002789a83bcb33aa"}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "80"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x93, 0x4, 0x8}, {0x6, 0x24, 0x1a, 0x7, 0x1}}], [{{0x9, 0x5, 0x8b, 0x10, 0x400, 0x3b, 0xe, 0xb}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x4, 0x5, 0x3}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0x1, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x2}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x3f, 0x5, 0x8}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x4, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x6}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x7, 0x10, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xe, 0x101}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x6}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x4, 0x80, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x46, 0x9}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x6, 0x2c, 0x3, [@generic={0x3f, 0x23, "8ed70977c73c2566ccf06213808e7f7133aad85198192d1d0ab090b84de0154f9c5915788641bec122abeecd934f7427007f47d747c0b8defaf6470456"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x8, 0x1}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0xb8, 0x6, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x9}, @generic={0xa9, 0x21, "d5b179d6e60515e45ba0d8c6144c9e582a339185ec36785374b39c6f893074777ff89a008a6f548903a0d78fcdefac436768f002abe9d84e7d4467bcb35f9362077d5b711fba161234fee29cb2addc3f2c548f92200d851f13684638ff2d141abc8352a59d047fcb8217c37ec4d0191b0f10dcfbc97cd8fd9bb67d6b3fe747d2fd10a5eab298555672d6dd4172c3d37d07c1bf60d0061150c8845cb0ce79ba7b99f025e1517a0c"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x1, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x2}]}}]}}]}}]}}, &(0x7f0000002400)={0xa, &(0x7f0000002000)={0xa, 0x6, 0x188, 0x8, 0x80, 0xbb, 0x20, 0x1}, 0x5, &(0x7f0000002040)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f0000002080)=@lang_id={0x4, 0x3, 0x420}}, {0x53, &(0x7f00000020c0)=@string={0x53, 0x3, "06f36f87a992ad786966138032d19053e842432cf53700577f940e2e9b29c167263cd1b4b43180192748bb3ca2895d20cd30ca93d0b39908d28f2d7b9ce2cdcd85a0545bc3ffe65d850474d5f65575cf53"}}, {0x4, &(0x7f0000002140)=@lang_id={0x4, 0x3, 0x3c6c}}, {0xae, &(0x7f0000002180)=@string={0xae, 0x3, "cc010a43882702aeb6f9b54d4e8cef0dc4d731537910326610df8792184f628a2c0274feb437867c13db8c5f28c82e5918b73167043f557ebb3ac2d3072662636ce3b0509456562e5327af94a159f8c08b839289af5bd53470fbd8a9c7e6c9d5b9c62b30ab1fd8492e2b93356b4ec10cca7dd4e5597394fd0860433f6053c0eb7b881176a3add6192d38e4f09d5e2cd6e9c6468da0c98e357a586a9362195c95d302dfb02f96d6b07f5b3629"}}, {0x4a, &(0x7f0000002240)=@string={0x4a, 0x3, "678af6ca01a58aa174185ea3338f9f5f839f5f56c1a41b7743afff4f57ecce69cebd385cb422bf4b13a66412deb8944360f883a6949aecf2b4ee3377e3723aec286a09113edd7cee"}}, {0x7d, &(0x7f00000022c0)=@string={0x7d, 0x3, "f4f6ba3fb2c052180b670b18f5eda059b22f401b7e4faa44da6142190132a9c0acaa23d60b2f3615c3e043500cdb21aa70700f4c15dd44ed37b3912e970fb1ce6533d8e43a492b83042697d64ad3af03f0de3c6a7e66ce00963d752525c03a8b0b9015e2f66966f0cd9808ee039a6928b7d0e6098fb08d5ced5103"}}, {0x4, &(0x7f0000002340)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000002380)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f00000023c0)=@lang_id={0x4, 0x3, 0x280a}}]}) syz_usb_connect$uac1(0x4, 0xd3, &(0x7f00000024c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc1, 0x3, 0x1, 0x1, 0x40, 0x18, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x3d}, [@processing_unit={0xa, 0x24, 0x7, 0x2, 0x2, 0xfa, "d1088b"}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x1, 0x4, [0x8, 0x7, 0x1, 0x1], 0x40}, @extension_unit={0xd, 0x24, 0x8, 0x2, 0x3, 0x35, "2291e30019e7"}, @extension_unit={0xd, 0x24, 0x8, 0x4, 0x1, 0x9, "090438ed2747"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x7, 0xff, 0x74}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0x8, 0x0, 'ss', "cf"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xf, 0x5, 0x3, {0x7, 0x25, 0x1, 0xc, 0x7, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x10, 0x9b, 0x15, 0x7}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x1c, 0x1, 0x5, 0x1, "81ddea9ea5b5ed95"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xca, 0x81, 0x4, {0x7, 0x25, 0x1, 0x8, 0x3, 0x7}}}}}}}}]}}, &(0x7f0000002700)={0xa, &(0x7f00000025c0)={0xa, 0x6, 0x310, 0x0, 0x6, 0x2, 0x40, 0x9}, 0xf9, &(0x7f0000002600)={0x5, 0xf, 0xf9, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3a, "02cb3ce76601b77ebe8f03d4533f9a5a"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x84, 0x6, 0x80, 0xcd, 0xe3}, @generic={0xd2, 0x10, 0xb, "0aedf0a90927fb8c25aad85e96584c6832f166395c1c33f9d5bca572766c843e799b2f836ba2c65a3bc230e8374c321fc7692fc59fbabbb2bd7f9d2d935f3e6653d941c6d6ed3fd60912feeb83cfa8a4d0bc2c6b23426a4a5bbad1e7a5a0f21fe044053a0c0e0f6daf1b4eb8e4e4ba156bc2459f94cb15938b0e5e3700c26254f62dff6b3d86572a13293326ba8d75e58d92634701e99788c2e7e512a8bd1f06709db313f87788f62712e621942bf0680fc7bdd9703c4d21e099d69e2ad4734b6e19a1033a4ee2ec440f8c5eb5db1c"}]}}) bind$inet(r1, &(0x7f0000002740)={0x2, 0x4e20, @remote}, 0x10) sendfile(r1, r6, &(0x7f0000002780)=0x5, 0x0) ioctl$UBLK_U_CMD_ADD_DEV(r6, 0xc0207504, &(0x7f0000002800)={0xffffffff, 0xffff, 0x40, &(0x7f00000027c0)=@new_dev={0x4, 0xb9b, 0x0, 0x0, 0x1000, 0xffffffff, r5, 0x0, 0x20}}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000002880)=0xa) ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f00000028c0)={0x1, 0xfff}) 30.981458663s ago: executing program 7 (id=2314): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000001c0)={@remote, r2}, 0x14) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@hoplimit={{0x14, 0x29, 0x34, 0x1}}], 0x18}}], 0x1, 0x0) 30.751680249s ago: executing program 7 (id=2316): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000010f3044d0700000000000109022400010000500009040005030300000009210000090122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), 0x4) r2 = syz_open_dev$hiddev(&(0x7f0000000180), 0xa, 0x62080) ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, &(0x7f00000001c0)={0x12, 0x100, 0x1db, 0x3, 0x21}) io_setup(0x6, &(0x7f0000000080)=0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000280)={0x0, 0x5d61, 0x0, 0x2, 0x398}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f00000004c0)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6ffffe, 0x8, 0x1, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f21, 0x4000, 0x3, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x231, 0x0, r10}}], 0x1, &(0x7f00000007c0)={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r12 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000b40), 0x10b481, 0x0) r13 = syz_usbip_server_init(0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001d40)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r15 = eventfd(0x9) r16 = eventfd(0x2) r17 = socket$unix(0x1, 0x1, 0x0) io_submit(r3, 0x9, &(0x7f00000020c0)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x4, r1, &(0x7f0000000200)="f65652daf286333997015aaed7a1e8b1f951387596fdad9b571d6de176b7df265e6b8022ae867dbd68413add17c9430ce412c9ebe74112c5b87ce93959da9c0f565b513e612644f52ea8b480075b770b5b11221e4df6366ea323353ae9d7", 0x5e, 0xfffffffffffffff7, 0x0, 0x3, r10}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0x1ff, r2, &(0x7f0000000880)="b8a4a8126fdb8cdfa0b3c1b1e6c82636545e7623d68aebfa59af9263fb243d8e0665e84bf24da4e52a079b88594072c9de7923c341d94b59ff07da35ef3ca6cc300c0f869505d5265bfb3f6260c3c219a3b1ee12c4cef89cb66822ed9ad2d5c9d74b5fd56f69ac6e49041d3070e8c0a1792217a131d483e022e0b0a956a0a7d9daf05b0288b30e65fd22247d2e8fe2a796f333cfa7f565e1c61038d901ef9a965d14753d831387731df77be1715821919d637cbdfe2b400a3e8123e1327b0d6dc20aa15293e4968d427a02d9b94fa2995638c6", 0xd3, 0x1, 0x0, 0x2}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x6, 0x1, r2, &(0x7f00000009c0)="8c1b5df07a67f1a83ff836de6d90fff43918c903e8053a928c09667fd3db79547d83e47e3291baef82fb844603ae3e80bc1dc3c871a9523a7fb1fe65f95cf39efb89a852814cec2a3c34b311f9960ded20f2a75944a7456fcd3ee7dc25e85f6f3b31634c070fdd9ae89a597987db4bcfc306db82d6ed10da698963e16e7702ce904a6cf52c93fc64516097ff7e6ebe6f21e0dd99e747dca7fe7b59d3d0335ad0fc0eb2403eb104161db59a97cd6f9f13997085635801b518a807a5ad8ba80aa58b862dd072423a9930af52db29e91426e6ccbaf9f4ebf4d8242126e78277cfb3aee5298e961215e76a33733ce9af8979de5270ca82142b3468", 0xf9, 0x800, 0x0, 0x0, r11}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0xf, r12, &(0x7f0000000b80)="bcbb432984a73c01cd9f6ce887fbb258f50df363081dbe1d6b5bfddf8b285974dc7bd7470a309b", 0x27, 0x1}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x6, r13, &(0x7f0000000c00)="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", 0xff, 0x8}, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x5, 0xb, r1, &(0x7f0000000d40)="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", 0x1000, 0x200, 0x0, 0x2, r14}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x7, 0x81, r2, &(0x7f0000001dc0)="873474078b37394ee588e55043f43d9b487d8cdf5e8247413a8517f6b61675e40102b4b064224db32d3da8b8f4de90ee4e55da248855fb5597120d53158249cef00c2fd61ced687672dc355d387e35f569f331da2746f7f88d5b4d2e672c391aeb88f40da155b2a2506de4aeadb3b89dc39e5ae1c08fc1b42bdd6439e48249b7350806c9a6293262959f9e3d8b6eb721e832e7d60e008306d09b", 0x9a, 0x6, 0x0, 0x3, r15}, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x8, 0x6, r2, &(0x7f0000001ec0)="7d544ca4ff02a4f774e5d3a69926cb6861cb09e09306c50cd3f26412cbc89eaf351cb014c9f26ea4c86823c32bdc72da0ce192c77423b4ea9e64fd10cb970bf069", 0x41, 0x0, 0x0, 0x2, r16}, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x7, 0x1, r17, &(0x7f0000001f80)="09b3387ecbc7979adac64f2ef93ca98fca739b90de96a8a6d2a575d23a43c1c22d2cad7d32d452e3d2a8939b297fcaa2911fc01959227cf521db7bccf1fab72dbb9e4eeba6b3d23713c9f93213db29f449bd0ac8c52ac5f9c4a3a33ddab0a42ce55749035229c7a30ed9f7d57876118450d0182bb172a7274880419e09beae53c6630552698b8046c25f4b7ba5cb7cdc6952d81cd380786712bbb8ef5f7da953a5456f6420674eaa65267a5cb9219f5c1ddb65e4fa0cdcd761d8ca27609f2c0450632f6ebc2e7e76f2725b194cae3086af62e492d070a0ac0e63e81b3f814721546876813da96335339829848a21dc254d", 0xf1, 0x77, 0x0, 0x1}]) syz_usb_control_io$hid(r0, 0x0, 0x0) 27.525254057s ago: executing program 7 (id=2324): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x40, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x12, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb0800"}, @nested={0x4, 0x8002}, @nested={0x10, 0x8003, 0x0, 0x1, [@nested={0xc, 0x8002, 0x0, 0x1, [@typed={0x8, 0x1}]}]}]}, 0x40}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='3', 0x4e) r2 = openat$comedi(0xffffff9c, &(0x7f0000000540)='/dev/comedi1\x00', 0x630800, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f00000005c0)) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000640)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000680)=0x1, 0x4) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000700)='g', 0x1, 0x8812, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/131, 0x83}], 0x1}, 0x2}], 0x1, 0x10122, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_CHANINFO(r2, 0x80306403, 0x0) syz_open_dev$sndmidi(&(0x7f0000000580), 0x2, 0x143102) mount(0x0, &(0x7f0000000340)='./proc_mnt\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc_mnt/kcore\x00', 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000)="20a54d7a9de80883504860c58ccdaf4c5583abc9021e417e589efc8975ef01ae5f87a0b6095f08e8134a5568c6c8b67fbb43e4b7c999903f834b10ad0222d7b5937460996d39757b613fb6a589c8a62b0214eed91dabd3f56468bd21c031a238737b196823af7f9688a8a260e30e9d496a464b184751405541d19b2a4cb30e7d121cbcb611d9ee0a977b680a159d1855b89e8acbf89334f7c1ee26ea13df87a261e1f32d500568a40f6dc6c3bd3733b657703c3d5a25e7953009fa14a61f1e118a92d0d1382c5442809b6ccf0c4b6127e3237b1ae3875c815aa352bc5f413a3ecff65320456b27dfc7", 0xe9, 0x8040, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$NILFS_IOCTL_GET_SUSTAT(r5, 0x80306e85, &(0x7f0000000140)) read$FUSE(r5, 0x0, 0x0) 21.530034909s ago: executing program 2 (id=2341): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7f, 0x2000004, 0x10, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000340)={0x100000, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f00000007c0)={0x0, 0x4, 0x10000, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x0, r3}) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000880)={0x1, 0x4, 0x0, 0x1000, &(0x7f0000100000/0x1000)=nil, 0x1000, r3}) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000240)={0x34, &(0x7f0000000280)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000500)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000540)={0x84, &(0x7f0000000600)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000780)={0x34, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000b00)={0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="400dc6000000c604a0030d7d7e194e5a2bb3569e341ce1bd9f698c5d1d94ef8789e7297445dcb4453e3492820a1313d06be110e0d818801aa832269307f67df503ea4fc6bd70f7535232eeded34b66257304d0f7ede3ddd686bf7d286e7f6e76455ebc9ec5e96abae7457c1c4809843681b9050d82c522976febfe15f0aefc8dc447b159060066a7ac0c7e150ee0960a9047f2fecb4fb9384add92ad5d055d7b88da64cfde5751e8f09d38e28bf8d865809b300e891f5c2bc055abd206e81b59e3b801456a8ecfe919601eda"], &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}, &(0x7f0000000a80), &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x3, 0x1, {0x22, 0xe46}}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000b40)={0x20, 0x9, 0x5b, "523cafbc025a642eb1b58f0e89c93b590d7e9145954b93044e148a2996f068bfecb5355ff0c96f58f23ca7cf55943919d3c2a30eca5fffe5974ff55b2d9ab3d5b3a1e32b984d2d1eb3e7bd8c4c4d567e4d6aa9e4aa48967e20ba35"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000d80)={0x20, 0x1, 0x100, "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"}, &(0x7f0000000d00)={0x20, 0x3, 0x1, 0x1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f00000002c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) (async) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000100)={0x80000001}, 0x4) (async) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 17.099936303s ago: executing program 2 (id=2349): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1) socket$packet(0x11, 0x3, 0x300) (async) socket$netlink(0x10, 0x3, 0x4) (async) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1) (async) 16.868189147s ago: executing program 2 (id=2351): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000600), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000640)={0x18, &(0x7f0000000680)=[{0x11, '\x00', @data=0xb, 0x9}]}) read$FUSE(r1, &(0x7f0000001080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003180)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x10001, 0x80002, 0x5, {0xfffffffffffffffe, 0x40000000, 0x10000, 0x2, 0x0, 0xfffffffffffffffd, 0x10000, 0x4, 0x0, 0x6000, 0xd, r3, r4, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000700)={0x28, 0x2, 0x0, {0x4, 0x2, 0x2}}, 0x28) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003300)={0x90, 0xb, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffff8, 0x0, 0x100004, {0x0, 0x0, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0x4, 0x6000, 0x1101, r3, r4, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = syz_ublk_setup_io_uring(0x3b29, &(0x7f00000001c0)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0xc644}, 0x1}) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000380)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, 0x0) sendmmsg(r5, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20008000) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)="7832950000000000", 0x8}, 0x1, 0x0, 0x0, 0x4040854}, 0x24046006) splice(r10, &(0x7f00000004c0)=0x401, r11, &(0x7f00000005c0)=0x4, 0x2e43, 0x1) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000300, r3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x3f00, 0x40, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xffffffffffffff87, 0x0, 0x0, 0x1, 0x2f, 0x0, @empty, @empty}}}}) 16.648444123s ago: executing program 2 (id=2353): r0 = openat$md(0xffffffffffffff9c, &(0x7f00000007c0)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r0, 0x40480923, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2e9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000880)={0x6, {0x1, 0x0}, 0x0, 0x202}) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000940)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000980)=0x7c, 0x4) (async) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f00000008c0)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r0, 0x400c0930, &(0x7f0000000900)) (async) r2 = syz_open_dev$amidi(&(0x7f0000000ac0), 0x3, 0x2000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000080)={0x0, 0x101, 0x7, 0x1, 0x6}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x19f) (async) mount(0x0, &(0x7f0000001700)='./sys\x00', &(0x7f0000001800)='sysfs\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b00)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @remote}}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff14) fstat(r3, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000780)={0x0, r4, r5}, 0xc) (async, rerun: 32) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) (rerun: 32) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x78, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x3}}) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000280)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) r10 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./gadget\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f00000003c0)='./gadget\x00', &(0x7f0000000400)='gadgetfs\x00', 0x0, 0x0) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./gadget/dummy_udc\x00', 0x802, 0x0) getsockopt$inet_buf(r10, 0x0, 0x27, &(0x7f00000004c0)=""/140, &(0x7f0000000580)=0x8c) (async) write(r11, &(0x7f0000000480)="000000001bed00002a75d6d38e9cb3583c321201a24dd52b110251a3a00700e7", 0x20) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000a00)='.