last executing test programs: 21m27.934336516s ago: executing program 3 (id=450): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000140)=""/159) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) setresuid(r1, r1, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x7, @private0, 0x1}]}, &(0x7f0000000440)=0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xf0}, 0x1, 0x0, 0x0, 0x48000}, 0x20040080) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={r4, 0xb7, 0x2}, &(0x7f0000000740)=0x8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x4e23}, {@in=@broadcast, 0x0, 0x32}, @in6=@loopback, {}, {0x3}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4543(rfc4106(gcm(aes)))\x00'}, 0x0, 0xc0}}, @tfcpad={0x8, 0x16, 0x913}]}, 0x144}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x89fd, &(0x7f0000000000)={'bond0\x00', @random="013701369eff"}) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x29, 0x6, 0x6, 0x2, 0x50, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x2c}, 0x10, 0x8000, 0x3, 0x8}}) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@local, @in6=@private1, 0x4e20, 0x8, 0x4e20, 0x4, 0xa, 0x20, 0xa0, 0x0, r8, r1}, {0xe8, 0x4, 0xb, 0x7, 0x7fffffffffffffff, 0x3, 0x5, 0xffffffffffffffff}, {0x6, 0x2, 0x0, 0x1000}, 0x6, 0x0, 0x1, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x3c}, 0xa, @in6=@private0, 0x3501, 0x3, 0x2, 0x3, 0x9, 0x1}}, 0xe8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000140)=""/159) (async) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) (async) setresuid(r1, r1, 0x0) (async) syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r3, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x7, @private0, 0x1}]}, &(0x7f0000000440)=0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xf0}, 0x1, 0x0, 0x0, 0x48000}, 0x20040080) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={r4, 0xb7, 0x2}, &(0x7f0000000740)=0x8) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x4e23}, {@in=@broadcast, 0x0, 0x32}, @in6=@loopback, {}, {0x3}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4543(rfc4106(gcm(aes)))\x00'}, 0x0, 0xc0}}, @tfcpad={0x8, 0x16, 0x913}]}, 0x144}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x89fd, &(0x7f0000000000)={'bond0\x00', @random="013701369eff"}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x29, 0x6, 0x6, 0x2, 0x50, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x2c}, 0x10, 0x8000, 0x3, 0x8}}) (async) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@local, @in6=@private1, 0x4e20, 0x8, 0x4e20, 0x4, 0xa, 0x20, 0xa0, 0x0, r8, r1}, {0xe8, 0x4, 0xb, 0x7, 0x7fffffffffffffff, 0x3, 0x5, 0xffffffffffffffff}, {0x6, 0x2, 0x0, 0x1000}, 0x6, 0x0, 0x1, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x3c}, 0xa, @in6=@private0, 0x3501, 0x3, 0x2, 0x3, 0x9, 0x1}}, 0xe8) (async) 21m27.840655368s ago: executing program 3 (id=452): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x8b, 0x22080) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000180)={0x3}) syz_usb_connect$uac2(0x5, 0xab, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x582, 0x89, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x3, 0x0, 0x7, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xe, 0xa, 0x29, 0x3}, [@source_unit={0x8, 0x24, 0xa, 0x6, 0x4, 0x6, 0x8, 0x3}, @output_terminal={0xc, 0x24, 0x3, 0x5, 0x1ff, 0x95, 0x1, 0x1, 0x2, 0x3}, @output_terminal={0xc, 0x24, 0x3, 0x6, 0x303, 0x24, 0x6, 0x8, 0x5, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x6, 0xa, 0x0, 0x0, 0x7, 0x6, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x6, 0x7f, {0x8, 0x25, 0x1, 0x3, 0x33, 0x9, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xd, 0x0, 0x8c, {0x8, 0x25, 0x1, 0x2, 0x0, 0x3, 0x3}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000001500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001240)={0x278, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x10}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8f03}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb63d}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @local, 0xc}}}}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xb0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff6}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "403cc20df6d3c31a19b7c4e794ff22d63485c8d5ba8e456a0f37f33e"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x46}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1c8}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3c}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1b0}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x24040010}, 0x4000840) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$VHOST_VDPA_SET_CONFIG(r5, 0x4008af74, &(0x7f00000001c0)={0x3, 0x1000, "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"}) 21m26.387055843s ago: executing program 3 (id=458): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000004000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0xee00, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x88880, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, 0x0) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000040)) 21m24.31381783s ago: executing program 3 (id=466): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) (async, rerun: 32) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x20, 0xe2, 0x45, 0x8, 0xa2b1, 0x5cf7, 0xf4a9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x56, 0xb, 0x60, 0x1, "", [{{0x9, 0x4, 0x30, 0x80, 0x0, 0x2, 0x2, 0x5, 0x4}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) (async) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c8001a00160001000240040002000500030004001c4d6ac1a5f874cbfee3"], 0x1f) 21m24.172234233s ago: executing program 3 (id=467): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x42001) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000280)=[r6, r5, r6], 0x3, 0x800}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001980)={'wlan0\x00', 0x0}) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x250303, 0x0) ioctl$XFS_IOC_GETBMAPX(r9, 0xc0205838, &(0x7f00000003c0)={0x1, 0x6, 0x401, 0x8, 