last executing test programs: 16m39.414362264s ago: executing program 32 (id=528): socket(0x1e, 0x1, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000001240)=0x6, 0x4) (async) getsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x300000a, 0x12, r0, 0x5708e000) (async) madvise(&(0x7f00004e4000/0x3000)=nil, 0x3000, 0x3) 16m6.742073761s ago: executing program 1 (id=673): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x20a, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000003200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) readv(r4, &(0x7f0000000740)=[{&(0x7f0000000240)=""/82, 0x52}], 0x1) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) 16m6.551551512s ago: executing program 1 (id=674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1b0}}, 0x0) 16m6.491169404s ago: executing program 1 (id=675): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000890}, 0x0) 16m6.375481453s ago: executing program 1 (id=676): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) fchdir(0xffffffffffffffff) chroot(&(0x7f00000001c0)='./file0\x00') pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) write$P9_RLERRORu(r0, &(0x7f0000000200)={0x19, 0x7, 0x2, {{0xc, 'binfmt_misc\x00'}, 0x3}}, 0x19) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00') pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 16m6.232590335s ago: executing program 1 (id=677): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 16m5.956733504s ago: executing program 1 (id=678): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, '\x00'}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8040, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/242) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="050200000000fddbdf25120000001800018014000200626f6e645f736c6176655f310000000008000600010000000800"], 0x3c}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x101803, 0x8) ioctl$PPPIOCGFLAGS1(r1, 0x40047452, &(0x7f0000000100)) 16m5.524596852s ago: executing program 33 (id=678): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, '\x00'}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8040, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/242) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="050200000000fddbdf25120000001800018014000200626f6e645f736c6176655f310000000008000600010000000800"], 0x3c}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x101803, 0x8) ioctl$PPPIOCGFLAGS1(r1, 0x40047452, &(0x7f0000000100)) 14m54.55090884s ago: executing program 0 (id=1017): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, 0x0) 14m54.426987158s ago: executing program 0 (id=1019): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='projid_map\x00') ftruncate(r1, 0x7fffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = eventfd(0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xfea}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0x10000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f0000000500)=""/88, &(0x7f0000000480)=""/49}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x7e, &(0x7f0000000080)=""/126}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 14m54.29013715s ago: executing program 0 (id=1021): fsmount(0xffffffffffffffff, 0x0, 0x1f54220a580ca10) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x48, 0x1, 0x0, "b49e1b6225be4279fa07fbde4749573e7c17e6e724ae09b9424f5ab23870ecd4"}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) 14m54.114051702s ago: executing program 0 (id=1024): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x40000a}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000000)={0x1, 0x0, 0x0}) write$char_usb(r2, &(0x7f0000000040)="e2", 0xff0f) listen(r0, 0x1ad72f7) r3 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000000)=0x9, 0x4) accept4$netrom(r0, 0x0, 0x0, 0x80000) 14m53.12482638s ago: executing program 0 (id=1026): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0xa4002, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = mq_open(&(0x7f00000004c0)='\r\x00elinu\xef\xe3\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x05\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\x01\x04v\xccvW\xd0m\x04\x13\xd8\xfd\xb6\x00\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xda`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4}) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x14}) mq_timedreceive(r1, &(0x7f0000000340)=""/195, 0xc3, 0x7fff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000000, 0x10010, r2, 0x0) r4 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) poll(&(0x7f0000000100)=[{r0, 0x1}, {r4, 0x300}, {r4, 0x88}, {r4, 0x8014}, {r0, 0x4082}], 0x5, 0x8) 14m53.052651036s ago: executing program 0 (id=1027): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x0, 0x31, 0x6, {0x6, 0x32, "f0662c67"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x0, 0x31, 0x6, {0x6, 0x32, "f0662c67"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{r1}, "aecc7c25123f1b7e081b1299bd28affc6f927b59e4a0f59bfeafa2568d306f276d6e3fe99dd526830630f9e7374f098055cc40d3d93e9126bcbb45896218690cb1e0456cf0b05873c9b9582b7e468477fdeedc52bcc78b60363155cab1079d6cab5e42320ce6452dfaaa95097daebed53147d6601e999844fe137bac228e696f12d893513f40e8cd0f0608268a1fd13615738cea7e733712336f6d4b34baf0066e1715e9e3b8f955c960f151f1a173b28cb60279d8283ed3343a31bc9bec7976217c1ea49edf684bc60f31f32d535ed2c86b5bf29cffe4e56a27aa5a80199ab82d6b1c48a9a183c6a5a06e40ef01009445e44f57010872151922306368616c703593ec12c4a52a163cd289da3c19bafddf79b1f01e2743cc6dcce199a3b9dbe668bb11f68bb5a7ad54cc02cefa68fa941ab1f94149bee144f39f15cf2b1fe7507dee20cb29710de0195a017571ea8b0de6344854ec9b9dc977bbf81c2d7303ccf8af576f0ef6c0f68fc3547b18e7c9f504923a160924a7b3649f02c32feaed934d5acb92ee685cf18e5865ca4976ded3a2257404ade79e6476ac604661cb5a46d76534446df9f148f7639b2116faff5a8dc24ca1aafa584bd4cd298e2190d5d2d8e7972045b2d899f5097d25e4cad3abfc1ee5691eb14e7a9342c0257176e50a188b595c1476858365a86fbb7b1ea5c0958f0f0f10a7a68003b61a8f2bd9498cdb7acaaa201f94937998e27ae2123069fd4d8acd1b19247c3bf5c86575f3c71640dd3b9d46655d217978d803464469574e1d8e48444b0cb44e645a4a96dc894d835ca678bd6048b9426c8d2eb20f31b1282958147bf033d1d40aa6033ec4d839d9625a5b930719a6e58a54b644dd70735e74083c100392bea63219e1ab880f3764447cd7eb30a8aee45e863a13386b42608e2ea5d1808f19acd4e2c8e3b3838fb4e89164b5055a681eced7de8ce6425735b3b7f00cf95927794c2d4c29b466abb8cff45888ef2753f669d7a63ddf66061aaf47b5b9def7d6ac71b69fb34e3ae683907025a9077f5d819b684b4443acfa7ea476d7cf4b88b8f2d3f3a3756c2414d8aa79f3c70afd6fe1f5070c319e8bd542ddf4a3d25ff2c9ceab557d665b8851e51cf229ad8465eb8b6ce9f5b9d3c690819ccfd79d2b4ac84923d3581ce1fc97c26b6538e9c812b254bda4494b9671cf31d2b4a780307661dc73d0f5901e806645153b1dbaa50770a45de4e21cf9c2b8b38a537882d6d48672c624f76f20c4d82e706a93f1b7b0e78ba800144aa51c29e85d86c596cd749b4df92eb159fa89e83080595817de61a873ae4953b36ec069c4fc3c7e0053cfd22316eb05528fb23a068d23c5e6ccf0e9ebcec74634f3a96b3df3e6fe7d2fa28cf2f92d06912b73b361e541361e16cf852f123bff169221dc0bf8951e0c486cf50ae2e1ca169e8a8360b2e9e3d0c1947f1c8df40a9e75c6b1d6244b23ee2055d13d0a83299d077164bcdafe3a56aaf8e8d24bd03a483a078570cb8511dafcfff82d4c925a6b9edede1bdbf8e44e22aeb070b8de4f76c2a29226d27a76e0904915686f4cd02294224c4afc7cd5c715c3f0fabeedb207c0887eb3d0e25637df2242666cc35ad6e40f0295ee2899dde0f84dff4aca6a3cd97712f6bcb8aedffe6cff4be5f396f1d4f39f868fd64326de87b708db28e1c08aacb2118995d5494bb035b31ab188188ca89acc1e57cf8519f9b45c78cd2fe2c30211ae0fc933c9798b961b05b072ce432a0eafb9cad22f26dd86eb7833413ffc6dd3428f8b13b7ad2f7c5911db1eb39a22d5c49d5d4b2466b08ac4e2c06eb059f6bf3718a2f5dc2ae90ecc4ada1dbe05207e81cb7cd41316744c3b14b1c108030e8b13048fb8184d81a55989eb848882208a15e0f02e185a5a80949698d69e17985c8392b3c830d6dba183635c53bb9bd77a3c9fc64280dd002a0a707b7d6eae6a652a3e9f4f34bade929b4f3b540e90126e9aa5f990db9ccaaeaf4f627c2d9d75919e65c6c6c428a84270d3a3e64c39703a7e5cf5a277f1b0c0bdf02e3f2d62a425713b3757739c40632bd9d0b8ff41f1f2c74da6507b50bb549398fdce81da445b241f97daa65aa06b7a806f3c4fa69b318218a3baea7a60163f1c19fa18ea6d126b357f61a0a4c12b80192a8c3bc8e59e539ce8a3f21856a32aa2658e8c7403e6d2001b5d9ef338d4a1afe713fd6393fd4c5add89c1cd14d4dc93900f1067705e7168cafa03b5a26646681a42ec7cb76f71553badcee7d2b0b895890216aa5f2b83abfffc76845064637661ae75289bf90f6c758489c556f72f776dfac9824cad9e88c3b463d6af3d348e9a1985e012273f2878f5f92da3b1dd6b89848e1515833920b6d48cda95f8fa41aace1a0b7c916c974a14e973d818fa4f221aa9eecb970df9d2d533c007193009c051d44faeee22ee10fe6c378c3a21188cd87988bfa4c3aaa4dd2f9d9321c056f2d4b390dcda494db974bb9ea79fb644ebac15c7b991ee3ac782b8567aacfc32b30acf0c89f4a14179a540275bca06a8faeb17e87af628e97131eea24e0abedc2b7d1a350ed0052ad0a07798a8954c6edfcad60075420c168da7034d632fd98c065e523b7520173c3af920e13c8edf79a9593e5a4ff9fffd68f35bfe642cc293b33c9c387f23c8e0f62363270f144624e412076ce7d211b26252af72d3224209952bffe901ce791b5cd6cad723ea51e64fa21c936c262bcee090437bd3fc3bc9ef1206aea02b642a4fcf2fe65b2a8e921848e6b368ff23205f7aeac5145c7c56a2deb580680736d33b52b233ea128aac872fff3eb4d82cc13d45b94bc9278a5d6d9a698cf65a4abc3a7f79f94b437123d3207128227b3f10137e9d64e01873592b37e5850238ede3dd3e746917379d2a72e06c7331fb2fd998ec42808a86a3d760fa2c08db4144ce39ed82a9f6e1a2bbabac575f9033f09c0576fb17032315bcaa2e717231f75ab0d177226464a34cf3871f49c04de156979eda9de20cbda70906e52123f9a396e7a05a0cb1a28ecf282240b0a01f5224e33e95169cfbb0c42d37e2759b69342cef3c241fc347afb6d218a693704772364315608c6d3d69536b283c1fd402dd7b677caf78152c8b91c4cb06bc66d923d76327c6547f4abea0f0418e7081ac786c99a4e83f40bc43d4ea516b60022e0790fa879f2862701fa024c50c101265f400a4b737725cfda79314e2fbb07f0f307a0191c65a0ff146851cf1ee2bedb98f128924fdf1767ddb679573d526b01c0f31bfb810ff7c8347415e7c46301b6153ea3fd80524cfbaac9f2fb0da82ecad9eece8ab688a15cbb738958f5e3d3439da80a911c015a2b7b9670168c0f62a031f32223389ce9c1160d6fffd562bd3b4ef23cf3dde02f9ac1365a2f41ece9c1a218c08188efc5abb606bfaa63c75be70257cf484b52dbf31471fa3f70ee2ebdd764bb996407183f3203cbc316be109905faf713d3641c9fb1de2fdc566966ece02dbe45ad7addc42ef1e4500683f3c8aa204ce868aed639491e2850249fa5854bd2aceeb535b1363fe4d6916505561d0a722edd052764c4dc105f0c7e29f7c3891c2e135fab3465939708226e9a950ab735acad0c0adb53980d89d64d7a194edddaf71040ec206d2f9320a7428568eb853e26d126b44ea8e0df4c88e7c84e4f48e1528849151edf6440a0cca19667946f75b26682561d5593cda0bb500865faf79ea9427ae24f6bb2a1393384e45f863f1020f61a7f3e5d3ae8a48e06ac95dcee3c8bcbc805e8d8050eac69d2126aade5eefc6f59b38f33b5e1b17a7fe9c06f260c2816b7fcc31e24703cad2688014e238261c31b8a4d5273f13c4db7a2c2feae6f74e4cda184d86a326e8e3e78a8f1264e97b3e66884f6b12174085b1085e8eae8542639d26e91459bf196878e4648d80ad67f30b17a2c219d1660fa9c09dd407eb384d5dbfb4b5a12d2e2ce6b6a259b3f93e90ae10dfd1eafd3c89e34f837482d682902440f873d9701a2bd5594e0c59765459444f7f49a6e48376d42a8595494e6a0c3bcdb4092e31b9d59e8eead9f533cc5ff7ee4f948a59ec087a9875aac1f8ededc234531bde58cbfae0ee40efc2030e911925a1d123c086695ffe620894b1bb206024762d140c078e10862bb1b923a0c2e04f193a207f9aa0200dd449ca479b2e7fb004aa74f3ab75e432d5e0720ad442802284eb4a486c8ac9938434155b5aa60055b535fd3f111a074de01e0eb5342c4ed4c560ec451b06b283a4b19f6c020a3bc144b0d70dbd7dfb7079840ba30af7915c583034fcb7284b63c2dad83a43a7648f0ac2ffd502d2f1b251fc8479286e8f26bbd1979ff394c35584a4359854153e8a53cef02ffea5c81fd92578505c0c7e88d589555f7263262ead0c372862a8b557b27e970ffad4cc36fb2db7361ebc82871a760f1ff99b751ac77c9bd668c7133d4788050d7fd5b1cb43e8048bc9ad9a776ed3f47bbda39c75db1e9e33071d531ff79b042d34aebfedb7b6ea02c426654bb28421dd9a8313f57ab9c6e1a73214cd455e452d4ab3079954cba4f1b0c090550941847fa8acfc44e24ecb0731826676ddaefedd81bad0c2f7753625bd0199e62964c0461f7be4641cc4e7ca71b48bdb55154bb2e33d2d5c6203a065629d432ffca2cbeeb4bb190162da468d0e89c4c23e9f34fecf20a95f46fb01f56cfc4b3ab64ad6c3b17cfe209d37f3d2c50386ddac5ef88082da1e5367e98eb1d6bb9e8df665e631b5afae27ae87abbab4fa33679c2e486fc7ea488abb2eb99e1b6dbf571acc4ffd1fa394690a0318ef847b7b373cbca43d4cdf5217747a75da6616d7f20e3286429662253440c6bf871ceeee92eb47430ea793fdea823494f28d4c6dd2699d7f87a408d944830104540efff31955e1b6dbb33812fdce6fec93419e206462d0b73135c54c7c4315c491de72f5e371e799507a899a3d33a451da984ba80848016e8447e0b932ca8b27f1451e2610143e70c7d430021015d5e7878d5103a5167595e553034a01a52c4a3b94e24e47d97096776399eeefe2d5e41bcf8eac48ad88e8a08898b42d935b575b9b6c51016fb48ae7deb8cadf3eabed28ff14d74b3d98a41487355ec304065691bc127ce23ecd72a3afb02027acb92bb5b246578c98d12aff98124e0b659469fd457ffdca1a1aa251d01156e6658e7c405e14a23608d45b97d20f35d6bca912caf0a4a12ac1ff6284e85e82fe5ab8171c939a76c31b41a7b672cdc1aaf7b95df69b42a4205000ad795b703ed5713b38231191870e906400af772853d97a6a45555b54dc67ec68dd3707e790906548a18d3f78ea63b7666357f416fe755bd2d759f7ec6a9fa34c2fa23306ce70e9b48deb18aa69d895351b0b4be7257cc9dcb68ebaa11f49045ba2df995a9c9ecd4a1dfbfc253758885ef03e2360ddd13eaddc169d35058af7ab666a5a585aaba3ca80145d35537b6530faaa63c31de6a326765fdd8af02c61894b8751b491c0c6a56cb82fff4279850abc265fc9b28301f347393e7608952ccccffa1f417294076689d6f991b9b415f0de53cece31f31d59614144e5f14e950055de71f1639cbf4a5ae9858e329890a7301734968631860573cc16c70113f164b06fa1bb577dd9b05778645a99beeca0fecd1df0d949d88a2bbc9f8cc8c4ca34a24c8fc940c754f044ac6c3247eb9a73ab739a2c1cd15624cfbd7b2d0bd6abfb750aeaf10080aaefc565a564bfd33d23d3d3ab0d4b5172ed099cea0bc4beb94b11"}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) fadvise64(r2, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x5708e000) 14m36.879173174s ago: executing program 34 (id=1027): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x0, 0x31, 0x6, {0x6, 0x32, "f0662c67"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x0, 0x31, 0x6, {0x6, 0x32, "f0662c67"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{r1}, "aecc7c25123f1b7e081b1299bd28affc6f927b59e4a0f59bfeafa2568d306f276d6e3fe99dd526830630f9e7374f098055cc40d3d93e9126bcbb45896218690cb1e0456cf0b05873c9b9582b7e468477fdeedc52bcc78b60363155cab1079d6cab5e42320ce6452dfaaa95097daebed53147d6601e999844fe137bac228e696f12d893513f40e8cd0f0608268a1fd13615738cea7e733712336f6d4b34baf0066e1715e9e3b8f955c960f151f1a173b28cb60279d8283ed3343a31bc9bec7976217c1ea49edf684bc60f31f32d535ed2c86b5bf29cffe4e56a27aa5a80199ab82d6b1c48a9a183c6a5a06e40ef01009445e44f57010872151922306368616c703593ec12c4a52a163cd289da3c19bafddf79b1f01e2743cc6dcce199a3b9dbe668bb11f68bb5a7ad54cc02cefa68fa941ab1f94149bee144f39f15cf2b1fe7507dee20cb29710de0195a017571ea8b0de6344854ec9b9dc977bbf81c2d7303ccf8af576f0ef6c0f68fc3547b18e7c9f504923a160924a7b3649f02c32feaed934d5acb92ee685cf18e5865ca4976ded3a2257404ade79e6476ac604661cb5a46d76534446df9f148f7639b2116faff5a8dc24ca1aafa584bd4cd298e2190d5d2d8e7972045b2d899f5097d25e4cad3abfc1ee5691eb14e7a9342c0257176e50a188b595c1476858365a86fbb7b1ea5c0958f0f0f10a7a68003b61a8f2bd9498cdb7acaaa201f94937998e27ae2123069fd4d8acd1b19247c3bf5c86575f3c71640dd3b9d46655d217978d803464469574e1d8e48444b0cb44e645a4a96dc894d835ca678bd6048b9426c8d2eb20f31b1282958147bf033d1d40aa6033ec4d839d9625a5b930719a6e58a54b644dd70735e74083c100392bea63219e1ab880f3764447cd7eb30a8aee45e863a13386b42608e2ea5d1808f19acd4e2c8e3b3838fb4e89164b5055a681eced7de8ce6425735b3b7f00cf95927794c2d4c29b466abb8cff45888ef2753f669d7a63ddf66061aaf47b5b9def7d6ac71b69fb34e3ae683907025a9077f5d819b684b4443acfa7ea476d7cf4b88b8f2d3f3a3756c2414d8aa79f3c70afd6fe1f5070c319e8bd542ddf4a3d25ff2c9ceab557d665b8851e51cf229ad8465eb8b6ce9f5b9d3c690819ccfd79d2b4ac84923d3581ce1fc97c26b6538e9c812b254bda4494b9671cf31d2b4a780307661dc73d0f5901e806645153b1dbaa50770a45de4e21cf9c2b8b38a537882d6d48672c624f76f20c4d82e706a93f1b7b0e78ba800144aa51c29e85d86c596cd749b4df92eb159fa89e83080595817de61a873ae4953b36ec069c4fc3c7e0053cfd22316eb05528fb23a068d23c5e6ccf0e9ebcec74634f3a96b3df3e6fe7d2fa28cf2f92d06912b73b361e541361e16cf852f123bff169221dc0bf8951e0c486cf50ae2e1ca169e8a8360b2e9e3d0c1947f1c8df40a9e75c6b1d6244b23ee2055d13d0a83299d077164bcdafe3a56aaf8e8d24bd03a483a078570cb8511dafcfff82d4c925a6b9edede1bdbf8e44e22aeb070b8de4f76c2a29226d27a76e0904915686f4cd02294224c4afc7cd5c715c3f0fabeedb207c0887eb3d0e25637df2242666cc35ad6e40f0295ee2899dde0f84dff4aca6a3cd97712f6bcb8aedffe6cff4be5f396f1d4f39f868fd64326de87b708db28e1c08aacb2118995d5494bb035b31ab188188ca89acc1e57cf8519f9b45c78cd2fe2c30211ae0fc933c9798b961b05b072ce432a0eafb9cad22f26dd86eb7833413ffc6dd3428f8b13b7ad2f7c5911db1eb39a22d5c49d5d4b2466b08ac4e2c06eb059f6bf3718a2f5dc2ae90ecc4ada1dbe05207e81cb7cd41316744c3b14b1c108030e8b13048fb8184d81a55989eb848882208a15e0f02e185a5a80949698d69e17985c8392b3c830d6dba183635c53bb9bd77a3c9fc64280dd002a0a707b7d6eae6a652a3e9f4f34bade929b4f3b540e90126e9aa5f990db9ccaaeaf4f627c2d9d75919e65c6c6c428a84270d3a3e64c39703a7e5cf5a277f1b0c0bdf02e3f2d62a425713b3757739c40632bd9d0b8ff41f1f2c74da6507b50bb549398fdce81da445b241f97daa65aa06b7a806f3c4fa69b318218a3baea7a60163f1c19fa18ea6d126b357f61a0a4c12b80192a8c3bc8e59e539ce8a3f21856a32aa2658e8c7403e6d2001b5d9ef338d4a1afe713fd6393fd4c5add89c1cd14d4dc93900f1067705e7168cafa03b5a26646681a42ec7cb76f71553badcee7d2b0b895890216aa5f2b83abfffc76845064637661ae75289bf90f6c758489c556f72f776dfac9824cad9e88c3b463d6af3d348e9a1985e012273f2878f5f92da3b1dd6b89848e1515833920b6d48cda95f8fa41aace1a0b7c916c974a14e973d818fa4f221aa9eecb970df9d2d533c007193009c051d44faeee22ee10fe6c378c3a21188cd87988bfa4c3aaa4dd2f9d9321c056f2d4b390dcda494db974bb9ea79fb644ebac15c7b991ee3ac782b8567aacfc32b30acf0c89f4a14179a540275bca06a8faeb17e87af628e97131eea24e0abedc2b7d1a350ed0052ad0a07798a8954c6edfcad60075420c168da7034d632fd98c065e523b7520173c3af920e13c8edf79a9593e5a4ff9fffd68f35bfe642cc293b33c9c387f23c8e0f62363270f144624e412076ce7d211b26252af72d3224209952bffe901ce791b5cd6cad723ea51e64fa21c936c262bcee090437bd3fc3bc9ef1206aea02b642a4fcf2fe65b2a8e921848e6b368ff23205f7aeac5145c7c56a2deb580680736d33b52b233ea128aac872fff3eb4d82cc13d45b94bc9278a5d6d9a698cf65a4abc3a7f79f94b437123d3207128227b3f10137e9d64e01873592b37e5850238ede3dd3e746917379d2a72e06c7331fb2fd998ec42808a86a3d760fa2c08db4144ce39ed82a9f6e1a2bbabac575f9033f09c0576fb17032315bcaa2e717231f75ab0d177226464a34cf3871f49c04de156979eda9de20cbda70906e52123f9a396e7a05a0cb1a28ecf282240b0a01f5224e33e95169cfbb0c42d37e2759b69342cef3c241fc347afb6d218a693704772364315608c6d3d69536b283c1fd402dd7b677caf78152c8b91c4cb06bc66d923d76327c6547f4abea0f0418e7081ac786c99a4e83f40bc43d4ea516b60022e0790fa879f2862701fa024c50c101265f400a4b737725cfda79314e2fbb07f0f307a0191c65a0ff146851cf1ee2bedb98f128924fdf1767ddb679573d526b01c0f31bfb810ff7c8347415e7c46301b6153ea3fd80524cfbaac9f2fb0da82ecad9eece8ab688a15cbb738958f5e3d3439da80a911c015a2b7b9670168c0f62a031f32223389ce9c1160d6fffd562bd3b4ef23cf3dde02f9ac1365a2f41ece9c1a218c08188efc5abb606bfaa63c75be70257cf484b52dbf31471fa3f70ee2ebdd764bb996407183f3203cbc316be109905faf713d3641c9fb1de2fdc566966ece02dbe45ad7addc42ef1e4500683f3c8aa204ce868aed639491e2850249fa5854bd2aceeb535b1363fe4d6916505561d0a722edd052764c4dc105f0c7e29f7c3891c2e135fab3465939708226e9a950ab735acad0c0adb53980d89d64d7a194edddaf71040ec206d2f9320a7428568eb853e26d126b44ea8e0df4c88e7c84e4f48e1528849151edf6440a0cca19667946f75b26682561d5593cda0bb500865faf79ea9427ae24f6bb2a1393384e45f863f1020f61a7f3e5d3ae8a48e06ac95dcee3c8bcbc805e8d8050eac69d2126aade5eefc6f59b38f33b5e1b17a7fe9c06f260c2816b7fcc31e24703cad2688014e238261c31b8a4d5273f13c4db7a2c2feae6f74e4cda184d86a326e8e3e78a8f1264e97b3e66884f6b12174085b1085e8eae8542639d26e91459bf196878e4648d80ad67f30b17a2c219d1660fa9c09dd407eb384d5dbfb4b5a12d2e2ce6b6a259b3f93e90ae10dfd1eafd3c89e34f837482d682902440f873d9701a2bd5594e0c59765459444f7f49a6e48376d42a8595494e6a0c3bcdb4092e31b9d59e8eead9f533cc5ff7ee4f948a59ec087a9875aac1f8ededc234531bde58cbfae0ee40efc2030e911925a1d123c086695ffe620894b1bb206024762d140c078e10862bb1b923a0c2e04f193a207f9aa0200dd449ca479b2e7fb004aa74f3ab75e432d5e0720ad442802284eb4a486c8ac9938434155b5aa60055b535fd3f111a074de01e0eb5342c4ed4c560ec451b06b283a4b19f6c020a3bc144b0d70dbd7dfb7079840ba30af7915c583034fcb7284b63c2dad83a43a7648f0ac2ffd502d2f1b251fc8479286e8f26bbd1979ff394c35584a4359854153e8a53cef02ffea5c81fd92578505c0c7e88d589555f7263262ead0c372862a8b557b27e970ffad4cc36fb2db7361ebc82871a760f1ff99b751ac77c9bd668c7133d4788050d7fd5b1cb43e8048bc9ad9a776ed3f47bbda39c75db1e9e33071d531ff79b042d34aebfedb7b6ea02c426654bb28421dd9a8313f57ab9c6e1a73214cd455e452d4ab3079954cba4f1b0c090550941847fa8acfc44e24ecb0731826676ddaefedd81bad0c2f7753625bd0199e62964c0461f7be4641cc4e7ca71b48bdb55154bb2e33d2d5c6203a065629d432ffca2cbeeb4bb190162da468d0e89c4c23e9f34fecf20a95f46fb01f56cfc4b3ab64ad6c3b17cfe209d37f3d2c50386ddac5ef88082da1e5367e98eb1d6bb9e8df665e631b5afae27ae87abbab4fa33679c2e486fc7ea488abb2eb99e1b6dbf571acc4ffd1fa394690a0318ef847b7b373cbca43d4cdf5217747a75da6616d7f20e3286429662253440c6bf871ceeee92eb47430ea793fdea823494f28d4c6dd2699d7f87a408d944830104540efff31955e1b6dbb33812fdce6fec93419e206462d0b73135c54c7c4315c491de72f5e371e799507a899a3d33a451da984ba80848016e8447e0b932ca8b27f1451e2610143e70c7d430021015d5e7878d5103a5167595e553034a01a52c4a3b94e24e47d97096776399eeefe2d5e41bcf8eac48ad88e8a08898b42d935b575b9b6c51016fb48ae7deb8cadf3eabed28ff14d74b3d98a41487355ec304065691bc127ce23ecd72a3afb02027acb92bb5b246578c98d12aff98124e0b659469fd457ffdca1a1aa251d01156e6658e7c405e14a23608d45b97d20f35d6bca912caf0a4a12ac1ff6284e85e82fe5ab8171c939a76c31b41a7b672cdc1aaf7b95df69b42a4205000ad795b703ed5713b38231191870e906400af772853d97a6a45555b54dc67ec68dd3707e790906548a18d3f78ea63b7666357f416fe755bd2d759f7ec6a9fa34c2fa23306ce70e9b48deb18aa69d895351b0b4be7257cc9dcb68ebaa11f49045ba2df995a9c9ecd4a1dfbfc253758885ef03e2360ddd13eaddc169d35058af7ab666a5a585aaba3ca80145d35537b6530faaa63c31de6a326765fdd8af02c61894b8751b491c0c6a56cb82fff4279850abc265fc9b28301f347393e7608952ccccffa1f417294076689d6f991b9b415f0de53cece31f31d59614144e5f14e950055de71f1639cbf4a5ae9858e329890a7301734968631860573cc16c70113f164b06fa1bb577dd9b05778645a99beeca0fecd1df0d949d88a2bbc9f8cc8c4ca34a24c8fc940c754f044ac6c3247eb9a73ab739a2c1cd15624cfbd7b2d0bd6abfb750aeaf10080aaefc565a564bfd33d23d3d3ab0d4b5172ed099cea0bc4beb94b11"}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) fadvise64(r2, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x5708e000) 10m48.616424364s ago: executing program 3 (id=1730): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000000)={0x20, 0x2d, 0xc, {0xc, 0x3e, "89d5761247cb5d4d6501"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}, &(0x7f0000000300)={0x0, 0x22, 0x12, {[@local=@item_4, @global=@item_4={0x3, 0x1, 0x4, "9c76f2bd"}, @main=@item_4={0x3, 0x0, 0xb, "f217e8db"}, @local=@item_012={0x2, 0x2, 0x9, "9bb8"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc0, 0x6, 0x1, {0x22, 0xacf}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4012e60000008abee1b8737dea5808d966f04e36449fcb74f34b2a7764b9a7bc254c97995e74bb0762efd432ddd73e923d6303503daee5872c7c0a3a57c2c190576b673c14ff9605d02c934c694ccd4ecfe816dcc262b00ca7f2cad01d25afba987b850dc2d4a80a630cc1b9d8a6fb3834b50149eaaed71ffbd082eb7235bf769ee3b5a1de09e5a8c5bdab9159692caea39640900fb52e79d39acc9611fb2b75b70c6ef347a76730278c56fb2c0c4be4bb626f566ac1ac5aa4400eba470160f2c5571f34e229eb48e8e5c421c4a74c4a7153659ca2c5717c5b5ef115c7fad1da134a20e1cbbf1254fa48eb40"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000480)={0x20, 0x1, 0x71, "f787d8073cc0f5f93ac1b068be0a63d55bff228f8b06d77f084a6bfc9c6e1803801a7a93dbcdee810fd7cc45fdbd5ec4ab45e01e86d77c0e394862db7208a0fd346d6845c39721f793b255c7963827fcc0b6acf6ef1d0e6c2983cbcc52fce518b20ab241ea1bbd19b6d00645fad1009f18"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x67}}) 10m47.993323989s ago: executing program 3 (id=1734): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x1, 0x3, "cc17fc"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 10m47.445034823s ago: executing program 3 (id=1735): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) 10m47.362701795s ago: executing program 3 (id=1736): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x1, 0x5, "cc17fc47a9"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 10m46.744659647s ago: executing program 3 (id=1737): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000240)=[0x16, 0x3]) 10m46.226340288s ago: executing program 3 (id=1739): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, 0x0) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x100c000, &(0x7f0000000380)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0xec, 0x62, 0xf9, 0x40, 0xf3d, 0x68aa, 0xb4ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x0, 0xf, 0x1f, 0xe7}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000480)) syz_usb_control_io$printer(r3, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x20, 0xc, 0x62, {0x62, 0x9, "8cbbea32e7740f0251e0535aa68a1e8fd62c93bc33f0edcf3c34c71d6aabee0e52a5fa6aea5f012a43f2cb90c9f9ddc80c2c650f1e0d2159bd93639ce4c71c18fe0cd68d5f8a1423d94245483dc0518c497c3f8118ed50a121e10f8bed4208b6"}}, &(0x7f0000000100)={0x0, 0x3, 0xb3, @string={0xb3, 0x3, "c43f63f0fa9960e9ffb8d8a3425429da1928669a11bda5c583f110378ef0566a1ac323dd345bcbf806992665ab7b48904616458395eb88af3ec57c130694803bcd98d2812c7b7fec8f3c8332a889d8f481a4e40594348ed057a7ec848b539c2e4e60221f15bdbcdca5000b3c5df8074046093f9e2a4066d99f28ad5e8427f143cef5255523454380f32d65f402826eb751b0cf476aeb95540864c75e27b5e8118bbb833b4a439debe27668d4761ca5fbd5"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000280)={0x40, 0x9, 0xbc, "62696e75d3a789653c837cb3dbe9289a6ce09295385f59d522ef785e2e75bb6bd9dcda0c898ad96d4711b7ae04bbbfb8a55e452d858dabe538dc73ab72b7d981a41369e770445c3d92ee35ddd1c1db79d1cd88c37965a5569a7768069bf7b529ae8a70eb2839d29a057e27b63a91e80365cfb87008ea5bba9ea284f0a8ac4e7b0b0b3bd3af842903569177a0a37f3e4f3db404abe258e4656402048e42ec02df96a9f6ac8b9831a81dc969926bbb2e5c44c1aac1169cb2e458c935e7"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x26, {0x24, "b46ac3b86c8113604b5e0bc1fe1100c0a1dfde7f61388d841955510d642a075c9424a5d9"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0x5}}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000240)=[0x16, 0x3]) 10m30.437691703s ago: executing program 35 (id=1739): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, 0x0) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x100c000, &(0x7f0000000380)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0xec, 0x62, 0xf9, 0x40, 0xf3d, 0x68aa, 0xb4ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x0, 0xf, 0x1f, 0xe7}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000480)) syz_usb_control_io$printer(r3, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x20, 0xc, 0x62, {0x62, 0x9, "8cbbea32e7740f0251e0535aa68a1e8fd62c93bc33f0edcf3c34c71d6aabee0e52a5fa6aea5f012a43f2cb90c9f9ddc80c2c650f1e0d2159bd93639ce4c71c18fe0cd68d5f8a1423d94245483dc0518c497c3f8118ed50a121e10f8bed4208b6"}}, &(0x7f0000000100)={0x0, 0x3, 0xb3, @string={0xb3, 0x3, "c43f63f0fa9960e9ffb8d8a3425429da1928669a11bda5c583f110378ef0566a1ac323dd345bcbf806992665ab7b48904616458395eb88af3ec57c130694803bcd98d2812c7b7fec8f3c8332a889d8f481a4e40594348ed057a7ec848b539c2e4e60221f15bdbcdca5000b3c5df8074046093f9e2a4066d99f28ad5e8427f143cef5255523454380f32d65f402826eb751b0cf476aeb95540864c75e27b5e8118bbb833b4a439debe27668d4761ca5fbd5"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000280)={0x40, 0x9, 0xbc, "62696e75d3a789653c837cb3dbe9289a6ce09295385f59d522ef785e2e75bb6bd9dcda0c898ad96d4711b7ae04bbbfb8a55e452d858dabe538dc73ab72b7d981a41369e770445c3d92ee35ddd1c1db79d1cd88c37965a5569a7768069bf7b529ae8a70eb2839d29a057e27b63a91e80365cfb87008ea5bba9ea284f0a8ac4e7b0b0b3bd3af842903569177a0a37f3e4f3db404abe258e4656402048e42ec02df96a9f6ac8b9831a81dc969926bbb2e5c44c1aac1169cb2e458c935e7"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x26, {0x24, "b46ac3b86c8113604b5e0bc1fe1100c0a1dfde7f61388d841955510d642a075c9424a5d9"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0x5}}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000240)=[0x16, 