\x00', &(0x7f0000000a40)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) (async, rerun: 64) mount$bind(0x0, &(0x7f0000000a80)='./file0\x00', 0x0, 0x100000, 0x0) 14.696575506s ago: executing program 9 (id=2360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a08010000000000000000050000000900010073797a30000000000900030073797a300000000048000000060a010400000000000000000500000008000b4000000000200004801c0001800b00010074756e6e656c00000c00028008000140000000000900010073797a3000000000140000001100000000000000000000000000000a84487246d4f737afd5c8878e10038ce39908e98ee7841246"], 0xbc}}, 0x0) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201d4169448f0ea002cbdcd4f7d2917ca44100100000040ac054502400001020001090224000101012009090400040103010204092103009801221e0f0905810320000770e5b40700"], 0x0) 13.23639276s ago: executing program 2 (id=2362): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100023e05b510ac052623cca9b24dd640029457010203010902120001f902e003090437020003c2025d"], 0x0) socket(0x23, 0x80000, 0x4) 12.286160221s ago: executing program 38 (id=2324): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x40, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x12, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb0800"}, @nested={0x4, 0x8002}, @nested={0x10, 0x8003, 0x0, 0x1, [@nested={0xc, 0x8002, 0x0, 0x1, [@typed={0x8, 0x1}]}]}]}, 0x40}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='3', 0x4e) r2 = openat$comedi(0xffffff9c, &(0x7f0000000540)='/dev/comedi1\x00', 0x630800, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f00000005c0)) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000640)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000680)=0x1, 0x4) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000700)='g', 0x1, 0x8812, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/131, 0x83}], 0x1}, 0x2}], 0x1, 0x10122, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_CHANINFO(r2, 0x80306403, 0x0) syz_open_dev$sndmidi(&(0x7f0000000580), 0x2, 0x143102) mount(0x0, &(0x7f0000000340)='./proc_mnt\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc_mnt/kcore\x00', 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000)="20a54d7a9de80883504860c58ccdaf4c5583abc9021e417e589efc8975ef01ae5f87a0b6095f08e8134a5568c6c8b67fbb43e4b7c999903f834b10ad0222d7b5937460996d39757b613fb6a589c8a62b0214eed91dabd3f56468bd21c031a238737b196823af7f9688a8a260e30e9d496a464b184751405541d19b2a4cb30e7d121cbcb611d9ee0a977b680a159d1855b89e8acbf89334f7c1ee26ea13df87a261e1f32d500568a40f6dc6c3bd3733b657703c3d5a25e7953009fa14a61f1e118a92d0d1382c5442809b6ccf0c4b6127e3237b1ae3875c815aa352bc5f413a3ecff65320456b27dfc7", 0xe9, 0x8040, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$NILFS_IOCTL_GET_SUSTAT(r5, 0x80306e85, &(0x7f0000000140)) read$FUSE(r5, 0x0, 0x0) 11.634606209s ago: executing program 2 (id=2367): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x18, &(0x7f0000000380)=[{&(0x7f00000003c0)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000200)="ed2e8b672e890f030329d095abaa960000b890a4f084ef66bafc0c6d8f29126966ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x75}], 0x1, 0x52, &(0x7f0000000280)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85220000c}], 0x1) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000100)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r5 = syz_open_dev$vim2m(&(0x7f0000000300), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000180)=@userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0x8, 0x9, 0x4a, 0x3, 0x8, "a246c7e3"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x40}) 10.337112827s ago: executing program 39 (id=2367): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x18, &(0x7f0000000380)=[{&(0x7f00000003c0)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000200)="ed2e8b672e890f030329d095abaa960000b890a4f084ef66bafc0c6d8f29126966ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x75}], 0x1, 0x52, &(0x7f0000000280)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85220000c}], 0x1) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000100)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r5 = syz_open_dev$vim2m(&(0x7f0000000300), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000180)=@userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0x8, 0x9, 0x4a, 0x3, 0x8, "a246c7e3"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x40}) 10.309932823s ago: executing program 9 (id=2369): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000180029ec8c0a21a115968108a0272a494bbf224e18c99c4c9edeb6a29fa956d39e04fbcc1ac2b314b9f6db189e55846ea6b35380f9aa7cd6f5ece425390465a669d902f24fb91e8928cd457b0a8b7e06d704e00d98301a746ae4499d4bcdfd7bb0b6037810649b4a1b5f0b306b65b235962da5"], 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) dup(r0) (async) r2 = dup(r0) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000053c0)={0x0, 0x0, &(0x7f0000005400)={0x0}}, 0x807) 9.907617821s ago: executing program 9 (id=2371): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000300)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000340)={'pcm3724\x00', [0x2f00, 0x5, 0xd0da, 0x0, 0x5, 0xfffffffe, 0x20000004, 0x3, 0xffe, 0x7fffffff, 0x8, 0x0, 0x10000004, 0x8, 0x10003, 0x2, 0x3, 0x7ff, 0x830, 0x0, 0xc, 0x9, 0x800, 0x101, 0x2, 0x7ffe, 0x4300000, 0x3, 0x4, 0x5, 0x70f]}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) memfd_create(&(0x7f0000000100)='/dev/sda1\x00', 0x3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x400) uname(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BLKFLSBUF(r3, 0x1261, 0x0) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000180)=0x3) lseek(r0, 0xffffffffffff0000, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000047ff4f40d3131132677a010203010902120001760fbb0f09040001"], 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x3ff, 0x404000) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0xc}}, './file0\x00'}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000440)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000480)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x1}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000500), 0xa0201, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000540)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000580)={0x28, 0x2, r10, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8}) ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f00000005c0)={0x28, 0x2, r8, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000600)}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000640)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f00000006c0)={0x28, 0x0, r8, r11, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000680)}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000200)={0x8, 0xff, 0x2, {0x1, @pix={0x4, 0x3, 0x50323234, 0xa, 0xc6, 0x200, 0x5, 0x949, 0x1, 0x8, 0x2, 0x3}}, 0x8}) 6.56726268s ago: executing program 9 (id=2373): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000340)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private2}, 0x1c) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60040000", @ANYRES16=r2, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="08000c006400000008000d0002000000080026006c09000028000e0080000000ffffffffffff020000000000020000000001000000000000000064003104000004043381", @ANYBLOB="0400010004000100040001000400010004000100040001000400010004"], 0x460}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 6.221960061s ago: executing program 8 (id=2374): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000005c0)="2e00000029008188040f46ecdb4cb9cca7480ef400000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000280)={0x0, 0xfffffffc, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000003c0)=@IORING_OP_READ_FIXED={0x4, 0x16, 0x2004, @fd_index=0x1, 0x6000000, 0x0, 0x0, 0x1, 0x1, {0x0, 0x0, 0x3f, '\x00', 0x0, 0x1}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000940)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000009c0)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000a00)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000a80)='27', 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000b00), r0) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="00082ac77000fddbdf250100000014000100ff0100000000000000000000000000010c00040092c700000100000014000100fe8000000000000000000000000000bb0500050002000000c9ff1f7f1091d8d7dfb844e9580f5b80969356ec659d2fb4324703f50eae6cba5edac82d2b3b996a01213e06474b90423a040000002611bd6b0d073505f09fe7dd8577759179fefa6729e79d00"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x4000014) syz_ublk_add_dev(0xffffffffffffffff, r3, 0x0, 0x0, &(0x7f0000000040)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000100)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = inotify_init1(0x80000) inotify_add_watch(r8, &(0x7f0000000b40)='.\x00', 0x400) r9 = dup(r8) read$FUSE(r9, 0x0, 0x4f) syz_ublk_setup_queues(0xffffffffffffffff, r7, &(0x7f0000000140)={0x0, 0xb1e1, 0x80, 0x1, 0x342, 0x0, r2}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x6, 0x91, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x0, 0x1bd, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b4, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x541b, 0x80, 0x3, 0x8, 0x0, r9}}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x4) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r10, &(0x7f0000000580)='6', 0x1) syz_ublk_setup_io_uring(0x20, &(0x7f0000000200)={0x0, 0x0, 0x80, 0x2, 0x301}, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) 5.412069879s ago: executing program 9 (id=2375): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x60042, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) setsockopt$inet_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000040)="4673752fe85910848c357be16e28358248000000000043a7804a580f668e248c425a1e79a9f9c26a1c13c2bea54199df7f9c59526bccd1bbe6", 0xfffffffffffffd1f) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000280)=0xffff) sendmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="4df5626cc97105fee4d9dc19ba136909988aae9646886329b8ac6a834f67d8b0a1298f0f4cb5565132a00fb3ad2b9f0dd8fd8e883c14c3e58530ee3a63ba831a09c165e598a2b51aee313f6b9915cfb775a8c8b94f9117d26f8cbdf35e9ad1676ad4abd90a3620deb1285fb1839da9d277c003274d5d8f9bf95e45b40a2f73e8006a3f443c1fad8c89de2e93f64cc3ce81cdf439785572aeaa5777168832846600e8de050dab8e12f854bd3e2f7804dc8962d933d59c2295894d12fccb71ec5dcaf15cecbad895b7f71d1321f6fa1c21330a065770c56fc542863078ec0db174a0da989ff9e3129665f09766bc0981ca747b8483869f41be641c30b303d5b6780f159656a3f2d2d24181b95bcc4bd7969dc99e1e7635712a308927be81642929597d94faf14de68d19cf866b72a9ffa3ed4708dadfa36c3d4f6d3fe0c27c7ad4a9b0a15cd939996df1995851967ce63cd39b27769abea2fee3ef2c5c4297d19f40c7ef233626f99c32bd232b74111fbb17ec7c5baa329f55b32edc64320ef4090b5a6d33696856d0cad5d825450866e1a6e1eadd33136ab92ec5334c034f99a7514e45a3fb6d6db6fce9b76afd647fbb315a3c07004be815958515f5e1a05ad141e40aacf84d9acd486def652732aa0cdcb576e09dbcdbdf8e2c51733d2a7c3895868f540ba993971407e1ddf1042afe7cb9d9f995541cbb69ca18ed9a7d2d48dbbc7220d2caf81ec9c5", 0x20a}], 0x1}, 0x40) writev(r1, &(0x7f0000000580)=[{&(0x7f00000005c0)="ec", 0xfdef}], 0x1) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000008c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000900)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000940)={0x1d, r4, 0x0, {0x0, 0x0, 0x2}}, 0x18) writev(r3, &(0x7f0000000980)=[{&(0x7f00000009c0)="3874517c2edc06dec0", 0x9}], 0x1) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000a00)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000a40)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000a80)={0x1d, r6, 0x0, {0x2, 0xf0, 0x2}}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)="3ea6e841ecf26082d3", 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x48838) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = dup(r7) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x807) syz_usb_connect(0x5, 0x27, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) 5.004344166s ago: executing program 8 (id=2376): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8010, 0xffffffffffffffff, 0x28f41000) read(r0, &(0x7f00000005c0)=""/145, 0x91) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf254400000008000300", @ANYRES32=r4, @ANYBLOB="0a001800030303030303000008000d00ff070000835d9b6e9cc641e21494eaecb3e937f7fe5604934c177d58bce4bc48416500c104ee2089cc13fce1cee544e22066b6dc2ffaa91c7c2ebbf96e5dabde8fcf7ba503c14507c9725587f501e3e8a35bc01aa7eed55a4688b1fdf30037954f7f5fcaee6d9fb41017749d6cb45ba8770cb9f6db663987eb71da487ead6c47efb7977e455f48b3c14d64b957332661717a16371eb91d63d25ab017b4f7a347a3c2da03ecb13b896ea42a02b1b9cc9ae2"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r5, 0x0) syz_io_uring_setup(0x2f90, &(0x7f00000006c0)={0x0, 0xc474, 0x3850, 0x2, 0x200004}, &(0x7f0000000740), &(0x7f0000000780), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3.83355351s ago: executing program 8 (id=2377): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz1\x00', {0x7, 0x3ff, 0x80, 0x7}, 0x25, [0x4, 0x7, 0x6, 0xa, 0x7, 0x5, 0xffffffff, 0x0, 0xe00, 0x6, 0xe6df, 0xf, 0x1, 0x8, 0xc, 0x9, 0x26e3f1eb, 0x8, 0x1, 0x8, 0x8, 0x100, 0x8, 0x1, 0x5, 0x2, 0x800, 0x6e, 0x7, 0xe, 0xaf, 0x2, 0xa52, 0x6, 0x4, 0xffffffff, 0x7, 0x1, 0x80, 0xffff, 0x1ff, 0x9, 0x2, 0x7, 0x4, 0xffff, 0x7f, 0xffffffff, 0x2, 0x22f, 0x49, 0x5, 0x3, 0x0, 0x8000, 0x10001, 0x2, 0x19, 0x1ff, 0x4a3d, 0x27, 0xfffffffa, 0x3, 0x6], [0x1, 0x3ff, 0xfc0, 0x4, 0x1000, 0x9, 0xff, 0x7, 0x0, 0xe, 0x80000001, 0xfff, 0x6, 0x2, 0x7, 0x5, 0x6, 0x6, 0x4, 0x7, 0x69c, 0xea36, 0xff, 0x9, 0x101, 0xb, 0x2, 0x18, 0x5, 0x5, 0xfffffffe, 0x6, 0x31441bb6, 0x34c140e4, 0x9, 0xde, 0xfffffffa, 0xa, 0x6, 0x1, 0x7, 0x2, 0x8, 0x8, 0x6, 0x8000, 0x5, 0x28e887bc, 0x2, 0x8, 0x2, 0x9, 0x7, 0x5, 0x4, 0x3, 0x5, 0x9, 0x7ffffffb, 0x6, 0x4, 0x3, 0x7fffffff, 0x8001], [0xff, 0x5, 0x2, 0x1, 0x0, 0x1, 0x9598, 0x40000, 0x5, 0x98a, 0x9, 0x3, 0xa, 0x3, 0x5, 0x4, 0x7, 0x8000, 0x7, 0x9, 0x8, 0x7fffffff, 0x7, 0x8, 0x7, 0x3, 0xfffffff9, 0x6, 0x1, 0x6, 0x1, 0x202, 0x6, 0x0, 0x4, 0x3, 0x9, 0x81, 0x9, 0x8, 0x52e, 0x7, 0xa0b6, 0x6, 0x10, 0x4, 0x9, 0x7, 0xfffffff3, 0x0, 0x9, 0xff, 0x1, 0x1, 0x5, 0x1, 0x6, 0xd, 0xd87, 0x3, 0x3111, 0x4, 0xfffffffd, 0xeb], [0x9, 0x249, 0x6, 0x6, 0xfff, 0x5, 0xfffff001, 0x5, 0xfffffff9, 0x2f4d, 0x80000001, 0x0, 0x40, 0x10000, 0x419a, 0x4, 0x4, 0xc, 0x4, 0x7a00ccf7, 0xfff, 0x7fffffff, 0xa7fd, 0x7fffffff, 0x40, 0xff, 0xdff5, 0x613, 0x1, 0x277, 0x29, 0xc6, 0x7, 0x81, 0x1, 0x7, 0x1, 0x8, 0x0, 0x48c2, 0x3, 0xb, 0x50a, 0x10001, 0x8, 0xd11e, 0x401, 0x37c7, 0x7, 0x5, 0x400009, 0x8, 0xe816, 0x6, 0x4, 0x3, 0x4, 0x4, 0x7, 0x1ff, 0x4, 0x401, 0x662b, 0xa]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = userfaultfd(0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x80, &(0x7f0000000440)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f0000000940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002980)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000002a00)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000004a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004ac0)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004b00)="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", 0x2000, &(0x7f0000006b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006bc0)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x10002, 0x8, {0x6, 0x9, 0x3, 0x80000000000000ff, 0x3, 0x0, 0x7fffffff, 0x58, 0x3, 0x6000, 0x9, r4, r5, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf6, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02\xbc\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}]}, 0x0, 0x0, 0x0}) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000300)=@md={'/dev/md', @num=0x0}, r4, &(0x7f0000006cc0)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x88}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r6 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000180)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x22}) ioctl$UI_DEV_CREATE(r0, 0x5501) 2.722464363s ago: executing program 8 (id=2378): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug\x00', 0x14e) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='schedstat\x00') pread64(r0, &(0x7f0000000580)=""/75, 0x4b, 0x1000) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/lru_gen\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)="2b2031203020354bf39422bf", 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') writev(r3, &(0x7f0000000040)=[{&(0x7f0000000080)="cd46e651c3", 0x5}, {0x0, 0x18}], 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$vim2m(&(0x7f00000004c0), 0xa, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000600)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r5, 0x40000) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000240)={0x4, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x6, 0x4, 0x80}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000340)={r6, 0x3}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000400)={r6}, &(0x7f0000000440)=0x8) setns(r3, 0x20000) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000fedbdf251000000005000f008000000008000100", @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 2.325793411s ago: executing program 8 (id=2379): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000580)={0x200001fe0000, 0x3}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000a40)={{r2, &(0x7f0000000680)='\x00', 0x0, &(0x7f00000006c0)={@align=0x5, {0x2, 0x7, 0x7, 0x2}}, 0x40, &(0x7f0000000700)={@_ha_fsid}, &(0x7f0000000740)=0x4}, 0x3, &(0x7f00000009c0)=[{0x2, 0x0, &(0x7f0000000780)='%,\x00', &(0x7f00000007c0)="d6893f7805dd862459bb23039530993c2bc3e0af214765e301cb2d187e75e96041a6eb4ae33423d0ff5f792e83a533a302c6b6976a1232b2f9abcca7f001ad2095136c0b5d63101470cad638f1c31619c38d72c04c43dd9539024e90a5c925f71838cdd7d21e8244b431ccf4b4a8d48d5e977e6610fbcabb50ede6a368010f500cf47f49661090f24c67d4df07b319bb44fcea46110d06e1b3f55697339009ca4463470728f33923cdcb418ac4dfa0a3957587a3ba9d37e7dd515d776fdbe69e0ff0c104a454df0081ca86bb131460c1faf44c2c8e760c4440", 0xd9, 0x2}, {0x2, 0x9, &(0x7f00000008c0)='#.:+--(\\-*\x19\x00', &(0x7f0000000900)="d0a9b03cee5c9322", 0x8, 0x10}, {0x2, 0x2bcd, &(0x7f0000000940)='\x00', &(0x7f0000000980)="4473d7e7c8b68705eb490d60e5bd9f974ffae54d4e424c031233d39457cb8c7e", 0x20, 0x1a}]}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f00000005c0)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r3}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) userfaultfd(0x80800) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000ac0), 0x6, 0x10000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000c00)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000c40)="1100000010000300"/22, 0x16) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000000b00)={0x0, 0x6, 0x800000, 0x3, 0x0, 0x0, 0x8, 0xec9}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY(r4, 0xc008644c, &(0x7f0000000b40)={r6}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000100)=0x0) syz_ublk_setup_io_uring(0x467d, &(0x7f0000000140)={0x0, 0x10ff, 0x20000, 0x0, 0x118}, 0x0, &(0x7f00000001c0), &(0x7f0000000200)) r8 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r8, r7, &(0x7f0000000240)={0x0, 0x42cc, 0x42426, 0x1, 0x137}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x5, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e4, 0x200, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) linkat(r8, &(0x7f0000000b80)='./file0\x00', r8, &(0x7f0000000bc0)='./file0\x00', 0x400) 2.172661383s ago: executing program 9 (id=2380): socket$kcm(0x23, 0x0, 0x0) (async) ioctl$FE_GET_FRONTEND(0xffffffffffffffff, 0x80246f4d, &(0x7f0000000100)={0x0, 0x0, @ofdm}) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newsa={0x144, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d8, 0x6c}, @in=@multicast1, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x82518, 0x2, 0xfffffffffffffff4, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x5609c29893963bef}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r1 = syz_open_dev$vbi(&(0x7f0000000140), 0x1, 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) write$binfmt_script(r2, &(0x7f0000000180), 0xfffffd9d) (async) write$binfmt_script(r2, &(0x7f00000003c0), 0xfffffd9d) write(r1, &(0x7f0000000400), 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000640), 0x4000000004002, 0x0) r5 = dup(r4) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000680)={0x0, 0x30b5, 0x80, 0x2, 0x158, 