0x1}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r7, @ANYBLOB="010028bd7400fddbdf258800000008000300", @ANYRES32=r8, @ANYBLOB="9800330094000700ffffffffffffffffffffffff0110370052cb8d0b628766b28c4e7a2e5cf916731378dbf0f86a180a990718c238c5f93a177065815541c85e1e6dfdfa29404476662ec3662006709337395ba5b02500d1818e2226aa0c05eddb1b3b82e4be3ba49a31ef11e89e2baddb7fb2245c52b84882f0199382788783edf8643762703748ef372d772601e3d8a5431fdf234b29cc0a000600ffffffffffff0000"], 0xc0}, 0x1, 0x0, 0x0, 0x4c800}, 0x40) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r12, &(0x7f0000000180)="10030600e0ff020004004788aa96a13b", 0x10, 0x0, &(0x7f0000000240)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x14) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r14, @ANYBLOB="010b74fc00000000000000000e000000"], 0x14}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @loopback, 0x7ffff, 0x6, 0x0, 0x0, 0x6, 0x40000010}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendto$packet(r10, &(0x7f00000002c0)="12042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r15, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000680)={0x8, {"bcab78ef46fd470debffc2cb2ddd7226", "2cb5d354ed78a67f4e81e3610383649b", "104a066b033d3a12c9153201568ee73f"}, 0x0, 0x6}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) 21m23.882544312s ago: executing program 3 (id=470): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000380)={0x0, {0x1, 0x0, 0x5, 0x4, 0x3, 0x80000001}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) close_range(r0, r1, 0x2) write$input_event(r0, &(0x7f0000000140)={{}, 0x2, 0xf, 0x5}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01134f9b3a000000fc006700000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800c300741300000800c4"], 0x3c}}, 0x40000) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r2, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20004845) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x9, 0x0, 0x6}, 0x37b4, [0xfebf, 0x4, 0x9, 0x0, 0xa4, 0x20000, 0x0, 0xfffffffd, 0x0, 0x1, 0x10001, 0x8, 0x3, 0x5, 0x1ff, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x10000000, 0xbffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x1, 0x0, 0x9, 0x3, 0xffffffff, 0x0, 0x4, 0x80, 0x20, 0x6, 0x3a3, 0x0, 0x0, 0x0, 0x8, 0x9, 0xfffffffd, 0x0, 0x7, 0x200, 0x7, 0x2, 0x6, 0x0, 0x2000002, 0x20004, 0x0, 0x0, 0x105, 0x0, 0x20800000], [0x11, 0xffff0003, 0x7, 0x0, 0xffffffff, 0x9, 0xad9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f3, 0x0, 0x4, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x218001, 0xfffffffe, 0x6, 0x100, 0x40, 0x10000, 0xec6a, 0xca86, 0x40000000, 0xffffffff, 0xffffffff, 0x8, 0xfffffffd, 0x7fffffff, 0xfffffffc, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x4, 0x18c, 0x0, 0xffffffff, 0x4000802, 0x5, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x4, 0x9dd, 0x80, 0x8000, 0x40000004, 0x6, 0x3, 0x8000008f, 0x7], [0xf, 0x4, 0x0, 0x0, 0xffffffff, 0x3, 0xa000000, 0x0, 0xfff, 0xffff7fff, 0xfffffffd, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x401, 0x0, 0x2, 0x420, 0xc, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffc, 0x7, 0xfffffffc, 0x2af, 0x5, 0x9, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x8, 0x401, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0x3, 0x2, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x3ff, 0x400000, 0x81, 0x6, 0x0, 0x0, 0x1, 0xd, 0xffffffdb], [0x2, 0x0, 0x4, 0x6, 0x0, 0x401, 0x1000, 0x215, 0x4, 0x7ff, 0x100, 0x3, 0xa, 0xf862, 0x80, 0x0, 0x3, 0x0, 0x7d, 0x5, 0x7ffd, 0x9, 0x4, 0x72, 0x0, 0xfffffffe, 0x0, 0x8, 0x5d66, 0x1, 0x800000, 0x9, 0x3, 0x0, 0x0, 0x6, 0xbfb6, 0x2, 0x8, 0x3, 0x0, 0xfffffffd, 0x1, 0xffffffff, 0x100, 0x40074, 0x6, 0x0, 0xfffffffd, 0x53591a27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x7, 0x9, 0x20000, 0x0, 0x80000000, 0x1000000, 0x80000000, 0x5, 0x400]}, 0x45c) 21m23.717103776s ago: executing program 32 (id=470): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000380)={0x0, {0x1, 0x0, 0x5, 0x4, 0x3, 0x80000001}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) close_range(r0, r1, 0x2) write$input_event(r0, &(0x7f0000000140)={{}, 0x2, 0xf, 0x5}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01134f9b3a000000fc006700000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800c300741300000800c4"], 0x3c}}, 0x40000) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r2, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20004845) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x9, 0x0, 0x6}, 0x37b4, [0xfebf, 0x4, 0x9, 0x0, 0xa4, 0x20000, 0x0, 0xfffffffd, 0x0, 0x1, 0x10001, 0x8, 0x3, 0x5, 0x1ff, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x10000000, 0xbffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x1, 0x0, 0x9, 0x3, 0xffffffff, 0x0, 0x4, 0x80, 0x20, 0x6, 0x3a3, 0x0, 0x0, 0x0, 0x8, 0x9, 0xfffffffd, 0x0, 0x7, 0x200, 0x7, 0x2, 0x6, 0x0, 0x2000002, 0x20004, 0x0, 0x0, 0x105, 0x0, 0x20800000], [0x11, 0xffff0003, 0x7, 0x0, 0xffffffff, 0x9, 0xad9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f3, 0x0, 0x4, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x218001, 0xfffffffe, 0x6, 0x100, 0x40, 0x10000, 0xec6a, 0xca86, 0x40000000, 0xffffffff, 0xffffffff, 0x8, 0xfffffffd, 0x7fffffff, 0xfffffffc, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x4, 0x18c, 0x0, 0xffffffff, 0x4000802, 0x5, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x4, 0x9dd, 0x80, 0x8000, 0x40000004, 0x6, 0x3, 0x8000008f, 0x7], [0xf, 0x4, 0x0, 0x0, 0xffffffff, 0x3, 0xa000000, 0x0, 0xfff, 0xffff7fff, 0xfffffffd, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x401, 0x0, 0x2, 0x420, 0xc, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffc, 0x7, 0xfffffffc, 0x2af, 0x5, 0x9, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x8, 0x401, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0x3, 0x2, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x3ff, 0x400000, 0x81, 0x6, 0x0, 0x0, 0x1, 0xd, 0xffffffdb], [0x2, 0x0, 0x4, 0x6, 0x0, 0x401, 0x1000, 0x215, 0x4, 0x7ff, 0x100, 0x3, 0xa, 0xf862, 0x80, 0x0, 0x3, 0x0, 0x7d, 0x5, 0x7ffd, 0x9, 0x4, 0x72, 0x0, 0xfffffffe, 0x0, 0x8, 0x5d66, 0x1, 0x800000, 0x9, 0x3, 0x0, 