0x3]) 8m57.94229185s ago: executing program 5 (id=2225): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1100}, @flat=@weak_binder={0x66646185, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 8m57.820232571s ago: executing program 5 (id=2226): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x0, 0x8, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="0d000000010001", 0x7) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r5, 0xc02064a4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000240)={r6, 0x6, 0x40, 0x2, 0x80, 0x8001, 0x7, 0x6, {r6, @in6={{0xa, 0x4e23, 0x7fffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6a0d2e1a}}, 0x7, 0x1, 0x3ff, 0x8, 0x2}}, &(0x7f00000000c0)=0xb0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r9, 0x4188aea7, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x2, 0xfffffffa}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000080)={0x6, 0x8a25, 0x2}) 8m57.580042487s ago: executing program 5 (id=2228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x28, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x10001, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040040}, 0x8000) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4c, 0x9e, 0x58, 0x10, 0x545, 0x8080, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0x5c, 0xf, 0x46}}]}}]}}, 0x0) 8m55.919204064s ago: executing program 5 (id=2239): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) (async) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x0, "ff0f00000000000001a82d866bf4ff0713e4b89c3c00", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r2, 0x40103e05, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x2, 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f00000027c0)={0x1, r4, 0x2, 0x0, 0x7, 0x6, 0x7, 0x2, 0x2}) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000ac0)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'team0\x00', 0x0}) sendmmsg$inet6(r3, &(0x7f0000002640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x7f, @mcast1, 0xb}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000000c0)="340d68392f0db85d303f6661e34208614f8d423eb4d238d1d2c8e66ec0ccaaefaed8fc105ff27621e2914d4476010cfd85d518a6ef38046e3c1ffa7bd4c09b6c967d763a09a2af59413218774f8c6fea014561f03c930191c2bbbc0ae59dfdba7048f2bc227eb2ec1cc79c3a5a71d734befd1f", 0x73}, {&(0x7f0000000180)="19a53ad224c0ed0da2130d6b2c14698dbc2dd03286a3ec2ead2a6dc2eb2431953603853b412d58f0bbd6ab60d0235d7d0f49736caba83a50aabba3bb2e491a1d8b75eb523859cd3ec70f1c1d69d6d3d74a8fc3e5c7500beb42cedfec2877bde90534cf81af563861cfb03bc6080b478b5aa49eb100e35f9a18b90581e549420a3d48823343d6f75278de39ca527c9c9d903f08984516e39a9e94d4c2ed5a8d2e52d6825450e67e2da3ed3859b38d7405a29774c28beddf", 0xb7}, {&(0x7f0000000240)="ab37a403aeb0b499ae2b800c883ab8ac5db17f1cc0c8a082fc2a06a9983b5c2cce40fea45033863a8eb87ae5dc01b662271370dd22b6a561bdb7d1903e1f6451449af9e6", 0x44}, {&(0x7f00000002c0)="d68a5dc58ce6869cfb21d9a60560d9824049f1370fa3d69cceedfba81f7618d8e8e6d7d7b0b67760f870d208386f915e663abdd540220a266ee3f4178f8522601449c61f4cf3c448ddef12d061b33215b520eb574aede57bd04219765223af79ef16a26ac2b9322aa9106fc073100436a6adfca233e51f760cdee319007c805d130633da284c4f92ff9eff864e0ae349ea4f9d0da8697f0f9ef759a7180e8ee264b118f7b9fd6ceb57cf50685b63689b49ae0abfb451f0d33d5e4bc5256eb28ef47fb6cd2f9493ede2d2589034c9dd", 0xcf}], 0x4, &(0x7f0000000400)=[@hoplimit={{0x14, 0x29, 0x34, 0x7ff}}, @tclass={{0x14, 0x29, 0x43, 0x100}}], 0x30}}, {{&(0x7f0000000440)={0xa, 0x4e21, 0x7, @private0, 0x9}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000480)="29a326925ce90e132940aa59d97612b268d7a23b8df38422d0397f963e6547bf5f436c0ccf3f42324c6335b1c12672191bff4e273d2562623ed2c345cc71232022f7c7bbdd20c597b7d6b0390d380f7ddce6017abdcbf906da0efb4a19ccd8508845ac455890f8883b6f2ee0e0dfdc49219d4657f1675d97", 0x78}, {&(0x7f0000000500)="f1094707bbe1ee29fb24a0f6216caf06767e8ccad17fb1dc1478f60b35bbcd48a06b9658353d88f7dae7308f2cbb61307aef581ea649796802a53f3bca44f7c82544689d6acb5e60f81621a00f0467560db1c9572da5809a2cc9ad4df263b7a2d33f0725a9757fdd53c0ddebfa3f731e3ef9f42d7053bba1557dd1ce83532791065c04df130bc9da988cccd19b5fa3f7c62a52f2", 0x94}, {&(0x7f00000005c0)="9005fffe2eb94ace4459098e0fc1dde8e42a7545a0e1d450563f5fdee744e966ed05482c6b10734a0886e4486000d296e42a28f3878976aeafe5fc71d2e0d8f48706da42710931b1bdb02bdd0e9adaa172e8015ac61ae081145c239b0d2141bf54501bf45ee684e38ea4f8b8c8c320f84dfcce525fcd6a7434048267ae4279b72f4b054a0fda16833f8c99dea014979efdcfd9c1d4fa478c2ffcd3814c792195d3e5c06300d14532b3532a68473448b43c2235cfe9", 0xb5}], 0x3}}, {{&(0x7f00000006c0)={0xa, 0x4e24, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000700)="ea06adb788f27547832846d3cf7be354e68b2cccdc58df894a749ec168299dd4bb82f56ff84e8e1dcb7e2c88600a30e725c96579b94671b307e42599ede10012db020e3630d04bc83956493737bac18376acba2ec7995dce5b481f3ff7bca547ed78b98f75ffdaf4ebf50d0f8bf977f3c7d3604084e9fc84fe86e4f0e8559a4adb0a96263e8f77727cdd00db857c9754601852c16b5b6d64adcc248f5e27ab4aba9550ca6ad2e4c36e208b2231b49d9f2db90075a588d03a41720d6bcae1c6b0c7bd4dc4a95b7dfa9919bb9bd2c8ae0943d648c8abd1d4becdda2b75b9ec3b417312943307b269d18f0b2d8992675446cef5", 0xf2}, {&(0x7f0000000800)="37f1399168b5e60eae992ef994e65f57e05b0f3c9421dd879168b93b8b724410be2ffe3e5d107662fb374484617b85eb", 0x30}, {&(0x7f0000000840)="f24c19defc326d959de0c65d0c6319ec7dc3944d296f0e983e327a2fd0e6ecf24e34add2e6e045b8b5ae41155cd946caa58d16272331f934a2b4a6af5c37ec186fb1c5f00e7b10ccd9f4d5bd6f880aa3ce8481dae127581a", 0x58}, {&(0x7f00000008c0)="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", 0xfd}, {&(0x7f00000009c0)}], 0x5, &(0x7f0000002880)=ANY=[@ANYBLOB="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"/464, @ANYRES32=r5, @ANYBLOB="d791d122583acb026c103b2000d7a394f96204ff335e3e87fba387b7a3284672cd9c0e70193af47108cd52eb881ad2dd4848c00d578278f4bd94d21129b0fb98f430d55960ce9cfc31901263f7664c4943790260e839b6b49c02a1a7348288aa32159b88faabacf7a1cbe8e2bcd4b65e43b43e2ec78eb8b913b7180d2366a0aadbc5d3a70dd2a07f1bf614eeea3eeaa2f64004afbf184aee1fa765ba55f0231c9a1ba42da12f49da7737e467f769c125085914afd4d3f549f5c0dbc0d5c95f11d0a80de8efc430434e"], 0x1d8}}, {{&(0x7f0000000d00)={0xa, 0x4e21, 0x0, @loopback, 0x9}, 0x1c, &(0x7f0000000d40), 0x0, &(0x7f0000000dc0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r6}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x32, 0x4, '\x00', [@ra={0x5, 0x2, 0x1000}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x1, 0x2, 0x6, 0x2, [0x1a9b3455]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @hopopts_2292={{0x20, 0x29, 0x36, {0xc, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x3355}]}}}], 0x98}}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000e80)="a0d2943244e3f0ab7282e1614b8e6e9fc4ba74dc7346192437ff67fca2834576d9f8234342e3cd20228bd10028c8058fb4b7", 0x32}, {&(0x7f0000000ec0)="64b65799c7fcac67e774d8c4ddb321aa5e70e78a07e35231b8104d8d55263997cd9076ba9c3e05405894b3690841db335dfcbe1c6538edabfdc40f7baed8e8bb5e", 0x41}, {&(0x7f0000000f40)="3d1e79cb2921d3759d0a4e20e888d45c2bf0ac8a5a01454e768dc24c4a90d91e57edce61ad3ad8b517f2aa765377016c0f952431f3668296487968e3483d1f52124054cbeb849fa07a7450f2ff65724ad3ae24b015729e6b9d2ae3b60aa2ea9f69d20a9842efce70026f5cda181c2b531808975b9477e863ed61fd8767b0fef8e8ebab1bbb9448740e7420668557feb1085b1c22708195145c6a200dff2ec8cbf0e9f2751436ae4a254690a7a34723e99c48149b9f1c1cd78d6ed8c0ceef60b7587d2c62e96619dfcf460a5fb5fdf1d0f758589b99", 0xd5}, {&(0x7f0000001040)="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", 0x1000}], 0x4, &(0x7f0000002080)=[@tclass={{0x14, 0x29, 0x43, 0x7f}}], 0x18}}, {{&(0x7f00000020c0)={0xa, 0x4e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f00000024c0)=[{&(0x7f0000002100)="aa57527f65258a3648be86299f9515cc496b1150809f46ec992cd32ead38b2a42c538ed70d20eba3db3251d86803962028aaf2baca062b2dd47122", 0x3b}, {&(0x7f0000002140)="a4364555163fe02fddc3450b02c4d8670b4c0de99ef1f19428582c16ba38291b9dbc9339c4563cbb1a9dadaee82f6bbcbc3fe25fa4cf1a4b65524ae9803c179a222da704665db5f4797371a3177706e2860d2a9fb789", 0x56}, {&(0x7f00000021c0)="734e6d6f6f111d0748dbf9ae5a84f0da75b1b8cd2c10458ecdda09caafb974d860bad9d0aa414944dcd5056e011034a775b01776248c7ac46fbdce88603123cdecd10af2b491fde6b898e66bf0eba57ba0209690bcb0f23cd64a4ea20b977381c627f38299ec59c7c96552fd31d554db3b4b852dbf952a31ae94ec18c592453ca5eac42948298551611c2310a2f913f7c4b646724a574dcb2830ea484488ae75abbb758e59fde6109ecbc75fece96b47", 0xb0}, {&(0x7f0000002280)="054d512f28247e2ae14d003bc9ea4bbbb7bb5eca5d84b17ba1bb01b2031d848930f1b558bbbdbb1b3f3c6a2d966934164a21415d513c6ed13961dc562ef939c29550423289ab6fa840909d8d3320e6d9cf60d22a346d1ca104122fd8e85ea39d3dd6664e86ec9d81ba6cb401ae226db4e9073256b6c9de964ffc37786f593d4ee80fd384fc1dd0339e72d44511906ccff9739cfc5d39444d9e45b9b9067c81dea8f8ffc6ee9285d540a5dba27bdc0fbfd60bffec1f50df65", 0xb8}, {&(0x7f0000002340)="9aab41244a9f606a3c0e6e7131e25ab1345293edbd9be902c6553ce2735242f0ab5ba7ae186d3f448323ef18", 0x2c}, {&(0x7f0000002380)="2544dcb9fba46e255bed1e9ed63a92d9", 0x10}, {&(0x7f00000023c0)="bed096700eec16d3dbc5d6be91561f8ab3737877ed94ca6ad37cd0aa46728a7112a8d2e456507496a7f0c3cb225b489e9d4a58b8dd2968fde7114af34c5d56d0729c85eeb224d77e7ae7608c04680783036b5c6b61a7e669ce0085e820c07b51792ce99da8c7dd764157bb93f6a7573015745ed567f1040b1a2561d7f627cf9f5bd156e355c4ee959928836669479dcab943bd8b00aaf6b2a321369053674db8823384470055220a87d8fcd73ab66a2c54eaf04eb915060eca8b332fc596b6172d94dcebe7508db9f95aaa14fbc104fb661bf5f5e1aaaf18e374e033", 0xdc}], 0x7, &(0x7f0000002540)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @rthdrdstopts={{0x88, 0x29, 0x37, {0x2f, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x6}, @enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0x4e}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8d, 0x2, [0x3b]}}, @jumbo={0xc2, 0x4, 0x2}, @generic={0x7, 0x30, "5cd6d21b0edca2d5b3cb0065c535520c55e4bca30f2af5902dd2598e7bfad3018ce72bdfec9935764942464d756faf91"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}], 0xd0}}], 0x6, 0x20000814) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x123080, 0x0) (async) faccessat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0/../file0\x00', 0x4) (async) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0x40045b17, 0x0) r10 = open$dir(&(0x7f0000002800)='./file0/../file0/../file0\x00', 0x4040, 0x0) open_tree(r10, &(0x7f0000002840)='./file0/../file0\x00', 0x9800) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r7, 0x5708e000) 8m53.972239829s ago: executing program 5 (id=2250): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f0000000100)="17d72030", 0x4) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010300000a24"], 0x0) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x6, 0x1d) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, 0x0, &(0x7f0000000280)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r2, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x29, 0x1a, 0x0, 0x100000015) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0xe0) fcntl$setpipe(r3, 0x407, 0x5) write$vga_arbiter(r4, &(0x7f0000000180), 0xf) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r5 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r5, 0xffffffff80000602, 0x0, &(0x7f0000000200)={0x4, 0x8, 0x0, 0xe7e3143c8489c9fd}) 8m53.310305689s ago: executing program 5 (id=2251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002e00)='setgroups\x00') write$eventfd(r3, &(0x7f0000003300)=0x10000, 0x8) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x440, &(0x7f0000000200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8b2d, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0], 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000380)={@mcast2, 0x0}, &(0x7f00000003c0)=0x14) r8 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000540)={0x0, 0x9e, "abdc4e657ce7a520ff42eee9cc59ccf6fd233f0a096d85778123837a18a8d8556733753835a4139d8c41aa4e12c2ffb2c16db24ca3942dba77b3f45d19d668ea648b573c56c902b7334bfc8afda2235ef033b084ce16ff5a773c78233501585e3e4bdab60cac6db44dd7b4191431559496d03045e34e1e0336d635106f0d017cf0231c084567b98459b9b12c8c23d45463f2462537b48c39e1e91f930aab"}, &(0x7f0000000600)=0xa6) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000640)={r9, 0x7}, &(0x7f0000000680)=0x8) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000080)="330320000a00140000007ef52f555f2a0c0900000000894f00f786dd3baa4b1f0f858c4632f47042195e", 0x2a, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r10, 0x1, 0x62, 0x6, @remote}, 0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x8c, r5, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x4}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40800}, 0x800) 8m52.875535754s ago: executing program 36 (id=2251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002e00)='setgroups\x00') write$eventfd(r3, &(0x7f0000003300)=0x10000, 0x8) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x440, &(0x7f0000000200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8b2d, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0], 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000380)={@mcast2, 0x0}, &(0x7f00000003c0)=0x14) r8 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000540)={0x0, 0x9e, "abdc4e657ce7a520ff42eee9cc59ccf6fd233f0a096d85778123837a18a8d8556733753835a4139d8c41aa4e12c2ffb2c16db24ca3942dba77b3f45d19d668ea648b573c56c902b7334bfc8afda2235ef033b084ce16ff5a773c78233501585e3e4bdab60cac6db44dd7b4191431559496d03045e34e1e0336d635106f0d017cf0231c084567b98459b9b12c8c23d45463f2462537b48c39e1e91f930aab"}, &(0x7f0000000600)=0xa6) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000640)={r9, 0x7}, &(0x7f0000000680)=0x8) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000080)="330320000a00140000007ef52f555f2a0c0900000000894f00f786dd3baa4b1f0f858c4632f47042195e", 0x2a, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r10, 0x1, 0x62, 0x6, @remote}, 0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x8c, r5, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x4}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40800}, 0x800) 4m34.850492603s ago: executing program 7 (id=3591): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) (fail_nth: 7) 4m33.999742033s ago: executing program 7 (id=3598): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) close_range(r0, r0, 0x4000) 4m33.779774895s ago: executing program 7 (id=3599): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001ac0)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f00000000c0)) syz_usb_control_io(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x0, 0x7, 0x3, 0x6}, {0x3, 0xff, 0x7, 0x6}, {0x7, 0xa, 0x4, 0x7}, {0x0, 0x10, 0x5, 0x7}, {0x4, 0x61, 0x10, 0x7ff}, {0x9, 0x3, 0x2, 0x8}, {0x5, 0x9, 0x2, 0x40}]}) syz_usb_control_io(r0, 0x0, 0x0) 4m30.478024187s ago: executing program 7 (id=3630): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x94, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a5a7a40b94b8c58}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x24008090) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, 0x0, 0x1, 0xffffffff, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000003}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x64}, 0x1, 0x620b}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x200, 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x8, 0x0, 0x0, 0x3, 0xa5, 0xbd, 0xf9, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0xfc, 0x3, 0x41, 0x0, 0x0, 0x2, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x1003fe, 0x9, 0x0, 0xfd, 0x20, 0x5, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0xb82e}], 0x9}) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4050}, 0x80) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 4m30.246162581s ago: executing program 7 (id=3634): set_mempolicy(0x8006, 0x0, 0x5) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f00000003c0)={0x2, 0x2}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async, rerun: 64) r3 = accept4(r2, 0x0, 0x0, 0x0) (rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r3) (async) sendmmsg$alg(r3, &(0x7f0000001c40)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000780)="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", 0x16a}, {0x0}, {&(0x7f00000000c0)="ed8f33bf1e0dc27785645f22e5841d47daff989738a6fd18b251ac71dd637802365f0b3a9c02", 0x26}, {&(0x7f0000000680)="fa2483068eed2f0cc285ec25bf79c2114ad054efec53c5873e73ea931e5949a260e606ba619254d088de2e9e00000000c1078f2db6c9d08a6a987a7ab8d09850e79da0234b57572bee7611e26e82e986a22f71e5b78b63c8985cb451e184d85aa8a6504a74e03e8ceb8f59021a73fcc0", 0x70}], 0x4, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x895}], 0x1, 0x24000810) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)=ANY=[@ANYBLOB="40100000", @ANYRES16=r4, @ANYBLOB="010000000000000000000c0000001410038004100400fc654c187d6eb5f0ca15095cc8787b50b96435ad3147dd10e867248d37187c2a131a62d105462ce34d5cf8ded36159aea612a3460534d8c298556e91590238f40dd2c7148d365ab6cdd5f2a7f74bac8d59f731c655a46917f18b28ed05e58b70287d26677601258a5c0ab9f679e2e520228c3a1f1aede04c6ba82cc38cc2ab6b35a24fb20e032dedf6f6caf4bfea5435f746f746fd46ca192e3744eb6908b358c10833bf484237ba654641e6186a45957c6345e61ea620fdc74383ce1df4a24e7044bae596f018736424a5bfa438865044e7026fa37a3540fadd0e89d87aecd3bc127e0cb10274991d6127224a0f2a4ef19e2c4dedbe45f2471abcc38c584ead0e3df3f9211022b2421fb6b327361e8f58f2b73134fc5444b350ede95ecef5bbbf9950e75c9f772a3ff0180d2cfac287228709726a6abbab2971982de7f1a9149d71dcbfd212e89ff17cf284b7f8ad82a469cb1c1e3d9d1d3689271c8dad0ba89dda651d4242062ac0bc5877e397236fa9476ac5fac7c2c896babca09d74720004cd0e634327de4fd87ed72ae069c095d2c70caed52e3335478c1c3719925e24f2fd7755baebd5cde385727a0f0440dd3b662248c43ff5afc4f186ff0051ba8eaa07623b79c4bb6985f14c5ac15041a6ff7584f921982e5414481d4db4c76798d70a59b5aeccb6e7882aefe70993758b55b4dc4039c2b1c98452113aaf23ccdf68cb6eff6e048f9da6f39a2def3caaf80cdcbadb83b029b8738391f02fec90c8a8b6f036aae8ceaff5dca7d3e0098423fedc676c6774ab0e6a72bd246c0b3004d1988f802b846d62ca59e9a63ce12814176ec4380e1cf29d27e7b2f7e7eadcaae8f182498ad32e67323fe6ef9508fec40dd38897652053ef92e44a909060c237890c196f0c26ab10248f999001f6231813a81313971bea77a5470f312d185dce689adc99e430e4010a3a341482c51fb71c23c3cdf92303c7580c73775f9a74685a61ce9849eaca52b97ee7ffe2e672dc1be5097c285a102711b1b5d81d6dbb76494f2892fd4f85244ade3cdd3809fd5fdfce5157fc1658f0bceb379489732583707c170fc6392aa4f5b94843aeb18da58e0156e029c2b722918b1b3dc7c151cb9c248ddd18423629b53cd4b0ab2693b0df29c88c04657f4eccdc41357de8186fdc0ec86f92950734975921a2fde57c3e7176b57c871d76ff8a8f36520b67e64930cf34bcde9ad92d057a359ca022b646df18e2b7202845bd8ac4be5e5ebae436dc4b93dfaaf2778a53e7e4be937e83dac7d1d481bdbd8081ab0ac08af067e62580bbdbf397cbc629db9b023734b6fad7824d1a8b3257c1c18d6ebc928140060f004ec484b183560f830a1eb0c527c8600bb2600d761e847454e677aa29486aa407a9e9a5e9dc9542de038e3e55fdfec13184cdb16716556f972eef5c56230c43d146c86a9147265c309a279db6d138647920410896c5397c5f83634fa5e92b5161f786482d84830864388b91c2c1e3e9f9f038d5fa66f7fe904e14df0a60d46066c6b1f37cec6e13c35832f512be21da21a5921b81cc452b0076c2ec10fc5481cd0e1ca917b40cb3aa839b120ce6eb9773e942b74ececac6bdcd22eb8dd6cd9f148e0ebe5ef3094f42adc39be8ca2259e1eab5059ccf5e82bb57b97d4d13a90747299b2e6b64f962aabf222e4f287503181de3c3a68fb2b0068583f3b97e40ce06e9805a7121eccac0527b8f1b18a62762efe0a9ce4114b7d1ba942bc93533ee0b1bd7f0a607207b976dfa1fbe3ce0868e7f4e31b41a0aada0ac6b291aefe22ea5338f07e57b981b8e4e4a121f231d2f46989fd5dd09a7c1d198f5886b4f1a222eccdabff096a81fef3c9e497621128562880938fe05a1f1c4da81daba55bf326f1e3a1712d79f01fbef2ee230615d4e454be67f0ad4dc2bfffaecbb683742925738b45854ab713ae548b9709e9ea2e28224ef466bced79e3ec6c163d45db187bc01c75afa85f78003927dcd122086acc8dd1b1224de41d62b83e34083dd39fe68aa5a479ba403f5dbddf9b763ca521b7efca6234be16484f1e0112d963672a6d24cdac15e80bcb82b3b22231670c41fe7e8a0a083b6df768e7fb0d94a004f8372f5cf8b9b45cc679eb67828a94d0ffabfe09d95ad2789cb8657f7ea86a46260416a72e6fc7b44e549a2e39fe015c7647cc0bec15fa63d26894be1cc5326331e7e0b1c505934182accf049bab033b026d48fda51de740afc0666e6c891e0c5192f4b2df21493477ff45319d7d8b816f0b73ccfa12d6846362feb4b85063ca42e950eb577c630300dc52698a38ca19cbbb398404a1e8e27d0be49985e59caef03da096d1ccbeed73bd7c9588325b747ab77f4d7c1c1f18388ce1771882ee680ed737ad197ff92f1052e5e79f6ffa5b85ba3fac5db13e0d0046c9dca0ab4b74b20299ba6bdd758940e088df31e1382cee6901503299028467a864d27affae30fd9aef5a6ff948c052124511a75a46d5a316e28fb6c5bfac787be5833c63c535557235b0e09f9a78a338aa8864613fca77a7e252d1975af2c4a6bcc969d1e20e3cd4dfc1b2fe34b70fd7804dbfde4fa4d950e5fb4eb926dece9e4601b12efe322bb42ac808158fef0a26900000000726654987e7de20d1e41e82c607c33c6bae7bb234744b51dc683d5857afd6ba8246cebc734e393806ef102a6baaf04f3a7c3cb888d5830e1c6ae170c5c920e806b4f518be4416b216cdf9b1658a412d9e4eab6c9b20ce99960f27e77fdf9a2e98b35c63859f9db6bdcbef1001a19e12e41370f9358531987851ab64c250e68a8569ace4418e2118caff7d3d4caf1c87bc50a8ae75770fdae88a8490c041b39d08190d8b7c908caddd66331a508929d53dd6bc2dbc86f97115ff0a364b70f96918e6ed354c97e59ea5e2c7b149cd51d7c85a27ac658e78b99326857858df0ac0ee240cbb6ee9d9ee6c2c2ff7c29dd25fd337dc08bddeb50305ed48b9f5d89c55ffedde29ce0412ea8e2c976f961eb0c4966d2a8be0b657a5e51048a8a10005c488e1f637ce208a35b5aed0c2067465191dc42ebf6e4853cc89998bdf2ef755f38a3cd985b62df36a5ebc3b47df32423ee46857f9db9d756ff69ecd4ef2f307dcaefd4a1f399543952df972269c28200df8ebacad4eed1c00b9ce9841799bea583cafdeaa8d4a371a8ae55d8ffe4846833985975d8b234adff63eace9d2c4d1680c370827ebe1831ef311077607e8c4920506e03528861085dcfdb918f1efe91420c390fbca0a38377e1635c402ec1c34eddae986ffa8756b27f6c340907bae99f4a6b328fca8177b4dfaceea5ad3ceb901dbcefc15ded322bece4e750969e81935764ebe88749464af7e692e3d324c519b456013daae93bd63215540380a7fe08f0e050cdeb25db2a8b9b6f5720ad1e7d2c5b6d609712eccd321d6211fb642a4cdf72504aabd017a9b4827d1e0e0264435a5e1045dbe33834968d2db503972995559b1efe1b9ce475405118346b63f637b1abf8e8374e7100d6b41c9c672d2b244c7a82ffb882522efd9e903fc69db14c469685780005843856c6623591f305d383eae55a1a1d5619dfff0027413f26fa6a793a348ba8b192e1b088745a2175d55517a75d4b63cce41cc0dcaca9002cd37a1ccc6710ba2a099297b0824f976919e8abf3b1510b1305a95241fefbd036afa9d4538affc82f005d29b9f2c0e60d6c20f673b8ca28cb088e1e89efe334f25ffe1a3fb3581e5aa63b9a4a49f269b5538788aacbbc04d49902ae2af1f59d2484ab6ba7a9b477be0d92e221fc48cdbc00bef7125bfe36f9afb1cbd58fef21625ec99ffd2e35fb00767e3f22dba7d36163203cfaf1860a8b1afe0d878ea00fe08f68fd592a6395fb357acbdc2834c8ac85571527dbf1dbaaccede3d583e2b9bf076737716785f44aebc7ba917fb426d5541adff1e75836ab70fb0b43565ab5e24c5902879f31701cc006b4ee2f57be0916cf0b6cd489c4fa9129031a4af75a00048f20eb962f0c6f68cda0d7756a4e83f7d065c4a00b8263d95f6b979507b7ca01735e83a5e5ff0b76f077ef6e4c1150f9202b5311a231b76111d48a387e09075edb2448fb19d2869ae420ada8ee7577fe980ed7e057dc963c0a98db790bb5b7920220f8a55213b6530637b832abdf3c6fefdefb712a2c2c9eba8087ce39335ddabdadb86f493061e593981c6b2d70b4bac3b58885787c46f85c1022f5ff6cec16ba227aa5dac2e0be30522c08369f18d170b9cb454f3ebf86d1e923fdd65245d8e0c476bfedddcb772453f4d0e70d059e79b8811c379c9eff6e45d99f81186930b32b24cdcb906a41fe29c147ed834b37e77800a33c15e65d121ee85a924ef6bbc1c8f4a423fbc5d14645a08178227f4c7f111fa318823a6c075ddf9e131c9bca8d56dec4a68fbab9a0c1a128880d8b4dec59b89ec33c19eb76f09f31ad730cba735b60deba54c399119949e45af4de5c758281945fe6b6a25ac1cd57a81b48f11a6575e79b82e529d4ba1b2a1175cfa03ef6d149b165195fa64736b302e28ee6444368fb395a2d89c8747348b546a07ed0306682971539f0031d88ffa020d0b3d40369e0a3d2238293a75a155eb5c0749f64ed37a9af5be26d5a4322a55a23c33d176280bd0e4c5168f2e66bca925304d0f32074f5e68d7c43f9e2e3f14a6bcf3e77e6b71737131c3e90208072e37c8a6cad1cabd756aa694e85b86256ce13b43541a26438374b6029ee461d223ed34ed1e9a3e580cec7b2b41bc9823b3729e683f079a498636d022799dd94c5e870b6aa7f3d36fb51ffb6c5e317fcde6b5ae45073f8e90ee0fc1fa0641ff6f0b789dcc6df2fe9a3b5e6ed9d2be3403f5af96e7c6019b0a0ce4f8342323638a52c121956de068069fe5c44946b5023e1db7742fec29cb749bcdc09d795b683c553dbae1298540b2cf1bc3e5e52adf252bca47ba2182c80541daf1d11b1c67675171e69c1abe3c0bc3a0f2d1a6e2165ca1647c394970a404a6002621a258cef01e2ca12a138888dace9ad06d2f0c0209f286c11b289626aa557cc201560651054a6042e84c6fc5e345e2f702d61851fed5ffa36ade652f76db815dabb7b8eee016ea0836d0086f2a2f7bd1c4a4ceb1d706817b41347a891c34b45eb06a9ecb19041d5a39f050cb0413662dc4700385fac2e1823e1ce4d08c66692fde0862a057f2aa2425d511735fff53d0e3d88bfb245e7724ba4ba8452e469862d333dad5c63bfa778809c043132db3a57e122d0495441f7a07034a3ac1024b8fc063694d8316c29639cb6605ff362a853f976c763f6d10e4e0972760e60f08acdd8a73607e7311819fe24ad8b670bbf0adede086f91bd0839ce37927f43a263e3e8369932db9ab786ba66e1bba664bfa8aa50d98ed18fc90e560933c2e8da72757a4539756740a73c41180cf97fde47cf3e9e6005302459d831eea7a03157e0c3178776e4d4add3999b9a1efca7c99b8234ff9d33492431dd9bd0814301ee49260e30b8b6afc46ce8a733bc9d7850c789e5e98cdefbfb11131a85bc24e75453a16c6780ab4229b985d1fe7a255f71cfe18398e881d493ded88300b54f6c4a5567fd84a6e1f11835433448a00420ab1b3a49fcc0e9938da52b68f9409c94a0de61f0beb69532c4f7a11fae6a9ffd10db7de01e3272448b517ad795a06f3fef8148b7196cb81a80aed42e395c1ac346dd27f9bce87661e19f957a17d54d59b68e023c1516ae9ba4d75f18d4b8fc7e9fe6f74e38597b0e52000000000008000200fd7f000004000100180001801400020076657468305f746f5f626f6e64"], 0x1040}}, 0x0) (async) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$unix(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x2c, 0x1, 0x1, [r7, r6, r6, r6, r6, r7, r6]}}], 0x30}, 0x400c0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) (async, rerun: 64) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10) (async, rerun: 64) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64) read$FUSE(r8, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 64) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x3, 0x10408, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async) syz_fuse_handle_req(r8, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x13}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r10 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r10, r8) (async, rerun: 32) ioctl$GIO_UNISCRNMAP(r10, 0x4b69, &(0x7f0000000180)=""/250) (async, rerun: 32) r11 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r11, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) (async, rerun: 64) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r11, 0x100000000) (rerun: 64) 4m29.963504988s ago: executing program 7 (id=3635): r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffe25, &(0x7f0000000040)=ANY=[]) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1124, &(0x7f0000001280)={[{0x1000, 0x4e00, "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"}, {0x95, 0x4e00, "b8d87bea3e9cea8772f07faa9b79e3ab5c7f09dbc1ad204312ed9d0110676d1324d6e503b5e3ec8c5cb041072faedac54c69aa4b884accbbf654310d9ef6731b14ab3fc91a9801ce314bc0cd40b4ed097456febb05845965b3f1f8962d7aa4555927db824e5badd1693c5bf660c4e59e963b1a72680d54b4c50a6d3a45c3d265461c1113e8721745e593f2229b8c26197d9a690b45"}, {0x7e, 0x4e00, "c55ee29cdd925077a68660559e7e4427ef46baac3a58e30c050a20ed97a580815fd07c068238442c3d10f15ad7db0f1c6b75afd2a6e243d56b6b5f03a0a69bf0a40a04d163238294250364053e74941f4703184ac289d5edb9b7034831eca47d9dd4c71e9315659dda58324da5815bc82d8a884d4a1aa17f5fb3e5a733f4"}]}) 4m14.66222548s ago: executing program 37 (id=3635): r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffe25, &(0x7f0000000040)=ANY=[]) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1124, &(0x7f0000001280)={[{0x1000, 