0x0, r5}, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x0, &(0x7f0000000780)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f00000007c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000840)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x6, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000880)=0x0) syz_ublk_setup_queues(r5, r10, &(0x7f00000008c0)={0x0, 0x9e80, 0x400, 0x3, 0x228, 0x0, r6}, &(0x7f0000000940)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfafb, 0x8, 0x3, 0xaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x61a, 0x8000, 0x3, 0x243}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd920, 0x4, 0x1, 0x8f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x657f, 0x40, 0x0, 0x205, 0x0, r5}}], 0x4, &(0x7f0000000bc0)={0x2e, 0x0, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x5}, 0x0, 0x0, '\x00', {0x1, 0x455, 0x0, 0x0}}, 0x0) (async) syncfs(r6) (async) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r3) (async) r12 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f0000000500)=0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000540), r14) sendmsg$NFC_CMD_DEV_UP(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x1c, r15, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x1c}}, 0x40040) (async) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r16, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r11, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc3}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x2000cc84) (async) syz_usb_connect(0x2, 0xb3, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010002ef020140000070d90001000000010902a1000601008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010101ffffe400000000000200110924030201010001"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 8 (id=2381): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000340)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private2}, 0x1c) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60040000", @ANYRES16=r2, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="08000c006400000008000d0002000000080026006c09000028000e0080000000ffffffffffff020000000000020000000000000000010000000064003104000004043381", @ANYBLOB="0400010004000100040001000400010004000100040001000400010004"], 0x460}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): cfgselector 8-1: USB disconnect, device number 77 [ 690.563557][ T10] usb 9-1: device descriptor read/64, error -71 [ 690.650126][T15374] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 690.803282][ T10] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 690.872454][T15382] comedi comedi1: mpc624: I/O port conflict (0x100,16) [ 690.933923][ T10] usb 9-1: device descriptor read/64, error -71 [ 691.047407][ T10] usb usb9-port1: attempt power cycle [ 691.085625][T15358] rxe_eth0 speed is unknown, defaulting to 1000 [ 691.123370][ T5811] usb 8-1: new full-speed USB device number 78 using dummy_hcd [ 691.276868][ T5811] usb 8-1: unable to get BOS descriptor or descriptor too short [ 691.277305][ T5811] usb 8-1: not running at top speed; connect to a high speed hub [ 691.277329][ T5811] usb 8-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=0.40 [ 691.278183][ T5811] usb 8-1: config 1 has an invalid descriptor of length 180, skipping remainder of the config [ 691.278216][ T5811] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 691.279929][ T5811] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.279948][ T5811] usb 8-1: Product: syz [ 691.279959][ T5811] usb 8-1: Manufacturer: syz [ 691.279976][ T5811] usb 8-1: SerialNumber: syz [ 691.423454][ T10] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 691.430371][T15358] lo speed is unknown, defaulting to 1000 [ 691.450767][ T10] usb 9-1: device descriptor read/8, error -71 [ 691.473334][ T5642] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 691.624551][ T5642] usb 3-1: Using ep0 maxpacket: 8 [ 691.625234][ T5642] usb 3-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 691.628212][ T5642] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.628232][ T5642] usb 3-1: Product: syz [ 691.628244][ T5642] usb 3-1: Manufacturer: syz [ 691.628255][ T5642] usb 3-1: SerialNumber: syz [ 691.631686][ T5642] usb 3-1: config 0 descriptor?? [ 691.683710][ T10] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 691.709734][ T10] usb 9-1: device descriptor read/8, error -71 [ 691.813537][ T10] usb usb9-port1: unable to enumerate USB device [ 691.844493][ T5642] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 691.897806][T15358] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.898009][T15358] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.898333][T15358] bridge_slave_0: entered allmulticast mode [ 691.899817][T15358] bridge_slave_0: entered promiscuous mode [ 691.908499][T13830] Bluetooth: hci1: command tx timeout [ 691.942474][T15358] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.942551][T15358] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.942677][T15358] bridge_slave_1: entered allmulticast mode [ 691.974644][T15358] bridge_slave_1: entered promiscuous mode [ 692.017387][T15358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.032926][T15358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.144892][T15358] team0: Port device team_slave_0 added [ 692.151668][T15358] team0: Port device team_slave_1 added [ 692.205262][T15358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.205277][T15358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.205298][T15358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.207302][T15358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.207315][T15358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.207357][T15358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.363101][T15358] hsr_slave_0: entered promiscuous mode [ 692.370933][T15358] hsr_slave_1: entered promiscuous mode [ 692.371810][T15358] debugfs: 'hsr0' already exists in 'hsr' [ 692.371824][T15358] Cannot create hsr debugfs directory [ 692.530700][ T32] kauditd_printk_skb: 17 callbacks suppressed [ 692.530716][ T32] audit: type=1800 audit(1794218279.606:4681): pid=15358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24639 res=0 errno=-13 [ 692.531523][ T32] audit: type=1800 audit(1794218279.606:4682): pid=15358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24638 res=0 errno=-13 [ 692.598812][ T32] audit: type=1800 audit(1794218279.676:4683): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=283505 res=0 errno=-22 [ 692.748874][T15358] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 692.752699][T15358] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 692.772228][T15358] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 692.791002][T15358] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 692.792153][T15358] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 692.820347][T15358] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 692.821737][T15358] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 692.841056][T15358] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 692.967853][T15358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.997932][T15358] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.012583][ T8719] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.012680][ T8719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.047390][ T8719] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.047475][ T8719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.397496][T15413] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 693.481199][ T5642] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 693.504989][ T32] audit: type=1800 audit(1794218280.586:4684): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=279332 res=0 errno=-22 [ 693.508402][ T32] audit: type=1800 audit(1794218280.586:4685): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=279333 res=0 errno=-22 [ 693.510974][ T5642] usb 3-1: USB disconnect, device number 122 [ 693.569589][ T32] audit: type=1800 audit(1794218280.646:4686): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=279312 res=0 errno=-22 [ 693.608211][ T32] audit: type=1800 audit(1794218280.686:4687): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=279334 res=0 errno=-22 [ 693.694959][T14635] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 693.845379][T14635] usb 9-1: Using ep0 maxpacket: 16 [ 693.847356][T14635] usb 9-1: unable to get BOS descriptor or descriptor too short [ 693.847395][T14635] usb 9-1: New USB device found: idVendor=04e8, idProduct=8001, bcdDevice=41.ad [ 693.848281][T14635] usb 9-1: config 128 has an invalid interface number: 63 but max is 0 [ 693.848319][T14635] usb 9-1: config 128 has no interface number 0 [ 693.848341][T14635] usb 9-1: config 128 interface 63 has no altsetting 0 [ 693.850563][T14635] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.850582][T14635] usb 9-1: Product: syz [ 693.850594][T14635] usb 9-1: Manufacturer: syz [ 693.850605][T14635] usb 9-1: SerialNumber: syz [ 693.946553][ T32] audit: type=1800 audit(1794218281.026:4688): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=283968 res=0 errno=-22 [ 693.979913][ T32] audit: type=1800 audit(1794218281.056:4689): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=284000 res=0 errno=-22 [ 693.982313][ T32] audit: type=1800 audit(1794218281.056:4690): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=283975 res=0 errno=-22 [ 693.984332][T13830] Bluetooth: hci1: command tx timeout [ 694.341251][T15423] FAULT_INJECTION: forcing a failure. [ 694.341251][T15423] name failslab, interval 1, probability 0, space 0, times 0 [ 694.343131][T15423] CPU: 0 UID: 0 PID: 15423 Comm: syz.2.2213 Tainted: G L syzkaller #0 PREEMPT(full) [ 694.343159][T15423] Tainted: [L]=SOFTLOCKUP [ 694.343165][T15423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 694.343176][T15423] Call Trace: [ 694.343184][T15423] [ 694.343192][T15423] dump_stack_lvl+0xe8/0x150 [ 694.343222][T15423] should_fail_ex+0x3eb/0x540 [ 694.343245][T15423] ? __alloc_skb+0x1db/0x7a0 [ 694.343265][T15423] should_failslab+0xa8/0x100 [ 694.343291][T15423] ? __alloc_skb+0x1db/0x7a0 [ 694.343308][T15423] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 694.343327][T15423] ? __alloc_skb+0x18d/0x7a0 [ 694.343346][T15423] ? __alloc_skb+0x1db/0x7a0 [ 694.343369][T15423] __alloc_skb+0x1db/0x7a0 [ 694.343390][T15423] netlink_ack+0x136/0xb30 [ 694.343406][T15423] ? __pfx_genl_rcv_msg+0x10/0x10 [ 694.343429][T15423] ? __pfx_nl80211_post_doit+0x10/0x10 [ 694.343456][T15423] ? __asan_memcpy+0x40/0x70 [ 694.343481][T15423] netlink_rcv_skb+0x2a4/0x4a0 [ 694.343499][T15423] ? __pfx_genl_rcv_msg+0x10/0x10 [ 694.343522][T15423] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 694.343616][T15423] ? down_read+0x2b9/0x320 [ 694.343637][T15423] genl_rcv+0x28/0x40 [ 694.343657][T15423] netlink_unicast+0x8ef/0xa80 [ 694.343695][T15423] netlink_sendmsg+0x7f0/0xb20 [ 694.343718][T15423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 694.343738][T15423] ? aa_sock_msg_perm+0x144/0x210 [ 694.343761][T15423] ? apparmor_socket_sendmsg+0x98/0x360 [ 694.343787][T15423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 694.343805][T15423] sock_sendmsg_nosec+0x14e/0x190 [ 694.343833][T15423] ____sys_sendmsg+0x54e/0x850 [ 694.343858][T15423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 694.343886][T15423] ? import_iovec+0x73/0xa0 [ 694.343909][T15423] ___sys_sendmsg+0x2a6/0x360 [ 694.343929][T15423] ? __lock_acquire+0x747/0x2de0 [ 694.343951][T15423] ? __pfx____sys_sendmsg+0x10/0x10 [ 694.343999][T15423] ? __fget_files+0x3a2/0x420 [ 694.344019][T15423] ? __fget_files+0x2a/0x420 [ 694.344046][T15423] __x64_sys_sendmsg+0x1b1/0x290 [ 694.344070][T15423] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 694.344107][T15423] do_syscall_64+0x16a/0x530 [ 694.344122][T15423] ? trace_irq_disable+0x3b/0x140 [ 694.344142][T15423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.344158][T15423] ? clear_bhb_loop+0x70/0xc0 [ 694.344178][T15423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.344193][T15423] RIP: 0033:0x00007fab12d9fb19 [ 694.344210][T15423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.344224][T15423] RSP: 002b:00007fab13c0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 694.344242][T15423] RAX: ffffffffffffffda RBX: 00007fab13025fa0 RCX: 00007fab12d9fb19 [ 694.344255][T15423] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 694.344265][T15423] RBP: 00007fab13c0e090 R08: 0000000000000000 R09: 0000000000000000 [ 694.344276][T15423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.344286][T15423] R13: 00007fab13026038 R14: 00007fab13025fa0 R15: 00007ffc34406c48 [ 694.344311][T15423] [ 694.458721][ T5811] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 694.673916][ T5811] usb 8-1: USB disconnect, device number 78 [ 694.813072][ T8431] udevd[8431]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 694.968609][T15358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.765873][T15358] veth0_vlan: entered promiscuous mode [ 695.801376][T15358] veth1_vlan: entered promiscuous mode [ 695.847895][T15358] veth0_macvtap: entered promiscuous mode [ 695.852680][T15358] veth1_macvtap: entered promiscuous mode [ 695.873982][ T7553] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 695.901565][T15358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.924947][T15358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.945985][ T8719] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.948248][ T8718] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.948282][ T8718] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.948318][ T8718] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.027272][ T7553] usb 8-1: Using ep0 maxpacket: 8 [ 696.031020][ T7553] usb 8-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 696.032518][ T7553] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 696.032554][ T7553] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.061629][ T5642] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 696.071930][T13830] Bluetooth: hci1: command tx timeout [ 696.098732][ T7553] usb 8-1: config 0 descriptor?? [ 696.237575][ T5642] usb 3-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00 [ 696.241478][ T5642] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 696.241548][ T5642] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 696.288262][ T5642] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.288285][ T5642] usb 3-1: Product: syz [ 696.288297][ T5642] usb 3-1: Manufacturer: syz [ 696.288308][ T5642] usb 3-1: SerialNumber: syz [ 696.357134][ T7553] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 696.451849][ T263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.451868][ T263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.505966][T14635] usb 9-1: active config #128 != 1 ?? [ 696.523982][T14635] usb 9-1: USB disconnect, device number 32 [ 696.643099][ T5642] usb 3-1: USB disconnect, device number 123 [ 696.677263][T15439] fuse: Unknown parameter 'f Ú0x00000000000000000177777777777777777777700000000000000000004' [ 696.738443][T13317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.738462][T13317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.779384][T15443] netlink: 'syz.8.2217': attribute type 10 has an invalid length. [ 696.779404][T15443] netlink: 55 bytes leftover after parsing attributes in process `syz.8.2217'. [ 696.881161][T15444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.881487][T15444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.974242][ T5642] usb 8-1: USB disconnect, device number 79 [ 697.259004][T15452] input: syz0 as /devices/virtual/input/input74 [ 697.463035][T15458] FAULT_INJECTION: forcing a failure. [ 697.463035][T15458] name failslab, interval 1, probability 0, space 0, times 0 [ 697.463064][T15458] CPU: 0 UID: 0 PID: 15458 Comm: syz.9.2221 Tainted: G L syzkaller #0 PREEMPT(full) [ 697.463086][T15458] Tainted: [L]=SOFTLOCKUP [ 697.463093][T15458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 697.463103][T15458] Call Trace: [ 697.463110][T15458] [ 697.463117][T15458] dump_stack_lvl+0xe8/0x150 [ 697.463149][T15458] should_fail_ex+0x3eb/0x540 [ 697.463174][T15458] should_failslab+0xa8/0x100 [ 697.463200][T15458] ? skb_clone+0x212/0x3a0 [ 697.463286][T15458] kmem_cache_alloc_noprof+0x9c/0x600 [ 697.463308][T15458] ? skb_clone+0x212/0x3a0 [ 697.463335][T15458] skb_clone+0x212/0x3a0 [ 697.463361][T15458] __netlink_deliver_tap+0x355/0x6e0 [ 697.463387][T15458] ? netlink_deliver_tap+0x2e/0x1b0 [ 697.463406][T15458] netlink_deliver_tap+0x19c/0x1b0 [ 697.463425][T15458] netlink_sendskb+0x68/0x140 [ 697.463453][T15458] netlink_rcv_skb+0x2a4/0x4a0 [ 697.463477][T15458] ? __pfx_genl_rcv_msg+0x10/0x10 [ 697.463501][T15458] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 697.463530][T15458] ? down_read+0x2b9/0x320 [ 697.463551][T15458] genl_rcv+0x28/0x40 [ 697.463571][T15458] netlink_unicast+0x8ef/0xa80 [ 697.463610][T15458] netlink_sendmsg+0x7f0/0xb20 [ 697.463634][T15458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 697.463655][T15458] ? aa_sock_msg_perm+0x144/0x210 [ 697.463678][T15458] ? apparmor_socket_sendmsg+0x98/0x360 [ 697.463719][T15458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 697.463736][T15458] sock_sendmsg_nosec+0x14e/0x190 [ 697.463765][T15458] ____sys_sendmsg+0x54e/0x850 [ 697.463790][T15458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 697.463817][T15458] ? import_iovec+0x73/0xa0 [ 697.463840][T15458] ___sys_sendmsg+0x2a6/0x360 [ 697.463858][T15458] ? __lock_acquire+0x747/0x2de0 [ 697.463880][T15458] ? __pfx____sys_sendmsg+0x10/0x10 [ 697.463927][T15458] ? __fget_files+0x3a2/0x420 [ 697.463947][T15458] ? __fget_files+0x2a/0x420 [ 697.463973][T15458] __x64_sys_sendmsg+0x1b1/0x290 [ 697.463996][T15458] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 697.464032][T15458] do_syscall_64+0x16a/0x530 [ 697.464046][T15458] ? trace_irq_disable+0x3b/0x140 [ 697.464066][T15458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.464081][T15458] ? clear_bhb_loop+0x70/0xc0 [ 697.464100][T15458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.464115][T15458] RIP: 0033:0x00007f460d39fb19 [ 697.464131][T15458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.464144][T15458] RSP: 002b:00007f460e2a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 697.464161][T15458] RAX: ffffffffffffffda RBX: 00007f460d625fa0 RCX: 00007f460d39fb19 [ 697.464172][T15458] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 697.464182][T15458] RBP: 00007f460e2a5090 R08: 0000000000000000 R09: 0000000000000000 [ 697.464191][T15458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.464200][T15458] R13: 00007f460d626038 R14: 00007f460d625fa0 R15: 00007ffda99dd4b8 [ 697.464224][T15458] [ 697.998456][T15465] comedi comedi1: 8255: I/O base address not correctly aligned [ 698.070869][T15467] jffs2: notice: (15467) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 698.180693][T15470] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[14260] was attempted by ""[15470] [ 698.183630][ T7553] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 698.254031][ T5811] usb 8-1: new full-speed USB device number 80 using dummy_hcd [ 698.317941][ T32] kauditd_printk_skb: 36 callbacks suppressed [ 698.317959][ T32] audit: type=1800 audit(1794218285.396:4727): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31713 res=0 errno=-22 [ 698.330434][ T32] audit: type=1800 audit(1794218285.396:4728): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31736 res=0 errno=-22 [ 698.373657][ T7553] usb 3-1: Using ep0 maxpacket: 32 [ 698.381206][ T7553] usb 3-1: New USB device found: idVendor=28bd, idProduct=0094, bcdDevice=0.00 [ 698.382578][ T7553] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 698.382597][ T7553] usb 3-1: config 0 has no interface number 0 [ 698.382626][ T7553] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.382645][ T7553] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.382673][ T7553] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.446533][ T5811] usb 8-1: New USB device found: idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 698.464461][ T5811] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 698.464482][ T5811] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 698.464502][ T5811] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 698.464521][ T5811] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 698.464542][ T5811] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 698.534981][ T7553] usb 3-1: config 0 descriptor?? [ 698.548988][ T32] audit: type=1800 audit(1794218285.626:4729): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=284733 res=0 errno=-22 [ 698.551008][ T5811] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.551027][ T5811] usb 8-1: Product: syz [ 698.551039][ T5811] usb 8-1: Manufacturer: syz [ 698.551050][ T5811] usb 8-1: SerialNumber: syz [ 698.616647][ T5811] usb 8-1: config 0 descriptor?? [ 698.620009][T15465] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 698.643914][ T32] audit: type=1800 audit(1794218285.726:4730): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=284793 res=0 errno=-22 [ 698.646257][ T32] audit: type=1800 audit(1794218285.726:4731): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=284762 res=0 errno=-22 [ 698.646298][ T32] audit: type=1800 audit(1794218285.726:4732): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=284740 res=0 errno=-22 [ 698.676697][T14635] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 698.701129][ T32] audit: type=1800 audit(1794218285.786:4734): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=284741 res=0 errno=-22 [ 698.762237][ T32] audit: type=1800 audit(1794218285.756:4733): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=284825 res=0 errno=-22 [ 698.762547][ T32] audit: type=1800 audit(1794218285.846:4735): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=284742 res=0 errno=-22 [ 698.818075][ T5811] input: KB Gear Tablet as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input75 [ 698.843559][ T32] audit: type=1800 audit(1794218285.916:4736): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=284800 res=0 errno=-22 [ 698.906923][T14635] usb 10-1: New USB device found: idVendor=174c, idProduct=56aa, bcdDevice=1.00 [ 698.908213][T14635] usb 10-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 698.911800][T14635] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.911819][T14635] usb 10-1: Product: syz [ 698.911831][T14635] usb 10-1: Manufacturer: syz [ 698.911842][T14635] usb 10-1: SerialNumber: syz [ 699.002445][ T5811] usb 8-1: USB disconnect, device number 80 [ 699.257210][T14635] usb 10-1: USB disconnect, device number 2 [ 699.411460][T15461] netlink: 368 bytes leftover after parsing attributes in process `syz.2.2222'. [ 699.430266][ T7553] uclogic 0003:28BD:0094.002A: pen parameters not found [ 699.430346][ T7553] uclogic 0003:28BD:0094.002A: interface is invalid, ignoring [ 699.452384][T15483] tmpfs: Bad value for 'mpol' [ 699.803286][ T7553] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 699.954372][ T7553] usb 9-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 699.955450][ T7553] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.955485][ T7553] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 699.955506][ T7553] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 699.955536][ T7553] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.098656][ T5811] usb 3-1: USB disconnect, device number 124 [ 700.394195][T15487] tipc: Can't bind to reserved service type 3 [ 700.471947][T15493] overlayfs: missing 'lowerdir' [ 700.502216][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 700.502373][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 700.502477][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 700.502578][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 700.502661][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 700.502761][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 700.502861][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 700.502941][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 700.597213][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 700.597340][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 700.597441][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 700.597522][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 700.597622][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 700.597721][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 700.597803][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 700.762953][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 700.763064][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 700.763650][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 700.763739][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 700.763857][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 700.763960][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 700.764063][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 700.764151][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 700.764253][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 700.764353][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 700.764438][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.116213][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.116358][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.116466][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.116551][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.116652][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.116758][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.116847][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.116955][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.117057][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.117158][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.117259][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.117361][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.117463][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.117566][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.117649][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.117751][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.117849][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.336347][T15508] input: syz0 as /devices/virtual/input/input76 [ 701.392841][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.393000][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.393120][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.393338][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.393442][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.393525][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.393627][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.393726][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.393815][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.393921][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.394020][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.394162][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.394243][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.394345][T15498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 702.309104][ T7553] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -104 [ 702.309124][ T7553] ATM dev 0: usbatm_atm_init: atm_start failed: -104! [ 702.335160][ T7553] cxacru 9-1:1.0: probe with driver cxacru failed with error -104 [ 702.557623][T15523] netlink: 'syz.2.2241': attribute type 14 has an invalid length. [ 702.557643][T15523] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2241'. [ 702.673390][ T5746] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 702.823302][ T5746] usb 8-1: Using ep0 maxpacket: 32 [ 702.825638][ T5746] usb 8-1: New USB device found: idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 702.826606][ T5746] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.848952][ T5746] usb 8-1: config 0 descriptor?? [ 702.881865][ T5746] as10x_usb: device has been detected [ 702.893703][ T5746] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 702.975984][ T5746] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 703.015951][ T5746] as10x_usb: error during firmware upload part1 [ 703.016421][ T5746] Registered device nBox DVB-T Dongle [ 703.130227][ T5811] usb 8-1: USB disconnect, device number 81 [ 703.146325][ T1750] block nbd0: Possible stuck request ffff888028ca5080: control (read@0,1024B). Runtime 420 seconds [ 703.146363][ T1750] block nbd0: Possible stuck request ffff888028ca5240: control (read@1024,1024B). Runtime 420 seconds [ 703.146385][ T1750] block nbd0: Possible stuck request ffff888028ca5400: control (read@2048,1024B). Runtime 420 seconds [ 703.146405][ T1750] block nbd0: Possible stuck request ffff888028ca55c0: control (read@3072,1024B). Runtime 420 seconds [ 703.254258][ T5811] Unregistered device nBox DVB-T Dongle [ 703.257874][ T5811] as10x_usb: device has been disconnected [ 703.323264][T14635] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 703.474052][T14635] usb 3-1: Using ep0 maxpacket: 16 [ 703.475961][T14635] usb 3-1: unable to get BOS descriptor or descriptor too short [ 703.475999][T14635] usb 3-1: New USB device found: idVendor=1397, idProduct=00bd, bcdDevice=0.40 [ 703.477052][T14635] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 7 [ 703.479254][T14635] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.479273][T14635] usb 3-1: Product: syz [ 703.479285][T14635] usb 3-1: Manufacturer: syz [ 703.479296][T14635] usb 3-1: SerialNumber: syz [ 703.482192][ T32] kauditd_printk_skb: 44 callbacks suppressed [ 703.482205][ T32] audit: type=1800 audit(1794218290.556:4780): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=285516 res=0 errno=-22 [ 703.588063][ T32] audit: type=1800 audit(1794218290.666:4781): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=285548 res=0 errno=-22 [ 703.589839][ T32] audit: type=1800 audit(1794218290.666:4782): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=285523 res=0 errno=-22 [ 703.591030][ T32] audit: type=1800 audit(1794218290.666:4783): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=285524 res=0 errno=-22 [ 703.670728][ T5746] usb 9-1: USB disconnect, device number 33 [ 703.796619][T14635] usb 3-1: failed to read device descriptor: -71 [ 703.796669][T14635] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 703.832827][ T32] audit: type=1804 audit(1794218290.906:4784): pid=15530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2244" name="/newroot/70/file0" dev="tmpfs" ino=422 res=1 errno=0 [ 703.867706][T14635] usb 3-1: invalid MIDI EP [ 703.867725][T14635] usb 3-1: snd-bcd2000: error during probing [ 703.901852][T14635] snd-bcd2000 3-1:1.0: probe with driver snd-bcd2000 failed with error -22 [ 703.924504][T14635] usb 3-1: invalid MIDI EP [ 703.924522][T14635] usb 3-1: snd-bcd2000: error during probing [ 703.925030][T14635] snd-bcd2000 3-1:1.1: probe with driver snd-bcd2000 failed with error -22 [ 703.968933][T14635] usb 3-1: invalid MIDI EP [ 703.968952][T14635] usb 3-1: snd-bcd2000: error during probing [ 703.969440][T14635] snd-bcd2000 3-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 704.002920][ T32] audit: type=1800 audit(1794218291.076:4785): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=285545 res=0 errno=-22 [ 704.002967][ T32] audit: type=1800 audit(1794218291.076:4786): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=285546 res=0 errno=-22 [ 704.055615][T14635] usb 3-1: USB disconnect, device number 125 [ 704.072007][ T32] audit: type=1800 audit(1794218291.146:4787): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=285525 res=0 errno=-22 [ 704.119848][ T32] audit: type=1800 audit(1794218291.196:4788): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=285547 res=0 errno=-22 [ 704.145331][ T8431] udevd[8431]: setting owner of /dev/bus/usb/003/125 to uid=0, gid=0 failed: No such file or directory [ 704.270058][T15534] FAULT_INJECTION: forcing a failure. [ 704.270058][T15534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.270085][T15534] CPU: 0 UID: 0 PID: 15534 Comm: syz.9.2245 Tainted: G L syzkaller #0 PREEMPT(full) [ 704.270108][T15534] Tainted: [L]=SOFTLOCKUP [ 704.270114][T15534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 704.270125][T15534] Call Trace: [ 704.270132][T15534] [ 704.270139][T15534] dump_stack_lvl+0xe8/0x150 [ 704.270169][T15534] should_fail_ex+0x3eb/0x540 [ 704.270193][T15534] _copy_to_user+0x31/0xb0 [ 704.270217][T15534] simple_read_from_buffer+0xe1/0x170 [ 704.270242][T15534] proc_fail_nth_read+0x1bb/0x230 [ 704.270262][T15534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 704.270282][T15534] ? rw_verify_area+0x24a/0x4c0 [ 704.270307][T15534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 704.270323][T15534] vfs_read+0x213/0xa80 [ 704.270350][T15534] ? __pfx___mutex_lock+0x10/0x10 [ 704.270367][T15534] ? __pfx_vfs_read+0x10/0x10 [ 704.270391][T15534] ? __fget_files+0x2a/0x420 [ 704.270415][T15534] ? __fget_files+0x3a2/0x420 [ 704.270435][T15534] ? __fget_files+0x2a/0x420 [ 704.270458][T15534] ? fdget+0x1ac/0x250 [ 704.270484][T15534] ksys_read+0x150/0x270 [ 704.270509][T15534] ? __pfx_ksys_read+0x10/0x10 [ 704.270541][T15534] do_syscall_64+0x16a/0x530 [ 704.270557][T15534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.270574][T15534] ? clear_bhb_loop+0x70/0xc0 [ 704.270594][T15534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.270610][T15534] RIP: 0033:0x00007f460d36034e [ 704.270642][T15534] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 704.270656][T15534] RSP: 002b:00007f460e2a4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 704.270673][T15534] RAX: ffffffffffffffda RBX: 00007f460e2a56c0 RCX: 00007f460d36034e [ 704.270686][T15534] RDX: 000000000000000f RSI: 00007f460e2a50a0 RDI: 0000000000000005 [ 704.270696][T15534] RBP: 00007f460e2a5090 R08: 0000000000000000 R09: 0000000000000000 [ 704.270706][T15534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 704.270716][T15534] R13: 00007f460d626038 R14: 00007f460d625fa0 R15: 00007ffda99dd4b8 [ 704.270747][T15534] [ 704.876239][ T32] audit: type=1800 audit(1794218291.956:4789): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=285658 res=0 errno=-22 [ 704.933623][T14635] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 705.083315][ T999] usb 3-1: new low-speed USB device number 126 using dummy_hcd [ 705.092989][T14635] usb 10-1: Using ep0 maxpacket: 8 [ 705.100937][T14635] usb 10-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 705.119034][T14635] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 705.119061][T14635] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 705.119080][T14635] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 705.119098][T14635] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 705.119129][T14635] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.272118][ T999] usb 3-1: unable to get BOS descriptor or descriptor too short [ 705.272158][ T999] usb 3-1: New USB device found: idVendor=1410, idProduct=a002, bcdDevice=72.1e [ 705.273033][ T999] usb 3-1: config 16 has an invalid interface number: 3 but max is 2 [ 705.273066][ T999] usb 3-1: config 16 has an invalid interface number: 107 but max is 2 [ 705.273082][ T999] usb 3-1: config 16 has 2 interfaces, different from the descriptor's value: 3 [ 705.273098][ T999] usb 3-1: config 16 has no interface number 0 [ 705.273110][ T999] usb 3-1: config 16 has no interface number 1 [ 705.273139][ T999] usb 3-1: config 16 interface 3 has no altsetting 0 [ 705.273456][ T999] usb 3-1: config 16 interface 107 has no altsetting 0 [ 705.359097][T14635] usb 10-1: GET_CAPABILITIES returned 0 [ 705.359134][T14635] usbtmc 10-1:16.0: can't read capabilities [ 705.392931][ T999] usb 3-1: string descriptor 0 read error: -22 [ 705.393044][ T999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.439116][ T999] usb 3-1: unknown number of interfaces: 2 [ 705.564292][T15541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.564629][T15541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.593338][T14635] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 705.625486][T15549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.625834][T15549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.627852][ T7553] usb 3-1: USB disconnect, device number 126 [ 705.744310][T14635] usb 8-1: Using ep0 maxpacket: 8 [ 705.745733][T14635] usb 8-1: New USB device found: idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 705.749752][T14635] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.749812][T14635] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.797546][T14635] usb 8-1: config 0 descriptor?? [ 705.812115][T14635] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 706.325591][T15567] kernel read not supported for file bus/pci/00/00.0 (pid: 15567 comm: syz.2.2256) [ 706.982182][T13830] Bluetooth: hci0: Zero size dump init pkt [ 707.046206][T14635] gspca_vc032x: reg_w err -71 [ 707.046268][T14635] vc032x 8-1:0.0: probe with driver vc032x failed with error -71 [ 707.049625][T14635] usb 8-1: USB disconnect, device number 82 [ 707.104080][T15582] netlink: 'syz.2.2261': attribute type 13 has an invalid length. [ 707.104101][T15582] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2261'. [ 707.670691][T15596] CacheFiles: 'bind' command doesn't take an argument [ 707.760177][ T999] usb 10-1: USB disconnect, device number 3 [ 708.114292][T15612] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2268'. [ 708.115103][T15612] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2268'. [ 708.203456][ T5746] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 708.354098][ T5746] usb 9-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 708.355181][ T5746] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.357336][ T5746] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.357355][ T5746] usb 9-1: Product: syz [ 708.357367][ T5746] usb 9-1: Manufacturer: syz [ 708.357378][ T5746] usb 9-1: SerialNumber: syz [ 708.463384][ T999] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 708.599592][ T5746] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 708.599622][ T5746] cdc_ncm 9-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 708.599637][ T5746] cdc_ncm 9-1:1.0: setting rx_max = 2048 [ 708.647430][ T999] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 