0x0, 0x6, 0xbfb6, 0x2, 0x8, 0x3, 0x0, 0xfffffffd, 0x1, 0xffffffff, 0x100, 0x40074, 0x6, 0x0, 0xfffffffd, 0x53591a27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x7, 0x9, 0x20000, 0x0, 0x80000000, 0x1000000, 0x80000000, 0x5, 0x400]}, 0x45c) 17m16.697472696s ago: executing program 0 (id=1969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000800) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0xfffffe4f}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) 17m16.611224624s ago: executing program 0 (id=1970): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xce) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd2b}, 0x14}}, 0xc045) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000100)=""/251) 17m16.610719481s ago: executing program 0 (id=1971): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x34}, 0x1, 0x40030000000000}, 0x0) 17m16.565384155s ago: executing program 0 (id=1973): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xf, 0x408001) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/42) 17m15.268775625s ago: executing program 0 (id=1981): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x34}, 0x1, 0x40030000000000}, 0x0) 17m14.067323535s ago: executing program 0 (id=1985): r0 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^\x84{\x00\x02\xb9~B\x9f\xacl\x1d3\xa6\xab\x81\x9d\x13\x89\x9b\x00\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\7\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~\x03\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000080)={0x40000000000000c0}) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220"], 0xd8) syz_80211_inject_frame(&(0x7f00000003c0)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x9}, @device_a, @device_b, @from_mac=@broadcast, {0x0, 0xf01}, @value=@ver_80211n={0x0, 0x9, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, @addba_req={0x3, 0x0, {0x0, {0x0, 0x0, 0xa, 0x5}, 0x400, {0x3, 0xf97}}}}, 0x25) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 17m13.867690601s ago: executing program 33 (id=1985): r0 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^\x84{\x00\x02\xb9~B\x9f\xacl\x1d3\xa6\xab\x81\x9d\x13\x89\x9b\x00\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\7\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~\x03\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000080)={0x40000000000000c0}) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220"], 0xd8) syz_80211_inject_frame(&(0x7f00000003c0)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x9}, @device_a, @device_b, @from_mac=@broadcast, {0x0, 0xf01}, @value=@ver_80211n={0x0, 0x9, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, @addba_req={0x3, 0x0, {0x0, {0x0, 0x0, 0xa, 0x5}, 0x400, {0x3, 0xf97}}}}, 0x25) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 10m8.518456906s ago: executing program 4 (id=4080): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}}, 0x40004) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x3d) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) readahead(0xffffffffffffffff, 0xf, 0x3) (async) close(0x3) (async) pipe2$9p(0x0, 0x0) syz_usb_connect$uac2(0x3, 0x82, &(0x7f0000005480)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x154e, 0x500e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x0, 0x1f0, 0x9, {0x8, 0xb, 0x1, 0x1, 0x1, 0xff, 0x20, 0xc0}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1ff, 0xff, 0x10}, [@multiply_unit={0x7, 0x24, 0xc, 0x0, 0xc, 0x14, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x2, 0x5, {0x8, 0x25, 0x1, 0x83, 0x18, 0xe2, 0xe3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0xfd, 0xea, {0x8, 0x25, 0x1, 0x0, 0x3f, 0x2, 0x9}}}}}}}}]}}, 0x0) 10m7.24794535s ago: executing program 4 (id=4088): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x80000001, 0x0, 0x0, 0x10000004, {0x40, 0xd08, 0x0, 0xfe, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x80480911, 0x200000000005) 10m7.06972981s ago: executing program 4 (id=4089): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)=0x4) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r2, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000764000/0x4000)=nil, 0x3000, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) chdir(&(0x7f0000000140)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x0, 0x1, 0x9f1, 0x7aa, 0x3, 0xb, 0x100, 0xfffffffffffffffc, 0xd}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r6, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xac, 0x7c}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x400c000) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x20) 10m6.879339118s ago: executing program 4 (id=4090): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4002, 0x18a) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x12a) utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x6, 0x4}) r1 = socket$unix(0x1, 0x2, 0x0) getpeername$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) timer_create(0x5, &(0x7f0000000240)={0x0, 0xe, 0x6, @thr={&(0x7f00000001c0)="ef060bd29a", &(0x7f0000000200)="0c8b20fe1010427aa1014f53ab4c334ab53ab80338d53621d8a818c210241561d89ad59f276a30"}}, &(0x7f0000000280)=0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000300)={{r3, r4+60000000}}, &(0x7f0000000340)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) sendmsg$can_bcm(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x1d, r5}, 0x10, &(0x7f00000004c0)={&(0x7f0000000440)={0x4, 0x82, 0x100, {0x77359400}, {0x77359400}, {0x4, 0x1, 0x1, 0x1}, 0x1, @can={{0x3, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "4ca60f0ae73eacbd"}}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x141100, 0x0, 0x20}, 0x18) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) ioctl$KVM_TDX_CAPABILITIES(r7, 0xc008aeba, &(0x7f0000000e80)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x4, 0x0, [{}, {}, {}, {}]}}}) statx(r0, &(0x7f0000000ec0)='./file0\x00', 0x0, 0x7ff, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) setresuid(r8, r9, r11) getsockopt$IPT_SO_GET_ENTRIES(r10, 0x0, 0x41, &(0x7f0000001100)={'mangle\x00', 