0x4e00, "655b8459fa416db766fcea1d519c765f4e9bbdabec7357d92567f867d5f4f7614ba3c0fc0e550e07266940da945fb645c4642dc8ced24356326d19675a57e0592d0c23f6045ab9d2f271e78a45600a8dfd6db9e19d2277f5bddaf9353fb50a9f61445e0171b26d8fc3971eb4a78a34fdc3862914d04705acf4e34ec5b6caa44a5b52d470ba1e48b942b360df0427baf6e47855c1ca49e75f2d25a03b2e4a642d145e61f393be1e704d45ee3b520fdae1dec831f19757c2c988958dda5d96adf7059e0e50e0f5635eece3457ddad982bc7e15af39d8b18de04df1d0ecf33f3d39c811b1edbc0aa16add7feab3ff0806b5abbe87356c6ad608a0cf7e16604e46242e898645fe67deeee657ead19ca64b391e5f68ffd5f7a9f04f485d940dfce0e2578f5e503359ab31fb3eee4a107c8208c681dc51c2f3e4177240cec9730f54ccb92fbaffdf66d198794d20ee469bb8fd06efd5e15232a6c06635e50fac55dec874080d2a2d90d84f7b448c95f061892bc7720dd93257060bb88e270bd4e64edfd4267059bbf66e26134f7f7d8843cfead9c47adf255cd56d0b99b1465e65e54875eae3274362daec6771f321d6c9ea70add387d54325f6d8d95ff52851dedbf39d4497c521425c965c03c7301cd441bed7c575c8dcc67126fde277f33454e5c916132f5e822b05132dd7c2074267dccd0d1473ef2f0214107c5a7c9d7dcce162f71bfc2f4de93a7666e409ab5c4c7842c1f410700fef5bb2ebac96571d6a1701d4b0d96872340a58de2ab01195960742656e62061353e7fbfa4a9ff11cd3693c28cd914e8e98e4545412a5c787e6ab4b7487de31b556ee86467d8ac71ad3b31d588a49d023bfea0dbc505336ab23b42d6332b3f99d8469feb674ab6289e7c2d4ce876f1b2f405e2d74f969bb6b8b2c134402ee3e2cfe4ca1932cb7d9d4699cfcf7fdbb7e39df2fc8dff323f6a769f3e2b62ecb814abb5797c661a632d6e0684cb50cd4f888b1b5b970f8149db286dc9e79c759680c26ee5179abc97efbc11e9c10ab352fe7257fb3da5ec17b1bef4bca416bd4faa86a8a3239ce13f051a794f12b6f0706ae4e7262566a95ceac57aebf2b280d94860fb2c20bf4bf674209447ee1d045f166734e4896302a71309f26961783eab119ff15584aae17a450d3d0cf53165c1f11b5bdc57be4fd9efa228815fbb002feb864a18523d3280615ce0adad5faccdd989344d4dd314f266d650cd27cc1891ec7cdb039561ae561338c060bbdc182e75349b5643ca4bebcde0cf08856abd9310e1357d16d42c2ddcbbf58e642fe01cda4fe97c6efb31bfe748d66a2eccdde0db1e09f95fec402d04b853267ebc358f811220ad3dc53f69794600b30bfc2e607508ebc6d479704e9830165b0c4e920145e7b4c01a0f82952c1caabf8618b8a5b8cbc938b4c8ba420e00038c0b42493185c8256f2a42defe9ba3c1742c5b3444a2ba4264bc24c93e6ac874b4c03c2ee2ed6e3a60ec6d324db3b83c81c43569921b7d7994b2a0d245ec516693caa47e16ddc1e13432f0cb5590b2da0dde3c6068b2126c63a20f7817b6adb857f31f7e050e7f2db08692d7f85538e10cccfe56bdccdf4452f8174886d908567e1835529fb53d1258e64072c7af73ace6b7a1fc8963b3a45b0afdb96da8f47481955e8f968caf267ace3130a4ac3760bcc6d212fb6249284dd43797b35d128abbf2d359d01cd9cee5ce652fbaef4ffb395999fbcf67c7b21c04788b5807f5635dab82edd1547afbc3066b1526f75b015aab3b3284d13aa1ce02e58d2fdbb5ec7a3f51c0ac43abb85727e70824b8ad4e3eeef80a5ded3b3191d534b60c6ca2288cc4e9aacccfbe05e9644d7e9466d8825c4135c2bfa54c4341fb99051209c5a1fd9c779858146378b73a9ec893f4e11e0aaa87f4189d767514d1142fd0700a01fcc4cebcdb5d993881da5b5c52ed3199bb0a83e8b666099b5e7fc2894c18f980cf19d14d6d14f1b3cdb60abe5b80db71b7f646d0743fb6929703c7bab7c4ec70a2281d63fd94cf900c094ad7a91fc185d44ca57e6b1cc6b788b7f0c1a2018ce50e0c63affc8496867620e93a0e99adefa2881b65464cf7dd64476cbb32e3bfa0b70571c870f3f32df5d650644948c6fde8c859160ec289f802a73298e1d2fcd9658a8b481cd4baa700b944956468b2201b470d42abca4d95183368041cdd1bc3bceb24878b601dd87f6714ae2f426d553488f34a1fc5bb84ea52d48c06d48d239eaae34718976a1c6d518e3e213eb4852806552d4123edac2d8ff4e0d6a4086d294ce3b979e0c2e5af57a012bb74318e2e47f9135f85a00df4a69389c72b51e659e73976d624a06a87cba2104d04457b44f4737368ea9e96767e9840aabce76f3c5c646dae4620eac597cf2d5b7aaeea5ede8886261ff133320b71628e46d82988e3baaa7cea3a873e1b8fe916eae289b20c63216ccbc8f98e8d69600306e02bf7d7eaab2a736f40c3a4ba346aa690965859020b2c24a85e28f39fce1d3dcd58933747efa2adf904b643e7d7351943a9a047ad86ba560d087b4850f7e286f36e12ee90dd6f759923537d5322f35cd8452d46e6e3ff531229ece7e27ca614a5cb00b776c49e9ab18e9b55780b8361e5d7ded9dd78184349281f42deae19e71b2eb489d6f160fcdc34c4148819a973e2475c11474196b52254bae40dac7f5dacce5317e2b5e31d9b8962421537e09fbdbe378fb9e91c1267e26620c0c41a02b64317bc8cdb87dc6345d115472c458bcae209c4408d0b24cb45cbe9b7af9d557c9baf1d8b53d3cf58830d8d67d44fbfe083240cdc7110768598f700a4dbf2106ba1a38349d0366e8f96bf893bb4f0ee78a8124ea85eead11606549b6f71f9472732ce75bcff9ffbb4b45773cb38ddeeb3919538b5b30c696571bcb71589d8c1fe51b613e79a1b40dc732954725f81906695e62e53e72a5752fd7ac0389606a30d9f5aaf0f57e7f28118004d5c2bb57d128e8369dd75972892c425cdfe59de703b4b526a21ea4cd2ea59d153d84316cc073665b1cc72cbae91f4783c28a4f6c5479f327098d2b1a48d91bbdf823ceeecb2d1474651f27bae9285ec46ce2c0c7dc35c692ac6d270762ec533f45ef1f2ce97de496cd9ddff657880c5c5f61dc05df8e43efd7dca7dce0a6aad6bfc6313cee3aad3a820eae973cd5d29a1173effa1a63a7a5d73a295b0e10d54a910f1d0478ba0a62706a2cad504f60547c9d661d84db50476ac56950bcbdb9e13b8baeca831761146fbe30f912ef6cfc8d6498fb6083c855fe332ad46f0a39d3ca03c64cb5bb05e29355465d44a6b0092c4855671bc6e6dc0d97e5a89a826a224f4a33ca74955e85caa3b7c8040aa1b900b796972d5b5c5db597023803d49080da523632229eb82ffe0dc4049db6592224bbada0a3a1a15069f3bf854d1f571db5f1bf1df1a64e619648835d3de7a89ae4c385184a7c398be1af09d3d2d2ddb5452518de24592263692ef25b9ae4e08129268d91dfd4c68206e3acadb9a3c955def9f91b29544f5863f147f9022c55eab187bc0b09d36b2c65e140884fd3f9f4ed907cebd6fedca24369fc50da3472e257d2af4868aa36d22f28e7f2e2ad60b5c741f622cca57794503b77b605187c545b356106933d083acaadfa258142c7427ad260960393c4951d0f3b922dff7a44208a24cd06cff33a7f97bb2e57af9e44c47b563df19cead162fb44f608ffcb201a6fdea63da07dba54c4a273144982dd6d8e9581d147aee7b8e55e98901ea001d978df56173dfff7a9a0c2d2ccd04ca1481dd5b4090204868edb9835b424cb5aa6165beff6e6503f5614c8ab6fbdeb7e5ca01b574132b2d6633a2192ff152fbc9ae30c1c93da7fc4820dfc200038f91e065b924d05462fe34a329e95cc01278bdf2e654d951c7c59e58f0c90d31eea4d0e7f7588391d48d04c8d9b2ab0ad9866d7ae5759209c9089106b715f3d2e73b8d176ff98c64d40046f0e1e3f7bef0ac017a346d5b110954f71f718585dafef3b1b8d724f4141778b49794436fa54dcd9b56acd7bfaaa389cd0466b49a203490c533e8e9c87103264a4ac440b7eb7031be12b99db1941e45596cc4c01b4c2e006abc83a62bd9eb5ec7885bdb56280460f420589f605999cac1ae2b9cda3caf26a05a0c494111c20924ceffe06787dd979ea9d84f07af0df111e748432b71e471ba4dae0d085556b1ae20eddccb61076eb35f23848b29d8f676d6573246790960a0fd1152eba4c097ed246129ad75a5b1edab3fc36efa69699d609b7ecb4231edc7d9f4b56f4e37e12a269ec49777bb8ce119398bf0472a9298055606dfc8e63dd8bf08d7bb24300f9b702c70c431eaf9dde5e08de6d8dcf46e81cbbd8e24545e9b910bf702a0068f940b8f01a84b29aa0c2d8997b23ac6ddd6c8902940af449c9693255a379d64d7c06cd97457e15e5a0df0387f647bee3618c8c9e26b9df6dca5dd84e668091d634910e82511a30173c3c0ccfcd9fc6d9809972ab3ff72ac3c0e2a39c8d89ca2fb9bc5574e7cc1e0e13f4296dcb640556a029081d55b517c19ef441db758c65c1410d636b8d31823f618b83801e71020fc0de8582f11638ede37aca74098f6185484dcbfe044307926f83ef282c6cb943b21f9419df6b23fca33caf670538f42d25746e3f6c10807ec4f3d98f423c4422d5276a145b0662f9146f2debdaf2b7490d64a1e760822c4bfdc0980c205532088207b423c8443d3cb6f971ac0d249d70197987b188d909d124171f5e548ca75a4d884d49c4386e00a81f3860d2996c7db96a08b3b342a25a2178c18b763f0a5f5de7782dd473f2cdb617de9c4e4387c35370abcb1a15c39f846ea3aeff7616e0472ba966e001096c32caae5c100f175222fadea9a694d403792aaf1e9637c1670000279f17ea162a615282c6f5dc966afb4c6d139c0db832a3ca8e1cf5b770ba580e5a641f4f1289ea2ac5e53dbd26ef88459c3ae5725c482fe903c17aa32c0ea02b0699a2ce3672970f48843a498c4c90a21d9a915c449ce641c09fe1f617064b99f9a0f68b579b239ed4a91597a85f05e40437cb6b7d4e2f07a7759d78821eb673d8c64ff019365bcfd6c7c76c5fb1dac91a4efa229f5c1669f5a79cb4bb364623307366acf8e64ec4627652380bbafdb67496c03ff03d123cb8f764454395fd0ecb75b041a580e611053c3eb93f04175faf8471f22390ac1520bc09db13ceab6f2c84ae5f5bad59952d13d900de0f21001cc3eb929ba92f0b632980bd7cf5bfabfc72b39add9e6dab8053986c853e6dcd986c1d2dcfb70965da790db3bff8f688eb94cd7b7a838f7b18f49d868da54b6690ac7e50664fc5f7f993850396a689faf1db320f361d2ad385904a45d3e6caf6a0ed65c0dd4967c07d13e840a02c7598bf7250a81de391271c362c47b85913ae0586d279cab927a71ef21a18a6683e8b66f64d035861c8fa7cb005fefdcb6c8271dc09578388b94af7023381b012d06ee2f9b91e1e4398c5d1fbe090e2e0abb4629c84e62abcd92754a4b3975ae0e167cbcf9c233905ac3f2792ea1b8e50fa9ff62cf8dc8da3417e1e269270c1c20bcb8377c9ae2ed9891dc22ee1a64b2d473320b45db8307fc479f382a0805b2c976f49e0fc5a9244c9676b36c3ec3a3560c75fafb456f5fe162e37f693a2cbe326e6fa6ce010fa86cfe70128bd94771368a15405aa911bfef13329186bb367d5d0f5cc70ad87bc991974540aa29d55b9a068a4976f0713af48daf11bc80cacd3e7"}, {0x95, 0x4e00, "b8d87bea3e9cea8772f07faa9b79e3ab5c7f09dbc1ad204312ed9d0110676d1324d6e503b5e3ec8c5cb041072faedac54c69aa4b884accbbf654310d9ef6731b14ab3fc91a9801ce314bc0cd40b4ed097456febb05845965b3f1f8962d7aa4555927db824e5badd1693c5bf660c4e59e963b1a72680d54b4c50a6d3a45c3d265461c1113e8721745e593f2229b8c26197d9a690b45"}, {0x7e, 0x4e00, "c55ee29cdd925077a68660559e7e4427ef46baac3a58e30c050a20ed97a580815fd07c068238442c3d10f15ad7db0f1c6b75afd2a6e243d56b6b5f03a0a69bf0a40a04d163238294250364053e74941f4703184ac289d5edb9b7034831eca47d9dd4c71e9315659dda58324da5815bc82d8a884d4a1aa17f5fb3e5a733f4"}]}) 1m10.462546647s ago: executing program 8 (id=4559): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000600)={0x9, {"a2e3ad084fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34343b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d326d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f00000000fd00000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f216c9d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035bdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281ff0054fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000deecc506000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1000}}, 0x1006) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@rdmsr={0x32, 0x18, {0x4b564d02}}], 0x18}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300030a000000000700e1ffffffff01e80000000000000000020d00008000030006000000000002004e210000008000000000000000000300058e9379c82896c380822b6ea6db0e003200000002000000ac1414000000000000000000b39daba0a29c9d3449557127b35cdba1cfb70b6283ffff0000000000006eebdfc036850784b10f73f40f27528507c66f71c43f1f56527aed1dcca775313417b2696a"], 0x50}, 0x1, 0x7}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x4200, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m10.004392505s ago: executing program 8 (id=4560): r0 = syz_open_dev$media(&(0x7f0000000080), 0x4, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000006c0)) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000006c0)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.kill\x00', 0x0, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000380)={&(0x7f0000000300)=[{0xfffd, 0xe01, 0x4c, &(0x7f0000000080)="b237f4e08243f2cb0f5800719b5e1b87fe358f8da93b138f66297f4a1791e7a2b6a247c49f04363ff88c391e23c3e81cb97e64578685c1f869de2f8e5817852fa22bfe25acd843b5af8f80c2"}, {0x8, 0xc01, 0x4b, &(0x7f0000000100)="e5e812ac04b0df4b895053f85620a1bb98f75195ae5e3ea5411cf78f795ef501816998244c30060fd7ddf4e919077c69cfe25226a8fecabac0bf47a5c1718d6f4fb20c819569bd980de3f3"}, {0x0, 0x2000, 0xaf, &(0x7f0000000180)="77a5a925ffaef743a771bbea34b4b31dad00dfe15702d7731b4f86f3b608b51955ef9be96b1e0e78566833d4d417f4def3d6676c52fc602ff28f54518e8c35aa0ca4a77eeb7b75d0b7feebba72adeb32e3719eaca9169a5e024711a010fa4d9b29bf4357a0f5e5b3d922adfe264a4b336219dda7b25649bc99a9570baf3163c52fee1f3d051cb321768d0f60cb1ca405e1de68a0ad34a38b69a793d6a6ab7ab03dd61e2238146f072331fb32b11836"}, {0x9, 0x2001, 0x15, &(0x7f0000000240)="ba2914bd6d3503d4f5dc38235bb4ae6e19d5109648"}, {0x8001, 0x2010, 0x54, &(0x7f0000000280)="ad6c01d56e7c9237a6b26ff1d51ce1a054be3f7746de0cfb63cb071d72bd0c98ed5c581075abb6648d81545dddd1a8e85d08d3904b9b3bd2cd06178c079b34130b8e83b8f7256088eb6c72fb72f4598df88b6006"}], 0x5}) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r2, 0x7dfff000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/binder1\x00', 0x0, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/binder1\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000340)={0x0, 0x200008, 0x0, 0xfffffbff, 0xd, "90737f0067f8dd08a5759a81ff1e277fffffeb"}) (async) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000340)={0x0, 0x200008, 0x0, 0xfffffbff, 0xd, "90737f0067f8dd08a5759a81ff1e277fffffeb"}) r6 = dup(r5) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r7, &(0x7f0000000600)=[{&(0x7f0000000240)="01000000", 0x4}, {&(0x7f0000000280)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x1b}, {&(0x7f0000000500)="527303587e0a4e47ad", 0x9}], 0x3, 0x0, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0xff) eventfd2(0x7ff, 0x801) (async) r8 = eventfd2(0x7ff, 0x801) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) io_submit(0x0, 0x6, &(0x7f0000001a40)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x7, r1, &(0x7f0000000440)="da6f231d15a13ffaef9fe3c43134a4bb223dcf2bc4c8cfbdc1d9da5c34a728683a2b3d5255206b714064618980d0dfc3a58b804fa412409aec106001faa2b47bd80a432f3194bea2498ea0015f780b1ad83e051c4d512e88e656773836d057338221b1f9250fe3b2e3a7c5eba827111014058cb88b25c274e957476d08e927", 0x7f, 0x9, 0x0, 0x3, r6}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x6, 0x85d, r0, &(0x7f0000000500)="74187c8f7b893ca455c13a2edbda5a522e1e21f383540877bc649f5321d1ff8be7fd722cf39fd8548433533c8b2663165546beda394f001a1951a013b00a6ae936bc008e18e4c71e2f14e479536102778058ed6dbee8d5b85977d61c1c1f29b4743f5c1e2aabab68923c1e600dfd2e364e1bb3b34833df3f45c5eeff4cfceb1211cad8a31bc52d88719ebab95a400b601bf2a420ebc70d38f66667ace109a219c7a89821d2c95626052e92c80acbe29762aa6c2ed1ae8713e0a4ea405b934d73f8b3435bb58ae58638b560259772222b6fd6b5190babbe357f27d543a889e932e6d76c79", 0xe4, 0x7, 0x0, 0x1, r3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x7, r2, &(0x7f0000000700)="11b24907ac45c7a149122b4b752ce8224d292760689935b60edaba3d57f493492d34ac628fa08dcc86af1b03d2993c42c4377bfa6af95906853cf1d57b641d2f4b0c839b15fb993df7742bccf7f0139f01dd8df6e594b10d4f86c3b299a3da61e170390c21348c74c08519787cd7e389a6c9e1b4081ae9c5d928b27d295bc97c276fee81f4369a68df04c5946c01681974852f611164af92a795e9165527ebe2fead38eed67113ce854f78c72c54e50cd5de27054353375816c004db8339f5f8656100b3c6315d63f16b80a87cd18d069a2d8e511ab90381d2d60e4143e787315563cd4f45e0427ff9b4fdd991", 0xed, 0x4, 0x0, 0x2, r8}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x5b04ff8cd8b67eac, 0x9, r9, &(0x7f0000000800)="46ee4d016b97c56c7ab1faec88a3207f5e5772c470d227c88b88f65a75a6617ae3f26ab00a520adfa66bef6244d643d7749749a249edea7367a7799af29639b5830dda6dc024c6977a3936f46c5f5ebfb2d7d7db5f375611338ac1e232541ccbf430c25e6f7db773ae44459e03656d89fb6b56851d81d9bf51ef2cdea7372d81cfbc5c0929737452978e6740750c367e11fcbc9d937ae09d18", 0x99, 0x8, 0x0, 0x3, r3}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x3, 0x5, r0, &(0x7f00000008c0)="23f4b8c79b0d24eb9db7d965b950887c69fce20dea0e629116a745bf811ffba6d6928ca811a495c9c814a89ca376e052b51c99909604effd9e561f650aa2e5a5c52cce549ddb6f47d93d8106fac37f36218a5ca03c1b39f23204c88f56d5708f450f07545165c79917483e6e3bdf51ac9d58cdb86de4a90eeec09bccf7f159b4f70f899de52086c3951775d60cc191cfd9038bccefc45ec717c4b5b710c4aee698830ded2a4662f2daadf97499d56a05bb4d2cad2251302198dad39ae7bebbc7e1b3feffaa816f96237c0e9478c12f7c23c43be93bd0557f0ea3cc4dd53307c77361aa98ab3f9715341a6b5e6944e2ccc92c07de08795bf5a6fc2a7ea37c29146fc6d509e96ca133e5f275b5b631da43343458685943a20e01f3dec547b8fec06a3f6ef5dc705ddb5943fb2acb57fe22ac1ae6c300286599a54b4d9d9409d7e1067b4ef6f3876f70a51a28ad6ba4d073f7dfe6d2d56fb27e881d24083750274d85666b9e2036d036cbc3b33903e9cc5e31acc6189ba73528ff58362b6a085bb8e509575f853f13297839bf92f267375ead0704dc23fb13ecd82225d8b72f26b556f34a2412de115f33af8a2131c2bf9a6f3ba48d4b81b82663add5c10022ccc57a61aea69014bbe02ceae4b34152ae1e0cb7f7d57341ca12df116782fb203ac96fb9fdf06c49abc340326964c70f69fc34d3c06a4b821672756c717c92f305c5fe1e48d3d2383cba6524b49d2ce8c2c817d4335f0454c2265167cc3507a55eb9ea6c62da37159fac377467305cd51f3e367776ed06d82cfb6ed3239943b66c210fa15d86f7445238685972a258bbf7a98074fcda9361d9f6e4f2b7e5028077f368b0a781e0f95b50356282de59c0cc9049677455ad83c8e7de11833559fe90a3f1be55d7bd3170fd3ca8f5daa14b5a10d57f99ed64753cb17f979ec935d80dfc8a7c5ba2b89242ed2a5928209b37654840b29487404cd04463fc3fe0f7a15104aa768ff5f3121bd06fa21b10a151cf6a1d48191c8b3a22a9a1c8b6dca59a07a52d9654ddf6fa04602a55e774438cef14ccfa86edb5ca11c388f5e9792876f5028041c0eab0ad75f11f6ee10a51fcf9c0122bcc6b24035ad49438be9b5ce8afa37b16d4dde074eae6a35ffb44f63621817e26559eaa8c95ad4f04c23d64649d93a0e010212c9dee6115da328ddd2683364d177f6500523af93492d8161f82cf6670567de5463595bfe959a76d17ddc3ab28c01800c583075d431427ca96588037cfb85c50c50a5e212ada3c4f8c57213dbdd782550022cb16498a468ae3792c618b23758d75d3e6e1cca8440a6d054b04dc714f31126a10cb0b4f626070c284eaafab51b5be11839c08173642cac30083b1708e2b9c283b1b29a6cd8519fc0ab47374a79f5b9e639be2605aa943dcf8b5ad327278d80ae7dc824f2d9ea36a424607171f98cbc72a447312161b3be710643e24ce0c6c69d4d89ef530e12d1ec17422c1d25d7fdfe387be79ecffee0a06bc5a73ec471eab87caf70ae1f7643100913b7c17c2e75550d5e0b9688a4dce60d167614a5ba4430f63cd8656c481e3eb825496ea519e3c0c9f1de83005fee24ae73ba3b58239095ce726b58eae127597ae188b9b4f16642f3fd1ab4584a0b697b7ae46a56329f105cdf54e738005f87931de1a5e799a535a3470bb2d9e45db22add587fe09ef4fcacad3838d468ae4f9b3b483f32f2b6dba462d8e2dbc203d52ce512401fe3986f861ae8b4c8f415a66f14106484b5d0d2677c31e806ed1730cdf340c620b149850e332812a908151d8833209d42a0a1bf71136ab70c9d508b283f89c9e60e49c0b8d40b2f30ebd8decbadbce19c21e8839437aba06d232fc88debc3cde5d97a288854f75559199f5b03352af51e241230bb120df7e25845445cc8cc16acc8df818d8cac933900043d0e113284bfb0919342fd2af91a8c17aa3fead20010e55f911a1d8db848cedae85c6fe0f8195f724f0004722f985e534f615d56d2945dcab127f4394e9a9e83d493797be67d20117531ba828db51a6892ec7485e805eccd44c8fc748d24c2115429304536d453f840eb3247bf0a4234e902274cd84b8b333cafe5b5559c414a1742286ae75c60997a7223bebdad9e7629823c8c45c486e28236f0209a963e7fed49802a99ad8dffb7a1c8b768b9895cc55b4f4823be7951be60361990be08b5af3622e4a515c71673913a476f5bed1bd109e2a6afab6ea59a363e948401fce3db1fb5364db39fbfa3d6be6aa1f986d92ab5d66c52729ec28ff8e014d7e2190c69a4de4ac593693b73d8bebe1e46f7811a80f05e234b864ddf2d3250390bec683eec6c07f7d81ed3880cf1ac4db7297f36ae03aea579f417eeee80a28195eb7e5c53192ec30119a2c80f239ab1e3778490fb099e21a0b15117b21a1feed5d34920b835d33b01e9bd8746978f74dd02e6bfc7d37b9d6a64f9c6c3569b32a031abafda8ad0f1c9a1de3729caaa0d9f97aab5923682c129eb80f659d71af6ce0d16193763e273df69bc95c932b2fa8ee3f0aacaa2001b38927aac54e9f18bd157c8f800a38e7b26654506214918e552c1ede2944862f498ae369c9e89ef106361837ae52a572b557c310d167816ab71193db1ce508b66ff0d24bdd6fec113aa0e94615de673aef3245e43a36397116542a424992ea820c3ed29e457e3edfefa2fc65cb83dd1fa452409e216d8d2bd5c3bb4e62ab029edc142376becf456f5675684727bc8f8bcd99c24c2f0ec7894e9eb2fcb251f2fcb8be0ab3044bbc6c3c1f7a492a22d8e4dd23254a404dd032a7aed7d890b8a35f410518ac7a4c45fc843a7eb432fb8db84fcdca3f9cb35763380f3710d0d216d754f9462f63b530944ac237c3e3f0e2d0fe13b60c2a0dc54d0012690028dcd5be8609cbe85823dbfd7cc903819eb0fe8d46f20e365eeac990bde0640db1f4d8bc9f65991f4ebd69ea536ace9301aff3fbf653228a8c04d379caee99b05a771602bb247fe77fd3702bcd9f0f67731f8fa28e4feb4c6868e677a9d06d3ffb0a60a221854e2be79bcf4552a2ae1da478dd3bdf7ea60cb2e9f5339dc15f0d04f6eed7d68eace4010bb5cd4aa3006c4ab60fded8d80f61e1a5796408c40714a58d81b7b5b9c2c2db305c45abde644c4a96fd4c334c75473ef02da1dbb530235830050c9d4201171d665060f16e32c69e503821e02f3e987c9411216e1b2ee8946de5e557904bb927a7dc71c1eff5fd4262be47e9ef25c7229c614fcbc20b47747cd3fcdb1324312dcc0cb2aa35a57583860f85dd21e23f52d11b29ceaa3500fed569d534958f7a6cc79df494d89b61b55e03f457bd480cbbf95d42e4cd1527b66adc059aaf628828fdb33f5a9c4f2d27999f54f957eddc7aab0318190caabb129420432cb6f9b19a0881a38d255fee4a33f1120876d5b040792a25717081d7622ba826c6c2e86ff451dbfb6ab5f80e5fa969a42e999f7e4b83756cdfdd7f1c52526c7fceaa24edd1cdb6b405f10a1df20cc871e9fb9efcf914a27399d521aedf34190a8b05ebbac57ccf1d43d81afca73550a95fdee02284ab912623acbd9571a1ef153604a5fc67c2046796d76355a524f9b27e1add7bc8ef302a0f74eca74f355f7705f3a22a12de099d6e460b366a4d61b020015e657efdffb461820e352d27e5518af5ce5d8b97cd9f634c5f68fb8c8db9a2ffd52b2dc32bd604cbe96c33cc3658ee9decabc2ec8da7051c91f918993ada1950bb8d95ed4bb452c49d780afd57255ec43f460056a87fe21d8e486b112267363aec589b64983f84f13310e222f09177a295246da9637d903f03838756269f79e94d7574c8caa6ea0366538675ab25c8ae811f52bcae430bee45f33ce2f4facebaf78c56b7455f847331052752aeeaf637268598c959f41648f3c627bd70f88931129da4bab06cdea3e51ef2950c26380cc2e22e3978dbc92419074b817fc7ed456687a1e1260c2b9deb08e327dbae6c40ddb8ac2534db0974c1373e4c8292c47a3be01b4080e4539f6963666f59fef221187bcbcf5ef0229348ac866648c680c98d4bf19db93cbb9235f3d5e171e54aeeb9fdd20935edc5f9c92bcff213204713640f48233c596a10630575eb9516ee3d81e859a29ff5e9f73921fe19823547400392171b7f762a171e8c1dd5e656fdc5b5581f38592c171f52e96fe617474fc0ae511dcbec474aa567baed635bc04edc717573280825423a318eec25c9a47cb68bfbca55d4c850b5aa58875c2520b0c86b9294d75ad285e4617b381964b760cbe867fec2eecb65981f55f1cfe337bb71a107ef80b61a22d6b244c85c393bc0d78a0e65a3a657b949416b59b7004d721133375458962cfe36badd14ab98c4a90a3dd6cd4e98ceb12a23a06c57570d98af35015dea5dc4bd6e9b1198b619b9dcd3439c265cf5829cdf28ba4d757b7fcb26c5f50df5054f141ee8db17ce93ef00286981ec03344561b2a118612f6a1913e93e77ee51c1aba07547cd52d79bb5174ca300e658560177f72d6648e36a0d2a169d8f29e5bbe3c389801a19ab8f8956d2f1e31c4a0e5df8008c86b5a63e05e53b6c703dab73f163dc9f7f53283e75110a690762bedc5ae9e0b23b8b444b2769bcfc8b5172d5b7e6defe1669aac35b5b9d2106f62d17dfc3b8f4449e29abdc59f5f0551062407e0b681ba7ab186e5d2008e616cfba26a11e892a38ba748101ea41f7ddca14e7b146ff3c7d4d4eb2cf07699e89ef99b71a9f2f3be22fc3958ffcd090d59f2643af16a4f04a5ddc4fe03fab4ddabc0d573c67a28d8ea6a5dc51c59fb572d69f38bfa6b5e6743bcd3d68c431ad67d7340231edff26cb02f27dff30dde015a721df3db922e9df65e3c12e944fca59b86e36144a0ad9ad3dacd58ed72fc86fd044497895c0a4b4cc91aaebd6b8618f2de3227675f97d55fb8b90da780fd0c3ed5137d457c22c5b78c9c685194a4bb4947905dd02c7e1146ae93f2cb392f2c3aa02b3c6522201b0550e7992686d4e14a7d0e900cf046b1bec5000c12110f5403f505a2fff16a1642ab570fa9c08460d21fcaa8b247222090b07d8bd39927e593ed7df69db4f17165e8419feb7753cc1339fdd3767f157c3d9736f629873fb33604a6b3cff01ab74fb947af65be4378e988ef2a84736f9e11a41140a52e1b23c5a7327791319e755eadfe09d2950ad1b157cf7f208e721402b3b1aaf7af76902bf6d600067a8dd3b779bb7270a6db4ae6440ef9067dcc35536bcf15adec95127441632f382e51b71645666b2611acceeccc6c6e558be7af229471075129cad6f85323236955dd495238e7b9002e191bcc721969987f8da8e8ae2e2da6f58c239055524a552499434eb069f56785693d91c00032bbd7f894a94c01ba3a806fd78fa62b3ad894f1e85c67cd9579312f3128b4ead532f8b9d570a68ba5635087984b994ee0e67c3f17632497ce9c7a399e0171b32c8498e8ba35aa9ac82bab4008e340956c3166507c16d9dcfca00b97af26178292ff4f445499da670d4ec4b3a48f1d90dfd1063dda5f9889f341339f881f6811546023d51a2ca6ce1cade202e7830fd2e3ef145656f8ede0b22191980589b7788002fa28a0cff0d2ab3f89a4354d5a7ef063558272132869d31052ba40d349b5299961073c21741a72b51178ca28e04856d9b3e32b6bf67b0d5a7c00484a487632036bc29d788a18eab6ee3f738dda65f50bc70d840724c11772a39b27aa73b6a6eb02cf7d1e1c194768641c5631d657998eb623356dc3f", 0x1000, 0xfff, 0x0, 0x0, r3}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x7, 0x101, r3, &(0x7f0000001900)="eed4a180bc0dfdbe71f0d549d85c5f71752f7cba6743e3cbe185ea4a3ee0b1d33c15f009c9a75f1e0926c78181f4116e5ef0dbf6fab942bca7284696586ffe0da00cdd33595b459b643270336de9acd246d9c791923659d5eaf0961a53b026e36a99401be161170d35952f48083ee2fe40a396154ce1a207b38701da1686a17a0386983029dce3c74f373c2f3a41634691ef13b767ff815c1465b37e655ea1f8ded07cff33a21e85f78e54bc7e5ef1da172acd10c2c4f20587cbc913f7a1723fc8991923915c78cd37c72c80c60efc63a6", 0xd1, 0x3701, 0x0, 0x2, r3}]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x100b, 0x2}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x100b, 0x2}) 1m9.89967675s ago: executing program 8 (id=4563): r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)={0x200, 0x30, 0x900, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x14, 0xfe, 0x0, 0x0, @ipv6=@mcast1}, @generic="0c6f76503bf6d7450e6b2d85697aa4bfa43ad492576374c2d9ff713ef65852faa57ea40dea32e4757e138edae6eeaaaee6afd0a5064b693067230a3b1368ae37847ea6e067199a8edd9c7607bb5b4ee8d7dfab0adca2cc26e5fdb8fe893bd211ae69a61c3e52c52cfaef1c47ebe62994e9a875c37eedf44d0072d69afb3b669d18eb96ee0403b3eb7ebfb487eb9ac767f4ffbb255e1d3347a8", @nested={0x13d, 0xf0, 0x0, 0x1, [@generic="2912c34da4a2df2426dd793fb36492ee77dff921e8719a5152a341f462ce482e9312030dd1e00e5bea646d3d3d75c9224be8c2f7a607b74bf4307c0e3e62783a58f7a9a84033ba134929f75be33b5dc8c91f7c215cbed28d915cde222fe605750fff10e75805fe4e00a07a905778ec2b8a02747329e4c18dc43db97cb0baee77bc580044d524694d7884c2ab90027fd4358eaae72a0222d6b81dd94173ee270b8c188a5c1de11ccafade1781f19f99120b842b3c640cc653427d2287b9ff62ba6eb3c82dd3d2cb1303ee5994ea78fef66e37e1a684629b36020d9f052249d8", @generic="1af7af25e9e942678df06f6bfdbba5ffca219edc9e014df5b8a45c3aeffffa9044c7b6ea438d716e69918512c573245c97d288583877950d33c618d9fe3558e7c0ae70ce04e58e10b6508946a614cfe02c3aa5997dd6", @nested={0x4, 0x146}]}]}, 0x200}], 0x1, 0x0, 0x0, 0x4000}, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000140)) r5 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) fcntl$addseals(r5, 0x409, 0x20) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000000)=0x4000) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000500)=0x304000002) r7 = socket(0x1a, 0xa, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0xa, &(0x7f0000000080), 0x4) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001900010000000000000000001d0109004d00128008002100", @ANYRES32=0x0, @ANYBLOB="428184a477201acb0f24d8c531680464ff1e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3da0000000c000d"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x804) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a0102000000000000000002001a000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f28edd81ab64db88bebd7f17bd812f8f"], 0xfc}}, 0x0) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='fusectl\x00', 0x200000, 0x0) 1m9.827764087s ago: executing program 8 (id=4564): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) mount$cgroup2(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x160c1, &(0x7f0000000200)={[{@subsystem='rdma'}, {@favordynmods}], [{@pcr={'pcr', 0x3d, 0xc}}]}) chroot(&(0x7f00000001c0)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00') 1m9.740527558s ago: executing program 8 (id=4565): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0xeb86, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0xa00, 0x0) splice(r1, &(0x7f0000000080)=0x2, r2, &(0x7f0000000100)=0x6, 0x5, 0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x5708e000) 1m9.579569837s ago: executing program 8 (id=4566): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$inet6(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x9, 0x0, 0x3, 0x2, 0x0, 0x94d}, &(0x7f0000000080)=0x20) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r9, 0x3b88, &(0x7f0000000100)={0xc}) syz_usb_connect(0x0, 0x3b5, &(0x7f0000000380)=ANY=[@ANYBLOB="12011100253ce520710402068a2a010203010902a303040e7c30010904890302fb5a8e2909050b03ff030306050725018307020009050d1010000900570904000802ffcd1e070a24010000090201020924030502030405090924060206010600f209240305050303010b09240305060302050e07240506"], 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) lseek(r10, 0xffffffffffffffff, 0x2) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r5}, 0x60) bind$xdp(r2, &(0x7f0000000140)={0x2c, 0xd, r8, 0x1d}, 0x10) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000001058046a0000000000000109c62400010000e90009040000010300000909210900000122a000090581034000000000"], 0x0) syz_usb_control_io(r11, 0x0, 