708.666002][ T999] usb 3-1: config 0 has an invalid descriptor of length 186, skipping remainder of the config [ 708.666043][ T999] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 708.666076][ T999] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.716658][ T999] usb 3-1: config 0 descriptor?? [ 708.734886][ T32] kauditd_printk_skb: 31 callbacks suppressed [ 708.734902][ T32] audit: type=1800 audit(1794218295.806:4821): pid=8423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=286197 res=0 errno=-22 [ 708.740311][ T32] audit: type=1800 audit(1794218295.816:4822): pid=8423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=286226 res=0 errno=-22 [ 708.809690][ T5746] cdc_ncm 9-1:1.0: setting tx_max = 88 [ 708.838808][ T32] audit: type=1800 audit(1794218295.916:4823): pid=8423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=286204 res=0 errno=-22 [ 708.841211][ T32] audit: type=1800 audit(1794218295.916:4824): pid=8423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=286205 res=0 errno=-22 [ 708.841250][ T32] audit: type=1800 audit(1794218295.916:4825): pid=8423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=286206 res=0 errno=-22 [ 708.968428][ T5746] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 708.999639][ T32] audit: type=1800 audit(1794218296.076:4826): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=286158 res=0 errno=-22 [ 709.028431][ T32] audit: type=1800 audit(1794218296.106:4827): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=286159 res=0 errno=-22 [ 709.031138][ T32] audit: type=1800 audit(1794218296.106:4828): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=286138 res=0 errno=-22 [ 709.079762][ T32] audit: type=1800 audit(1794218296.156:4829): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=286160 res=0 errno=-22 [ 709.126426][ T32] audit: type=1800 audit(1794218296.206:4830): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=286181 res=0 errno=-22 [ 709.357437][ T999] usb 3-1: string descriptor 0 read error: -71 [ 709.378909][ T999] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 709.408670][ T999] usb 3-1: USB disconnect, device number 127 [ 709.483418][T14635] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 709.613605][T14635] usb 10-1: device descriptor read/64, error -71 [ 709.853498][T14635] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 709.984342][T14635] usb 10-1: device descriptor read/64, error -71 [ 710.093900][T14635] usb usb10-port1: attempt power cycle [ 710.122232][T15641] netlink: 'syz.2.2271': attribute type 1 has an invalid length. [ 710.433519][T14635] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 710.455585][T14635] usb 10-1: device descriptor read/8, error -71 [ 710.696560][T14635] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 710.714727][T14635] usb 10-1: device descriptor read/8, error -71 [ 710.824064][T14635] usb usb10-port1: unable to enumerate USB device [ 710.855675][ T999] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 711.005329][ T999] usb 3-1: Using ep0 maxpacket: 16 [ 711.008360][ T999] usb 3-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00 [ 711.013085][ T999] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.013227][ T999] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.013248][ T999] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.013265][ T999] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 711.013965][ T999] usb 3-1: config 0 interface 0 has no altsetting 0 [ 711.014009][ T999] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.118145][ T999] usb 3-1: config 0 descriptor?? [ 711.396477][T14635] usb 9-1: USB disconnect, device number 34 [ 711.397869][T14635] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 711.426028][ T5811] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 711.586204][ T5811] usb 8-1: Using ep0 maxpacket: 16 [ 711.592135][ T5811] usb 8-1: unable to get BOS descriptor or descriptor too short [ 711.592184][ T5811] usb 8-1: New USB device found: idVendor=04c5, idProduct=1079, bcdDevice=37.f3 [ 711.598983][ T5811] usb 8-1: config 1 has an invalid interface number: 34 but max is 0 [ 711.599048][ T5811] usb 8-1: config 1 has no interface number 0 [ 711.599079][ T5811] usb 8-1: config 1 interface 34 altsetting 93 endpoint 0x83 has invalid wMaxPacketSize 0 [ 711.599115][ T5811] usb 8-1: config 1 interface 34 altsetting 93 bulk endpoint 0x83 has invalid maxpacket 0 [ 711.599133][ T5811] usb 8-1: config 1 interface 34 has no altsetting 0 [ 711.678851][ T5811] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.678893][ T5811] usb 8-1: Product: syz [ 711.678906][ T5811] usb 8-1: Manufacturer: syz [ 711.678917][ T5811] usb 8-1: SerialNumber: syz [ 711.945101][ T999] logitech-djreceiver 0003:046D:C53A.002B: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.2-1/input0 [ 712.045835][ T5811] usb 8-1: USB disconnect, device number 83 [ 712.094309][T15662] rxe_eth0 speed is unknown, defaulting to 1000 [ 712.510079][ T5811] usb 3-1: USB disconnect, device number 2 [ 712.988329][T15662] lo speed is unknown, defaulting to 1000 [ 714.133290][T14635] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 714.254558][ T5811] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 714.284245][T14635] usb 8-1: Using ep0 maxpacket: 16 [ 714.286408][T14635] usb 8-1: New USB device found: idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 714.291342][T14635] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.291363][T14635] usb 8-1: Product: syz [ 714.291374][T14635] usb 8-1: Manufacturer: syz [ 714.291385][T14635] usb 8-1: SerialNumber: syz [ 714.336603][T14635] usb 8-1: config 0 descriptor?? [ 714.353530][ T32] kauditd_printk_skb: 32 callbacks suppressed [ 714.353547][ T32] audit: type=1800 audit(1794218301.436:4863): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=290741 res=0 errno=-22 [ 714.391983][ T5811] usb 3-1: device descriptor read/64, error -71 [ 714.407597][ T32] audit: type=1800 audit(1794218301.486:4864): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=290773 res=0 errno=-22 [ 714.408465][ T32] audit: type=1800 audit(1794218301.486:4865): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=290748 res=0 errno=-22 [ 714.464013][ T32] audit: type=1800 audit(1794218301.546:4866): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=290749 res=0 errno=-22 [ 714.562793][T15696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.600767][T15696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.633494][ T5811] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 714.641226][T14635] usb 8-1: ignoring: not an USB2CAN converter [ 714.671587][ T32] audit: type=1800 audit(1794218301.746:4867): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=290770 res=0 errno=-22 [ 714.671629][ T32] audit: type=1800 audit(1794218301.746:4868): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=290771 res=0 errno=-22 [ 714.671660][ T32] audit: type=1800 audit(1794218301.746:4869): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=290750 res=0 errno=-22 [ 714.759355][ T32] audit: type=1800 audit(1794218301.836:4870): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=290772 res=0 errno=-22 [ 714.803809][ T32] audit: type=1800 audit(1794218301.886:4871): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=290793 res=0 errno=-22 [ 714.808995][ T5811] usb 3-1: device descriptor read/64, error -71 [ 714.850759][T14635] usb 8-1: USB disconnect, device number 84 [ 714.915789][ T5811] usb usb3-port1: attempt power cycle [ 715.137955][T15706] tipc: Started in network mode [ 715.137984][T15706] tipc: Node identity 4272ad327b21, cluster identity 4711 [ 715.138153][T15706] tipc: Enabled bearer , priority 10 [ 715.246087][ T999] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 715.253311][ T5811] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 715.274057][ T5811] usb 3-1: device descriptor read/8, error -71 [ 715.371635][T15701] tipc: Resetting bearer [ 715.396743][ T999] usb 9-1: New USB device found: idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 715.402429][ T999] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.433608][ T999] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 715.433631][ T999] usb 9-1: Product: syz [ 715.433642][ T999] usb 9-1: Manufacturer: syz [ 715.493129][ T32] audit: type=1800 audit(1794218302.566:4872): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=290920 res=0 errno=-22 [ 715.537682][ T5811] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 715.576063][ T5811] usb 3-1: device descriptor read/8, error -71 [ 715.615176][T15701] tipc: Disabling bearer [ 715.685038][ T5811] usb usb3-port1: unable to enumerate USB device [ 715.720093][T15707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.720495][T15707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.957513][ T999] logitech-djreceiver 0003:046D:C52B.002C: unknown main item tag 0x0 [ 715.957543][ T999] logitech-djreceiver 0003:046D:C52B.002C: unknown main item tag 0x0 [ 715.957597][ T999] logitech-djreceiver 0003:046D:C52B.002C: collection stack underflow [ 715.957616][ T999] logitech-djreceiver 0003:046D:C52B.002C: item 0 0 0 12 parsing failed [ 716.001670][ T999] logitech-djreceiver 0003:046D:C52B.002C: logi_dj_probe: parse failed [ 716.001776][ T999] logitech-djreceiver 0003:046D:C52B.002C: probe with driver logitech-djreceiver failed with error -22 [ 716.119798][T15719] FAULT_INJECTION: forcing a failure. [ 716.119798][T15719] name failslab, interval 1, probability 0, space 0, times 0 [ 716.119830][T15719] CPU: 0 UID: 0 PID: 15719 Comm: syz.7.2283 Tainted: G L syzkaller #0 PREEMPT(full) [ 716.119857][T15719] Tainted: [L]=SOFTLOCKUP [ 716.119864][T15719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 716.119875][T15719] Call Trace: [ 716.119882][T15719] [ 716.119890][T15719] dump_stack_lvl+0xe8/0x150 [ 716.119920][T15719] should_fail_ex+0x3eb/0x540 [ 716.119945][T15719] should_failslab+0xa8/0x100 [ 716.119972][T15719] ? vm_area_dup+0x32/0x8e0 [ 716.119990][T15719] kmem_cache_alloc_noprof+0x9c/0x600 [ 716.120012][T15719] ? vm_area_dup+0x32/0x8e0 [ 716.120034][T15719] vm_area_dup+0x32/0x8e0 [ 716.120050][T15719] ? copy_vma+0x8c3/0xe60 [ 716.120076][T15719] copy_vma+0x8cb/0xe60 [ 716.120114][T15719] ? __pfx_copy_vma+0x10/0x10 [ 716.120144][T15719] ? __vma_start_exclude_readers+0x6dd/0x9b0 [ 716.120160][T15719] ? hrtimer_start_range_ns_common+0x7f6/0xb60 [ 716.120200][T15719] ? move_vma+0x982/0x1ce0 [ 716.120231][T15719] move_vma+0xbaf/0x1ce0 [ 716.120271][T15719] ? __pfx_move_vma+0x10/0x10 [ 716.120304][T15719] ? arch_get_unmapped_area_topdown+0x269/0xc30 [ 716.120324][T15719] ? mtree_load+0x12a/0x780 [ 716.120348][T15719] ? mtree_load+0x12a/0x780 [ 716.120372][T15719] ? cap_mmap_addr+0xaa/0xf0 [ 716.120398][T15719] ? bpf_lsm_mmap_addr+0x9/0x50 [ 716.120422][T15719] ? security_mmap_addr+0x71/0x240 [ 716.120453][T15719] mremap_to+0x851/0x950 [ 716.120481][T15719] ? may_expand_vm+0x11a/0x390 [ 716.120502][T15719] ? check_prep_vma+0xa49/0xcb0 [ 716.120526][T15719] ? __pfx_mremap_to+0x10/0x10 [ 716.120559][T15719] ? __pfx_check_prep_vma+0x10/0x10 [ 716.120584][T15719] ? __pfx_futex_wait+0x10/0x10 [ 716.120608][T15719] __se_sys_mremap+0xeb1/0x1260 [ 716.120644][T15719] ? do_futex+0x3e7/0x4e0 [ 716.120682][T15719] ? __pfx___se_sys_mremap+0x10/0x10 [ 716.120708][T15719] ? __se_sys_futex+0x3a8/0x450 [ 716.120748][T15719] ? __x64_sys_mremap+0x20/0xc0 [ 716.120773][T15719] do_syscall_64+0x16a/0x530 [ 716.120788][T15719] ? trace_irq_disable+0x3b/0x140 [ 716.120808][T15719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.120825][T15719] ? clear_bhb_loop+0x70/0xc0 [ 716.120845][T15719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.120862][T15719] RIP: 0033:0x00007fd86919fb19 [ 716.120883][T15719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.120897][T15719] RSP: 002b:00007fd86a00d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 716.120914][T15719] RAX: ffffffffffffffda RBX: 00007fd869426180 RCX: 00007fd86919fb19 [ 716.120927][T15719] RDX: 000000000000faff RSI: 0000000000002000 RDI: 0000200000ffc000 [ 716.120938][T15719] RBP: 00007fd869237b70 R08: 0000200000006000 R09: 0000000000000000 [ 716.120949][T15719] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 716.120959][T15719] R13: 00007fd869426218 R14: 00007fd869426180 R15: 00007ffccdaf20e8 [ 716.120984][T15719] [ 716.459972][ T999] usb 9-1: USB disconnect, device number 35 [ 717.056221][T15727] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2285'. [ 717.209852][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.209881][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.209901][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.209920][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.209938][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.209957][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.209976][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.209995][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.210013][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.210032][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.210051][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.210069][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.210088][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.210107][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.210125][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.210144][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.210162][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.210181][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.210199][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.210218][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.210237][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.210255][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.210286][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.210305][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.210323][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.210342][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.210360][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.210379][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.210398][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.210416][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.210434][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.210453][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.210472][T15731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 717.313355][ T999] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 717.451562][ T5746] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 717.648690][ T999] usb 8-1: Using ep0 maxpacket: 8 [ 717.655607][ T5746] usb 10-1: device descriptor read/64, error -71 [ 717.674356][ T999] usb 8-1: New USB device found: idVendor=0c0b, idProduct=a109, bcdDevice=9e.9e [ 717.675832][ T999] usb 8-1: config 6 has an invalid interface number: 40 but max is 0 [ 717.675852][ T999] usb 8-1: config 6 has no interface number 0 [ 717.675872][ T999] usb 8-1: config 6 interface 40 has no altsetting 0 [ 717.722436][ T999] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.722459][ T999] usb 8-1: Product: syz [ 717.722471][ T999] usb 8-1: Manufacturer: syz [ 717.722482][ T999] usb 8-1: SerialNumber: syz [ 717.943338][ T5746] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 718.050866][ T999] ums-datafab 8-1:6.40: USB Mass Storage device detected [ 718.073355][ T5746] usb 10-1: device descriptor read/64, error -71 [ 718.081253][ T999] ums-datafab 8-1:6.40: Quirks match for vid 0c0b pid a109: 1 [ 718.158131][ T999] ums-sddr55 8-1:6.40: USB Mass Storage device detected [ 718.187226][ T5746] usb usb10-port1: attempt power cycle [ 718.228118][ T999] usb 8-1: USB disconnect, device number 85 [ 718.523432][ T5746] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 718.544907][ T5746] usb 10-1: device descriptor read/8, error -71 [ 718.785180][ T5746] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 718.804789][ T5746] usb 10-1: device descriptor read/8, error -71 [ 718.892286][T15755] netlink: 436 bytes leftover after parsing attributes in process `syz.8.2289'. [ 718.892450][T15755] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2289'. [ 718.917262][ T5746] usb usb10-port1: unable to enumerate USB device [ 719.154493][ T999] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 719.303424][ T999] usb 9-1: Using ep0 maxpacket: 8 [ 719.304010][ T999] usb 9-1: New USB device found: idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 719.305004][ T999] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.305040][ T999] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.306970][ T999] usb 9-1: config 0 descriptor?? [ 719.310737][ T999] rndis_host 9-1:0.0: rndis: master #0/ffff88807a99d000 slave #1/0000000000000000 [ 719.364899][ T5746] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 719.370176][ T32] kauditd_printk_skb: 19 callbacks suppressed [ 719.370191][ T32] audit: type=1800 audit(1794218306.446:4892): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=291280 res=0 errno=-22 [ 719.388141][ T32] audit: type=1800 audit(1794218306.466:4893): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=291281 res=0 errno=-22 [ 719.440117][ T32] audit: type=1800 audit(1794218306.516:4894): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=291282 res=0 errno=-22 [ 719.464929][ T32] audit: type=1800 audit(1794218306.546:4895): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=291322 res=0 errno=-22 [ 719.510472][ T5642] usb 9-1: USB disconnect, device number 36 [ 719.520497][ T5746] usb 3-1: Using ep0 maxpacket: 8 [ 719.529786][ T5746] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 719.531433][ T5746] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 719.531470][ T5746] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 719.531488][ T5746] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 719.531506][ T5746] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 719.531524][ T5746] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 719.531554][ T5746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.584913][ T999] usb 8-1: new high-speed USB device number 86 using dummy_hcd [ 719.640343][ T32] audit: type=1800 audit(1794218306.716:4896): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=291360 res=0 errno=-22 [ 719.666349][ T32] audit: type=1800 audit(1794218306.746:4897): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=291389 res=0 errno=-22 [ 719.668975][ T32] audit: type=1800 audit(1794218306.746:4898): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=291367 res=0 errno=-22 [ 719.670865][ T32] audit: type=1800 audit(1794218306.746:4899): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=291368 res=0 errno=-22 [ 719.673123][ T32] audit: type=1800 audit(1794218306.746:4900): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=291369 res=0 errno=-22 [ 719.781133][ T32] audit: type=1800 audit(1794218306.856:4901): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=291409 res=0 errno=-22 [ 719.823668][ T999] usb 8-1: Using ep0 maxpacket: 32 [ 719.824549][ T999] usb 8-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 