0xba, "c7b7994335073ff9f3335b8a34f69862ec483eb7e42e3ccab0de864ed30adfbefa1315aa0c14dfc87c456371a639a04ccc263abfbbea6539cb17c85ae43b383e189e6c32d063bec2f98ba20dcbd2c2a1af51ba0644f9192ce7c5f37692f93b0e114b7764a6ab8c308e9027fd00843dc048496829b89da07a363d95a14775768ab9af236f0ffe4d1fdc5ce36b95527091dc8ff631c0b1c685ad0cd7d905cd522842db19e17d560c060431ecfb27ee71276b9539a08d92b91328db"}, &(0x7f0000001200)=0xde) open(&(0x7f0000001240)='./file0\x00', 0xc000, 0x100) socket$inet_udp(0x2, 0x2, 0x0) chmod(&(0x7f0000001280)='./file0\x00', 0x0) pipe(&(0x7f00000012c0)={0xffffffffffffffff}) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001340)={0x8, &(0x7f0000001300)=[{0x1, 0x7, 0xf, 0x5}, {0x40, 0xfc, 0x1, 0x7f1d7151}, {0x2, 0x8, 0x1, 0x4}, {0x7, 0x7, 0x2, 0x5}, {0xda6f, 0x7, 0x5, 0x8}, {0x1800, 0xc0, 0x80, 0x62}, {0x1000, 0x3, 0x0, 0x9d1}, {0x7, 0x8, 0xff, 0x1}]}) r14 = getpgrp(0x0) sched_rr_get_interval(r14, &(0x7f0000001380)) ioctl$TUNSETVNETLE(r12, 0x400454dc, &(0x7f00000013c0)=0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000001400)={0x0, 0xffffffff, 0x1, [0x1, 0x400, 0xc80, 0x6, 0x7ff], [0x10, 0x9d, 0x100, 0x3ff, 0x2, 0x200, 0x2, 0x3, 0x8, 0x3, 0x2, 0x7, 0x5, 0x42ba3cef, 0x2, 0x0, 0xffffffff, 0x100000, 0x1, 0x4, 0x1, 0xff, 0xae, 0x10, 0x800, 0x8, 0x200000, 0xfffffffffffffff9, 0x431, 0x7ff, 0x100, 0x3ff, 0x6, 0x80, 0x100000000, 0x20000000000, 0xa64, 0x0, 0x6, 0x8, 0x3, 0xffffffff, 0x0, 0x9, 0x8, 0x7fff, 0x0, 0x8, 0x1, 0xffffffffffffffff, 0x20000, 0x9, 0x2, 0xb3b, 0x7fff, 0x1, 0x966f, 0xf0a, 0x3795, 0x800, 0xc52, 0xffffffffffffffff, 0x6, 0x4, 0x3ff, 0x5, 0x5b6c, 0x7, 0x2a0f, 0x7, 0x3c1b, 0x8, 0x0, 0x8, 0x10000, 0x7fffffffffffffff, 0x7, 0xd, 0x2, 0x1, 0x1, 0x0, 0x8000000000000000, 0x90, 0x0, 0x8, 0x200, 0x3, 0x6, 0x57, 0x4e, 0x3, 0x8, 0x7d, 0xf8, 0x8, 0x3, 0x4, 0x1000, 0x4442, 0xb, 0x0, 0x4, 0x4, 0x7ff, 0xbac, 0x0, 0x6, 0x7, 0xffffffffffffffff, 0x3, 0x2, 0x5, 0x6, 0x3000000000000, 0x40, 0x5, 0x4, 0x8, 0x4, 0x2]}) write$sndseq(r12, &(0x7f0000001940)=[{0x8, 0x1, 0xb5, 0x2, @tick, {0x9c, 0x6}, {0x4, 0x2}, @ext={0x82, &(0x7f0000001840)="0377a07c44e48a6085f3cf89f15c9d66870cb6036a857ed194074129a70010e6af4038f37011d4f994b61841221c39793b9baf05009b528f80ab6fb54a776dffbcb5bd692c2269005ecee02b7bcf701d58f473a8c4d8dbd216da32339f2a0e0f59398c5cf0dd368596e16a8d3ab86bd5abca08049a99d53e4f5bdca7656334f604ee"}}, {0xa, 0xc9, 0x5, 0xac, @tick=0x3, {0xf, 0x40}, {0x5, 0x12}, @control={0x5, 0x0, 0xfc84}}, {0x2, 0x1f, 0x4, 0x4, @time={0x5, 0x7}, {0x9, 0x1}, {0x7, 0xfd}, @control={0x7, 0xfffffffc, 0x6}}, {0x29, 0x4, 0x6, 0xd, @tick=0x10000, {0x49, 0x98}, {0x6, 0x5}, @raw8={"e73fdb1b1b9d588b2e0db2bc"}}, {0x5, 0xd, 0x1, 0x7, @time={0x85c, 0xe1}, {0x2, 0x6}, {0x1e, 0x4}, @quote={{0xc, 0x2}, 0x80, &(0x7f0000001900)={0x7c, 0x8a, 0x3, 0x3, @tick=0x3ff, {0x8, 0x8}, {0x6, 0xff}, @addr={0x8, 0xff}}}}, {0x56, 0x3, 0x9, 0xac, @tick=0x3, {0x1, 0x72}, {0x2, 0x7}, @addr={0x3, 0x4}}, {0x6, 0x4, 0x2, 0x9, @tick=0x2000, {0x6, 0x81}, {0x9, 0x9}, @raw32={[0xffffffff, 0x5, 0x5]}}], 0xc4) landlock_create_ruleset(&(0x7f0000001a40)={0x200, 0x1, 0x1}, 0x18, 0x0) shutdown(r13, 0x1) 10m6.686551307s ago: executing program 4 (id=4091): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x9, 0x4d032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) write$UHID_INPUT(r0, &(0x7f0000000000)={0x8, {"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", 0x1000}}, 0x1006) 10m6.495328123s ago: executing program 4 (id=4095): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x20000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r2, 0xfffff000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x1a}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 9m51.48866608s ago: executing program 34 (id=4095): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x20000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r2, 0xfffff000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x1a}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 6m58.997814429s ago: executing program 1 (id=5020): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x2, 0x3}, 0x18, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, 0x0) (async) landlock_restrict_self(r0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x20202, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x2cca00) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x1, 0xfffffffc}]}) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f0000000780)={0x0, 0x1, 0x7, 0x0, 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETLINK(r5, 0x400454cd, 0x300) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@multicast2, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x14, 0x1000003, 0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x5680000000, 0x3}, {0x10, 0x8001, 0x2}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x4e20, 0x4e24, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}, 0x154}}, 0x0) (async) ioctl$UI_SET_EVBIT(r2, 0x80811501, 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="020000010000000000000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000090000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000feffffff00000000000000000000000044010500e0000002000000000000000000000000000004"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async) r8 = socket(0x27, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r7, @ANYBLOB="ccc18979b48c24f84fa439dcab99ba23567db6798a15da58efa2435db6304797685f3a934d54fa9e56fbb7f23e10c8153125b649"], 0xfc}}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r12, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r13, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async) ioctl$XFS_IOC_EXCHANGE_RANGE(r6, 0x40285881, &(0x7f0000000100)={r5, 0x0, 0x58e, 0xa, 0x3, 0x2}) 6m58.779366997s ago: executing program 1 (id=5023): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000900)="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", 0x732, 0x8040, 0x0, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927f, 0x1e9) syz_clone3(&(0x7f0000000540)={0x200103000, &(0x7f0000000140), 0x0, 0x0, {0x31}, 0x0, 0x700, 0x0, 0x0, 0x0, {r0}}, 0x58) syz_clone(0x900a000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m57.556427867s