0x0) syz_usb_control_io(r11, &(0x7f00000000c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) write$P9_RSTATu(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="320200007d01000005f1000000000400000000000000040000000000000000000000000000000000000000000000000000001f00046e6f6465767b6376666f7825ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x232) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203c3b66b4d7a11ef37e2d585675e87ae1ebc15ce4d49e7e46488ea6a5ca38b8c534884dcfb7c4bc8711b196730da7678"]}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m9.260804203s ago: executing program 38 (id=4566): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$inet6(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x9, 0x0, 0x3, 0x2, 0x0, 0x94d}, &(0x7f0000000080)=0x20) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r9, 0x3b88, &(0x7f0000000100)={0xc}) syz_usb_connect(0x0, 0x3b5, &(0x7f0000000380)=ANY=[@ANYBLOB="12011100253ce520710402068a2a010203010902a303040e7c30010904890302fb5a8e2909050b03ff030306050725018307020009050d1010000900570904000802ffcd1e070a24010000090201020924030502030405090924060206010600f209240305050303010b09240305060302050e07240506"], 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) lseek(r10, 0xffffffffffffffff, 0x2) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r5}, 0x60) bind$xdp(r2, &(0x7f0000000140)={0x2c, 0xd, r8, 0x1d}, 0x10) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000001058046a0000000000000109c62400010000e90009040000010300000909210900000122a000090581034000000000"], 0x0) syz_usb_control_io(r11, 0x0, 0x0) syz_usb_control_io(r11, &(0x7f00000000c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) write$P9_RSTATu(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="320200007d01000005f1000000000400000000000000040000000000000000000000000000000000000000000000000000001f00046e6f6465767b6376666f7825ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x232) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203c3b66b4d7a11ef37e2d585675e87ae1ebc15ce4d49e7e46488ea6a5ca38b8c534884dcfb7c4bc8711b196730da7678"]}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.844426448s ago: executing program 9 (id=4842): syz_usb_disconnect(0xffffffffffffffff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x8, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) write$cgroup_netprio_ifpriomap(r1, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x3}) syz_usb_connect(0x0, 0x24, &(0x7f0000002080)=ANY=[@ANYBLOB="12017dc3d1169e1ce22e00004c9e58004505808001420102030109021200010000000009040200005c0f4600"], 0x0) 4.792557964s ago: executing program 9 (id=4859): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f00000000c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000000)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r1, &(0x7f0000000040)="6e84ed7edfec45cd5117eb7ed7f80787c448bbd00e9d6c2b36b8261c66c1ae9c3fa011e14b96581423f92740633b8fc7c195026e3818ae5151df5f088b37186425b8bb6364dc4cfd1075ea4ba9a5243c2ca2975685d7127cc6a6d69321caf4e754b571f94083486d4043e3fb4baecdfa38fd3374f95c91f760b0357f", 0x7c) 4.785801836s ago: executing program 9 (id=4860): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) readv(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/244, 0xf4}, {&(0x7f00000000c0)=""/107, 0x6b}], 0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x34, r2, 0x633d41a77d0888ff, 0x70bd26, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044000}, 0x20048844) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4c, 0x9e, 0x58, 0x10, 0x545, 0x8080, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0x5c, 0xf, 0x46}}]}}]}}, 0x0) 3.696231888s ago: executing program 4 (id=4863): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 3.585756444s ago: executing program 4 (id=4864): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x200000ffc000) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000140)=ANY=[@ANYBLOB='\b']) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x6, 0x6, 0xfffa}, 0x1b, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x5, 0x2, 0x8, 0x7f, 0x40006, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff02, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x100, 0x24, 0x4000009, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x1, 0x71, 0x2, 0x6, 0x7, 0x2, 0x5, 0x40, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x4, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0x10, 0x312, 0x478, 0xea4, 0x0, 0x40, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x82, 0x7f, 0x9, 0x3, 0x40000003, 0x5, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x23ff02a1, 0x2], [0xf, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x4, 0x8, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x4f47, 0x8, 0x4, 0x8001, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x40005, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x3, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0x3, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x8000, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x80000001, 0x4, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_usb_connect(0x2, 0x4a, &(0x7f0000000480)=ANY=[@ANYBLOB="120100005520f010402038b1420100000001090238000100000000090400000371055900090582eb10000000010200090502f3"], 0x0) 3.418526523s ago: executing program 6 (id=4866): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="6411022e324e5bce5ca8632d6a760e6840036aa2d8cdfe2b2e8a904f88a79ac34d850077072f23d7fa0dcc6ac62e37c071b9781db6d780bd432ada1a5f7cd892048bf21422ef4d0271", @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf2567000000080001006a00000008000300", @ANYRES32=r1, @ANYBLOB="0800c300741300000800c40000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x20044000) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) connect$inet6(r4, &(0x7f0000000340)={0x2, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x400454a4, &(0x7f0000000200)={{0x1}}) r5 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 3.315252723s ago: executing program 6 (id=4867): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f00000000c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) (fail_nth: 5) 3.007634346s ago: executing program 9 (id=4868): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x8c884) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080007401000000d0500020007000000080006400000000108000440000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x5b) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r2, 0x93774000) 2.982327s ago: executing program 6 (id=4869): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@tclass={{0x14, 0x29, 0x32, 0x9}}], 0x18}}], 0x1, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20048000) 2.8362511s ago: executing program 6 (id=4871): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0xc5ba, 0x1, 0x1, 0xc3}, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x0, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x3a, 0x2, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0xc, 0x6, [0x4, 0x3, 0x0, 0xa, 0x5, 0x570]}, &(0x7f0000000080)=0x14) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'veth0_virt_wifi\x00'}}) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"]) sendfile(r0, r0, 0x0, 0x7ffff000) 2.80486798s ago: executing program 9 (id=4872): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 2.727687963s ago: executing program 9 (id=4873): syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="2201ff0007ff1a40d8048200b7ce010282", @ANYRES32], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000240)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x9, 0x80, 0x0, 0x1, 0x8000000000000, 0x2, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000280)={{0x4, 0x8080000, 0x3, 0xd, 0x27, 0x10, 0xfd, 0x4, 0x81, 0x6, 0x3, 0x9}, {0x8000000, 0x100000, 0x3, 0xbe, 0x5, 0xc, 0x2, 0xa, 0x4, 0x7, 0x67, 0x4}, {0x10000, 0x1, 0xb, 0x35, 0x5, 0x0, 0xfd, 0x90, 0x0, 0x1, 0x9, 0x7}, {0x0, 0xeeef0000, 0x4, 0x2e, 0x7, 0x9, 0x6, 0x9, 0x5, 0x3, 0x1, 0x8}, {0x100000, 0x4000, 0x10, 0x1, 0x4, 0xfd, 0xc, 0x7, 0x6f, 0xae, 0x1}, {0xffff1000, 0xeeee0000, 0x15, 0x1, 0x26, 0x9, 0x1, 0x7, 0x8, 0xd, 0x6, 0xf}, {0x2, 0x1000, 0x8, 0x8d, 0x8, 0x0, 0x4, 0xf9, 0x8, 0x5, 0x1, 0x9}, {0x1000, 0x3000, 0x19, 0x0, 0x3, 0x1, 0x6, 0x3, 0xf, 0x3, 0x94, 0x1}, {0x1, 0x2}, {0xeeee8000, 0x9}, 0x20, 0x0, 0x1, 0x10, 0x1, 0x4000, 0xd000, 0x0, [0x61aa, 0x0, 0xca]}) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 1.960363539s ago: executing program 6 (id=4877): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') listxattr(&(0x7f0000000200)='./file1\x00', &(0x7f0000002380)=""/205, 0xcd) 1.891483468s ago: executing program 6 (id=4878): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.652253205s ago: executing program 2 (id=4880): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x3, 0x2) syz_usb_connect(0x2, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e237"], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000004b40), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r4, 0x400448c9, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = dup(r1) read$FUSE(r5, &(0x7f0000001700)={0x2020}, 0x2020) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700001008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025f40000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000c8000380c40000800800034000000002b80001"], 0x178}}, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000001f00)) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xd2de0f1d2bddd4d3}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x24000091) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) mq_notify(r8, 0x0) sendmmsg(r6, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="02", 0x1}], 0x1}}], 0x1, 0x24005805) 1.623251211s ago: executing program 4 (id=4881): r0 = getpid() syz_pidfd_open(r0, 0x0) ptrace(0x4207, r0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = getuid() quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, r1, &(0x7f0000000180)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1cda0e0000000080000000000800000025c5195237abec4cacf90db5973b697492ac99183998eb821a1739dec509ea9a9d0dc084d5c2fa429cf0819f2cb7b542eb8418370b25bd6a61abee9cbd64372d05e4b1abe21ef58360799e1888d4884bd24e7cbfdb8cfee88fcec07b7661dae91ac9999db5185b8d045d3bfc4de8120841b1ae936bf173a46924e4612d2c7c9ccfb4c96d49001092c717d68a5c90477c177050459c6b273c6207534ccfbb341da67f2535487b2cc4fa8c536ffe708056b839e0df9bdeb5fb99209f5f2047e34c9ba8bd6d7367c87be17dc1794c0a64c6e3e959e5996b2a718ec6027716d0a989b1eb624039c923e2c07b5494801f2c255fc2322c4280d106e604f232fe83ce80166fe0642660793815d57e050c1122b882cb257aa967ac5cc1d7a97922015a85dcbda6aa94cf0eb2f9e9323cb3b2aa24b8de37efc8d4ec725827533c50f61eb566bea7f9eb822d8d5bb64d657d0462cf03cba187c37b8d7f6a3ba412825422e5cf2b17a17ecf2c39693ce296d534f5d6fa", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000000002c000000000000000000000007000000441c07716401010100000000ac14141d00000005ac1414aa0000130300000000"], 0x50}, 0x200040c4) write$FUSE_CREATE_OPEN(r2, &(0x7f00000003c0)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x80000000, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x34, 0x6, 0x5}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r7 = memfd_create(&(0x7f0000000280)='y\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1X\x9a\xd6\x1e\xc6\xae\x1c[)@\xaa\x05\x00\x00\x00\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x0f+\x15l\xa6\xe0\'K\x04\x87\x0f\x004\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xd8F\x83\xd9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\xcc#\x98\xb9\xad\xaf\t\x17\x8e\xc6\xc3PCA\x17\x04sC\xdaW\x1b\xb6\xb3\xba\xce\xca\xf4\x80\xaf\xaf2T\xba\x0fg\x95\x85\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W?\x00VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\x9d\xa8\x9eo\xebF(\x87L\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x9a$\xdd\x0f\xe4}\xe1\xe1$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;lh\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0eu\x8d\x00', 0x6) fcntl$addseals(r7, 0x409, 0x7) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 1.464122212s ago: executing program 4 (id=4882): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x6, 0x1b, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES32=r1, @ANYRES16=r2, @ANYBLOB="fde84b68d41c87931b2176aa651829d824b8e3239da3b92977cf7b3505abb94acae8fb9f71a380022d5121c5c685c80fc1d969a95ceb17bd15eae39af47b95bb1f391ca6c9b8e34a646bf4ec983fbb7fc1ad734c96eb908aafce1cd123248eb0dbaf9f38850d6b025edb0555274805998d59b4830d4431f1ddbdc953caf20a4ef6f941fbb452335ce28eafe34cee9edcbda4c3dc4e0bc1b4f9b1fd3521aac8eb6ec4db51369f4260d640ace9828c36409078778ebb685956e2fb8305d27743ec93e723e9ab02edaab97c81255e2bcb", @ANYRES32=0x0], 0x0) ioctl$EVIOCRMFF(r2, 0xc0085508, &(0x7f0000000040)=0xffff001d) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 640.36397ms ago: executing program 4 (id=4883): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) fadvise64(r0, 0x2, 0x40008000, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0x2471b000) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000100), &(0x7f0000000140)=0x4) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) sendto$inet_nvme_icreq_pdu(r0, &(0x7f0000000080)={{0x0, 0x1, 0x80, 0xc7}, 0x0, 0x0, 0x3, 0x7}, 0x80, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) 640.082567ms ago: executing program 2 (id=4884): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1c0000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 567.60156ms ago: executing program 2 (id=4885): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x7bc, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb904021d080000000000000000070a000a000900142603600e1208001e0000050401a8000500027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4edef3985000092954b43370e970392", 0xd8}], 0x1}, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x1f6, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000008cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) 229.479115ms ago: executing program 4 (id=4886): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a"], 0x7c}}, 0x4040) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000040)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000100)={0x2, 0xe}) r3 = open(0x0, 0x1013c2, 0x1c0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1, 0x0, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r3, 0xc004ae0a, &(0x7f0000000040)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000000000007000000ffffffff"]) creat(&(0x7f0000001380)='./file0\x00', 0x12c) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201500270452208132062028b5b010203010902120001810920020904c70223bdb673203ad6d8e6d047090058229a80"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x40404f26, 0x5, 0x2, 0x401, 0xc, 0x9, 0xfff, 0x5c95239c, 0x5, 0x3bf, 0x802, 0x1600, 0x1, 0x20000001, 0x9, 0xe1cb, 0x6, 0x0, 0x400, 0x195, 0x6, 0x0, 0xb, 0x402, 0x9, 0x3, 0x41, 0x5, 0x6, 0x8000003, 0xdffffffa]}) syz_init_net_socket$ax25(0x3, 0x5, 0x8) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) 116.461253ms ago: executing program 2 (id=4887): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0502460c"], 0x8) r0 = semget$private(0x0, 0x2, 0x807) semctl$SETVAL(r0, 0x4, 0x10, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="90ee8ae2fdc679738c10bd766dd4", 0xe}], 0x1) 88.326193ms ago: executing program 2 (id=4888): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x1287, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xfffffffffffffce6, 0x4, {0x300}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x2c}, 0x1, 0x100000000000000, 0x0, 0x40000}, 0x8000) 0s ago: executing program 2 (id=4889): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000680)="580000004b80", 0x6}, {&(0x7f0000000000)="8b6bc0d3d73e47d263cdaec4bb5a478d1f46c28f16527b", 0x17}, {&(0x7f0000000080)="fcfcf47f8a587d86f209ce5252d2a0fcb0b844733265eecbba0b7eab783e2f7dccd7998bd409c60b679f985e31", 0x2d}, {&(0x7f00000000c0)="693426f9fa7052d28b13b1b773de2db88c19b78a3e4bfb340600000000000000039b", 0x22}, {&(0x7f00000016c0)="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", 0x1000}], 0x5) kernel console output (not intermixed with test programs): 1141.515109][T14079] usb 10-1: config 0 descriptor?? [ 1141.756354][T14079] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1141.923348][T21239] virt_wifi0 speed is unknown, defaulting to 1000 [ 1141.938529][T21239] virt_wifi0 speed is unknown, defaulting to 1000 [ 1141.961969][T21234] netlink: 'syz.9.4583': attribute type 10 has an invalid length. [ 1141.979112][T21239] virt_wifi0 speed is unknown, defaulting to 1000 [ 1142.075411][T21239] infiniband : RDMA CMA: cma_listen_on_dev, error -98 [ 1142.106671][T21234] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1142.136908][T21162] chnl_net:caif_netlink_parms(): no params data found [ 1142.156844][T21233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1142.258793][T21239] virt_wifi0 speed is unknown, defaulting to 1000 [ 1142.266778][ T55] usb 10-1: USB disconnect, device number 34 [ 1142.327328][T21239] virt_wifi0 speed is unknown, defaulting to 1000 [ 1142.442918][T21239] virt_wifi0 speed is unknown, defaulting to 1000 [ 1142.453574][T21239] virt_wifi0 speed is unknown, defaulting to 1000 [ 1142.536166][T21239] virt_wifi0 speed is unknown, defaulting to 1000 [ 1142.578999][T21162] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.586855][T21162] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.607333][T21162] bridge_slave_0: entered allmulticast mode [ 1142.619605][T21162] bridge_slave_0: entered promiscuous mode [ 1142.644139][ T13] IPVS: stop unused estimator thread 0... [ 1142.653326][T21162] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.675256][T21162] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.701663][T21162] bridge_slave_1: entered allmulticast mode [ 1142.705335][T21256] syz.6.4588: attempt to access beyond end of device [ 1142.705335][T21256] nbd6: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1142.714350][T21162] bridge_slave_1: entered promiscuous mode [ 1142.756306][T21256] isofs_fill_super: bread failed, dev=nbd6, iso_blknum=16, block=32 [ 1142.881978][T21162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1142.907982][T21259] random: crng reseeded on system resumption [ 1142.917395][T21162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1143.062611][T21162] team0: Port device team_slave_0 added [ 1143.097176][T21162] team0: Port device team_slave_1 added [ 1143.221510][ T51] Bluetooth: hci1: command tx timeout [ 1143.245918][T21162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1143.260815][T21277] /dev/rnullb0: Can't open blockdev [ 1143.271290][ T55] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1143.288110][T21162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1143.316987][T21162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1143.335760][T21162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1143.343382][T21162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1143.370461][T21162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1143.465678][ T55] usb 10-1: too many configurations: 151, using maximum allowed: 8 [ 1143.473928][ T5930] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 1143.509975][ T55] usb 10-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1143.523425][ T55] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1143.534127][ T55] usb 10-1: Product: syz [ 1143.538528][ T55] usb 10-1: Manufacturer: syz [ 1143.555196][T21162] hsr_slave_0: entered promiscuous mode [ 1143.569529][ T55] usb 10-1: SerialNumber: syz [ 1143.572029][T21283] random: crng reseeded on system resumption [ 1143.579375][ T55] usb 10-1: config 0 descriptor?? [ 1143.590286][T21162] hsr_slave_1: entered promiscuous mode [ 1143.601907][T21162] debugfs: 'hsr0' already exists in 'hsr' [ 1143.612176][T21283] FAULT_INJECTION: forcing a failure. [ 1143.612176][T21283] name failslab, interval 1, probability 0, space 0, times 0 [ 1143.627417][T21162] Cannot create hsr debugfs directory [ 1143.631569][ T5930] usb 7-1: device descriptor read/64, error -71 [ 1143.641015][T21283] CPU: 1 UID: 0 PID: 21283 Comm: syz.4.4594 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) [ 1143.641046][T21283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1143.641061][T21283] Call Trace: [ 1143.641071][T21283] [ 1143.641081][T21283] dump_stack_lvl+0x189/0x250 [ 1143.641120][T21283] ? __pfx____ratelimit+0x10/0x10 [ 1143.641206][T21283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1143.641239][T21283] ? __pfx__printk+0x10/0x10 [ 1143.641278][T21283] ? __pfx___might_resched+0x10/0x10 [ 1143.641307][T21283] ? fs_reclaim_acquire+0x7d/0x100 [ 1143.641340][T21283] should_fail_ex+0x414/0x560 [ 1143.641377][T21283] should_failslab+0xa8/0x100 [ 1143.641413][T21283] __kmalloc_cache_noprof+0x70/0x3d0 [ 1143.641437][T21283] ? vhost_task_create+0xf6/0x290 [ 1143.641474][T21283] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1143.641497][T21283] vhost_task_create+0xf6/0x290 [ 1143.641530][T21283] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1143.641556][T21283] ? __pfx_vhost_task_create+0x10/0x10 [ 1143.641598][T21283] ? __pfx_vhost_task_fn+0x10/0x10 [ 1143.641652][T21283] kvm_mmu_post_init_vm+0x14c/0x300 [ 1143.641683][T21283] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 1143.641712][T21283] ? __mutex_trylock_common+0x153/0x260 [ 1143.641756][T21283] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1143.641794][T21283] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1143.641818][T21283] ? rcu_is_watching+0x15/0xb0 [ 1143.641848][T21283] ? trace_contention_end+0x39/0x120 [ 1143.641879][T21283] ? look_up_lock_class+0x74/0x170 [ 1143.641914][T21283] ? register_lock_class+0x51/0x320 [ 1143.641947][T21283] ? __lock_acquire+0xab9/0xd20 [ 1143.642007][T21283] kvm_vcpu_ioctl+0x95c/0xe90 [ 1143.642049][T21283] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1143.642081][T21283] ? __lock_acquire+0xab9/0xd20 [ 1143.642129][T21283] ? __fget_files+0x2a/0x420 [ 1143.642164][T21283] ? __fget_files+0x2a/0x420 [ 1143.642193][T21283] ? __fget_files+0x3a0/0x420 [ 1143.642222][T21283] ? __fget_files+0x2a/0x420 [ 1143.642256][T21283] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1143.642279][T21283] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1143.642314][T21283] __se_sys_ioctl+0xfc/0x170 [ 1143.642341][T21283] do_syscall_64+0xfa/0x3b0 [ 1143.642361][T21283] ? lockdep_hardirqs_on+0x9c/0x150 [ 1143.642393][T21283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.642416][T21283] ? clear_bhb_loop+0x60/0xb0 [ 1143.642445][T21283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.642467][T21283] RIP: 0033:0x7fd967d8ebe9 [ 1143.642487][T21283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1143.642507][T21283] RSP: 002b:00007fd968c7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1143.642531][T21283] RAX: ffffffffffffffda RBX: 00007fd967fb5fa0 RCX: 00007fd967d8ebe9 [ 1143.642548][T21283] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1143.642562][T21283] RBP: 00007fd968c7d090 R08: 0000000000000000 R09: 0000000000000000 [ 1143.642576][T21283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1143.642589][T21283] R13: 00007fd967fb6038 R14: 00007fd967fb5fa0 R15: 00007ffe4f3b6658 [ 1143.642625][T21283] [ 1143.833547][T21265] /dev/sg0: Can't lookup blockdev [ 1143.970825][ T5930] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 1144.007968][ T55] usb 10-1: bad CDC descriptors [ 1144.047305][ T55] usb 10-1: USB disconnect, device number 35 [ 1144.151072][ T5930] usb 7-1: device descriptor read/64, error -71 [ 1144.271913][ T5930] usb usb7-port1: attempt power cycle [ 1144.630885][ T5930] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 1144.672627][ T5930] usb 7-1: device descriptor read/8, error -71 [ 1144.932952][ T5930] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 1144.978038][ T5930] usb 7-1: device descriptor read/8, error -71 [ 1144.981503][ T5915] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1145.105093][ T5930] usb usb7-port1: unable to enumerate USB device [ 1145.180857][ T5915] usb 10-1: Using ep0 maxpacket: 32 [ 1145.196458][ T5915] usb 10-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1145.210306][ T5915] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.229767][ T5915] usb 10-1: config 0 descriptor?? [ 1145.252565][ T5915] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1145.300615][ T51] Bluetooth: hci1: command tx timeout [ 1145.342312][T21162] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1145.355921][T21162] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1145.367217][T21162] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1145.379468][T21162] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1145.383113][ T5930] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1145.550438][ T5930] usb 5-1: Using ep0 maxpacket: 16 [ 1145.559743][T21162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1145.565375][ T5930] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1145.596066][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.603441][T21162] 8021q: adding VLAN 0 to HW filter on device team0 [ 1145.617295][ T5930] usb 5-1: config 0 has no interface number 0 [ 1145.636334][T14693] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.643654][T14693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1145.656060][ T5930] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1145.667017][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.679105][ T5930] usb 5-1: Product: syz [ 1145.693955][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.701651][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1145.712041][ T5930] usb 5-1: Manufacturer: syz [ 1145.716912][ T5930] usb 5-1: SerialNumber: syz [ 1145.728616][ T5930] usb 5-1: config 0 descriptor?? [ 1145.747647][ T5930] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 1145.755824][ T5930] usb 5-1: No valid video chain found. [ 1145.963592][ T5951] usb 5-1: USB disconnect, device number 121 [ 1146.186183][T21162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1146.317306][T21162] veth0_vlan: entered promiscuous mode [ 1146.337531][T21330] /dev/rnullb0: Can't open blockdev [ 1146.359343][T21162] veth1_vlan: entered promiscuous mode [ 1146.447536][T21162] veth0_macvtap: entered promiscuous mode [ 1146.494270][T21162] veth1_macvtap: entered promiscuous mode [ 1146.553718][T21162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1146.613062][T21162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1146.664649][ T1001] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.697350][ T1001] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.732111][ T1001] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.750479][ T1001] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.929319][ T55] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1146.955772][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1146.967018][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1147.035866][ T1001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1147.046466][ T1001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1147.097554][ T55] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1147.146440][ T55] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1147.178778][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.198388][ T55] usb 5-1: config 0 descriptor?? [ 1147.219459][T14079] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 