719.825946][ T999] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 719.825999][ T999] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 719.826019][ T999] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 719.826039][ T999] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 719.828926][ T999] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.828945][ T999] usb 8-1: Product: syz [ 719.828956][ T999] usb 8-1: Manufacturer: syz [ 719.828985][ T999] usb 8-1: SerialNumber: syz [ 719.940857][ C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 719.961600][ T5746] usb 3-1: GET_CAPABILITIES returned 0 [ 719.961636][ T5746] usbtmc 3-1:16.0: can't read capabilities [ 720.034851][ T999] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/input/input77 [ 720.164897][T15762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.165228][T15762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.166469][ T999] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 720.166480][ T999] (id 0x00) [ 720.236437][T13830] Bluetooth: hci5: unexpected event for opcode 0x86d5 [ 720.265632][T15762] service_operation: orangefs_mount -- wait timed out; aborting attempt. [ 720.265678][T15762] orangefs_mount: mount request failed with -110 [ 720.434982][ T999] rc_core: IR keymap rc-imon-pad not found [ 720.434996][ T999] Registered IR keymap rc-empty [ 720.435050][ T999] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 720.435064][ T999] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 720.497285][ T999] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0 [ 720.560933][ T999] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0/input78 [ 720.589816][ T999] imon 8-1:155.0: iMON device (15c2:ffdc) on usb<8:86> initialized [ 720.673512][ T5746] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 720.823325][ T5746] usb 10-1: Using ep0 maxpacket: 32 [ 720.825119][ T5746] usb 10-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 720.832367][ T5746] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.865033][ T5746] usb 10-1: config 0 descriptor?? [ 721.068466][ T5746] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 721.082116][ T5746] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 721.099295][ T5746] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 721.099337][ T5746] usb 10-1: media controller created [ 721.146840][ T5746] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 721.513369][ T999] usb 9-1: new full-speed USB device number 37 using dummy_hcd [ 721.667658][ T999] usb 9-1: New USB device found: idVendor=05ac, idProduct=1440, bcdDevice=0.00 [ 721.668587][ T999] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 721.668613][ T999] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 721.668633][ T999] usb 9-1: config 0 interface 0 has no altsetting 0 [ 721.668657][ T999] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.671473][ T999] usb 9-1: config 0 descriptor?? [ 721.672332][T15791] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22 [ 721.956664][ T5746] az6027: usb out operation failed. (-71) [ 721.956700][ T5746] stb0899_attach: Driver disabled by Kconfig [ 721.956763][ T5746] az6027: no front-end attached [ 721.956763][ T5746] [ 721.960189][ T5746] az6027: usb out operation failed. (-71) [ 721.960204][ T5746] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 722.003121][ T5746] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input79 [ 722.040923][ T5746] dvb-usb: schedule remote query interval to 400 msecs. [ 722.040943][ T5746] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 722.074044][ T5746] usb 10-1: USB disconnect, device number 12 [ 722.128011][ T999] input: HID 05ac:1440 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:05AC:1440.002D/input/input80 [ 722.204394][ T999] appleir 0003:05AC:1440.002D: input,hiddev2,hidraw0: USB HID v0.04 Joystick [HID 05ac:1440] on usb-dummy_hcd.8-1/input0 [ 722.270475][ T5746] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 722.324066][T15791] usb usb9: usbfs: process 15791 (syz.8.2296) did not claim interface 1 before use [ 722.325545][T14635] usb 9-1: USB disconnect, device number 37 [ 722.499085][T15793] fido_id[15793]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 722.549681][ T999] usb 8-1: USB disconnect, device number 86 [ 722.624890][T13830] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 722.698935][T14635] usb 3-1: USB disconnect, device number 7 [ 723.204338][T14635] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 723.356372][T14635] usb 3-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80 [ 723.357465][T14635] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.357490][T14635] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.357519][T14635] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.361281][T14635] usb 3-1: config 0 descriptor?? [ 723.484545][ T5811] usb 8-1: new low-speed USB device number 87 using dummy_hcd [ 723.636444][ T5811] usb 8-1: Invalid ep0 maxpacket: 32 [ 723.765776][ T5811] usb 8-1: new low-speed USB device number 88 using dummy_hcd [ 723.795571][T14635] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 723.795608][T14635] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 723.795629][T14635] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 723.795649][T14635] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 723.795668][T14635] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 723.795687][T14635] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 723.795707][T14635] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 723.861880][T14635] cp2112 0003:10C4:EA90.002E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 723.955813][ T5811] usb 8-1: Invalid ep0 maxpacket: 32 [ 723.957484][ T5811] usb usb8-port1: attempt power cycle [ 724.014501][T14635] cp2112 0003:10C4:EA90.002E: Part Number: 0x00 Device Version: 0x00 [ 724.050061][T15820] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2304'. [ 724.074409][T15820] netlink: 'syz.8.2304': attribute type 10 has an invalid length. [ 724.074429][T15820] netlink: 55 bytes leftover after parsing attributes in process `syz.8.2304'. [ 724.102958][T15820] hsr_slave_0: left promiscuous mode [ 724.139430][T15820] hsr_slave_1: left promiscuous mode [ 724.304052][ T5811] usb 8-1: new low-speed USB device number 89 using dummy_hcd [ 724.325702][ T5811] usb 8-1: Invalid ep0 maxpacket: 32 [ 724.455666][ T5811] usb 8-1: new low-speed USB device number 90 using dummy_hcd [ 724.456297][ T32] kauditd_printk_skb: 87 callbacks suppressed [ 724.456309][ T32] audit: type=1800 audit(1794218311.536:4989): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=292296 res=0 errno=-22 [ 724.462554][ T32] audit: type=1800 audit(1794218311.536:4990): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=292300 res=0 errno=-22 [ 724.527684][ T5811] usb 8-1: Invalid ep0 maxpacket: 32 [ 724.535791][ T32] audit: type=1800 audit(1794218311.616:4991): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=292310 res=0 errno=-22 [ 724.556599][ T5811] usb usb8-port1: unable to enumerate USB device [ 724.605766][ T32] audit: type=1800 audit(1794218311.686:4992): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=292287 res=0 errno=-22 [ 724.611606][ T32] audit: type=1800 audit(1794218311.686:4993): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=292288 res=0 errno=-22 [ 724.949336][ T32] audit: type=1800 audit(1794218312.026:4994): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=292338 res=0 errno=-22 [ 724.984368][T15843] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2307'. [ 724.984452][T15843] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2307'. [ 725.051476][T14635] cp2112 0003:10C4:EA90.002E: error reading lock byte: -71 [ 725.079184][T14635] usb 3-1: USB disconnect, device number 8 [ 725.143753][ T999] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 725.305601][ T999] usb 10-1: not running at top speed; connect to a high speed hub [ 725.305655][ T999] usb 10-1: New USB device found: idVendor=0ea0, idProduct=6858, bcdDevice=0.40 [ 725.306609][ T999] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 725.306633][ T999] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 725.308576][ T999] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.308595][ T999] usb 10-1: Product: syz [ 725.308607][ T999] usb 10-1: Manufacturer: syz [ 725.308618][ T999] usb 10-1: SerialNumber: syz [ 725.347388][ T32] audit: type=1800 audit(1794218312.426:4995): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=292391 res=0 errno=-22 [ 725.411341][ T999] oti6858 10-1:1.0: oti6858 converter detected [ 725.422065][ T32] audit: type=1800 audit(1794218312.496:4996): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=292423 res=0 errno=-22 [ 725.451120][ T32] audit: type=1800 audit(1794218312.526:4997): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=292398 res=0 errno=-22 [ 725.480504][ T32] audit: type=1800 audit(1794218312.556:4998): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=292399 res=0 errno=-22 [ 725.480686][ T999] usb 10-1: oti6858 converter now attached to ttyUSB0 [ 725.577979][T14635] usb 10-1: USB disconnect, device number 13 [ 725.610424][T14635] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 725.627096][T14635] oti6858 10-1:1.0: device disconnected [ 725.700016][T15851] FAULT_INJECTION: forcing a failure. [ 725.700016][T15851] name fail_futex, interval 1, probability 0, space 0, times 0 [ 725.700044][T15851] CPU: 0 UID: 0 PID: 15851 Comm: syz.2.2309 Tainted: G L syzkaller #0 PREEMPT(full) [ 725.700067][T15851] Tainted: [L]=SOFTLOCKUP [ 725.700073][T15851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 725.700084][T15851] Call Trace: [ 725.700091][T15851] [ 725.700099][T15851] dump_stack_lvl+0xe8/0x150 [ 725.700129][T15851] should_fail_ex+0x3eb/0x540 [ 725.700154][T15851] get_futex_key+0x1ab/0x1410 [ 725.700187][T15851] ? __pfx_get_futex_key+0x10/0x10 [ 725.700211][T15851] ? __cgroup_account_cputime+0xe8/0x120 [ 725.700239][T15851] futex_wait_setup+0x4a/0x590 [ 725.700263][T15851] ? __futex_wait+0xdb/0x470 [ 725.700284][T15851] __futex_wait+0x175/0x470 [ 725.700309][T15851] ? __pfx___futex_wait+0x10/0x10 [ 725.700331][T15851] ? __pfx_futex_wake_mark+0x10/0x10 [ 725.700353][T15851] ? try_to_wake_up+0x8ce/0x14e0 [ 725.700384][T15851] futex_wait+0x121/0x390 [ 725.700404][T15851] ? __pfx_futex_wait+0x10/0x10 [ 725.700437][T15851] do_futex+0x3e7/0x4e0 [ 725.700466][T15851] ? __pfx_do_futex+0x10/0x10 [ 725.700492][T15851] ? kmem_cache_free+0x184/0x660 [ 725.700522][T15851] __se_sys_futex+0x3a8/0x450 [ 725.700553][T15851] ? __pfx___se_sys_futex+0x10/0x10 [ 725.700578][T15851] ? rcu_is_watching+0x16/0xb0 [ 725.700607][T15851] ? __x64_sys_futex+0x21/0xf0 [ 725.700634][T15851] do_syscall_64+0x16a/0x530 [ 725.700649][T15851] ? trace_irq_disable+0x3b/0x140 [ 725.700670][T15851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.700687][T15851] ? clear_bhb_loop+0x70/0xc0 [ 725.700708][T15851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.700725][T15851] RIP: 0033:0x00007fab12d9fb19 [ 725.700742][T15851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.700804][T15851] RSP: 002b:00007fab13c0e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 725.700823][T15851] RAX: ffffffffffffffda RBX: 00007fab13025fa8 RCX: 00007fab12d9fb19 [ 725.700835][T15851] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fab13025fa8 [ 725.700846][T15851] RBP: 00007fab13025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 725.700857][T15851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 725.700867][T15851] R13: 00007fab13026038 R14: 00007ffc34406b60 R15: 00007ffc34406c48 [ 725.700893][T15851] [ 725.999176][T15851] autofs: Unknown parameter '#@]-' [ 726.118066][T15853] device-mapper: table: 248:17: verity: Data device lookup failed (-ENOENT) [ 726.118089][T15853] device-mapper: ioctl: error adding target to table [ 726.140812][T15853] openvswitch: netlink: ct_state flags 0001010a unsupported [ 726.160223][T15853] FAULT_INJECTION: forcing a failure. [ 726.160223][T15853] name failslab, interval 1, probability 0, space 0, times 0 [ 726.160250][T15853] CPU: 0 UID: 0 PID: 15853 Comm: syz.8.2310 Tainted: G L syzkaller #0 PREEMPT(full) [ 726.160273][T15853] Tainted: [L]=SOFTLOCKUP [ 726.160279][T15853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 726.160290][T15853] Call Trace: [ 726.160297][T15853] [ 726.160304][T15853] dump_stack_lvl+0xe8/0x150 [ 726.160335][T15853] should_fail_ex+0x3eb/0x540 [ 726.160360][T15853] should_failslab+0xa8/0x100 [ 726.160389][T15853] __kmalloc_cache_noprof+0x9e/0x600 [ 726.160411][T15853] ? hook_capable+0x1c3/0x5e0 [ 726.160431][T15853] ? v9fs_get_tree+0xaa/0xac0 [ 726.160450][T15853] ? v9fs_get_tree+0xaa/0xac0 [ 726.160476][T15853] v9fs_get_tree+0xaa/0xac0 [ 726.160496][T15853] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 726.160526][T15853] ? __pfx_v9fs_get_tree+0x10/0x10 [ 726.160555][T15853] vfs_get_tree+0x92/0x2a0 [ 726.160583][T15853] do_new_mount+0x325/0xb00 [ 726.160608][T15853] ? __pfx_do_new_mount+0x10/0x10 [ 726.160631][T15853] ? ns_capable+0x84/0xe0 [ 726.160662][T15853] ? path_mount+0x647/0x1050 [ 726.160684][T15853] ? user_path_at+0xd4/0x160 [ 726.160709][T15853] __se_sys_mount+0x31d/0x420 [ 726.160735][T15853] ? __pfx___se_sys_mount+0x10/0x10 [ 726.160761][T15853] ? __x64_sys_mount+0x20/0xc0 [ 726.160783][T15853] do_syscall_64+0x16a/0x530 [ 726.160799][T15853] ? trace_irq_disable+0x3b/0x140 [ 726.160828][T15853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.160845][T15853] ? clear_bhb_loop+0x70/0xc0 [ 726.160866][T15853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.160883][T15853] RIP: 0033:0x00007fa69519fb19 [ 726.160899][T15853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.160915][T15853] RSP: 002b:00007fa69611c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 726.160933][T15853] RAX: ffffffffffffffda RBX: 00007fa695425fa0 RCX: 00007fa69519fb19 [ 726.160945][T15853] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 00002000000005c0 [ 726.160958][T15853] RBP: 00007fa695237b70 R08: 0000200000000ac0 R09: 0000000000000000 [ 726.160969][T15853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.160979][T15853] R13: 00007fa695426038 R14: 00007fa695425fa0 R15: 00007ffd90bbbb78 [ 726.161005][T15853] [ 726.890256][T15870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 727.054017][ T5811] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 727.203750][ T5811] usb 8-1: Using ep0 maxpacket: 16 [ 727.204242][ T5811] usb 8-1: New USB device found: idVendor=04f3, idProduct=074d, bcdDevice=0.00 [ 727.205119][ T5811] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.205141][ T5811] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.205159][ T5811] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 727.205179][ T5811] usb 8-1: config 0 interface 0 has no altsetting 0 [ 727.205203][ T5811] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.210502][ T5811] usb 8-1: config 0 descriptor?? [ 727.668059][ T5811] elan 0003:04F3:074D.002F: failed to start in urb: -90 [ 727.751490][ T5811] input: HID 04f3:074d as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:04F3:074D.002F/input/input81 [ 727.800254][ T5811] elan 0003:04F3:074D.002F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.7-1/input0 [ 728.220501][ T999] libceph: connect (1)[c::]:6789 error -101 [ 728.220922][ T999] libceph: mon0 (1)[c::]:6789 connect error [ 728.236522][T15896] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(11) [ 728.236544][T15896] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 728.236628][T15896] vhci_hcd vhci_hcd.0: Device attached [ 728.316542][ T999] libceph: connect (1)[c::]:6789 error -101 [ 728.316673][ T999] libceph: mon0 (1)[c::]:6789 connect error [ 728.347625][T15885] ceph: No mds server is up or the cluster is laggy [ 728.413522][ T5811] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 728.484014][T14635] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 728.547737][T14635] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 728.564088][ T5811] usb 9-1: Using ep0 maxpacket: 8 [ 728.566808][ T5811] usb 9-1: New USB device found: idVendor=046d, idProduct=08b5, bcdDevice=3a.11 [ 728.591785][ T5811] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.591806][ T5811] usb 9-1: Product: syz [ 728.591818][ T5811] usb 9-1: Manufacturer: syz [ 728.591829][ T5811] usb 9-1: SerialNumber: syz [ 728.614256][ T5811] usb 9-1: config 0 descriptor?? [ 728.648615][ T5811] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 728.829894][ T5811] pwc: Failed to set LED on/off time (-71) [ 728.830503][ T5811] pwc: send_video_command error -71 [ 728.830514][ T5811] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 728.830592][ T5811] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 728.879489][ T5811] usb 9-1: USB disconnect, device number 38 [ 728.880633][T13316] IPVS: starting estimator thread 0... [ 728.963791][T15903] IPVS: using max 38 ests per chain, 91200 per kthread [ 729.323315][ T5811] usb 9-1: new full-speed USB device number 39 using dummy_hcd [ 729.483753][ T5811] usb 9-1: New USB device found: idVendor=046d, idProduct=08b5, bcdDevice=3a.11 [ 729.497630][ T5811] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.497653][ T5811] usb 9-1: Product: syz [ 729.497665][ T5811] usb 9-1: Manufacturer: syz [ 729.497676][ T5811] usb 9-1: SerialNumber: syz [ 729.502220][ T5811] usb 9-1: config 0 descriptor?? [ 729.513366][ T32] kauditd_printk_skb: 43 callbacks suppressed [ 729.513380][ T32] audit: type=1800 audit(1794218316.586:5042): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=292990 res=0 errno=-22 [ 729.580377][ T32] audit: type=1800 audit(1794218316.656:5043): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=293022 res=0 errno=-22 [ 729.581153][ T32] audit: type=1800 audit(1794218316.656:5044): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=292997 res=0 errno=-22 [ 729.581476][ T5811] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 729.647159][ T32] audit: type=1800 audit(1794218316.726:5045): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=292998 res=0 errno=-22 [ 729.898051][T15898] vhci_hcd: connection reset by peer [ 729.925518][ T263] vhci_hcd vhci_hcd.7: stop threads [ 729.925559][ T263] vhci_hcd vhci_hcd.7: release socket [ 729.925599][ T263] vhci_hcd vhci_hcd.7: disconnect device [ 729.943220][ T5811] pwc: recv_control_msg error -32 req 02 val 2b00 [ 729.979835][ T5642] usb 8-1: USB disconnect, device number 91 [ 730.122138][ T5811] pwc: recv_control_msg error -32 req 02 val 2700 [ 730.133672][ T5811] pwc: recv_control_msg error -32 req 04 val 1600 [ 730.144442][ T5811] pwc: recv_control_msg error -32 req 02 val 2c00 [ 730.148357][ T5811] pwc: recv_control_msg error -32 req 04 val 1000 [ 730.152133][ T5811] pwc: recv_control_msg error -32 req 04 val 1300 [ 730.175540][ T5811] pwc: recv_control_msg error -32 req 04 val 1400 [ 730.218618][T15911] FAULT_INJECTION: forcing a failure. [ 730.218618][T15911] name failslab, interval 1, probability 0, space 0, times 0 [ 730.218648][T15911] CPU: 0 UID: 0 PID: 15911 Comm: syz.7.2324 Tainted: G L syzkaller #0 PREEMPT(full) [ 730.218672][T15911] Tainted: [L]=SOFTLOCKUP [ 