ago: executing program 1 (id=5032): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') read$FUSE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)=0x80) ioctl$XFS_IOC_INUMBERS(r2, 0x80405880, &(0x7f0000000100)={{0x659f, 0x3, 0x4f, 0x7, 0x5}, [{0x6, 0x1, 0x0, 0x4}]}) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f00000002c0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c720000000200000000000002000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) 6m57.494056483s ago: executing program 1 (id=5025): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) 6m57.398402116s ago: executing program 1 (id=5026): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x80000001, 0x0, 0x0, 0x10000004, {0x40, 0xd08, 0x0, 0xfe, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0xfffffffd, 0x0, 0x0, 0x2, 0xfffefffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x80480911, 0x200000000005) 6m57.230851659s ago: executing program 1 (id=5027): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x346e, 0x40000060, 0x40, 0x15, "9f940b3491d052d172e0e573229ac6de50806c"}) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}]}}) 6m41.205635313s ago: executing program 35 (id=5027): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x346e, 0x40000060, 0x40, 0x15, "9f940b3491d052d172e0e573229ac6de50806c"}) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}]}}) 5.639402876s ago: executing program 7 (id=7129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x20, 0x1, 0x7, 0x9, 0x3, 0x1}) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x1fd) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x1c, 0x40, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@generic="4800acd75d"]}, 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r4, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x40, @link='syz0\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f00000000c0)={0xa}, 0x1) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.483100569s ago: executing program 2 (id=7133): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0xe82) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x280}) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async, rerun: 64) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f00000000c0)={0x18, &(0x7f0000000400)=[{0x11, '\x00', @data=0x1, 0x3}]}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xa}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c004}, 0x40004) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x58, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3b}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9437}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x6}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1ff}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="8c67d40a8d72"}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4040) (async, rerun: 64) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x101200, 0x0) (rerun: 64) readv(r4, &(0x7f0000001f40)=[{&(0x7f00000018c0)=""/211, 0xd3}, {0x0}], 0x2) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="2800c3dc", @ANYRESDEC=r2, @ANYBLOB="01000000000000fdff000200000008330300", @ANYRES32=r3, @ANYBLOB="7c09271d066fe1028795bc11add2cf4ceb8b7daef49e3e3a2ae7b819ce1eb2b9b306e6ebfbd126d76ee0dc9312191f6764cfef1b2ce5572ceef5f8ad979be59ed7315d06a504080d288da69e345d67d98445972e69cf9bb9cd9dd151a6cb9008d842071ec72d47e21e82aa1e7965b4e4fafd825b40929a95ce16de9278d123251f445ae80505c14baa088ccf7b10ddb15af03bd91907d9d1ba7daa1f6ef56e891cc9b926bf631930970fe06e6f3bcee470ac8d1248b29c30056f50c74babe6d340c8c19d615cf5b52b90f34f43f2bf807b95e2dfa6c4639f5db48ecc74a21d2aee26889bec1496c7dc0d63c782f99ddea9"], 0x28}}, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x2, 0x3) 5.425307052s ago: executing program 2 (id=7134): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x6ac1c2, 0x0) write$dsp(r0, &(0x7f00000001c0)='B', 0x1) close(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_connect$uac3(0x3, 0x117, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x8ae, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x105, 0x3, 0x1, 0x10, 0x30, 0x5, {0x8, 0xb, 0x2, 0x1, 0x1, 0x23, 0x30, 0xf0}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x44, 0x9}, [@processing_unit={0x9, 0x24, 0x9, 0x5, 0x4, [0x0]}, @extension_unit={0x19, 0x24, 0xa, 0x3, 0x1, [0x2, 0x1, 0x0, 0x0, 0x0]}, @selector_unit={0x7, 0x24, 0xc, 0x5, 0x2, "02a2"}, @mixer_unit={0xb, 0x24, 0x5, 0x4, 0x6, "3419a47cdb87"}, @selector_unit={0x6, 0x24, 0xc, 0x2, 0x1, "82"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x821, 0x3, 0x5}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x4}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x4, 0x5, 0x61, "ad", 'u\f'}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0x5, 0x7, {0xa, 0x25, 0x25, 0x2c0, 0x1, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9c, 0x1, 0x1, 0x1e, "5e0f33"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x40, 0x2, 0x2, 0x1}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x101, 0x3, 0x18, "80"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xa, 0x1, 0x1, 0x1, "65424d23519875e41b"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7, 0x80a6, 0x7, "7892d7fc179dc31f0a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xf7, 0xb, 0x8, {0xa, 0x25, 0x25, 0x2, 0x86, 0x4}}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x240, 0x7, 0xd5, 0x75, 0x8, 0x8}, 0x20, &(0x7f00000004c0)=ANY=[@ANYBLOB="050f202765ddc69b6e1d000214100406000000c56ac9f8478a4b8f2c7f1c6f12071002084f6014e2063f370c6a14a0a8139ea31ab46dcd68e524fd445968ca9f904f7804c77926a6987e4cd84cbf626c62343dd3ee0726b61903921a5924e1bac6da38fcb531c1a3"], 0x4, [{0xc8, &(0x7f0000000940)=ANY=[@ANYBLOB="c803c5dd4fa85f523053801f1dfe0d5aff12c2ab2ce895f3b454826aee5d33e26430a882266cf17b2a446304db96b16892cd115ab45c619246ec9dbcda20d5114c713ce7441ec7f6a8edbbc91f8f6852e61c7f8f1e143fff9d57fda044201f3b959df38828576b4c54adead37f052f7665c19d690b76d80939da6c7612c266ef877c7f01c3c0c0b65f4a5edf9bcca2161cf1dc2bb9b2d0e4ea2557daca2ee3f0befeda76b722a2d543f8c6f11b87f6f7846b7e6944a52544e7a14e24fbb8a0bbea3021ae4702c9d605ebf9c8df45fb4fb5aaacd74b84ac55bb923fe31ff62dd93d376028"]}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x44e}}, {0x6e, &(0x7f0000000240)=@string={0x6e, 