1147.256336][T21345] 9pnet_fd: Insufficient options for proto=fd [ 1147.390774][T14079] usb 7-1: too many configurations: 151, using maximum allowed: 8 [ 1147.423787][T14079] usb 7-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1147.449274][T14079] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1147.451692][ T55] usbhid 5-1:0.0: can't add hid device: -71 [ 1147.469689][T14079] usb 7-1: Product: syz [ 1147.488426][T14079] usb 7-1: Manufacturer: syz [ 1147.498747][ T55] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1147.499743][T14079] usb 7-1: SerialNumber: syz [ 1147.539253][ T55] usb 5-1: USB disconnect, device number 122 [ 1147.583941][T14079] usb 7-1: config 0 descriptor?? [ 1147.688170][T21300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1147.698372][T21300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1147.822980][T21341] /dev/sg0: Can't lookup blockdev [ 1147.842760][T14079] usb 7-1: bad CDC descriptors [ 1147.862063][T14079] usb 7-1: USB disconnect, device number 126 [ 1147.982153][ T55] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1148.143422][ T55] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1148.170816][ T55] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1148.191332][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.219796][ T55] usb 5-1: config 0 descriptor?? [ 1148.515523][ T5915] gspca_vc032x: reg_r err -71 [ 1148.520868][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1148.526211][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1148.544354][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1148.555141][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1148.561709][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1148.567233][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1148.596276][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1148.618984][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1148.624351][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1148.636621][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1148.643467][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1148.645447][ T55] keytouch 0003:0926:3333.0025: fixing up Keytouch IEC report descriptor [ 1148.681860][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1148.684468][ T55] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0025/input/input81 [ 1148.702665][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1148.719073][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1148.724438][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1148.744246][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1148.755996][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1148.761624][ T5915] gspca_vc032x: Unknown sensor... [ 1148.766932][ T5915] vc032x 10-1:0.0: probe with driver vc032x failed with error -22 [ 1148.796608][ T5915] usb 10-1: USB disconnect, device number 36 [ 1148.868721][T14079] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 1148.930782][ T55] keytouch 0003:0926:3333.0025: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1149.044606][T14079] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.056997][ T55] usb 5-1: USB disconnect, device number 123 [ 1149.086222][T14079] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1149.126898][T14079] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1149.165026][T21377] fido_id[21377]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1149.180134][T14079] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.202228][T14079] usb 7-1: config 0 descriptor?? [ 1149.499231][T21387] /dev/rnullb0: Can't open blockdev [ 1149.703481][T21393] 9pnet_fd: Insufficient options for proto=fd [ 1149.727575][T14079] hid-steam 0003:28DE:1142.0026: unknown main item tag 0x0 [ 1149.738160][T14079] hid-steam 0003:28DE:1142.0026: unknown main item tag 0x0 [ 1149.755678][T14079] hid-steam 0003:28DE:1142.0026: unknown main item tag 0x0 [ 1149.791877][T14079] hid-steam 0003:28DE:1142.0026: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 1149.878000][ T55] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1149.943237][T21398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1149.978306][T21398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.007133][T12224] usb 7-1: USB disconnect, device number 127 [ 1150.059621][ T55] usb 3-1: Using ep0 maxpacket: 32 [ 1150.100613][ T55] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 1150.129147][ T55] usb 3-1: config 0 has no interface number 0 [ 1150.151072][ T55] usb 3-1: config 0 interface 89 has no altsetting 0 [ 1150.178899][ T55] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1150.210843][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.223195][T21404] /dev/rnullb0: Can't open blockdev [ 1150.228887][ T55] usb 3-1: Product: syz [ 1150.235741][ T55] usb 3-1: Manufacturer: syz [ 1150.243376][ T55] usb 3-1: SerialNumber: syz [ 1150.271650][ T55] usb 3-1: config 0 descriptor?? [ 1150.288332][ T55] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1150.299030][ T55] em28xx 3-1:0.89: Video interface 89 found: bulk [ 1150.396418][T21408] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1150.412229][T21408] /dev/sg0: Can't lookup blockdev [ 1150.437861][T18746] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 1150.621066][T18746] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1150.645887][T18746] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1150.703063][T18746] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1150.716075][T18746] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 232, setting to 64 [ 1150.728688][T18746] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1150.774068][T18746] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1150.809177][T18746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.835775][T18746] usb 5-1: Product: syz [ 1150.845927][T18746] usb 5-1: Manufacturer: syz [ 1150.851446][T18746] usb 5-1: SerialNumber: syz [ 1150.868247][T18746] usb 5-1: config 0 descriptor?? [ 1150.876656][T21401] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1150.917522][T21391] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 1150.924112][T21391] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1150.933485][T18746] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input82 [ 1150.970048][T21391] vhci_hcd vhci_hcd.0: Device attached [ 1150.997261][ T55] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 1151.197276][T14079] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 1151.214966][ C0] kbtab 5-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 1151.262841][ T5923] usb 5-1: USB disconnect, device number 124 [ 1151.262993][ C0] kbtab 5-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 1151.481122][T21439] 9pnet_fd: Insufficient options for proto=fd [ 1151.832828][T21423] vhci_hcd: connection reset by peer [ 1151.847203][ T55] em28xx 3-1:0.89: writing to i2c device at 0xa0 failed (error=-5) [ 1151.855179][ T55] em28xx 3-1:0.89: failed to read eeprom (err=-5) [ 1151.877471][ T13] vhci_hcd: stop threads [ 1151.885152][ T13] vhci_hcd: release socket [ 1151.890421][ T55] em28xx 3-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1151.920476][ T13] vhci_hcd: disconnect device [ 1151.981899][ T55] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 1151.989401][ T55] em28xx 3-1:0.89: analog set to bulk mode. [ 1152.000843][T21457] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1152.006854][T18746] em28xx 3-1:0.89: Registering V4L2 extension [ 1152.024259][ T5915] usb 10-1: new low-speed USB device number 37 using dummy_hcd [ 1152.042358][ T55] usb 3-1: USB disconnect, device number 25 [ 1152.058305][T21457] /dev/sg0: Can't lookup blockdev [ 1152.070599][ T55] em28xx 3-1:0.89: Disconnecting em28xx [ 1152.144192][T18746] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 1152.159805][T18746] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 1152.177785][T18746] em28xx 3-1:0.89: No AC97 audio processor [ 1152.196997][T18746] usb 3-1: Decoder not found [ 1152.202267][T18746] em28xx 3-1:0.89: failed to create media graph [ 1152.210260][ T5915] usb 10-1: device descriptor read/64, error -71 [ 1152.224692][T18746] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 1152.244393][T18746] em28xx 3-1:0.89: Registering snapshot button... [ 1152.254588][T18746] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input83 [ 1152.309928][T18746] em28xx 3-1:0.89: Remote control support is not available for this card. [ 1152.325281][ T55] em28xx 3-1:0.89: Closing input extension [ 1152.331463][ T55] em28xx 3-1:0.89: Deregistering snapshot button [ 1152.418685][ T55] em28xx 3-1:0.89: Freeing device [ 1152.479191][ T5915] usb 10-1: new low-speed USB device number 38 using dummy_hcd [ 1152.636549][ T5915] usb 10-1: device descriptor read/64, error -71 [ 1152.766972][ T5915] usb usb10-port1: attempt power cycle [ 1152.787032][T21483] 9pnet_fd: Insufficient options for proto=fd [ 1153.006086][T21489] random: crng reseeded on system resumption [ 1153.041989][T21491] cgroup: No subsys list or none specified [ 1153.062363][T21491] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4635'. [ 1153.119709][ T5915] usb 10-1: new low-speed USB device number 39 using dummy_hcd [ 1153.156860][ T5915] usb 10-1: device descriptor read/8, error -71 [ 1153.266889][T21497] /dev/rnullb0: Can't open blockdev [ 1153.363084][T21501] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1153.390992][T21501] /dev/sg0: Can't lookup blockdev [ 1153.456212][ T5915] usb 10-1: new low-speed USB device number 40 using dummy_hcd [ 1153.477008][ T5915] usb 10-1: device descriptor read/8, error -71 [ 1153.507399][T21507] input: syz1 as /devices/virtual/input/input84 [ 1153.588502][ T5915] usb usb10-port1: unable to enumerate USB device [ 1153.733739][T21515] 9pnet_fd: Insufficient options for proto=fd [ 1154.030784][T21529] netlink: 300 bytes leftover after parsing attributes in process `syz.4.4646'. [ 1154.064511][T21529] unsupported nlmsg_type 40 [ 1154.088732][T21529] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4646'. [ 1154.325915][T21542] binder: BINDER_SET_CONTEXT_MGR already set [ 1154.339353][T21542] binder: 21538:21542 ioctl 4018620d 200000000100 returned -16 [ 1154.377871][T21542] binder: BINDER_SET_CONTEXT_MGR already set [ 1154.404016][T21543] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1154.426097][T21542] binder: 21538:21542 ioctl 4018620d 200000004a80 returned -16 [ 1154.470932][T21543] /dev/sg0: Can't lookup blockdev [ 1154.745989][ T5923] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1154.916024][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 1154.923838][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.949288][ T5923] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1154.968891][ T5923] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1155.045336][ T5915] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1155.060703][ T5923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1155.089218][ T5923] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1155.109585][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.157947][ T5923] usb 3-1: Product: syz [ 1155.175302][ T5923] usb 3-1: Manufacturer: syz [ 1155.195815][ T5923] usb 3-1: SerialNumber: syz [ 1155.216135][ T5915] usb 10-1: Using ep0 maxpacket: 16 [ 1155.258608][ T5923] usb 3-1: config 0 descriptor?? [ 1155.274223][ T5915] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 1155.324219][ T5923] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 1155.332142][ T5915] usb 10-1: config 0 has no interface number 0 [ 1155.367377][ T5915] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1155.415259][ T5915] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1155.468813][ T5915] usb 10-1: config 0 interface 41 has no altsetting 0 [ 1155.516378][ T5915] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1155.547414][ T5923] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 1155.571424][ T5915] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.598527][ T5923] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 1155.628469][ T5915] usb 10-1: Product: syz [ 1155.649760][ T5923] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1155.665284][ T5915] usb 10-1: Manufacturer: syz [ 1155.680403][ T5915] usb 10-1: SerialNumber: syz [ 1155.728497][ T5915] usb 10-1: config 0 descriptor?? [ 1155.750503][T21550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1155.793832][T21557] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1155.795711][T21550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1155.833456][T21550] qrtr: Invalid version 0 [ 1155.834612][T21557] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1155.867991][ T51] Bluetooth: hci1: SCO packet too small [ 1155.907425][ T55] usb 3-1: USB disconnect, device number 26 [ 1155.952409][T21575] binder: BINDER_SET_CONTEXT_MGR already set [ 1155.964389][T21575] binder: 21574:21575 ioctl 4018620d 2000000000c0 returned -16 [ 1155.999048][T21575] binder: BINDER_SET_CONTEXT_MGR already set [ 1156.015062][T21575] binder: 21574:21575 ioctl 4018620d 200000000040 returned -16 [ 1156.140887][T21557] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1156.155728][T21557] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1156.225806][T21583] /dev/rnullb0: Can't open blockdev [ 1156.289811][T21586] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4660'. [ 1156.325936][T14079] vhci_hcd: vhci_device speed not set [ 1156.821236][T21557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.824724][ T5915] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1156.854839][T21557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1156.880027][T21607] netlink: 324 bytes leftover after parsing attributes in process `syz.2.4665'. [ 1157.112539][T21613] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1157.132856][T21613] /dev/sg0: Can't lookup blockdev [ 1157.281933][T21621] FAULT_INJECTION: forcing a failure. [ 1157.281933][T21621] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.327546][T21621] CPU: 1 UID: 0 PID: 21621 Comm: syz.4.4669 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) [ 1157.327580][T21621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1157.327596][T21621] Call Trace: [ 1157.327605][T21621] [ 1157.327616][T21621] dump_stack_lvl+0x189/0x250 [ 1157.327654][T21621] ? __pfx____ratelimit+0x10/0x10 [ 1157.327687][T21621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1157.327721][T21621] ? __pfx__printk+0x10/0x10 [ 1157.327761][T21621] ? __pfx___might_resched+0x10/0x10 [ 1157.327789][T21621] ? fs_reclaim_acquire+0x7d/0x100 [ 1157.327823][T21621] should_fail_ex+0x414/0x560 [ 1157.327860][T21621] should_failslab+0xa8/0x100 [ 1157.327887][T21621] __kmalloc_cache_noprof+0x70/0x3d0 [ 1157.327911][T21621] ? fuse_lookup_name+0x1b5/0x860 [ 1157.327941][T21621] fuse_lookup_name+0x1b5/0x860 [ 1157.327974][T21621] ? __lock_acquire+0xab9/0xd20 [ 1157.328003][T21621] ? __pfx_fuse_lookup_name+0x10/0x10 [ 1157.328029][T21621] ? fuse_lock_inode+0xd3/0x120 [ 1157.328069][T21621] ? percpu_ref_get_many+0x19/0x140 [ 1157.328111][T21621] fuse_lookup+0x1e9/0x640 [ 1157.328145][T21621] ? __pfx_fuse_lookup+0x10/0x10 [ 1157.328176][T21621] ? do_raw_spin_lock+0x121/0x290 [ 1157.328224][T21621] ? do_raw_spin_unlock+0x122/0x240 [ 1157.328261][T21621] ? _raw_spin_unlock+0x28/0x50 [ 1157.328289][T21621] ? d_alloc+0x144/0x190 [ 1157.328312][T21621] lookup_one_qstr_excl+0x131/0x360 [ 1157.328353][T21621] filename_create+0x224/0x3c0 [ 1157.328384][T21621] ? __pfx_filename_create+0x10/0x10 [ 1157.328419][T21621] do_mkdirat+0xa0/0x590 [ 1157.328447][T21621] ? __pfx_do_mkdirat+0x10/0x10 [ 1157.328470][T21621] ? strncpy_from_user+0x150/0x290 [ 1157.328503][T21621] ? getname_flags+0x1e5/0x540 [ 1157.328541][T21621] __x64_sys_mkdir+0x6c/0x80 [ 1157.328568][T21621] do_syscall_64+0xfa/0x3b0 [ 1157.328588][T21621] ? lockdep_hardirqs_on+0x9c/0x150 [ 1157.328617][T21621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.328636][T21621] ? clear_bhb_loop+0x60/0xb0 [ 1157.328663][T21621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.328684][T21621] RIP: 0033:0x7fd967d8ebe9 [ 1157.328704][T21621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1157.328724][T21621] RSP: 002b:00007fd968c7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1157.328747][T21621] RAX: ffffffffffffffda RBX: 00007fd967fb5fa0 RCX: 00007fd967d8ebe9 [ 1157.328764][T21621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 1157.328779][T21621] RBP: 00007fd968c7d090 R08: 0000000000000000 R09: 0000000000000000 [ 1157.328794][T21621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1157.328807][T21621] R13: 00007fd967fb6038 R14: 00007fd967fb5fa0 R15: 00007ffe4f3b6658 [ 1157.328841][T21621] [ 1158.009147][T21633] FAULT_INJECTION: forcing a failure. [ 1158.009147][T21633] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.032216][T21633] CPU: 1 UID: 0 PID: 21633 Comm: syz.2.4671 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) [ 1158.032250][T21633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1158.032266][T21633] Call Trace: [ 1158.032275][T21633] [ 1158.032285][T21633] dump_stack_lvl+0x189/0x250 [ 1158.032327][T21633] ? __pfx____ratelimit+0x10/0x10 [ 1158.032362][T21633] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1158.032395][T21633] ? __pfx__printk+0x10/0x10 [ 1158.032435][T21633] ? __pfx___might_resched+0x10/0x10 [ 1158.032461][T21633] ? fs_reclaim_acquire+0x7d/0x100 [ 1158.032494][T21633] should_fail_ex+0x414/0x560 [ 1158.032531][T21633] should_failslab+0xa8/0x100 [ 1158.032559][T21633] __kmalloc_noprof+0xcb/0x4f0 [ 1158.032581][T21633] ? ovl_get_fh+0x197/0x660 [ 1158.032608][T21633] ? __asan_memcpy+0x40/0x70 [ 1158.032645][T21633] ovl_get_fh+0x197/0x660 [ 1158.032683][T21633] ovl_verify_fh+0x27/0x140 [ 1158.032717][T21633] ovl_verify_origin_xattr+0x97/0x370 [ 1158.032756][T21633] ovl_lookup+0xca7/0x1bc0 [ 1158.032802][T21633] ? d_alloc_parallel+0x1470/0x15e0 [ 1158.032845][T21633] ? __pfx_ovl_lookup+0x10/0x10 [ 1158.032875][T21633] ? __lock_acquire+0xab9/0xd20 [ 1158.032902][T21633] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1158.032931][T21633] ? __raw_spin_lock_init+0x45/0x100 [ 1158.032967][T21633] ? __init_waitqueue_head+0xa9/0x150 [ 1158.033007][T21633] __lookup_slow+0x294/0x3d0 [ 1158.033034][T21633] ? __pfx___lookup_slow+0x10/0x10 [ 1158.033075][T21633] ? down_read+0x1ad/0x2e0 [ 1158.033101][T21633] lookup_slow+0x53/0x70 [ 1158.033132][T21633] walk_component+0x2d2/0x400 [ 1158.033164][T21633] ? path_lookupat+0x156/0x430 [ 1158.033201][T21633] path_lookupat+0x163/0x430 [ 1158.033244][T21633] filename_lookup+0x212/0x570 [ 1158.033286][T21633] ? __pfx_filename_lookup+0x10/0x10 [ 1158.033348][T21633] ? strncpy_from_user+0x150/0x290 [ 1158.033382][T21633] ? getname_flags+0x1e5/0x540 [ 1158.033419][T21633] user_path_at+0x3a/0x60 [ 1158.033443][T21633] do_fchownat+0x105/0x270 [ 1158.033480][T21633] ? __pfx_do_fchownat+0x10/0x10 [ 1158.033512][T21633] ? __pfx_ksys_write+0x10/0x10 [ 1158.033536][T21633] ? rcu_is_watching+0x15/0xb0 [ 1158.033574][T21633] __x64_sys_chown+0x82/0xa0 [ 1158.033607][T21633] do_syscall_64+0xfa/0x3b0 [ 1158.033625][T21633] ? lockdep_hardirqs_on+0x9c/0x150 [ 1158.033656][T21633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.033678][T21633] ? clear_bhb_loop+0x60/0xb0 [ 1158.033707][T21633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.033728][T21633] RIP: 0033:0x7f38a958ebe9 [ 1158.033749][T21633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1158.033768][T21633] RSP: 002b:00007f38aa3ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 1158.033793][T21633] RAX: ffffffffffffffda RBX: 00007f38a97b5fa0 RCX: 00007f38a958ebe9 [ 1158.033809][T21633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000580 [ 1158.033824][T21633] RBP: 00007f38aa3ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1158.033839][T21633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1158.033852][T21633] R13: 00007f38a97b6038 R14: 00007f38a97b5fa0 R15: 00007ffcde12ad58 [ 1158.033888][T21633] [ 1158.411229][T21633] overlayfs: failed to verify origin (file0/file1, ino=135, err=-12) [ 1158.588569][ T5915] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffe0 [ 1158.749665][ T5915] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffe0 [ 1158.973419][ T55] usb 5-1: new full-speed USB device number 125 using dummy_hcd [ 1159.143306][ T55] usb 5-1: device descriptor read/64, error -71 [ 1159.380491][ T5915] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1159.397784][ T5915] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1159.416366][ T5915] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1159.440533][ T55] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 1159.447958][ T5915] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1159.479463][ T5915] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1159.521200][ T5915] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1159.554078][ T5915] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1159.577156][ T5915] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1159.603379][ T5915] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0336:ffffffb9 [ 1159.659745][ T5915] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71 [ 1159.785423][ T5915] usb 10-1: USB disconnect, device number 41 [ 1159.856094][ T55] usb 5-1: device descriptor read/64, error -71 [ 1159.971645][T21676] /dev/sg0: Can't lookup blockdev [ 1159.983318][ T55] usb usb5-port1: attempt power cycle [ 1160.337617][ T55] usb 5-1: new full-speed USB device number 127 using dummy_hcd [ 1160.403910][ T55] usb 5-1: device descriptor read/8, error -71 [ 1160.702533][ T55] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 1160.751974][ T55] usb 5-1: device descriptor read/8, error -71 [ 1160.875015][ T55] usb usb5-port1: unable to enumerate USB device [ 1161.093004][ T5915] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1161.268359][ T5915] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1161.287637][T21694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4683'. [ 1161.292714][ T5915] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1161.323782][ T5915] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.342851][ T5915] usb 10-1: config 0 descriptor?? [ 1161.531555][T21710] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4687'. [ 1161.548674][T21710] `: renamed from bond0 (while UP) [ 1161.570892][ T5915] usbhid 10-1:0.0: can't add hid device: -71 [ 1161.592491][ T5915] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1161.614009][T21671] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1161.627506][ T5915] usb 10-1: USB disconnect, device number 42 [ 1161.782612][T21671] usb 3-1: Using ep0 maxpacket: 16 [ 1161.812286][T21671] usb 3-1: config 0 has no interfaces? [ 1161.826983][T21671] usb 3-1: New USB device found, idVendor=05cc, idProduct=3350, bcdDevice=16.f3 [ 1161.851914][T21671] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.860084][T21671] usb 3-1: Product: syz [ 1161.884984][T21671] usb 3-1: Manufacturer: syz [ 1161.889670][T21671] usb 3-1: SerialNumber: syz [ 1161.924582][T21671] usb 3-1: config 0 descriptor?? [ 1162.094262][ T5915] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1162.241603][ T55] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1162.271688][ T5915] usb 10-1: Using ep0 maxpacket: 32 [ 1162.279266][ T5915] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1162.300145][ T5915] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1162.310698][ T5915] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.334152][ T5915] usb 10-1: config 0 descriptor?? [ 1162.357991][ T5915] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1162.399399][ T5915] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1162.423053][ T55] usb 7-1: too many configurations: 151, using maximum allowed: 8 [ 1162.473698][ T55] usb 7-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1162.489705][ T55] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1162.500090][ T55] usb 7-1: Product: syz [ 1162.508060][ T55] usb 7-1: Manufacturer: syz [ 1162.520832][ T55] usb 7-1: SerialNumber: syz [ 1162.533922][T21739] /dev/rnullb0: Can't open blockdev [ 1162.540472][ T55] usb 7-1: config 0 descriptor?? [ 1162.809544][T21726] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1162.819547][ T5915] usb 10-1: USB disconnect, device number 43 [ 1162.819893][T21726] /dev/sg0: Can't lookup blockdev [ 1162.840145][ T55] usb 7-1: USB disconnect, device number 2 [ 1162.876910][ T5915] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 1163.182893][T21759] /dev/rnullb0: Can't open blockdev [ 1163.194334][T21759] /dev/rnullb0: Can't open blockdev [ 1163.350133][T21767] netlink: 'syz.4.4697': attribute type 28 has an invalid length. [ 1163.482894][T21769] nbd: must specify a device to reconfigure [ 1163.505767][T21769] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1163.615130][T21774] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1163.637581][T21774] /dev/rnullb0: Can't open blockdev [ 1163.970810][ T55] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1164.074448][T12224] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1164.109291][T21671] usb 3-1: USB disconnect, device number 27 [ 1164.138943][ T55] usb 7-1: device descriptor read/64, error -71 [ 1164.251910][T12224] usb 5-1: Using ep0 maxpacket: 16 [ 1164.269234][T12224] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1164.278547][T21792] /dev/rnullb0: Can't open blockdev [ 1164.291379][T12224] usb 5-1: config 0 has no interface number 0 [ 1164.311109][T12224] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 1164.325430][T12224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.351820][T12224] usb 5-1: Product: syz [ 1164.362408][T12224] usb 5-1: Manufacturer: syz [ 1164.367260][T12224] usb 5-1: SerialNumber: syz [ 1164.410578][ T55] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1164.422621][T12224] usb 5-1: config 0 descriptor?? [ 1164.460236][T12224] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 1164.572082][ T55] usb 7-1: device descriptor read/64, error -71 [ 1164.634853][T21776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1164.656635][T21776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1164.683932][ T55] usb usb7-port1: attempt power cycle [ 1164.736881][T21805] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1165.071466][ T55] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1165.106312][T12224] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x00, error -71) [ 1165.123616][ T55] usb 7-1: device descriptor read/8, error -71 [ 1165.140966][T12224] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x01, error -71) [ 1165.160496][T12224] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x00, error -71) [ 1165.180491][T12224] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x01, error -71) [ 1165.200481][T12224] gspca_xirlink_cit: Failed to write a register (index 0x0409, value 0x0D, error -71) [ 1165.230522][T12224] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -71) [ 1165.250576][T12224] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -71) [ 1165.262080][T12224] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 