730.218678][T15911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 730.218690][T15911] Call Trace: [ 730.218697][T15911] [ 730.218706][T15911] dump_stack_lvl+0xe8/0x150 [ 730.218738][T15911] should_fail_ex+0x3eb/0x540 [ 730.218763][T15911] should_failslab+0xa8/0x100 [ 730.218790][T15911] ? do_getname+0x2e/0x250 [ 730.218809][T15911] kmem_cache_alloc_noprof+0x9c/0x600 [ 730.218829][T15911] ? do_futex+0x3e7/0x4e0 [ 730.218854][T15911] ? do_getname+0x2e/0x250 [ 730.218876][T15911] do_getname+0x2e/0x250 [ 730.218893][T15911] ? getname_flags+0x11/0x20 [ 730.218912][T15911] do_sys_openat2+0xce/0x200 [ 730.218932][T15911] ? __se_sys_futex+0x3a8/0x450 [ 730.218958][T15911] ? __pfx_do_sys_openat2+0x10/0x10 [ 730.218981][T15911] ? rcu_is_watching+0x16/0xb0 [ 730.219008][T15911] __x64_sys_openat+0x138/0x170 [ 730.219031][T15911] do_syscall_64+0x16a/0x530 [ 730.219047][T15911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.219064][T15911] ? clear_bhb_loop+0x70/0xc0 [ 730.219084][T15911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.219101][T15911] RIP: 0033:0x00007fd86919fb19 [ 730.219118][T15911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.219132][T15911] RSP: 002b:00007fd86a04f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 730.219150][T15911] RAX: ffffffffffffffda RBX: 00007fd869425fa0 RCX: 00007fd86919fb19 [ 730.219163][T15911] RDX: 0000000000630800 RSI: 0000200000000540 RDI: 00000000ffffff9c [ 730.219174][T15911] RBP: 00007fd869237b70 R08: 0000000000000000 R09: 0000000000000000 [ 730.219198][T15911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.219207][T15911] R13: 00007fd869426038 R14: 00007fd869425fa0 R15: 00007ffccdaf20e8 [ 730.219232][T15911] [ 730.468392][ T5811] pwc: recv_control_msg error -32 req 02 val 2100 [ 730.482378][ T5811] pwc: recv_control_msg error -32 req 06 val 0600 [ 730.494415][T15894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.494812][T15894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.496482][T15908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.496821][T15908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.499589][ T5811] pwc: recv_control_msg error -71 req 04 val 1500 [ 730.501454][ T5811] pwc: recv_control_msg error -71 req 02 val 2500 [ 730.502170][ T5811] pwc: recv_control_msg error -71 req 02 val 2400 [ 730.502584][ T5811] pwc: recv_control_msg error -71 req 02 val 2600 [ 730.502929][ T5811] pwc: recv_control_msg error -71 req 02 val 2900 [ 730.513441][ T5811] pwc: recv_control_msg error -71 req 02 val 2800 [ 730.530807][ T5811] pwc: recv_control_msg error -71 req 04 val 1100 [ 730.550233][ T5811] pwc: recv_control_msg error -71 req 04 val 1200 [ 730.574282][ T5811] pwc: Failed to power off camera (-71) [ 730.696779][ T5811] pwc: Registered as video103. [ 730.701981][ T5811] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input82 [ 730.740253][ T32] audit: type=1800 audit(1794218317.816:5046): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=293019 res=0 errno=-22 [ 730.740293][ T32] audit: type=1800 audit(1794218317.816:5047): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=293020 res=0 errno=-22 [ 730.792895][ T5811] usb 9-1: USB disconnect, device number 39 [ 730.802036][ T32] audit: type=1800 audit(1794218317.876:5048): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=292999 res=0 errno=-22 [ 730.878884][ T32] audit: type=1800 audit(1794218317.956:5049): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=293021 res=0 errno=-22 [ 731.024676][T13830] Bluetooth: hci1: command 0x2016 tx timeout [ 731.322247][T15926] netlink: 'syz.2.2328': attribute type 13 has an invalid length. [ 731.340643][T15927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.340968][T15927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.573298][ T7553] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 731.728729][ T7553] usb 3-1: unable to get BOS descriptor or descriptor too short [ 731.728772][ T7553] usb 3-1: New USB device found: idVendor=05ac, idProduct=0252, bcdDevice=e7.14 [ 731.729878][ T7553] usb 3-1: config 9 has an invalid interface number: 116 but max is 0 [ 731.729896][ T7553] usb 3-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 731.729911][ T7553] usb 3-1: config 9 has no interface number 0 [ 731.729944][ T7553] usb 3-1: config 9 interface 116 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 8 [ 731.729963][ T7553] usb 3-1: config 9 interface 116 altsetting 1 has an endpoint descriptor with address 0x11, changing to 0x1 [ 731.729982][ T7553] usb 3-1: config 9 interface 116 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 731.730002][ T7553] usb 3-1: config 9 interface 116 altsetting 1 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 731.730023][ T7553] usb 3-1: config 9 interface 116 altsetting 1 endpoint 0x84 has invalid maxpacket 512, setting to 64 [ 731.730044][ T7553] usb 3-1: config 9 interface 116 altsetting 1 has an endpoint descriptor with address 0x48, changing to 0x8 [ 731.730062][ T7553] usb 3-1: config 9 interface 116 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 731.730081][ T7553] usb 3-1: config 9 interface 116 altsetting 1 endpoint 0xA has invalid wMaxPacketSize 0 [ 731.730098][ T7553] usb 3-1: config 9 interface 116 has no altsetting 0 [ 731.907183][ T7553] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.907205][ T7553] usb 3-1: Product: syz [ 731.907217][ T7553] usb 3-1: Manufacturer: syz [ 731.907229][ T7553] usb 3-1: SerialNumber: syz [ 731.942051][T15926] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 731.942406][T15926] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 731.944002][ T32] audit: type=1800 audit(1794218319.026:5050): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=293167 res=0 errno=-22 [ 731.995060][ T32] audit: type=1800 audit(1794218319.076:5051): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=293199 res=0 errno=-22 [ 732.222323][ T7553] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:9.116/input/input83 [ 732.241223][ T4992] bcm5974 3-1:9.116: could not read from device [ 732.254807][ T4992] bcm5974 3-1:9.116: could not read from device [ 732.288848][ T7553] usb 3-1: USB disconnect, device number 9 [ 732.303885][ T4992] bcm5974 3-1:9.116: could not read from device [ 732.309039][ T4992] bcm5974 3-1:9.116: could not read from device [ 732.365595][ T999] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 732.515710][ T999] usb 9-1: Using ep0 maxpacket: 16 [ 732.517868][ T999] usb 9-1: New USB device found: idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 732.518745][ T999] usb 9-1: config index 0 descriptor too short (expected 51443, got 18) [ 732.520485][ T999] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.520504][ T999] usb 9-1: Product: syz [ 732.520515][ T999] usb 9-1: Manufacturer: syz [ 732.520527][ T999] usb 9-1: SerialNumber: syz [ 732.587056][ T999] r8152-cfgselector 9-1: Unknown version 0x0000 [ 732.587079][ T999] r8152-cfgselector 9-1: config 0 descriptor?? [ 732.797576][ T999] r8152-cfgselector 9-1: Unknown version 0x0000 [ 732.797937][ T999] r8152-cfgselector 9-1: No union descriptors [ 732.836169][ T999] r8152-cfgselector 9-1: USB disconnect, device number 40 [ 733.107598][T13830] Bluetooth: hci1: command 0x2016 tx timeout [ 733.204070][ T7553] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 733.224119][ T1750] block nbd0: Possible stuck request ffff888028ca5080: control (read@0,1024B). Runtime 450 seconds [ 733.224192][ T1750] block nbd0: Possible stuck request ffff888028ca5240: control (read@1024,1024B). Runtime 450 seconds [ 733.224215][ T1750] block nbd0: Possible stuck request ffff888028ca5400: control (read@2048,1024B). Runtime 450 seconds [ 733.224236][ T1750] block nbd0: Possible stuck request ffff888028ca55c0: control (read@3072,1024B). Runtime 450 seconds [ 733.365519][ T7553] usb 3-1: Invalid ep0 maxpacket: 64 [ 733.493449][ T7553] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 733.644014][ T7553] usb 3-1: Invalid ep0 maxpacket: 64 [ 733.644790][ T7553] usb usb3-port1: attempt power cycle [ 733.664492][T14635] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 733.824515][ T5811] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 733.973879][ T5811] usb 9-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 733.974813][ T5811] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.974850][ T5811] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.980337][ T5811] usb 9-1: config 0 descriptor?? [ 733.996176][ T7553] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 734.032226][ T7553] usb 3-1: Invalid ep0 maxpacket: 64 [ 734.045590][ T5811] pwc: Askey VC010 type 2 USB webcam detected. [ 734.155606][ T7553] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 734.178903][ T7553] usb 3-1: Invalid ep0 maxpacket: 64 [ 734.179146][ T7553] usb usb3-port1: unable to enumerate USB device [ 734.409767][ T5811] pwc: recv_control_msg error -32 req 02 val 2b00 [ 735.020436][ T5811] pwc: recv_control_msg error -71 req 04 val 1300 [ 735.022177][ T5811] pwc: recv_control_msg error -71 req 04 val 1400 [ 735.037266][ T5811] pwc: recv_control_msg error -71 req 02 val 2000 [ 735.048942][ T5811] pwc: recv_control_msg error -71 req 02 val 2100 [ 735.051373][ T5811] pwc: recv_control_msg error -71 req 04 val 1500 [ 735.054713][ T5811] pwc: recv_control_msg error -71 req 02 val 2500 [ 735.065610][ T5811] pwc: recv_control_msg error -71 req 02 val 2400 [ 735.086394][ T5811] pwc: recv_control_msg error -71 req 02 val 2600 [ 735.096640][ T5811] pwc: recv_control_msg error -71 req 02 val 2900 [ 735.097049][ T5811] pwc: recv_control_msg error -71 req 02 val 2800 [ 735.101123][ T5811] pwc: recv_control_msg error -71 req 04 val 1100 [ 735.110505][ T5811] pwc: recv_control_msg error -71 req 04 val 1200 [ 735.136538][ T5811] pwc: Registered as video103. [ 735.149409][ T32] kauditd_printk_skb: 21 callbacks suppressed [ 735.149422][ T32] audit: type=1800 audit(1794218322.226:5073): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=293578 res=0 errno=-22 [ 735.179101][ T5811] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input84 [ 735.195366][ T32] audit: type=1800 audit(1794218322.276:5074): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=293582 res=0 errno=-22 [ 735.202380][ T32] audit: type=1800 audit(1794218322.276:5075): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=293595 res=0 errno=-22 [ 735.260812][ T32] audit: type=1800 audit(1794218322.336:5076): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=293611 res=0 errno=-22 [ 735.260902][ T5811] usb 9-1: USB disconnect, device number 41 [ 735.297860][ T32] audit: type=1800 audit(1794218322.376:5077): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=293614 res=0 errno=-22 [ 735.301263][ T32] audit: type=1800 audit(1794218322.376:5078): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=293613 res=0 errno=-22 [ 735.302298][ T32] audit: type=1800 audit(1794218322.376:5079): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=293612 res=0 errno=-22 [ 735.390716][ T32] audit: type=1800 audit(1794218322.466:5080): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=293603 res=0 errno=-22 [ 735.390772][ T32] audit: type=1800 audit(1794218322.466:5081): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=293606 res=0 errno=-22 [ 736.395177][ T5811] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 736.444210][ T7553] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 736.476838][T15970] device-mapper: ioctl: Empty message received. [ 736.482891][T15974] device-mapper: ioctl: Empty message received. [ 736.546320][ T5811] usb 3-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 736.549009][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.549029][ T5811] usb 3-1: Product: syz [ 736.549041][ T5811] usb 3-1: Manufacturer: syz [ 736.549052][ T5811] usb 3-1: SerialNumber: syz [ 736.593726][ T32] audit: type=1800 audit(1794218323.676:5082): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=293674 res=0 errno=-22 [ 736.628312][ T7553] usb 10-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 736.642930][ T7553] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 736.674382][ T7553] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 736.674406][ T7553] usb 10-1: Product: syz [ 736.674418][ T7553] usb 10-1: Manufacturer: syz [ 736.752052][ T7553] usb 10-1: selecting invalid altsetting 1 [ 736.778007][ T7553] dvb_ttusb_budget: ttusb_init_controller: error [ 736.778025][ T7553] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 736.826090][ T5811] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 736.826137][ T5811] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 736.902764][ T5811] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 736.902808][ T5811] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 736.962007][T15968] netlink: 65051 bytes leftover after parsing attributes in process `syz.9.2342'. [ 736.976478][T15968] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 64 (only 8 groups) [ 737.004843][ T5811] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 737.016712][ T5811] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 737.107669][ T7553] DVB: Unable to find symbol cx22700_attach() [ 737.239858][ T7553] DVB: Unable to find symbol tda10046_attach() [ 737.239876][ T7553] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 737.266236][ T7553] usb 10-1: USB disconnect, device number 14 [ 737.736694][T15986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2341'. [ 737.766867][T15986] bond0: (slave bond_slave_0): Releasing backup interface [ 737.844978][T15986] bond_slave_0: entered promiscuous mode [ 737.844998][T15986] bond_slave_0: entered allmulticast mode [ 737.913355][ T5811] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 738.063999][ T5811] usb 9-1: Using ep0 maxpacket: 32 [ 738.065129][ T5811] usb 9-1: New USB device found: idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 738.066710][ T5811] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 738.066729][ T5811] usb 9-1: config 0 has no interface number 0 [ 738.066758][ T5811] usb 9-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 738.066774][ T5811] usb 9-1: config 0 interface 1 has no altsetting 0 [ 738.142183][ T5811] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.142206][ T5811] usb 9-1: Product: syz [ 738.142217][ T5811] usb 9-1: Manufacturer: syz [ 738.142227][ T5811] usb 9-1: SerialNumber: syz [ 738.180150][ T5811] usb 9-1: config 0 descriptor?? [ 738.400214][T15978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.400581][T15978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.505885][ T5811] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 738.505913][ T5811] cx231xx 9-1:0.1: Not found matching IAD interface [ 738.539177][ T5811] usb 9-1: USB disconnect, device number 42 [ 739.058022][ T5811] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 739.205089][ T5811] usb 10-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 739.207243][ T5811] usb 10-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 739.207277][ T5811] usb 10-1: config 253 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 739.209559][ T5811] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 739.209578][ T5811] usb 10-1: SerialNumber: syz [ 739.791366][ T5811] rndis_host 10-1:253.0: skipping garbage [ 739.791386][ T5811] rndis_host 10-1:253.0: missing RNDIS status endpoint [ 739.892288][ T5811] usb 10-1: USB disconnect, device number 15 [ 740.349772][ T5746] usb 3-1: USB disconnect, device number 14 [ 740.960907][T16041] syzkaller1: entered promiscuous mode [ 740.960925][T16041] syzkaller1: entered allmulticast mode [ 741.477066][T16064] netlink: 'syz.9.2356': attribute type 7 has an invalid length. [ 742.451811][ T32] kauditd_printk_skb: 35 callbacks suppressed [ 742.451827][ T32] audit: type=1800 audit(1794218329.526:5118): pid=16072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2358" name="wakeup_count" dev="sysfs" ino=1412 res=0 errno=-22 [ 742.572929][ T32] audit: type=1800 audit(1794218329.646:5119): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=294438 res=0 errno=-22 [ 742.607349][ T32] audit: type=1800 audit(1794218329.686:5120): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=294453 res=0 errno=-22 [ 743.203295][ T5746] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 743.333371][ T5746] usb 10-1: device descriptor read/64, error -71 [ 743.573346][ T5746] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 743.713380][ T5746] usb 10-1: device descriptor read/64, error -71 [ 743.824790][ T5746] usb usb10-port1: attempt power cycle [ 744.163405][ T5746] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 744.185483][ T5746] usb 10-1: device descriptor read/8, error -71 [ 744.423579][ T5746] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 744.447159][ T5746] usb 10-1: device descriptor read/8, error -71 [ 744.564734][ T5746] usb usb10-port1: unable to enumerate USB device [ 746.100827][ T32] audit: type=1800 audit(1794218333.176:5121): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=294476 res=0 errno=-22 [ 746.149638][ T32] audit: type=1800 audit(1794218333.226:5122): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=294487 res=0 errno=-22 [ 746.221758][T13830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 746.237560][T13830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 746.253538][ T64] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.271395][T13830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 746.281050][T13830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 746.281582][T13830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 746.454913][ T32] audit: type=1800 audit(1794218333.526:5123): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=294506 res=0 errno=-22 [ 746.454981][ T32] audit: type=1800 audit(1794218333.536:5124): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=294517 res=0 errno=-22 [ 747.051885][ T64] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.268641][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.268687][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.320433][ T64] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.706355][ T64] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.796532][T16118] comedi comedi1: pcm3724: I/O base address or length out of range [ 748.050556][ T32] audit: type=1800 audit(1794218335.126:5125): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=294610 res=0 errno=-22 [ 748.051991][ T32] audit: type=1800 audit(1794218335.126:5126): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=294621 res=0 errno=-22 [ 748.098962][ T5811] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 748.125382][ T5644] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 748.130592][ T5644] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 748.159049][ T5644] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 748.179342][ T5644] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 748.182138][ T5644] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 748.254926][ T5811] usb 10-1: device descriptor read/64, error -71 [ 748.279358][ T32] audit: type=1800 audit(1794218335.356:5127): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=294640 