0x3, "5e262f7967b6030ada2c17ba1ce1bc9efa66c2171b8f33dad4a8a1ba2d273ef38dc06772b8d126c4854f35aeedb7d3cd88bde69a1cdd7d443b1017122441a82ac9e584524fb21697bd5dca2c927b6ad5e29d5fe66be025afc23451a7b00217f710dde093b55ce1d72b4cfcaa"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000780)={0x14, &(0x7f0000000640)={0x40, 0xa, 0xbc, {0xbc, 0xb, "45de19c667b567c146e1aa8b276be441077c4956f5e5d348d52d041d8ee0c39b35ad3f0f63b53b917b359f5fcae9cece2037896371ec5a1c6be67a366fea3b2ce2fe51260d0dc49b6eede74e1959b8bdfc88253ac29510ac760a8bc06a2f66df40177544d7635106231b02ff6e4bad770df9ddcd1e652f0e98be17ef4b874ddcaa7bf890915c6b0f69b73f2ace630b486e5fb0282db0c99b4c66582df52bb5dc4250c1ba2c7bf0ca5ef1b51d63e08e90ed81652226543ad2cb57"}}, &(0x7f0000000740)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x1c, &(0x7f00000007c0)={0x40, 0x7, 0xa9, "7b19320d6586fb9d9d0c14e5a3212a1a3f3bb7599c15176dbabb5f1d45c310269200bd21bbee0d27376a1cfc98ed3ffe9a190f23d78625c22034c062abe11f8f69fbc645f4156d7594ad3000e2e64485d585e147e3250c286227b7def4e96efba0417a58ca78b342a06424a5d0001f4607543fd83a365fe091862611e0f0ee1edc2c9cda81cdcad7f885146e17ea397e4e3ed13a2348051ea821dfff05f079016a74e501778cd23c22"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x2}}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, 0x0, &(0x7f0000000040)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x0, 0x82, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x87) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000002040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="034886dd120003000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r8 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 4.646688546s ago: executing program 7 (id=7137): r0 = socket(0x10, 0x803, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) r4 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x41, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0xa, 0x4}, 0xc) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r2, 0x4068aea3, &(0x7f0000000000)={0xce, 0x0, r3}) sendto(r0, &(0x7f0000000740)="120000001100e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 4.430795427s ago: executing program 7 (id=7138): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000fedbdf252100000008300300", @ANYRES32=r2, @ANYBLOB="34002d80000002020202020200000a000000020202020202000094ff000000"], 0x50}}, 0x4008000) 4.371494475s ago: executing program 7 (id=7139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a6ddf0000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038480000000c0a01010000000000000000070000000900020073797a31000000080900010073797a30000000001c00038018000080040002800900090073797a300000000004000180"], 0xdc}}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001100e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x70, 0x2, 0x2, 0x97e2350db9d8581b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x9146df58b9a64c18}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}]}, 0x70}}, 0x8840) r3 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r1, 0x36) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xffffffffffffffff) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000000a06ef69b8c5a050b1d219bb0adbc501088e82000009"], 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_int(r4, 0x11e, 0x1, 0x0, 0x0) syz_usb_connect(0x6, 0x409, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x6b, 0xa7, 0x74, 0x10, 0x2040, 0xb138, 0x8bd8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f7, 0x1, 0x0, 0x5, 0x10, 0x9, "", [{{0x9, 0x4, 0xe6, 0xf9, 0xd, 0x86, 0xde, 0xb6, 0x9, [], [{{0x9, 0x5, 0xc, 0x0, 0x0, 0x6, 0x9, 0x6}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x7, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0x8}]}}, {{0x9, 0x5, 0x7, 0x12, 0x40, 0xf, 0xff, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x96, 0xfffe}]}}, {{0x9, 0x5, 0xe, 0x1, 0x0, 0x4, 0x40, 0x4}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x6, 0x0, 0xff}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0x7, 0x3, 0x1, [@generic={0x91, 0x23, "88be2ea36037c5a499e440511c3eb2785371ae6472b7cfe9fad88fe2e3f1a94b54f01b4bc01f399c5530cbf3f57e5410857d3334e33fc7ba77de39fb985f6b5b0d14f38af175883c46ac754abfa3861ae466d9f58b7a40dabdb219bd3a5e22dbf55c132b5d1b887c1810ee98fc574bdc1eafe96ac82a8845c1f67023c0fc0e501fdc72858e130b8151550876e3036b"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x19, 0x7fff}]}}, {{0x9, 0x5, 0x7, 0x1, 0x400, 0x5, 0x7, 0x14, [@generic={0xc3, 0x31, "2c61eb2a6831931a2bdbf4ddab5ce51b2076f1bb9f38ebc0922e928cd6c428afdcdc389dd0ee8c82673b81883ca193e76af81ae143d0ffd912812b16ca988d73c27b66f6749516e6934b836cfe1614ad48248bafd3108ed6f8fd8ec1aa7ba542fefe48d841d5d01c3c7b4a0b696a7a8b593d4e64180f109206b9b6f33d1967b4f93944609ee01740f5780264f68f236564e9e07312b3d5789fa7f5a732215544183f8ce45fe01f96ec21226c3bffa38dd2acf1617714da75775d1c785da0c7b3fe"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0xd, 0x2, 0x91, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x1f1}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x7218}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0xd, 0x68, 0x2, [@generic={0x81, 0x22, "8b5184a37a701a8e20dc3483abf04557cc513c09af93af3f97d3f2d56c5b31831bd72ff0daffd674506a5388fad800d64206f0cffd858911bdd8f9c58178012ea353c346cd2d3df67dece188d6244015628ff5079ee043e720bfa3a1545607cb4c8b1d541c6e0545e01c2acfac3af7c42bedb5bdc6c69caf850df6f42695de"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xb, 0x8}]}}, {{0x9, 0x5, 0x2, 0xc, 0x10, 0x80, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xab, 0x4}]}}, {{0x9, 0x5, 0x1, 0x8, 0x3ff, 0x2, 0x7, 0x5}}, {{0x9, 0x5, 0x1, 0x1, 0x200, 0x80, 0x2, 0x80, [@generic={0x5e, 0x24, "906c17b96c29e764e2a3cb2f75c6dd097aaf7e0fed9bdccf8faca0a4f5395eac2526edb009ba6dd961928f9bc695ce2bb2d51e1d3cea01dd81fe6eb3d5cddd819feb0cef747745b1f6c3ba57af0a8d05677c7322aa66dac66b7964ef"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x6}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x1, 