1165.280501][T12224] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 1165.300425][T12224] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 1165.330129][T12224] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 1165.370174][ T55] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 1165.378152][T12224] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 1165.429195][T12224] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 1165.439132][ T55] usb 7-1: device descriptor read/8, error -71 [ 1165.469506][T12224] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 1165.504635][T12224] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 1165.541199][T12224] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 1165.561968][ T55] usb usb7-port1: unable to enumerate USB device [ 1165.579464][T12224] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 1165.607074][T12224] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input86 [ 1165.617392][T21819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4706'. [ 1165.677632][T12224] usb 5-1: USB disconnect, device number 3 [ 1165.949878][ T5923] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 1166.111658][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1166.129962][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1166.130047][T12224] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1166.156396][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1166.176164][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1166.187216][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1166.208333][ T5923] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1166.218110][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.233515][ T5923] usb 3-1: Product: syz [ 1166.237758][ T5923] usb 3-1: Manufacturer: syz [ 1166.245909][ T5923] usb 3-1: SerialNumber: syz [ 1166.270399][ T5923] usb 3-1: config 0 descriptor?? [ 1166.333261][T12224] usb 5-1: Using ep0 maxpacket: 32 [ 1166.342265][T12224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1166.354383][T12224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34047, setting to 1024 [ 1166.366183][T12224] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1166.368110][ T5923] rc_core: IR keymap rc-imon-rsc not found [ 1166.375975][T12224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.399178][ T5923] Registered IR keymap rc-empty [ 1166.409652][T12224] usb 5-1: config 0 descriptor?? [ 1166.415130][ T5923] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1166.419077][T21826] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1166.428225][ T5923] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input87 [ 1166.460127][T12224] hub 5-1:0.0: USB hub found [ 1166.466075][ T5923] imon_raw 3-1:0.0: probe with driver imon_raw failed with error -90 [ 1166.522504][T21837] netlink: 'syz.2.4706': attribute type 27 has an invalid length. [ 1166.572952][T21819] /dev/rnullb0: Can't open blockdev [ 1166.682114][T21837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.690003][T21837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.866972][T12224] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1166.907888][T12224] usbhid 5-1:0.0: can't add hid device: -71 [ 1166.919744][T12224] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1166.951042][T12224] usb 5-1: USB disconnect, device number 4 [ 1167.034669][T21837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1167.084448][T21837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1167.161497][ T864] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1167.321430][ T864] usb 7-1: too many configurations: 151, using maximum allowed: 8 [ 1167.376974][ T864] usb 7-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1167.396762][ T864] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1167.413647][ T864] usb 7-1: Product: syz [ 1167.417970][ T864] usb 7-1: Manufacturer: syz [ 1167.445471][ T864] usb 7-1: SerialNumber: syz [ 1167.473615][ T864] usb 7-1: config 0 descriptor?? [ 1167.484931][ T49] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.503352][ T49] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.584013][ T49] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.598638][ T49] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.623363][T21861] FAULT_INJECTION: forcing a failure. [ 1167.623363][T21861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1167.657722][T21671] usb 3-1: USB disconnect, device number 28 [ 1167.659625][T21861] CPU: 0 UID: 0 PID: 21861 Comm: syz.9.4713 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) [ 1167.659662][T21861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1167.659679][T21861] Call Trace: [ 1167.659689][T21861] [ 1167.659701][T21861] dump_stack_lvl+0x189/0x250 [ 1167.659750][T21861] ? __pfx____ratelimit+0x10/0x10 [ 1167.659787][T21861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1167.659824][T21861] ? __pfx__printk+0x10/0x10 [ 1167.659875][T21861] should_fail_ex+0x414/0x560 [ 1167.659917][T21861] _copy_to_user+0x31/0xb0 [ 1167.659949][T21861] simple_read_from_buffer+0xe1/0x170 [ 1167.659990][T21861] proc_fail_nth_read+0x1b3/0x220 [ 1167.660019][T21861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1167.660045][T21861] ? rw_verify_area+0x2a6/0x4d0 [ 1167.660067][T21861] ? __lock_acquire+0xab9/0xd20 [ 1167.660092][T21861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1167.660117][T21861] vfs_read+0x1fd/0xa30 [ 1167.660146][T21861] ? fdget_pos+0x247/0x320 [ 1167.660185][T21861] ? __pfx___mutex_lock+0x10/0x10 [ 1167.660228][T21861] ? __pfx_vfs_read+0x10/0x10 [ 1167.660256][T21861] ? __fget_files+0x2a/0x420 [ 1167.660297][T21861] ? __fget_files+0x3a0/0x420 [ 1167.660328][T21861] ? __fget_files+0x2a/0x420 [ 1167.660365][T21861] ksys_read+0x145/0x250 [ 1167.660391][T21861] ? __pfx_ksys_read+0x10/0x10 [ 1167.660418][T21861] ? fput+0xa0/0xd0 [ 1167.660446][T21861] ? do_syscall_64+0xbe/0x3b0 [ 1167.660474][T21861] do_syscall_64+0xfa/0x3b0 [ 1167.660494][T21861] ? lockdep_hardirqs_on+0x9c/0x150 [ 1167.660530][T21861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.660555][T21861] ? clear_bhb_loop+0x60/0xb0 [ 1167.660586][T21861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.660610][T21861] RIP: 0033:0x7f1b5e18d5fc [ 1167.660633][T21861] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1167.660656][T21861] RSP: 002b:00007f1b5ef10030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1167.660684][T21861] RAX: ffffffffffffffda RBX: 00007f1b5e3b5fa0 RCX: 00007f1b5e18d5fc [ 1167.660705][T21861] RDX: 000000000000000f RSI: 00007f1b5ef100a0 RDI: 0000000000000004 [ 1167.660721][T21861] RBP: 00007f1b5ef10090 R08: 0000000000000000 R09: 0000000000000000 [ 1167.660737][T21861] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 1167.660754][T21861] R13: 00007f1b5e3b6038 R14: 00007f1b5e3b5fa0 R15: 00007ffd98472b08 [ 1167.660795][T21861] [ 1167.923284][T21863] /dev/sg0: Can't lookup blockdev [ 1168.075253][ T9] usb 7-1: USB disconnect, device number 7 [ 1168.198803][ T55] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1168.373278][ T55] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1168.402707][ T55] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1168.433193][ T55] usb 10-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1168.443618][ T55] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.456165][ T55] usb 10-1: config 0 descriptor?? [ 1168.639152][T12224] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1168.768729][T12224] usb 5-1: device descriptor read/64, error -71 [ 1168.877819][T21900] FAULT_INJECTION: forcing a failure. [ 1168.877819][T21900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1168.893411][T21900] CPU: 0 UID: 0 PID: 21900 Comm: syz.6.4721 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) [ 1168.893445][T21900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1168.893463][T21900] Call Trace: [ 1168.893473][T21900] [ 1168.893483][T21900] dump_stack_lvl+0x189/0x250 [ 1168.893521][T21900] ? __pfx____ratelimit+0x10/0x10 [ 1168.893555][T21900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1168.893589][T21900] ? __pfx__printk+0x10/0x10 [ 1168.893636][T21900] should_fail_ex+0x414/0x560 [ 1168.893673][T21900] _copy_to_user+0x31/0xb0 [ 1168.893704][T21900] simple_read_from_buffer+0xe1/0x170 [ 1168.893738][T21900] proc_fail_nth_read+0x1b3/0x220 [ 1168.893764][T21900] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1168.893791][T21900] ? rw_verify_area+0x2a6/0x4d0 [ 1168.893815][T21900] ? __lock_acquire+0xab9/0xd20 [ 1168.893839][T21900] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1168.893864][T21900] vfs_read+0x1fd/0xa30 [ 1168.893890][T21900] ? fdget_pos+0x247/0x320 [ 1168.893926][T21900] ? __pfx___mutex_lock+0x10/0x10 [ 1168.893988][T21900] ? __pfx_vfs_read+0x10/0x10 [ 1168.894016][T21900] ? __fget_files+0x2a/0x420 [ 1168.894052][T21900] ? __fget_files+0x3a0/0x420 [ 1168.894082][T21900] ? __fget_files+0x2a/0x420 [ 1168.894128][T21900] ksys_read+0x145/0x250 [ 1168.894157][T21900] ? __pfx_ksys_read+0x10/0x10 [ 1168.894180][T21900] ? fput+0xa0/0xd0 [ 1168.894205][T21900] ? do_syscall_64+0xbe/0x3b0 [ 1168.894230][T21900] do_syscall_64+0xfa/0x3b0 [ 1168.894249][T21900] ? lockdep_hardirqs_on+0x9c/0x150 [ 1168.894281][T21900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.894304][T21900] ? clear_bhb_loop+0x60/0xb0 [ 1168.894332][T21900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.894354][T21900] RIP: 0033:0x7f67d698d5fc [ 1168.894375][T21900] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1168.894395][T21900] RSP: 002b:00007f67d77a1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1168.894420][T21900] RAX: ffffffffffffffda RBX: 00007f67d6bb5fa0 RCX: 00007f67d698d5fc [ 1168.894437][T21900] RDX: 000000000000000f RSI: 00007f67d77a10a0 RDI: 0000000000000005 [ 1168.894452][T21900] RBP: 00007f67d77a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1168.894467][T21900] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 1168.894482][T21900] R13: 00007f67d6bb6038 R14: 00007f67d6bb5fa0 R15: 00007ffed7b2eae8 [ 1168.894518][T21900] [ 1169.191802][ T55] usbhid 10-1:0.0: can't add hid device: -71 [ 1169.197973][ T55] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1169.209652][ T55] usb 10-1: USB disconnect, device number 44 [ 1169.328146][T12224] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1169.471344][T12224] usb 5-1: device descriptor read/64, error -71 [ 1169.599786][T12224] usb usb5-port1: attempt power cycle [ 1169.957762][T12224] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1169.989596][T12224] usb 5-1: device descriptor read/8, error -71 [ 1170.007770][ T55] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1170.028156][ T5923] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1170.168162][ T55] usb 7-1: Using ep0 maxpacket: 8 [ 1170.192248][ T55] usb 7-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1170.201661][ T55] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1170.205969][ T5923] usb 10-1: too many configurations: 151, using maximum allowed: 8 [ 1170.211726][ T55] usb 7-1: Product: syz [ 1170.222395][ T55] usb 7-1: Manufacturer: syz [ 1170.227038][ T55] usb 7-1: SerialNumber: syz [ 1170.237944][T12224] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1170.250342][ T55] usb 7-1: config 0 descriptor?? [ 1170.265892][ T5923] usb 10-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1170.278851][ T55] usbtest 7-1:0.0: FX2 device [ 1170.283705][ T55] usbtest 7-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1170.297667][T12224] usb 5-1: device descriptor read/8, error -71 [ 1170.307389][ T5923] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1170.331863][ T5923] usb 10-1: Product: syz [ 1170.336276][ T5923] usb 10-1: Manufacturer: syz [ 1170.358937][ T5923] usb 10-1: SerialNumber: syz [ 1170.405072][ T5923] usb 10-1: config 0 descriptor?? [ 1170.427594][T12224] usb usb5-port1: unable to enumerate USB device [ 1170.464153][T21949] /dev/rnullb0: Can't open blockdev [ 1170.483119][T21930] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1170.501797][T21949] CUSE: zero length info key specified [ 1170.520893][T21930] netlink: 'syz.6.4726': attribute type 12 has an invalid length. [ 1170.529403][ T51] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 1170.612339][T21671] usb 7-1: USB disconnect, device number 8 [ 1170.649432][T21953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4729'. [ 1170.698833][T21934] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1170.751665][T21934] /dev/sg0: Can't lookup blockdev [ 1170.781900][T12224] usb 10-1: USB disconnect, device number 45 [ 1171.554844][T21984] netlink: 'syz.6.4735': attribute type 3 has an invalid length. [ 1171.577168][T21984] netlink: 'syz.6.4735': attribute type 1 has an invalid length. [ 1171.593900][T21984] netlink: 216 bytes leftover after parsing attributes in process `syz.6.4735'. [ 1171.605401][T21984] NCSI netlink: No device for ifindex 33022 [ 1171.746921][T12224] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1171.788740][T21994] binder: BINDER_SET_CONTEXT_MGR already set [ 1171.794983][T21994] binder: 21993:21994 ioctl 4018620d 200000000100 returned -16 [ 1171.812681][T21994] binder: 21993:21994 ioctl c0306201 2000000001c0 returned -11 [ 1171.866656][ T30] audit: type=1326 audit(1754671347.042:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21995 comm="syz.2.4737" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38a958ebe9 code=0x0 [ 1171.897856][T12224] usb 10-1: device descriptor read/64, error -71 [ 1172.227346][T21671] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1172.386734][T21671] usb 5-1: device descriptor read/64, error -71 [ 1172.467025][ T55] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1172.477805][T12224] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1172.636561][T21671] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1172.636644][T12224] usb 10-1: device descriptor read/64, error -71 [ 1172.669607][ T55] usb 3-1: Using ep0 maxpacket: 8 [ 1172.677444][ T55] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 1172.685690][ T55] usb 3-1: config 0 has no interface number 0 [ 1172.706492][ T55] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1172.729921][ T55] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1172.756518][ T55] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1172.767918][ T55] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1172.778829][T12224] usb usb10-port1: attempt power cycle [ 1172.784702][ T55] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1172.786650][T21671] usb 5-1: device descriptor read/64, error -71 [ 1172.802151][ T55] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1172.819932][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.830657][ T55] usb 3-1: Product: syz [ 1172.835163][ T55] usb 3-1: Manufacturer: syz [ 1172.842755][ T55] usb 3-1: SerialNumber: syz [ 1172.852382][ T55] usb 3-1: config 0 descriptor?? [ 1172.927034][T21671] usb usb5-port1: attempt power cycle [ 1172.966567][ T864] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1173.131604][ T864] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.144736][ T864] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1173.163766][ T864] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1173.166281][T12224] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1173.175529][ T864] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1173.193623][ T864] usb 7-1: SerialNumber: syz [ 1173.230809][T12224] usb 10-1: device descriptor read/8, error -71 [ 1173.269096][T21671] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1173.308145][T21671] usb 5-1: device descriptor read/8, error -71 [ 1173.442415][ T864] usb 7-1: 0:2 : does not exist [ 1173.486467][T12224] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1173.492317][ T864] usb 7-1: USB disconnect, device number 9 [ 1173.548705][T21671] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1173.549288][T12224] usb 10-1: device descriptor read/8, error -71 [ 1173.560817][T20539] udevd[20539]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1173.609389][T21671] usb 5-1: device descriptor read/8, error -71 [ 1173.696717][T12224] usb usb10-port1: unable to enumerate USB device [ 1173.728574][T21671] usb usb5-port1: unable to enumerate USB device [ 1174.576015][ T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1174.585609][ T51] Bluetooth: hci2: Injecting HCI hardware error event [ 1174.596602][T15955] Bluetooth: hci2: hardware error 0x00 [ 1174.879263][ T55] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1174.936733][ T55] usb 3-1: USB disconnect, device number 29 [ 1174.975633][T21671] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1175.033545][T22065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4744'. [ 1175.141969][T21671] usb 10-1: device descriptor read/64, error -71 [ 1175.371895][ T30] audit: type=1326 audit(1754671350.554:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22074 comm="syz.4.4748" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd967d8ebe9 code=0x0 [ 1175.405104][T21671] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1175.425601][T22080] FAULT_INJECTION: forcing a failure. [ 1175.425601][T22080] name failslab, interval 1, probability 0, space 0, times 0 [ 1175.425676][T22080] CPU: 0 UID: 0 PID: 22080 Comm: syz.4.4748 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) [ 1175.425705][T22080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1175.425720][T22080] Call Trace: [ 1175.425729][T22080] [ 1175.425740][T22080] dump_stack_lvl+0x189/0x250 [ 1175.425779][T22080] ? __pfx____ratelimit+0x10/0x10 [ 1175.425813][T22080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1175.425847][T22080] ? __pfx__printk+0x10/0x10 [ 1175.425888][T22080] ? __pfx___might_resched+0x10/0x10 [ 1175.425916][T22080] ? fs_reclaim_acquire+0x7d/0x100 [ 1175.425951][T22080] should_fail_ex+0x414/0x560 [ 1175.425988][T22080] should_failslab+0xa8/0x100 [ 1175.426017][T22080] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1175.426040][T22080] ? ima_d_path+0xb1/0x250 [ 1175.426070][T22080] ima_d_path+0xb1/0x250 [ 1175.426097][T22080] ? __pfx_ima_d_path+0x10/0x10 [ 1175.426121][T22080] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1175.426167][T22080] process_measurement+0x118b/0x1a40 [ 1175.426216][T22080] ? __pfx_process_measurement+0x10/0x10 [ 1175.426288][T22080] ? tomoyo_find_next_domain+0x173e/0x1aa0 [ 1175.426340][T22080] ima_bprm_check+0xfd/0x200 [ 1175.426369][T22080] ? __pfx_ima_bprm_check+0x10/0x10 [ 1175.426390][T22080] ? tomoyo_bprm_check_security+0xf0/0x180 [ 1175.426433][T22080] ? tomoyo_bprm_check_security+0xf0/0x180 [ 1175.426471][T22080] ? tomoyo_bprm_check_security+0xf0/0x180 [ 1175.426516][T22080] ? tomoyo_bprm_check_security+0x162/0x180 [ 1175.426560][T22080] security_bprm_check+0xd9/0x270 [ 1175.426595][T22080] bprm_execve+0x8ee/0x1450 [ 1175.426644][T22080] ? __pfx_bprm_execve+0x10/0x10 [ 1175.426674][T22080] ? copy_string_kernel+0x25f/0x2a0 [ 1175.426708][T22080] do_execveat_common+0x510/0x6a0 [ 1175.426752][T22080] __x64_sys_execve+0x94/0xb0 [ 1175.426783][T22080] do_syscall_64+0xfa/0x3b0 [ 1175.426804][T22080] ? lockdep_hardirqs_on+0x9c/0x150 [ 1175.426840][T22080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.426866][T22080] ? clear_bhb_loop+0x60/0xb0 [ 1175.426896][T22080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.426921][T22080] RIP: 0033:0x7fd967d8ebe9 [ 1175.426943][T22080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1175.426967][T22080] RSP: 002b:00007fd968c5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1175.426992][T22080] RAX: ffffffffffffffda RBX: 00007fd967fb6090 RCX: 00007fd967d8ebe9 [ 1175.427010][T22080] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 1175.427027][T22080] RBP: 00007fd968c5c090 R08: 0000000000000000 R09: 0000000000000000 [ 1175.427043][T22080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1175.427059][T22080] R13: 00007fd967fb6128 R14: 00007fd967fb6090 R15: 00007ffe4f3b6658 [ 1175.427098][T22080] [ 1175.537010][T21671] usb 10-1: device descriptor read/64, error -71 [ 1175.645667][T21671] usb usb10-port1: attempt power cycle [ 1176.208880][T21671] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1176.245823][T21671] usb 10-1: device descriptor read/8, error -71 [ 1176.367785][T22102] wlan1 speed is unknown, defaulting to 1000 [ 1176.373243][T22104] netlink: 'syz.4.4754': attribute type 10 has an invalid length. [ 1176.398388][T22102] virt_wifi0 speed is unknown, defaulting to 1000 [ 1176.408923][T22104] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4754'. [ 1176.418592][ T864] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1176.496144][T21671] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1176.525746][T21671] usb 10-1: device descriptor read/8, error -71 [ 1176.604526][ T864] usb 3-1: Using ep0 maxpacket: 32 [ 1176.607267][ T864] usb 3-1: config 7 has an invalid interface number: 182 but max is 0 [ 1176.607299][ T864] usb 3-1: config 7 has no interface number 0 [ 1176.607347][ T864] usb 3-1: config 7 interface 182 has no altsetting 0 [ 1176.609671][ T864] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=84.27 [ 1176.609703][ T864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.609728][ T864] usb 3-1: Product: syz [ 1176.609746][ T864] usb 3-1: Manufacturer: syz [ 1176.609764][ T864] usb 3-1: SerialNumber: syz [ 1176.641151][T21671] usb usb10-port1: unable to enumerate USB device [ 1176.694430][ T5923] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1176.731756][T15955] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1176.822326][T22098] /dev/rnullb0: Can't open blockdev [ 1176.848550][ T5923] usb 7-1: Using ep0 maxpacket: 8 [ 1176.851731][ T5923] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1176.851790][ T5923] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1176.851818][ T5923] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1176.851847][ T5923] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1176.851873][ T5923] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1176.851921][ T5923] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1176.851949][ T5923] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.871098][ T864] snd-usb-audio 3-1:7.182: probe with driver snd-usb-audio failed with error -71 [ 1177.112708][ T5923] usb 7-1: GET_CAPABILITIES returned 0 [ 1177.118766][ T5923] usbtmc 7-1:16.0: can't read capabilities [ 1177.162971][ T864] usb 3-1: USB disconnect, device number 30 [ 1177.257645][T22126] /dev/rnullb0: Can't open blockdev [ 1177.331343][ T5923] usb 7-1: USB disconnect, device number 10 [ 1177.754088][ T5915] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1177.853991][ T5923] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1177.914225][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 1177.928556][ T5915] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1177.937293][ T5915] usb 3-1: config 0 has no interface number 0 [ 1177.950428][ T5915] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1177.962851][ T5915] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1177.973349][ T5915] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1177.983908][ T5923] usb 7-1: device descriptor read/64, error -71 [ 1177.990592][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.000936][ T5915] usb 3-1: Product: syz [ 1178.006013][ T5915] usb 3-1: Manufacturer: syz [ 1178.011156][ T5915] usb 3-1: SerialNumber: syz [ 1178.022287][ T5915] usb 3-1: config 0 descriptor?? [ 1178.233728][ T5923] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1178.257590][T22161] FAULT_INJECTION: forcing a failure. [ 1178.257590][T22161] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1178.272055][T22161] CPU: 1 UID: 0 PID: 22161 Comm: syz.4.4762 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) [ 1178.272087][T22161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1178.272105][T22161] Call Trace: [ 1178.272115][T22161] [ 1178.272125][T22161] dump_stack_lvl+0x189/0x250 [ 1178.272165][T22161] ? __pfx____ratelimit+0x10/0x10 [ 1178.272200][T22161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1178.272234][T22161] ? __pfx__printk+0x10/0x10 [ 1178.272269][T22161] ? fs_reclaim_acquire+0x7d/0x100 [ 1178.272307][T22161] should_fail_ex+0x414/0x560 [ 1178.272344][T22161] prepare_alloc_pages+0x213/0x610 [ 1178.272383][T22161] __alloc_frozen_pages_noprof+0x123/0x370 [ 1178.272419][T22161] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1178.272452][T22161] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 1178.272487][T22161] ? policy_nodemask+0x27c/0x720 [ 1178.272526][T22161] alloc_pages_mpol+0x232/0x4a0 [ 1178.272564][T22161] vma_alloc_folio_noprof+0xe4/0x200 [ 1178.272594][T22161] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1178.272624][T22161] ? do_raw_spin_unlock+0x122/0x240 [ 1178.272667][T22161] folio_prealloc+0x30/0x180 [ 1178.272695][T22161] __handle_mm_fault+0x2ab9/0x5440 [ 1178.272735][T22161] ? __pfx___handle_mm_fault+0x10/0x10 [ 1178.272781][T22161] ? __pfx___might_resched+0x10/0x10 [ 1178.272816][T22161] handle_mm_fault+0x40a/0x8e0 [ 1178.272850][T22161] __get_user_pages+0x1699/0x2ce0 [ 1178.272882][T22161] ? __lock_acquire+0xab9/0xd20 [ 1178.272950][T22161] __gup_longterm_locked+0x3dc/0x1660 [ 1178.272996][T22161] ? gup_fast_fallback+0x195f/0x2010 [ 1178.273035][T22161] gup_fast_fallback+0x1e6a/0x2010 [ 1178.273127][T22161] ? rcu_is_watching+0x15/0xb0 [ 1178.273159][T22161] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1178.273192][T22161] ? preempt_schedule_irq+0xde/0x150 [ 1178.273224][T22161] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1178.273258][T22161] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1178.273297][T22161] ? is_valid_gup_args+0x11f/0x200 [ 1178.273335][T22161] ? pin_user_pages_fast+0x4d/0xb0 [ 1178.273374][T22161] pfn_reader_user_pin+0xd9f/0x1180 [ 1178.273412][T22161] ? __pfx_pfn_reader_user_pin+0x10/0x10 [ 1178.273438][T22161] ? interval_tree_span_iter_first+0xea/0xd70 [ 1178.273476][T22161] iopt_pages_fill_xarray+0x4da/0xe90 [ 1178.273511][T22161] ? __pfx_iopt_pages_fill_xarray+0x10/0x10 [ 1178.273577][T22161] ? __kasan_kmalloc+0x93/0xb0 [ 1178.273604][T22161] ? iopt_area_add_access+0x1f2/0x4c0 [ 1178.273632][T22161] iopt_area_add_access+0x210/0x4c0 [ 1178.273665][T22161] iommufd_access_pin_pages+0x6d6/0xc30 [ 1178.273707][T22161] ? __pfx_iommufd_access_pin_pages+0x10/0x10 [ 1178.273732][T22161] ? iommufd_test+0x3c92/0x5170 [ 1178.273757][T22161] ? trace_kmalloc+0x1f/0xd0 [ 1178.273777][T22161] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 1178.273811][T22161] iommufd_test+0x3ce3/0x5170 [ 1178.273852][T22161] ? __pfx_iommufd_test+0x10/0x10 [ 1178.273882][T22161] ? __lock_acquire+0xab9/0xd20 [ 1178.273920][T22161] ? __might_fault+0xb0/0x130 [ 1178.273972][T22161] iommufd_fops_ioctl+0x45e/0x580 [ 1178.274014][T22161] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1178.274053][T22161] ? __fget_files+0x2a/0x420 [ 1178.274092][T22161] ? __fget_files+0x2a/0x420 [ 1178.274127][T22161] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1178.274146][T22161] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1178.274179][T22161] __se_sys_ioctl+0xfc/0x170 [ 1178.274207][T22161] do_syscall_64+0xfa/0x3b0 [ 