res=0 errno=-22 [ 748.284459][ T32] audit: type=1800 audit(1794218335.366:5128): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=294651 res=0 errno=-22 [ 748.383450][T13830] Bluetooth: hci5: command tx timeout [ 748.494896][ T5811] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 748.625325][ T5811] usb 10-1: device descriptor read/64, error -71 [ 748.734305][ T5811] usb usb10-port1: attempt power cycle [ 748.933122][ T32] audit: type=1800 audit(1794218336.006:5129): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=294663 res=0 errno=-22 [ 748.967628][ T32] audit: type=1800 audit(1794218336.046:5130): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=294668 res=0 errno=-22 [ 748.967678][ T32] audit: type=1800 audit(1794218336.046:5131): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=294672 res=0 errno=-22 [ 749.021572][ T32] audit: type=1800 audit(1794218336.096:5132): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=294671 res=0 errno=-22 [ 749.050012][ T32] audit: type=1800 audit(1794218336.126:5133): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=294674 res=0 errno=-22 [ 749.074253][ T5811] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 749.110096][ T5811] usb 10-1: device descriptor read/8, error -71 [ 749.231026][ T32] audit: type=1800 audit(1794218336.306:5134): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=294749 res=0 errno=-22 [ 749.344839][ T5811] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 749.366738][ T5811] usb 10-1: device descriptor read/8, error -71 [ 749.467800][ T64] bridge_slave_1: left allmulticast mode [ 749.467823][ T64] bridge_slave_1: left promiscuous mode [ 749.467994][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.474972][ T5811] usb usb10-port1: unable to enumerate USB device [ 749.522859][ T64] bridge_slave_0: left allmulticast mode [ 749.522885][ T64] bridge_slave_0: left promiscuous mode [ 749.523049][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.317613][T13830] Bluetooth: hci6: command tx timeout [ 750.464621][T13830] Bluetooth: hci5: command tx timeout [ 750.701289][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.718319][ T64] bond0 (unregistering): Released all slaves [ 750.978596][T16100] rxe_eth0 speed is unknown, defaulting to 1000 [ 751.538609][T16150] netlink: 10 bytes leftover after parsing attributes in process `syz.8.2374'. [ 751.669898][T16154] FAULT_INJECTION: forcing a failure. [ 751.669898][T16154] name failslab, interval 1, probability 0, space 0, times 0 [ 751.669928][T16154] CPU: 0 UID: 0 PID: 16154 Comm: syz.8.2374 Tainted: G L syzkaller #0 PREEMPT(full) [ 751.669950][T16154] Tainted: [L]=SOFTLOCKUP [ 751.669957][T16154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 751.669967][T16154] Call Trace: [ 751.669984][T16154] [ 751.669997][T16154] dump_stack_lvl+0xe8/0x150 [ 751.670033][T16154] should_fail_ex+0x3eb/0x540 [ 751.670059][T16154] should_failslab+0xa8/0x100 [ 751.670089][T16154] __kvmalloc_node_noprof+0x171/0x820 [ 751.670112][T16154] ? __kmalloc_cache_noprof+0x31c/0x600 [ 751.670137][T16154] ? __kmalloc_cache_noprof+0x148/0x600 [ 751.670158][T16154] ? percpu_ref_init+0xc5/0x350 [ 751.670174][T16154] ? io_alloc_cache_init+0x42/0x140 [ 751.670190][T16154] ? io_alloc_cache_init+0x42/0x140 [ 751.670212][T16154] io_alloc_cache_init+0x42/0x140 [ 751.670232][T16154] io_ring_ctx_alloc+0x508/0xb80 [ 751.670257][T16154] io_uring_create+0x50/0x980 [ 751.670279][T16154] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 751.670298][T16154] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 751.670316][T16154] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 751.670347][T16154] ? rcu_is_watching+0x16/0xb0 [ 751.670379][T16154] do_syscall_64+0x16a/0x530 [ 751.670394][T16154] ? trace_irq_disable+0x3b/0x140 [ 751.670415][T16154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.670432][T16154] ? clear_bhb_loop+0x70/0xc0 [ 751.670453][T16154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.670469][T16154] RIP: 0033:0x00007fa69519fb19 [ 751.670489][T16154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.670511][T16154] RSP: 002b:00007fa6960f8fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 751.670532][T16154] RAX: ffffffffffffffda RBX: 0000200000000200 RCX: 00007fa69519fb19 [ 751.670551][T16154] RDX: 0000200000000640 RSI: 0000200000000200 RDI: 0000000000000020 [ 751.670563][T16154] RBP: 00007fa695237b70 R08: 0000000000000000 R09: 00002000000000c0 [ 751.670575][T16154] R10: 0000200000000680 R11: 0000000000000206 R12: 0000200000000640 [ 751.670587][T16154] R13: 0000200000000680 R14: 0000200000000600 R15: 00007ffd90bbbb78 [ 751.670613][T16154] [ 752.387378][ T5644] Bluetooth: hci6: command tx timeout [ 752.543472][ T5644] Bluetooth: hci5: command tx timeout [ 752.612771][ T5302] 8021q: adding VLAN 0 to HW filter on device eth9 [ 752.627600][T16100] lo speed is unknown, defaulting to 1000 [ 752.655732][ T7553] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 752.735504][T16120] rxe_eth0 speed is unknown, defaulting to 1000 [ 752.815981][ T7553] usb 10-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 752.822669][ T7553] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.822692][ T7553] usb 10-1: Product: syz [ 752.822704][ T7553] usb 10-1: Manufacturer: syz [ 752.822715][ T7553] usb 10-1: SerialNumber: syz [ 752.901674][ T7553] usb 10-1: config 0 descriptor?? [ 752.975120][ T7553] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 753.062726][ T7553] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 753.075854][ T7553] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 753.075897][ T7553] usb 10-1: media controller created [ 753.178519][ T7553] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 753.592835][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027c9c400: rx timeout, send abort [ 753.593026][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888027c9c400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 753.723033][ T7553] DVB: Unable to find symbol mt352_attach() [ 754.012673][ T7553] DVB: Unable to find symbol nxt6000_attach() [ 754.012688][ T7553] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 754.094469][ T7553] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input86 [ 754.141722][T16173] input: syz1 as /devices/virtual/input/input85 [ 754.154415][ T32] kauditd_printk_skb: 19 callbacks suppressed [ 754.154431][ T32] audit: type=1800 audit(1794218341.236:5154): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=301544 res=0 errno=-22 [ 754.158874][ T32] audit: type=1800 audit(1794218341.236:5155): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=301559 res=0 errno=-22 [ 754.227592][ T32] audit: type=1800 audit(1794218341.306:5156): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=301562 res=0 errno=-22 [ 754.268105][ T32] audit: type=1800 audit(1794218341.346:5157): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=301561 res=0 errno=-22 [ 754.292396][ T7553] dvb-usb: schedule remote query interval to 1000 msecs. [ 754.292415][ T7553] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 754.292430][ T7553] dvb-usb: bulk message failed: -22 (7/0) [ 754.292442][ T7553] dvb-usb: bulk message failed: -22 (7/0) [ 754.356731][ T32] audit: type=1800 audit(1794218341.426:5158): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=301560 res=0 errno=-22 [ 754.357573][ T32] audit: type=1800 audit(1794218341.436:5159): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=301551 res=0 errno=-22 [ 754.402899][ T32] audit: type=1800 audit(1794218341.486:5160): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=298793 res=0 errno=-22 [ 754.402942][ T32] audit: type=1800 audit(1794218341.486:5161): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=298794 res=0 errno=-22 [ 754.453618][ T64] hsr_slave_0: left promiscuous mode [ 754.455518][ T32] audit: type=1800 audit(1794218341.536:5162): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=298773 res=0 errno=-22 [ 754.465428][ T5644] Bluetooth: hci6: command tx timeout [ 754.494185][ T32] audit: type=1800 audit(1794218341.566:5163): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=301554 res=0 errno=-22 [ 754.535429][ T64] hsr_slave_1: left promiscuous mode [ 754.536215][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.536232][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.581956][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.581978][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.623905][ T5644] Bluetooth: hci5: command tx timeout [ 754.857360][ T64] veth1_macvtap: left promiscuous mode [ 754.857423][ T64] veth0_macvtap: left promiscuous mode [ 754.857554][ T64] veth1_vlan: left promiscuous mode [ 754.859045][ T64] veth0_vlan: left promiscuous mode [ 755.329748][ T5642] usb 10-1: USB disconnect, device number 24 [ 755.532045][ T5642] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 755.702585][ T5811] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 755.874662][ T5811] usb 9-1: Using ep0 maxpacket: 32 [ 755.875561][ T5811] usb 9-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 755.876483][ T5811] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 755.876515][ T5811] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 755.876534][ T5811] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 755.876553][ T5811] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 755.880692][ T5811] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.880710][ T5811] usb 9-1: Product: syz [ 755.880732][ T5811] usb 9-1: Manufacturer: syz [ 755.880743][ T5811] usb 9-1: SerialNumber: syz [ 756.019474][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 756.033287][ T5642] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 756.060347][ T5811] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input87 [ 756.187778][ T5642] usb 10-1: not running at top speed; connect to a high speed hub [ 756.187806][ T5642] usb 10-1: New USB device found: idVendor=0000, idProduct=d970, bcdDevice=1.00 [ 756.188672][ T5642] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 756.188688][ T5642] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 6 [ 756.188721][ T5642] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.365139][ T5811] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 756.365158][ T5811] (id 0x00) [ 756.524705][ T5811] rc_core: IR keymap rc-imon-pad not found [ 756.524742][ T5811] Registered IR keymap rc-empty [ 756.524801][ T5811] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 756.524815][ T5811] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 756.545703][ T5644] Bluetooth: hci6: command tx timeout [ 756.598253][ T5811] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0 [ 756.666193][ T64] team0 (unregistering): Port device team_slave_1 removed [ 756.698940][ T5811] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input88 [ 756.732221][ T5811] imon 9-1:155.0: iMON device (15c2:ffdc) on usb<9:43> initialized [ 756.751109][ T64] team0 (unregistering): Port device team_slave_0 removed [ 756.901652][ T5811] usb 9-1: USB disconnect, device number 43 [ 757.586632][T16120] lo speed is unknown, defaulting to 1000 [ 758.150739][ T35] INFO: task syz.3.1917:13957 blocked for more than 143 seconds. [ 758.150766][ T35] Tainted: G L syzkaller #0 [ 758.150776][ T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 758.150784][ T35] task:syz.3.1917 state:D stack:26560 pid:13957 tgid:13956 ppid:5641 task_flags:0x400140 flags:0x00080002 [ 758.150907][ T35] Call Trace: [ 758.150914][ T35] [ 758.150925][ T35] __schedule+0x17dd/0x5830 [ 758.150993][ T35] ? __pfx___schedule+0x10/0x10 [ 758.151026][ T35] ? schedule+0x90/0x2b0 [ 758.151052][ T35] schedule+0x164/0x2b0 [ 758.151078][ T35] schedule_preempt_disabled+0x13/0x30 [ 758.151103][ T35] __mutex_lock+0x7c4/0x15a0 [ 758.151139][ T35] ? __mutex_lock+0x5cd/0x15a0 [ 758.151158][ T35] ? sync_bdevs+0x294/0x480 [ 758.151178][ T35] ? __pfx___mutex_lock+0x10/0x10 [ 758.151200][ T35] ? __pfx_kobject_get_unless_zero+0x10/0x10 [ 758.151224][ T35] ? iput+0x451/0xf00 [ 758.151250][ T35] sync_bdevs+0x294/0x480 [ 758.151289][ T35] __ia32_sys_sync+0xc5/0x120 [ 758.151316][ T35] ? __pfx___ia32_sys_sync+0x10/0x10 [ 758.151345][ T35] ? do_syscall_64+0xc8/0x530 [ 758.151362][ T35] do_syscall_64+0x16a/0x530 [ 758.151377][ T35] ? trace_irq_disable+0x3b/0x140 [ 758.151398][ T35] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.151432][ T35] ? clear_bhb_loop+0x70/0xc0 [ 758.151453][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.151471][ T35] RIP: 0033:0x00007f55d259fb19 [ 758.151487][ T35] RSP: 002b:00007f55d34c9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 758.151504][ T35] RAX: ffffffffffffffda RBX: 00007f55d2825fa0 RCX: 00007f55d259fb19 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 758.151517][ T35] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 758.151527][ T35] RBP: 00007f55d2825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 758.151538][ T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 758.151548][ T35] R13: 00007f55d2826038 R14: 00007f55d2825fa0 R15: 00007fff7c8c0308 [ 758.151654][ T35] [ 758.151696][ T35] [ 758.151696][ T35] Showing all locks held in the system: [ 758.151708][ T35] locks held by khungtaskd/35: 1, last CPU#0: [ 758.151797][ T35] #0: ffffffff9035a560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 758.151913][ T35] locks held by dhcpcd/5301: 2, on CPU#0: [ 758.151946][ T35] #0: ffffffff91929128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 758.151998][ T35] #1: ffffffff91928f60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 758.152042][ T35] locks held by getty/5403: 2, on CPU#1: [ 758.152054][ T35] #0: ffff888037bc10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 758.152112][ T35] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 758.152150][ T35] locks held by kworker/0:4/5642: 5, on CPU#0: [ 758.152162][ T35] #0: ffff8880222add50 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 758.309137][ T35] #1: ffffc90004027c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 758.309184][ T35] #2: ffff88802c2c91d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 758.309313][ T35] #3: ffff888024b8d1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 758.309405][ T35] #4: ffff88802bf8e1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 758.309453][ T35] locks held by kworker/0:6/5811: 2, last CPU#0: [ 758.309466][ T35] #0: ffff88813fe65d50 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 758.309510][ T35] #1: ffffc90004bafc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 758.309605][ T35] locks held by udevd/8310: 1, on CPU#0: [ 758.309615][ T35] #0: ffff888028aee350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 758.309653][ T35] locks held by kworker/u8:18/8718: 3, last CPU#0: [ 758.309665][ T35] #0: ffff88813fea4150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 758.309724][ T35] #1: ffffc90003a57c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 758.309768][ T35] #2: ffff888036e43258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 758.309880][ T35] locks held by kworker/u8:22/13316: 1, last CPU#0: [ 758.309898][ T35] #0: ffffffff9035a560 (rcu_read_lock){....}-{1:3}, at: process_scheduled_works+0x97a/0x1630 [ 758.309943][ T35] locks held by syz.3.1917/13957: 1, on CPU#0: [ 758.309954][ T35] #0: ffff888028aee350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x294/0x480 [ 758.310014][ T35] locks held by syz.6.2151/15113: 1, on CPU#0: [ 758.310025][ T35] #0: ffff888028aee350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x294/0x480 [ 758.310066][ T35] locks held by syz.7.2324/15911: 1, last CPU#0: [ 758.310077][ T35] #0: ffff88807d351378 (&ima_iint_mutex_key[depth]#3){+.+.}-{4:4}, at: process_measurement+0x7d0/0x1c10 [ 758.310145][ T35] locks held by syz-executor/16100: 2, last CPU#0: [ 758.310157][ T35] #0: ffffffff91001ea8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 758.310225][ T35] #1: ffffffff918c4ca0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 758.310283][ T35] locks held by syz-executor/16120: 2, on CPU#0: [ 758.310296][ T35] #0: ffffffff91e2e420 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 758.310343][ T35] #1: ffffffff918c4ca0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 758.310385][ T35] locks held by syz.9.2380/16187: 4, on CPU#0: [ 758.310397][ T35] #0: ffffffff91929128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 758.310457][ T35] #1: ffffffff91928f60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 758.310498][ T35] #2: ffff88803705c140 (&dev->mutex){....}-{4:4}, at: nfc_dev_up+0x3c/0x350 [ 758.310555][ T35] #3: ffff888095eba348 (&ndev->req_lock){+.+.}-{4:4}, at: nci_dev_up+0xa3/0xdc0 [ 758.456580][ T35] locks held by syz.8.2381/16204: 2, on CPU#0: [ 758.456596][ T35] #0: ffffffff91929128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 758.456661][ T35] #1: ffffffff91928f60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 758.456715][ T35] [ 758.456720][ T35] ============================================= [ 758.456720][ T35] [ 758.456738][ T35] NMI backtrace for cpu 0 [ 758.456753][ T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 758.456775][ T35] Tainted: [L]=SOFTLOCKUP [ 758.456781][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 758.456792][ T35] Call Trace: [ 758.456798][ T35] [ 758.456807][ T35] dump_stack_lvl+0xe8/0x150 [ 758.456833][ T35] nmi_cpu_backtrace+0x274/0x2d0 [ 758.456855][ T35] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 758.456874][ T35] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 758.456898][ T35] sys_info+0x135/0x170 [ 758.456916][ T35] watchdog+0x1073/0x10f0 [ 758.456952][ T35] ? watchdog+0x209/0x10f0 [ 758.456977][ T35] kthread+0x38b/0x480 [ 758.456995][ T35] ? __pfx_watchdog+0x10/0x10 [ 758.457013][ T35] ? __pfx_kthread+0x10/0x10 [ 758.457030][ T35] ret_from_fork+0x514/0xb70 [ 758.457049][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 758.457064][ T35] ? __switch_to+0xc78/0x1410 [ 758.457088][ T35] ? __pfx_kthread+0x10/0x10 [ 758.457106][ T35] ret_from_fork_asm+0x1a/0x30 [ 758.457142][ T35] [ 758.457173][ T35] Kernel panic - not syncing: hung_task: blocked tasks [ 758.927364][ T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 758.938047][ T35] Tainted: [L]=SOFTLOCKUP [ 758.942411][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 758.952657][ T35] Call Trace: [ 758.955947][ T35] [ 758.958876][ T35] vpanic+0x26f/0x710 [ 758.962864][ T35] panic+0xc5/0xd0 [ 758.966589][ T35] ? __pfx_panic+0x10/0x10 [ 758.971005][ T35] ? nmi_cpu_backtrace+0x2b0/0x2d0 [ 758.976127][ T35] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 758.982363][ T35] watchdog+0x10e7/0x10f0 [ 758.986730][ T35] ? watchdog+0x209/0x10f0 [ 758.991177][ T35] kthread+0x38b/0x480 [ 758.995269][ T35] ? __pfx_watchdog+0x10/0x10 [ 759.000131][ T35] ? __pfx_kthread+0x10/0x10 [ 759.004734][ T35] ret_from_fork+0x514/0xb70 [ 759.009334][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 759.014453][ T35] ? __switch_to+0xc78/0x1410 [ 759.019144][ T35] ? __pfx_kthread+0x10/0x10 [ 759.023734][ T35] ret_from_fork_asm+0x1a/0x30 [ 759.028739][ T35] [ 759.031869][ T35] Kernel Offset: disabled [ 759.036202][ T35] Rebooting in 86400 seconds..