0xf3, 0x6f, [@generic={0xfe, 0x11, "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"}, @generic={0x7, 0x22, "247c5b1c45"}]}}]}}]}}]}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="9b931a8e941597407cbddc2a8fb0f48aac61f16eb4854fcbe3f32f7befe9a7657cb102b7404f9f55c000725fd5ad06e836b3cc4f7a5830703b53187ae776e80e96c2981eb4e6299c08537093db3fadd51ff3f2120ce7538d9eb11ad3ce3431ed291686"], 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f00000011c0)={{}, "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"}) 2.756352951s ago: executing program 5 (id=7145): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r1 = accept$netrom(r0, 0x0, &(0x7f0000000000)) connect$netrom(r1, &(0x7f00000001c0)={{0x3, @default, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @default]}, 0x48) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 2.66159s ago: executing program 5 (id=7146): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f00000000c0)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r1, &(0x7f00000002c0)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0xb) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000003c0)=0x1, 0x4) 2.44327094s ago: executing program 6 (id=7148): mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='virtiofs\x00', 0x200000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee8, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000200)={@loopback, @rand_addr=0x64010100, 0x0, "028a3f6c58b274e6d8451697efe428110000f06ed2c6962d101b56fc48fc3c7b", 0xb2, 0xfffffff7, 0x6, 0x6}, 0x3c) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x44000, 0x8a) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x44000, 0x8a) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f00000000c0)='/dev/md0\x00', &(0x7f0000000100)='./cgroup\x00', r1) 2.387574542s ago: executing program 6 (id=7149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x4000) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) unlinkat(0xffffffffffffffff, &(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000240)={0x73}, 0x8) setsockopt$inet6_opts(r1, 0x29, 0x39, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r5, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x58}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xe}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xf3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xeeb6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x94}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x29}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8880) 2.295437348s ago: executing program 6 (id=7150): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f000034b000/0x4000)=nil, 0x4000) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xb, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30044800) sendmsg$sock(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="7a6eca88ca428c8d4f36c8b8fc2047659bdcb41a9ebe5ac0bed120663c7a3c234c937452515eae867806e58adcd922e70fa89f0e436ab6", 0x37}, {&(0x7f0000000100), 0xfffffeda}], 0x2}, 0x4804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(0xffffffffffffffff, &(0x7f0000000400)=""/149, 0x95) 2.072490675s ago: executing program 2 (id=7151): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x3000000, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}, {@xino_on}]}) 1.996994985s ago: executing program 2 (id=7152): socket$l2tp(0x2, 0x2, 0x73) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000380)={0x0}) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000000)=0xffff) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a2010203010902240001000000000904"], 0x0) (async) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a2010203010902240001000000000904"], 0x0) 1.68683681s ago: executing program 5 (id=7153): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="0601", 0x2}, {&(0x7f0000001480)="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", 0xfd}], 0x3) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 1.676421167s ago: executing program 5 (id=7154): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_async', 0x80200, 0x0) read$dsp(r0, &(0x7f0000000000)=""/110, 0x6e) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x20, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x72}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x8004) accept4$llc(r2, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000040)=0xc, 0x4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000500)=0x304000002) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000880)={'veth1_vlan\x00', 0xe7a2}) 1.609320816s ago: executing program 5 (id=7155): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x9, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x9, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0x9, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e4, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x100, 0x50, 0x12, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x8000004, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0xfffffffc, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x26, 0x1, 0x0, "27425b895f17386bcec1d8665c0084feea0be6b8a80052d063e6179d13f019e3"}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x15, 0x5, 0x0) connect$rxrpc(r5, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @mcast1, 0x7}}, 0x24) bind$inet6(r4, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000240)=0x6344, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r6, 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0}]) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) fchdir(r0) creat(&(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) 1.506881751s ago: executing program 5 (id=7156): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@redirect_dir_follow}, {@userxattr}]}) syz_usb_control_io$uac3(r0, 0x0, 0x0) (async) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) (async) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000240)=0x8) read$dsp(r1, &(0x7f0000000300)=""/136, 0x88) (async) read$dsp(r1, &(0x7f0000000300)=""/136, 0x88) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000480)={0x0, 