1178.274226][T22161] ? lockdep_hardirqs_on+0x9c/0x150 [ 1178.274258][T22161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.274280][T22161] ? clear_bhb_loop+0x60/0xb0 [ 1178.274309][T22161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.274331][T22161] RIP: 0033:0x7fd967d8ebe9 [ 1178.274353][T22161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1178.274372][T22161] RSP: 002b:00007fd968c5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1178.274397][T22161] RAX: ffffffffffffffda RBX: 00007fd967fb6090 RCX: 00007fd967d8ebe9 [ 1178.274414][T22161] RDX: 0000200000000180 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1178.274429][T22161] RBP: 00007fd968c5c090 R08: 0000000000000000 R09: 0000000000000000 [ 1178.274444][T22161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1178.274457][T22161] R13: 00007fd967fb6128 R14: 00007fd967fb6090 R15: 00007ffe4f3b6658 [ 1178.274496][T22161] [ 1178.784011][ T5923] usb 7-1: device descriptor read/64, error -71 [ 1178.893822][ T5923] usb usb7-port1: attempt power cycle [ 1178.997076][T22175] syzkaller1: entered promiscuous mode [ 1179.023788][T22175] syzkaller1: entered allmulticast mode [ 1179.033739][ T5915] appletouch 3-1:0.85: Geyser mode initialized. [ 1179.042605][ T5915] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input88 [ 1179.233190][ T5923] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1179.258412][T12224] usb 3-1: USB disconnect, device number 31 [ 1179.258506][ C0] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 1179.265171][ T5923] usb 7-1: device descriptor read/8, error -71 [ 1179.335957][T12224] appletouch 3-1:0.85: input: appletouch disconnected [ 1179.523241][ T5923] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1179.675607][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1179.734734][ T5923] usb 7-1: device not accepting address 14, error -71 [ 1179.752690][ T5923] usb usb7-port1: unable to enumerate USB device [ 1179.846480][ T9] usb 5-1: device descriptor read/64, error -71 [ 1179.958616][T22204] /dev/rnullb0: Can't open blockdev [ 1180.063360][ T5923] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1180.117111][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1180.232986][ T5923] usb 7-1: Using ep0 maxpacket: 8 [ 1180.245762][ T5923] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 1180.262578][ T5923] usb 7-1: config 0 has no interface number 0 [ 1180.273137][ T9] usb 5-1: device descriptor read/64, error -71 [ 1180.279137][ T5923] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1180.300338][ T5923] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1180.320528][ T5923] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1180.333238][T12224] usb 10-1: new full-speed USB device number 54 using dummy_hcd [ 1180.340744][ T5923] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1180.360791][ T5923] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1180.370427][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.382189][ T5923] usb 7-1: Product: syz [ 1180.382980][ T9] usb usb5-port1: attempt power cycle [ 1180.389630][ T5923] usb 7-1: Manufacturer: syz [ 1180.397711][ T5923] usb 7-1: SerialNumber: syz [ 1180.406255][ T5923] usb 7-1: config 0 descriptor?? [ 1180.456274][T22213] /dev/rnullb0: Can't open blockdev [ 1180.509137][T12224] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.526112][T12224] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1180.545315][T12224] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1180.559324][T12224] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1180.573457][T12224] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1180.598934][T12224] usb 10-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1180.622023][T12224] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1180.638271][T12224] usb 10-1: Product: syz [ 1180.648601][T12224] usb 10-1: Manufacturer: syz [ 1180.653046][ T5923] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1180.670208][T12224] usb 10-1: SerialNumber: syz [ 1180.681790][T22217] netlink: 'syz.2.4776': attribute type 6 has an invalid length. [ 1180.691987][ T5923] usb 7-1: USB disconnect, device number 15 [ 1180.696664][T12224] usb 10-1: config 0 descriptor?? [ 1180.710670][T22217] random: crng reseeded on system resumption [ 1180.732743][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1180.763702][ T9] usb 5-1: device descriptor read/8, error -71 [ 1180.921894][T12224] radio-si470x 10-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1180.929187][T12224] radio-si470x 10-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1181.032334][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1181.053769][ T9] usb 5-1: device descriptor read/8, error -71 [ 1181.062639][ T5915] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1181.128730][T12224] radio-si470x 10-1:0.0: software version 135, hardware version 216 [ 1181.137682][T12224] radio-si470x 10-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1181.176273][ T9] usb usb5-port1: unable to enumerate USB device [ 1181.215589][ T5915] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.231166][ T5915] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1181.248383][ T5915] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1181.257654][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1181.267105][ T5915] usb 3-1: SerialNumber: syz [ 1181.330339][T12224] radio-si470x 10-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1181.350599][T12224] radio-si470x 10-1:0.0: submitting int urb failed (-90) [ 1181.358279][T12224] radio-si470x 10-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1181.375623][T12224] radio-si470x 10-1:0.0: probe with driver radio-si470x failed with error -22 [ 1181.387221][T22225] Malformed UNC in devname [ 1181.387221][T22225] [ 1181.394487][T22225] CIFS: VFS: Malformed UNC in devname [ 1181.397676][T12224] usb 10-1: USB disconnect, device number 54 [ 1181.651999][ T864] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1181.802087][ T864] usb 7-1: Using ep0 maxpacket: 8 [ 1181.809224][ T864] usb 7-1: config 6 has an invalid interface number: 213 but max is 1 [ 1181.817929][ T864] usb 7-1: config 6 has an invalid interface number: 211 but max is 1 [ 1181.826254][ T864] usb 7-1: config 6 has no interface number 0 [ 1181.832889][ T864] usb 7-1: config 6 has no interface number 1 [ 1181.839253][ T864] usb 7-1: config 6 interface 213 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1181.851105][ T864] usb 7-1: config 6 interface 213 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1181.864391][ T864] usb 7-1: config 6 interface 213 altsetting 0 endpoint 0x83 has an invalid bInterval 63, changing to 7 [ 1181.881453][ T864] usb 7-1: config 6 interface 213 altsetting 0 endpoint 0x83 has invalid maxpacket 57448, setting to 1024 [ 1181.893140][ T864] usb 7-1: config 6 interface 213 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1181.907718][ T864] usb 7-1: config 6 interface 211 has no altsetting 0 [ 1181.918843][ T864] usb 7-1: New USB device found, idVendor=311a, idProduct=0d5c, bcdDevice=74.ce [ 1181.930357][ T864] usb 7-1: New USB device strings: Mfr=58, Product=148, SerialNumber=55 [ 1181.939530][ T864] usb 7-1: Product: syz [ 1181.944327][ T864] usb 7-1: Manufacturer: syz [ 1181.949323][ T864] usb 7-1: SerialNumber: syz [ 1182.197438][T12224] usb 10-1: new low-speed USB device number 55 using dummy_hcd [ 1182.200653][ T864] usb 7-1: USB disconnect, device number 16 [ 1182.374739][T12224] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1182.382819][T12224] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1182.393842][T12224] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1182.405935][T12224] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1182.417706][T12224] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1182.430271][T12224] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1182.440250][T12224] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1182.456615][T12224] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1182.468710][T12224] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1182.492677][T12224] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1182.514279][T12224] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1182.525812][T12224] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1182.538796][T12224] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1182.556643][T12224] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1182.569381][T12224] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1182.627196][T22234] /dev/rnullb0: Can't open blockdev [ 1182.730822][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.031245][T21810] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1183.041260][ T864] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1183.171332][ T864] usb 5-1: device descriptor read/64, error -71 [ 1183.195384][T21810] usb 7-1: Using ep0 maxpacket: 32 [ 1183.203875][T21810] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 1183.213162][T21810] usb 7-1: config 0 has no interface number 0 [ 1183.219388][T21810] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1183.230934][T21810] usb 7-1: config 0 interface 85 has no altsetting 0 [ 1183.240865][T21810] usb 7-1: New USB device found, idVendor=05ac, idProduct=021b, bcdDevice=f0.72 [ 1183.256604][T21810] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.264740][T21810] usb 7-1: Product: syz [ 1183.269652][T21810] usb 7-1: Manufacturer: syz [ 1183.274621][T21810] usb 7-1: SerialNumber: syz [ 1183.283102][T21810] usb 7-1: config 0 descriptor?? [ 1183.411204][ T864] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1183.551024][ T864] usb 5-1: device descriptor read/64, error -71 [ 1183.665854][ T864] usb usb5-port1: attempt power cycle [ 1184.010876][ T864] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1184.041673][ T864] usb 5-1: device descriptor read/8, error -71 [ 1184.054950][T21810] appletouch 7-1:0.85: Geyser mode initialized. [ 1184.069779][T21810] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input89 [ 1184.082671][ C1] appletouch 7-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 1184.281222][ T864] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1184.285955][T18746] usb 7-1: USB disconnect, device number 17 [ 1184.303615][ T864] usb 5-1: device descriptor read/8, error -71 [ 1184.319773][T18746] appletouch 7-1:0.85: input: appletouch disconnected [ 1184.421109][ T864] usb usb5-port1: unable to enumerate USB device [ 1184.982871][T12224] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1184.997574][T12224] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.047429][T12224] usb 10-1: can't set config #168, error -71 [ 1185.071838][T12224] usb 10-1: USB disconnect, device number 55 [ 1185.380034][T12224] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 1185.530028][T12224] usb 10-1: Using ep0 maxpacket: 8 [ 1185.537100][T12224] usb 10-1: config 0 has an invalid interface number: 186 but max is 0 [ 1185.545814][T12224] usb 10-1: config 0 has no interface number 0 [ 1185.552337][T12224] usb 10-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1185.563719][T12224] usb 10-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1185.576299][T12224] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1185.587545][T12224] usb 10-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1185.604240][T12224] usb 10-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1185.613594][T12224] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.622439][T12224] usb 10-1: Product: syz [ 1185.626744][T12224] usb 10-1: Manufacturer: syz [ 1185.631561][T18746] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1185.639288][T12224] usb 10-1: SerialNumber: syz [ 1185.647798][T12224] usb 10-1: config 0 descriptor?? [ 1185.779848][T18746] usb 7-1: device descriptor read/64, error -71 [ 1185.909175][T12224] iowarrior 10-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1185.931044][T12224] usb 10-1: USB disconnect, device number 56 [ 1186.019731][T18746] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1186.075887][T22283] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4791'. [ 1186.154849][T22286] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1186.170423][T18746] usb 7-1: device descriptor read/64, error -71 [ 1186.290191][T18746] usb usb7-port1: attempt power cycle [ 1186.325485][ T5915] usb 3-1: 0:2 : does not exist [ 1186.382514][ T7462] usb 3-1: USB disconnect, device number 32 [ 1186.659502][T18746] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1186.690006][T18746] usb 7-1: device descriptor read/8, error -71 [ 1186.949362][T18746] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1186.969866][T18746] usb 7-1: device descriptor read/8, error -71 [ 1187.091978][T18746] usb usb7-port1: unable to enumerate USB device [ 1187.399137][ T5915] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1187.559032][ T5915] usb 5-1: Using ep0 maxpacket: 16 [ 1187.566642][ T5915] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.577080][ T5915] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1187.589670][ T5915] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1187.598774][ T5915] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1187.607562][ T5915] usb 5-1: Manufacturer: syz [ 1187.610542][T22308] FAULT_INJECTION: forcing a failure. [ 1187.610542][T22308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1187.619972][ T5915] usb 5-1: config 0 descriptor?? [ 1187.631169][T22308] CPU: 1 UID: 0 PID: 22308 Comm: syz.9.4801 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) [ 1187.631205][T22308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1187.631220][T22308] Call Trace: [ 1187.631229][T22308] [ 1187.631238][T22308] dump_stack_lvl+0x189/0x250 [ 1187.631275][T22308] ? __pfx____ratelimit+0x10/0x10 [ 1187.631308][T22308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1187.631340][T22308] ? __pfx__printk+0x10/0x10 [ 1187.631372][T22308] ? __might_fault+0xb0/0x130 [ 1187.631407][T22308] should_fail_ex+0x414/0x560 [ 1187.631442][T22308] _copy_from_iter+0x1db/0x16f0 [ 1187.631478][T22308] ? __lock_acquire+0xab9/0xd20 [ 1187.631509][T22308] ? __pfx__copy_from_iter+0x10/0x10 [ 1187.631547][T22308] tun_get_user+0x219/0x3e20 [ 1187.631591][T22308] ? aa_file_perm+0x44d/0x1550 [ 1187.631624][T22308] ? __pfx_tun_get_user+0x10/0x10 [ 1187.631647][T22308] ? _parse_integer_limit+0x1ae/0x1f0 [ 1187.631690][T22308] ? __lock_acquire+0xab9/0xd20 [ 1187.631721][T22308] ? ref_tracker_alloc+0x318/0x460 [ 1187.631750][T22308] ? __lock_acquire+0xab9/0xd20 [ 1187.631777][T22308] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1187.631816][T22308] ? tun_get+0x1c/0x2f0 [ 1187.631845][T22308] ? tun_get+0x1c/0x2f0 [ 1187.631867][T22308] ? tun_get+0x1c/0x2f0 [ 1187.631894][T22308] tun_chr_write_iter+0x113/0x200 [ 1187.631921][T22308] vfs_write+0x5c9/0xb30 [ 1187.631953][T22308] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1187.631978][T22308] ? __pfx_vfs_write+0x10/0x10 [ 1187.632016][T22308] ? __fget_files+0x2a/0x420 [ 1187.632055][T22308] ksys_write+0x145/0x250 [ 1187.632085][T22308] ? __pfx_ksys_write+0x10/0x10 [ 1187.632108][T22308] ? rcu_is_watching+0x15/0xb0 [ 1187.632143][T22308] ? do_syscall_64+0xbe/0x3b0 [ 1187.632169][T22308] do_syscall_64+0xfa/0x3b0 [ 1187.632187][T22308] ? lockdep_hardirqs_on+0x9c/0x150 [ 1187.632219][T22308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.632261][T22308] ? clear_bhb_loop+0x60/0xb0 [ 1187.632289][T22308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.632311][T22308] RIP: 0033:0x7f1b5e18ebe9 [ 1187.632332][T22308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1187.632352][T22308] RSP: 002b:00007f1b5ef10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1187.632376][T22308] RAX: ffffffffffffffda RBX: 00007f1b5e3b5fa0 RCX: 00007f1b5e18ebe9 [ 1187.632394][T22308] RDX: 00000000000000c2 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1187.632409][T22308] RBP: 00007f1b5ef10090 R08: 0000000000000000 R09: 0000000000000000 [ 1187.632424][T22308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1187.632438][T22308] R13: 00007f1b5e3b6038 R14: 00007f1b5e3b5fa0 R15: 00007ffd98472b08 [ 1187.632480][T22308] [ 1187.937333][T22302] netlink: 17223 bytes leftover after parsing attributes in process `syz.4.4798'. [ 1187.951344][ T5915] usb 5-1: USB disconnect, device number 21 [ 1188.444045][T22316] kAFS: unparsable volume name [ 1188.628575][ T864] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 1188.748530][T22241] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1188.758620][ T864] usb 10-1: device descriptor read/64, error -71 [ 1188.898523][T22241] usb 5-1: Using ep0 maxpacket: 8 [ 1188.905287][T22241] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 1188.913895][T22241] usb 5-1: config 0 has no interface number 0 [ 1188.921761][T22241] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1188.932940][T22241] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1188.945438][T22241] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1188.957896][T22241] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1188.975308][T22241] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1188.984860][T22241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.993239][T22241] usb 5-1: Product: syz [ 1188.997522][T22241] usb 5-1: Manufacturer: syz [ 1189.002448][ T864] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 1189.010467][T22241] usb 5-1: SerialNumber: syz [ 1189.019049][T22241] usb 5-1: config 0 descriptor?? [ 1189.080754][ T5915] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1189.148277][ T864] usb 10-1: device descriptor read/64, error -71 [ 1189.238666][ T5915] usb 7-1: Using ep0 maxpacket: 16 [ 1189.244164][T22241] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1189.258095][ T5915] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1189.266252][ T5915] usb 7-1: config 0 has no interface number 0 [ 1189.273251][ T864] usb usb10-port1: attempt power cycle [ 1189.282574][T22241] usb 5-1: USB disconnect, device number 22 [ 1189.295273][ T5915] usb 7-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 1189.311173][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.319413][ T5915] usb 7-1: Product: syz [ 1189.323695][ T5915] usb 7-1: Manufacturer: syz [ 1189.329816][ T5915] usb 7-1: SerialNumber: syz [ 1189.340543][ T5915] usb 7-1: config 0 descriptor?? [ 1189.358687][ T5915] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 1189.555687][ T5915] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0x00, error -71) [ 1189.578251][ T5915] gspca_xirlink_cit: Failed to write a register (index 0x0112, value 0x01, error -71) [ 1189.595452][ T5915] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x00, error -71) [ 1189.616251][ T5915] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x01, error -71) [ 1189.628171][ T864] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 1189.657447][ T5915] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x00, error -71) [ 1189.671775][ T864] usb 10-1: device descriptor read/8, error -71 [ 1189.673844][T22328] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1189.685318][ T5915] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x01, error -71) [ 1189.701783][ T5915] gspca_xirlink_cit: Failed to write a register (index 0x0409, value 0x0D, error -71) [ 1189.716304][ T5915] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -71) [ 1189.731448][ T5915] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -71) [ 1189.743042][ T5915] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 1189.755651][ T5915] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 1189.766615][ T5915] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 1189.798172][ T5915] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 1189.828246][ T5915] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 1189.843556][ T5915] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 1189.876158][ T5915] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 1189.890604][ T5915] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 1189.902112][ T5915] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 1189.902494][ T5915] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 1189.917457][ T5915] input: xirlink-cit as /devices/platform/dummy_hcd.6/usb7/7-1/input/input90 [ 1189.917908][ T864] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 1189.931603][ T5915] usb 7-1: USB disconnect, device number 22 [ 1189.968844][ T864] usb 10-1: device descriptor read/8, error -71 [ 1190.080651][ T864] usb usb10-port1: unable to enumerate USB device [ 1190.107979][T22332] wlan1 speed is unknown, defaulting to 1000 [ 1190.127657][T22332] virt_wifi0 speed is unknown, defaulting to 1000 [ 1190.468541][ T5915] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1190.607609][ T5915] usb 7-1: device descriptor read/64, error -71 [ 1190.812776][T22351] IPv6: NLM_F_CREATE should be specified when creating new route [ 1190.847504][ T5915] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1190.997639][ T5915] usb 7-1: device descriptor read/64, error -71 [ 1191.077229][ T43] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1191.112184][ T5915] usb usb7-port1: attempt power cycle [ 1191.227159][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 1191.264003][ T43] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1191.283591][ T43] usb 5-1: config 0 has no interface number 0 [ 1191.347164][ T43] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 1191.356437][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.377779][ T43] usb 5-1: Product: syz [ 1191.382022][ T43] usb 5-1: Manufacturer: syz [ 1191.386661][ T43] usb 5-1: SerialNumber: syz [ 1191.410914][ T43] usb 5-1: config 0 descriptor?? [ 1191.439052][ T43] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 1191.467410][ T5915] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1191.488163][ T5915] usb 7-1: device descriptor read/8, error -71 [ 1191.622337][T22351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.669323][T22351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.690647][ T43] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0x00, error -71) [ 1191.710720][ T43] gspca_xirlink_cit: Failed to write a register (index 0x0112, value 0x01, error -71) [ 1191.736096][ T43] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x00, error -71) [ 1191.746874][ T5915] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1191.757059][T22376] netlink: 'syz.9.4821': attribute type 2 has an invalid length. [ 1191.768430][ T43] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x01, error -71) [ 1191.779768][ T43] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x00, error -71) [ 1191.792768][ T5915] usb 7-1: device descriptor read/8, error -71 [ 1191.809135][ T43] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x01, error -71) [ 1191.822708][ T43] gspca_xirlink_cit: Failed to write a register (index 0x0409, value 0x0D, error -71) [ 1191.844107][ T43] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -71) [ 1191.876355][ T43] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -71) [ 1191.901793][ T43] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 1191.919255][ T5915] usb usb7-port1: unable to enumerate USB device [ 1191.936349][ T43] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 1191.958096][ T43] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 1191.981977][ T43] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 1192.003595][ T43] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 1192.032004][ T43] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 1192.054946][ T43] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 1192.076778][ T43] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 1192.099308][ T43] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 1192.117605][ T43] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 1192.143962][ T43] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input91 [ 1192.185349][ T43] usb 5-1: USB disconnect, device number 23 [ 1193.593960][T22413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1193.772692][T22426] program syz.4.4826 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1193.806247][ T5915] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1193.875884][ T43] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1193.936055][ T5915] usb 7-1: device descriptor read/64, error -71 [ 1193.999041][T21810] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 1194.035790][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 1194.042806][ T43] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 1194.054471][ T43] usb 3-1: config 0 has no interface number 0 [ 1194.069356][ T43] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1194.085373][ T43] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1194.103750][ T43] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1194.120921][ T43] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1194.142603][ T43] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1194.152218][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.162972][ T43] usb 3-1: Product: syz [ 1194.168911][T21810] usb 10-1: Using ep0 maxpacket: 8 [ 1194.173712][ T43] usb 3-1: Manufacturer: syz [ 1194.181067][ T5915] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1194.181695][T21810] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 1194.189103][T22239] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1194.194613][ T43] usb 3-1: SerialNumber: syz [ 1194.220586][ T43] usb 3-1: config 0 descriptor?? [ 1194.225381][T21810] usb 10-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 1194.236899][T21810] usb 10-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 1194.249498][T21810] usb 10-1: Product: syz [ 1194.253829][T21810] usb 10-1: Manufacturer: syz [ 1194.260753][T21810] usb 10-1: SerialNumber: syz [ 1194.271268][T21810] usb 10-1: config 0 descriptor?? [ 1194.338471][T22239] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.349613][ T5915] usb 7-1: device descriptor read/64, error -71 [ 1194.362505][T22239] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1194.374187][T22239] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1194.393440][T22239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1194.410288][T22239] usb 5-1: SerialNumber: syz [ 1194.454168][ T43] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1194.465998][ T5915] usb usb7-port1: attempt power cycle [ 1194.493815][ T43] usb 3-1: USB disconnect, device number 33 [ 1194.496185][T21810] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1194.631943][T22433] QAT: Device 189 not found [ 1194.698604][T22424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.726718][T22424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.815414][ T5915] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1194.836076][ T5915] usb 7-1: device descriptor read/8, error -71 [ 1194.958212][T22424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.967440][T22424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1195.075535][ T5915] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1195.097259][ T5915] usb 7-1: device descriptor read/8, error -71 [ 1195.205637][ T5915] usb usb7-port1: unable to enumerate USB device [ 1195.383142][T22424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1195.395945][T22424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1195.925052][T21810] gspca_sunplus: reg_w_riv err -110 [ 1195.930422][T21810] sunplus 10-1:0.0: probe with driver sunplus failed with error -110 [ 1196.041463][T22459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1196.416788][T22467] 9pnet_fd: Insufficient options for proto=fd [ 1196.621877][T22472] /dev/rnullb0: Can't open blockdev [ 1196.904824][T22239] usb 5-1: 0:2 : does not exist [ 1196.914710][ T5915] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1196.952908][T22239] usb 5-1: USB disconnect, device number 24 [ 1197.003519][T20499] udevd[20499]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1197.131051][ T5915] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1197.157394][ T5915] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1197.172356][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1197.203902][ T5915] usb 7-1: Product: syz [ 1197.208938][ T5915] usb 7-1: Manufacturer: syz [ 1197.213700][ T5915] usb 7-1: SerialNumber: syz [ 1197.238194][T22241] usb 10-1: USB disconnect, device number 61 [ 1197.429614][T22482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1197.446946][T22239] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1197.449753][T22474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.457145][ T5915] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1197.463757][T22474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1197.503044][T22474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.529338][T22474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1197.609094][T18746] usb 7-1: USB disconnect, device number 31 [ 1197.622282][T18746] usblp0: removed [ 1197.645686][T22239] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1197.663054][T22239] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1197.676417][T22239] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1197.689393][T22239] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1197.698690][T22239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.715437][T22479] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 1198.093673][T18746] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 1198.253664][T18746] usb 10-1: device descriptor read/64, error -71 [ 1198.429759][T22239] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 1198.465964][T22239] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input92 [ 1198.503714][T18746] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 1198.563904][T22239] usb 3-1: USB disconnect, device number 34 [ 1198.569974][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1198.649392][T18746] usb 10-1: device descriptor read/64, error -71 [ 1198.773796][T18746] usb usb10-port1: attempt power cycle [ 1199.085909][T21810] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1199.143151][T18746] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 1199.174458][T18746] usb 10-1: device descriptor read/8, error -71 [ 1199.246592][T21810] usb 7-1: device descriptor read/64, error -71 [ 1199.413055][T18746] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 1199.445660][T18746] usb 10-1: device descriptor read/8, error -71 [ 1199.493248][T21810] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1199.558177][T18746] usb usb10-port1: unable to enumerate USB device [ 1199.562008][T22508] netlink: 'syz.4.4850': attribute type 2 has an invalid length. [ 1199.618296][T22510] /dev/rnullb0: Can't open blockdev [ 1199.623797][T21810] usb 7-1: device descriptor read/64, error -71 [ 1199.637377][T22510] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.672992][T12224] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1199.680798][T22511] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1199.695439][T22510] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.733406][T21810] usb usb7-port1: attempt power cycle [ 1199.749960][T22510] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.798566][T22510] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.824547][T12224] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 1199.832827][T12224] usb 3-1: config 0 has no interface number 0 [ 1199.839421][T12224] usb 3-1: config 0 interface 11 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 1199.852135][T12224] usb 3-1: config 0 interface 11 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1199.864034][T12224] usb 3-1: config 0 interface 11 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 1199.880467][T12224] usb 3-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca [ 1199.890032][T12224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.900150][T12224] usb 3-1: Product: syz [ 1199.904644][T12224] usb 3-1: Manufacturer: syz [ 1199.909272][T12224] usb 3-1: SerialNumber: syz [ 1199.920441][T12224] usb 3-1: config 0 descriptor?? [ 1199.928321][T22504] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1199.941648][T22504] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1199.949888][ T1156] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.969335][T14693] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.010607][T14693] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.036122][T14693] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.093504][T21810] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1200.133874][T21810] usb 7-1: device descriptor read/8, error -71 [ 1200.156809][T22504] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1200.166146][T22504] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1200.179895][T12224] usb 3-1: No status endpoint found [ 1200.240698][T22516] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input93 [ 1200.382783][T21810] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1200.413436][T21810] usb 7-1: device descriptor read/8, error -71 [ 1200.461017][T22523] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4856'. [ 1200.533915][T21810] usb usb7-port1: unable to enumerate USB device [ 1200.699963][T22532] serio: Serial port ptm0 [ 1200.822391][T21810] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 1201.004274][T21810] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1201.016783][T21810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1201.027863][T21810] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1201.037054][T21810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.049427][T21810] usb 5-1: config 0 descriptor?? [ 1201.056376][T22527] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 1201.065995][T21810] hub 5-1:0.0: USB hub found [ 1201.202331][T22239] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 1201.265579][T21810] hub 5-1:0.0: 2 ports detected [ 1201.271091][T21810] hub 5-1:0.0: insufficient power available to use all downstream ports [ 1201.295500][T21810] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 1201.309648][T21810] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 1201.326848][T21810] usbhid 5-1:0.0: can't add hid device: -71 [ 1201.333831][T21810] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1201.341210][T22537] /dev/rnullb0: Can't open blockdev [ 1201.352319][T22239] usb 10-1: Using ep0 maxpacket: 16 [ 1201.354314][T21810] usb 5-1: USB disconnect, device number 25 [ 1201.370913][T22239] usb 10-1: config 0 has an invalid interface number: 2 but max is 0 [ 1201.379796][T22239] usb 10-1: config 0 has no interface number 0 [ 1201.391779][T22239] usb 10-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 1201.406700][T22239] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.415642][T22239] usb 10-1: Product: syz [ 1201.420098][T22239] usb 10-1: Manufacturer: syz [ 1201.429544][T22239] usb 10-1: SerialNumber: syz [ 1201.438690][T22239] usb 10-1: config 0 descriptor?? [ 1201.450490][T22239] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 1201.476250][T18746] IPVS: starting estimator thread 0... [ 1201.530343][T22539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4862'. [ 1201.572259][T22540] IPVS: using max 30 ests per chain, 72000 per kthread [ 1201.647985][T22239] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0x00, error -71) [ 1201.665144][T22239] gspca_xirlink_cit: Failed to write a register (index 0x0112, value 0x01, error -71) [ 1201.690726][T22239] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x00, error -71) [ 1201.704350][T22239] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x01, error -71) [ 1201.714833][T22239] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x00, error -71) [ 1201.726812][T22239] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x01, error -71) [ 1201.736915][T22239] gspca_xirlink_cit: Failed to write a register (index 0x0409, value 0x0D, error -71) [ 1201.748372][T22239] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -71) [ 1201.760466][T22239] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -71) [ 1201.770978][T22239] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 1201.781209][T22239] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 1201.792018][T22239] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 1201.804604][T22239] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 1201.818332][T22239] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 1201.856585][T22239] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 1201.879890][T22239] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 1201.896848][T22239] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 1201.919264][T22239] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 1201.937366][T22239] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 1201.959981][T22239] input: xirlink-cit as /devices/platform/dummy_hcd.9/usb10/10-1/input/input94 [ 1201.980590][T22549] /dev/rnullb0: Can't open blockdev [ 1202.000106][T22239] usb 10-1: USB disconnect, device number 66 [ 1202.187929][T22555] FAULT_INJECTION: forcing a failure. [ 1202.187929][T22555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1202.202420][T22555] CPU: 1 UID: 0 PID: 22555 Comm: syz.6.4867 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) [ 1202.202451][T22555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1202.202466][T22555] Call Trace: [ 1202.202476][T22555] [ 1202.202487][T22555] dump_stack_lvl+0x189/0x250 [ 1202.202525][T22555] ? __pfx____ratelimit+0x10/0x10 [ 1202.202559][T22555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1202.202591][T22555] ? __pfx__printk+0x10/0x10 [ 1202.202623][T22555] ? __might_fault+0xb0/0x130 [ 1202.202672][T22555] should_fail_ex+0x414/0x560 [ 1202.202709][T22555] _copy_from_user+0x2d/0xb0 [ 1202.202736][T22555] kstrtouint_from_user+0xc4/0x170 [ 1202.202774][T22555] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1202.202834][T22555] proc_fail_nth_write+0x88/0x200 [ 1202.202857][T22555] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1202.202886][T22555] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1202.202911][T22555] vfs_write+0x27e/0xb30 [ 1202.202948][T22555] ? __pfx_vfs_write+0x10/0x10 [ 1202.202977][T22555] ? __fget_files+0x2a/0x420 [ 1202.203013][T22555] ? __fget_files+0x3a0/0x420 [ 1202.203042][T22555] ? __fget_files+0x2a/0x420 [ 1202.203083][T22555] ksys_write+0x145/0x250 [ 1202.203109][T22555] ? __fget_files+0x3a0/0x420 [ 1202.203141][T22555] ? __pfx_ksys_write+0x10/0x10 [ 1202.203175][T22555] ? do_syscall_64+0xbe/0x3b0 [ 1202.203200][T22555] do_syscall_64+0xfa/0x3b0 [ 1202.203219][T22555] ? lockdep_hardirqs_on+0x9c/0x150 [ 1202.203251][T22555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.203275][T22555] ? clear_bhb_loop+0x60/0xb0 [ 1202.203304][T22555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.203325][T22555] RIP: 0033:0x7f67d698d69f [ 1202.203375][T22555] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1202.203395][T22555] RSP: 002b:00007f67d77a1030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1202.203419][T22555] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f67d698d69f [ 1202.203436][T22555] RDX: 0000000000000001 RSI: 00007f67d77a10a0 RDI: 0000000000000003 [ 1202.203450][T22555] RBP: 00007f67d77a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1202.203464][T22555] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1202.203479][T22555] R13: 00007f67d6bb6038 R14: 00007f67d6bb5fa0 R15: 00007ffed7b2eae8 [ 1202.203515][T22555] [ 1202.445658][T18746] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 1202.508154][T22241] usb 3-1: USB disconnect, device number 35 [ 1202.615556][T18746] usb 5-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config [ 1202.634103][T18746] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1202.701991][T18746] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1202.749621][T18746] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1202.781187][T18746] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1202.807280][T18746] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1202.818332][T18746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.832554][T18746] usb 5-1: config 0 descriptor?? [ 1202.923089][T22572] FAULT_INJECTION: forcing a failure. [ 1202.923089][T22572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1202.936357][T22572] CPU: 0 UID: 0 PID: 22572 Comm: syz.2.4875 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) [ 1202.936388][T22572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1202.936399][T22572] Call Trace: [ 1202.936406][T22572] [ 1202.936414][T22572] dump_stack_lvl+0x189/0x250 [ 1202.936443][T22572] ? __pfx____ratelimit+0x10/0x10 [ 1202.936467][T22572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1202.936491][T22572] ? __pfx__printk+0x10/0x10 [ 1202.936524][T22572] should_fail_ex+0x414/0x560 [ 1202.936549][T22572] _copy_to_user+0x31/0xb0 [ 1202.936571][T22572] simple_read_from_buffer+0xe1/0x170 [ 1202.936596][T22572] proc_fail_nth_read+0x1b3/0x220 [ 1202.936615][T22572] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1202.936634][T22572] ? rw_verify_area+0x2a6/0x4d0 [ 1202.936651][T22572] ? __lock_acquire+0xab9/0xd20 [ 1202.936668][T22572] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1202.936684][T22572] vfs_read+0x1fd/0xa30 [ 1202.936701][T22572] ? fdget_pos+0x247/0x320 [ 1202.936727][T22572] ? __pfx___mutex_lock+0x10/0x10 [ 1202.936752][T22572] ? __pfx_vfs_read+0x10/0x10 [ 1202.936771][T22572] ? __fget_files+0x2a/0x420 [ 1202.936796][T22572] ? __fget_files+0x3a0/0x420 [ 1202.936816][T22572] ? __fget_files+0x2a/0x420 [ 1202.936845][T22572] ksys_read+0x145/0x250 [ 1202.936862][T22572] ? __fget_files+0x3a0/0x420 [ 1202.936884][T22572] ? __pfx_ksys_read+0x10/0x10 [ 1202.936907][T22572] ? do_syscall_64+0xbe/0x3b0 [ 1202.936924][T22572] do_syscall_64+0xfa/0x3b0 [ 1202.936937][T22572] ? lockdep_hardirqs_on+0x9c/0x150 [ 1202.936960][T22572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.936976][T22572] ? clear_bhb_loop+0x60/0xb0 [ 1202.936995][T22572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.937011][T22572] RIP: 0033:0x7f38a958d5fc [ 1202.937028][T22572] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1202.937042][T22572] RSP: 002b:00007f38aa3ee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1202.937059][T22572] RAX: ffffffffffffffda RBX: 00007f38a97b5fa0 RCX: 00007f38a958d5fc [ 1202.937071][T22572] RDX: 000000000000000f RSI: 00007f38aa3ee0a0 RDI: 0000000000000006 [ 1202.937082][T22572] RBP: 00007f38aa3ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1202.937092][T22572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1202.937101][T22572] R13: 00007f38a97b6038 R14: 00007f38a97b5fa0 R15: 00007ffcde12ad58 [ 1202.937125][T22572] [ 1203.182533][T22241] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 1203.230083][T18746] rc_core: IR keymap rc-hauppauge not found [ 1203.248012][T18746] Registered IR keymap rc-empty [ 1203.258208][T18746] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1203.283764][T18746] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1203.304959][T18746] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1203.321617][T18746] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input95 [ 1203.353128][T22241] usb 10-1: too many configurations: 255, using maximum allowed: 8 [ 1203.363774][T22241] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1203.372474][T22241] usb 10-1: can't read configurations, error -61 [ 1203.400962][T18746] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1203.423779][T18746] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1203.461349][T18746] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1203.481415][T18746] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1203.505123][T22578] overlayfs: failed to resolve './file1': -2 [ 1203.511488][T22241] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 1203.519754][T18746] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1203.561558][T18746] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1203.591233][T18746] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1203.624323][T18746] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1203.655520][T18746] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1203.662151][T22241] usb 10-1: too many configurations: 255, using maximum allowed: 8 [ 1203.673237][T22241] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1203.681264][T22241] usb 10-1: can't read configurations, error -61 [ 1203.688108][T22241] usb usb10-port1: attempt power cycle [ 1203.702107][T18746] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1203.739268][T18746] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1203.767680][T18746] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1203.814937][T18746] usb 5-1: USB disconnect, device number 26 [ 1204.030807][T22241] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 1204.052347][T22241] usb 10-1: too many configurations: 255, using maximum allowed: 8 [ 1204.063781][T22241] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1204.071636][T22241] usb 10-1: can't read configurations, error -61 [ 1204.090841][T22239] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 1204.202035][T22241] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 1204.222101][T22241] usb 10-1: too many configurations: 255, using maximum allowed: 8 [ 1204.235842][T22241] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1204.244050][T22241] usb 10-1: can't read configurations, error -61 [ 1204.252217][T22241] usb usb10-port1: unable to enumerate USB device [ 1204.260707][T22239] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.271862][T22239] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1204.284249][T22239] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1204.295716][T22239] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1204.306758][T22239] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1204.323608][T22239] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1204.333147][T22239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.341478][T22239] usb 3-1: Product: syz [ 1204.345692][T22239] usb 3-1: Manufacturer: syz [ 1204.350321][T22239] usb 3-1: SerialNumber: syz [ 1204.363241][T22239] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 1204.372873][T22239] imon 3-1:155.0: unable to initialize intf0, err -90 [ 1204.379691][T22239] imon:imon_probe: failed to initialize context! [ 1204.386233][T22239] imon 3-1:155.0: unable to register, err -19 [ 1204.697728][T18746] usb 3-1: USB disconnect, device number 36 [ 1204.999546][T22598] netlink: 'syz.2.4885': attribute type 5 has an invalid length. [ 1205.423765][T22606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4888'. [ 1205.431398][ C0] [ 1205.435154][ C0] ============================= [ 1205.440027][ C0] [ BUG: Invalid wait context ] [ 1205.444996][ C0] 6.16.0-next-20250808-syzkaller #0 Not tainted [ 1205.451262][ C0] ----------------------------- [ 1205.456138][ C0] kworker/0:5/18746 is trying to lock: [ 1205.461719][ C0] ffff88802854d410 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x1fb/0x9b0 [ 1205.471290][ C0] other info that might help us debug this: [ 1205.477305][ C0] context-{2:2} [ 1205.480793][ C0] 7 locks held by kworker/0:5/18746: [ 1205.486200][ C0] #0: ffff88801dec2d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1205.497959][ C0] #1: ffffc900034f7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1205.510106][ C0] #2: ffff88802837d198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1205.519021][ C0] #3: ffff8880283f8518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 1205.528970][ C0] #4: ffff888027e30868 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 1205.538743][ C0] #5: ffffffff8f1f44d0 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x163/0x1750 [ 1205.549243][ C0] #6: ffff88802854d960 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x1c3/0x9b0 [ 1205.559276][ C0] stack backtrace: [ 1205.563012][ C0] CPU: 0 UID: 0 PID: 18746 Comm: kworker/0:5 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) [ 1205.563034][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1205.563048][ C0] Workqueue: usb_hub_wq hub_event [ 1205.563073][ C0] Call Trace: [ 1205.563081][ C0] [ 1205.563090][ C0] dump_stack_lvl+0x189/0x250 [ 1205.563118][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1205.563144][ C0] ? __pfx__printk+0x10/0x10 [ 1205.563171][ C0] ? print_lock_name+0xde/0x100 [ 1205.563196][ C0] __lock_acquire+0xbcb/0xd20 [ 1205.563219][ C0] ? kvm_xen_set_evtchn_fast+0x1fb/0x9b0 [ 1205.563240][ C0] lock_acquire+0x120/0x360 [ 1205.563260][ C0] ? kvm_xen_set_evtchn_fast+0x1fb/0x9b0 [ 1205.563289][ C0] _raw_read_lock_irqsave+0xaf/0x100 [ 1205.563314][ C0] ? kvm_xen_set_evtchn_fast+0x1fb/0x9b0 [ 1205.563335][ C0] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1205.563359][ C0] ? xa_load+0x1ea/0x210 [ 1205.563377][ C0] kvm_xen_set_evtchn_fast+0x1fb/0x9b0 [ 1205.563399][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1205.563426][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1205.563449][ C0] ? kvm_xen_set_evtchn_fast+0x1c3/0x9b0 [ 1205.563474][ C0] xen_timer_callback+0x109/0x220 [ 1205.563498][ C0] ? __pfx_xen_timer_callback+0x10/0x10 [ 1205.563520][ C0] __hrtimer_run_queues+0x4e0/0xc60 [ 1205.563550][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1205.563571][ C0] ? read_tsc+0x9/0x20 [ 1205.563594][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 1205.563626][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 1205.563653][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1205.563678][ C0] [ 1205.563684][ C0] [ 1205.563691][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1205.563710][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 1205.563736][ C0] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ea d0 18 f6 48 89 df e8 42 68 19 f6 e8 8d c0 42 f6 fb bf 01 00 00 00 92 61 0b f6 65 8b 05 bb 63 5f 07 85 c0 74 07 5b c3 cc cc cc cc [ 1205.563752][ C0] RSP: 0018:ffffc900034f7380 EFLAGS: 00000282 [ 1205.563767][ C0] RAX: 617bc200c141bd00 RBX: ffffffff8f1f98c0 RCX: 617bc200c141bd00 [ 1205.563781][ C0] RDX: 0000000000000007 RSI: ffffffff8dc91f97 RDI: 0000000000000001 [ 1205.563793][ C0] RBP: dffffc0000000000 R08: ffffffff8fe4c437 R09: 1ffffffff1fc9886 [ 1205.563806][ C0] R10: dffffc0000000000 R11: fffffbfff1fc9887 R12: 0000000000000000 [ 1205.563819][ C0] R13: ffff8880630cee00 R14: 0000000000000000 R15: ffff8880630cee40 [ 1205.563882][ C0] usb_hcd_submit_urb+0x39e/0x1aa0 [ 1205.563914][ C0] usb_start_wait_urb+0x114/0x4c0 [ 1205.563937][ C0] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1205.563966][ C0] usb_control_msg+0x232/0x3e0 [ 1205.563988][ C0] hub_port_reset+0x390/0x1750 [ 1205.564020][ C0] hub_port_init+0x2b0/0x2800 [ 1205.564050][ C0] hub_event+0x2532/0x4a20 [ 1205.564092][ C0] ? __pfx_hub_event+0x10/0x10 [ 1205.564115][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1205.564140][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1205.564162][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1205.564183][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1205.564205][ C0] process_scheduled_works+0xade/0x17b0 [ 1205.564236][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1205.564264][ C0] worker_thread+0x8a0/0xda0 [ 1205.564287][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1205.564313][ C0] ? __kthread_parkme+0x7b/0x200 [ 1205.564340][ C0] kthread+0x711/0x8a0 [ 1205.564356][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1205.564377][ C0] ? __pfx_kthread+0x10/0x10 [ 1205.564393][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1205.564414][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1205.564438][ C0] ? __pfx_kthread+0x10/0x10 [ 1205.564452][ C0] ret_from_fork+0x3f9/0x770 [ 1205.564476][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1205.564499][ C0] ? __switch_to_asm+0x39/0x70 [ 1205.564515][ C0] ? __switch_to_asm+0x33/0x70 [ 1205.564530][ C0] ? __pfx_kthread+0x10/0x10 [ 1205.564545][ C0] ret_from_fork_asm+0x1a/0x30 [ 1205.564567][ C0] [ 1205.976862][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 1205.989728][T15955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1206.062169][T22607] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1206.074349][T22607] /dev/sg0: Can't lookup blockdev [ 1206.189648][T18746] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1206.359662][T18746] usb 5-1: Using ep0 maxpacket: 8 [ 1206.366631][T18746] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1206.375681][T18746] usb 5-1: config 129 has an invalid interface number: 199 but max is 0 [ 1206.384256][T18746] usb 5-1: config 129 has no interface number 0 [ 1206.390728][T18746] usb 5-1: too many endpoints for config 129 interface 199 altsetting 2: 35, using maximum allowed: 30 [ 1206.402475][T18746] usb 5-1: config 129 interface 199 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 35 [ 1206.416004][T18746] usb 5-1: config 129 interface 199 has no altsetting 0 [ 1206.425157][T18746] usb 5-1: New USB device found, idVendor=2013, idProduct=0262, bcdDevice=5b.8b [ 1206.434317][T18746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.442574][T18746] usb 5-1: Product: syz [ 1206.446776][T18746] usb 5-1: Manufacturer: syz [ 1206.451557][T18746] usb 5-1: SerialNumber: syz [ 1206.661081][T22600] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 1206.668274][T22600] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1206.675262][T22600] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1206.681848][T22600] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 1206.688338][T22600] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1206.695021][T22600] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 1206.703051][T22600] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1206.709814][T22600] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 1206.713383][T22611] /dev/rnullb0: Can't open blockdev [ 1206.716608][T22600] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1206.728689][T22600] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 1206.735993][T22600] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1206.742848][T22600] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1206.765852][T18746] usb 5-1: USB disconnect, device number 27