0xf, 0x4, "45e8679e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.291971523s ago: executing program 6 (id=7157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)={0x10, 0x10, 0x1}, 0x10}], 0x1}, 0x20000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x3) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000140)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_config={0x0, 0x1, 0x0, &(0x7f0000000180)=0x6}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffff1e9900000000000081005920000c4ba321390cfe132fe50e000000a0010200009e04c6d4a401f9f1"], 0x22) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000000)) r5 = socket$packet(0x11, 0x3, 0x300) socket$inet_sctp(0x2, 0x1, 0x84) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x9, 0x4a0402) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0], 0x2}) syz_pidfd_open(0x0, 0x0) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') ioctl$VIDIOC_G_PRIORITY(r4, 0x80045643, 0x2) open_by_handle_at(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r5], 0x101c40) 1.128657966s ago: executing program 6 (id=7158): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001"], 0x184}, 0x1, 0x0, 0x0, 0x10000}, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) (async) mount$bpf(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080), 0x80, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x9}}]}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000100)=0x7) (async) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b65740000080002"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000400)={&(0x7f0000000140), 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0xf0, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xd4, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44ab201f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70fff33b}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7178d790}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73c50069}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27d8efa2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f217e56}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x687c6e7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cc55bf0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c905047}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2612b251}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5109aee7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b6583e2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19ee4031}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d82cb33}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x582e8e81}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0xf0}}, 0x20000800) 958.800554ms ago: executing program 7 (id=7159): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x4, 0x2, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0xa}) 903.165714ms ago: executing program 7 (id=7160): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)) (async, rerun: 64) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x18) (async, rerun: 64) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = accept$inet6(r0, 0x0, &(0x7f0000000080)) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000200)={0x37, 0x1f, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x1, 0xff14, [0x9, 0x40000, 0x1]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x30, 0x47, "7bfd96853d1524fb92ca434ec81307781ccf55059f659823b1ac5ce32a04f1a2634d0d4ff1364baf97cf173cbb5bb46c5d5eeaaffa081a57f24da2f18404890511087d8e68a9d2"}, @enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0xcff}, @generic={0x80, 0x69, "e17d096a0753fa86fef2e5c59a045c06b8a87344db2fc986b6c294fcd9b7ceb26b3132590e540e962cf264d9ef183a48c315115284b48f68ca72ecd5973979f71ac2058674a3b6c4018614a6e134fbf1026265a670290bc8ccbe88e7a2c88536f9d6bae76884aa1f8b"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0x5}]}, 0x108) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r5) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'dh\x00', 0x5, 0x8, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0xf6c12eb8213c0b07, 0xcd, 0x1}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async, rerun: 32) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x3) (async, rerun: 32) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0x13c}, 0x1, 0x0, 0x0, 0x20000002}, 0x24044080) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r8, &(0x7f0000000a80), 0x0, 0x4c040) 557.101131ms ago: executing program 2 (id=7162): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="0601", 0x2}, {&(0x7f0000001480)="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", 0xfd}], 0x3) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 85.409803ms ago: executing program 2 (id=7163): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856afe13be00", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x40004, 0x1}) close(0x3) r1 = syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0xe82) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000000)={0x2e, &(0x7f0000000180)=[{0x9, '\x00', @st={0x4, [{0x0, @svalue=0x2}, {0x2, @svalue=0x7fff}, {}, {0x2, @svalue=0x8}]}, 0x9}]}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000140), &(0x7f00000001c0)=0x4) syz_usb_connect(0x2, 0x5b, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0x6b, 0x46, 0xae, 0x10, 0x1c4f, 0x3000, 0xc75c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x0, 0x81, 0x20, 0x8, "", [{{0x9, 0x4, 0xee, 0x6, 0x0, 0xe, 0x1, 0x0, 0xb9, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x37}, [@mixer_unit={0x8, 0x24, 0x4, 0x1, 0x8, 'D\a-'}, @feature_unit={0x11, 0x24, 0x6, 0x1, 0x4, 0x5, [0x1, 0x6, 0x6, 0x8, 0x3], 0xed}, @processing_unit={0xb, 0x24, 0x7, 0x1, 0x5, 0x6, "3cceb712"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x301, 0x4, 0x5, 0x7}]}]}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x5, &(0x7f0000000380)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x140a}}, {0x7d, &(0x7f0000000240)=@string={0x7d, 0x3, "ddbfe4681797068c9571b3bd2883a7f5407aa0f4952be944d77ae7fb41ba5d7c4ddecf6190c261bf3ffc4af5d2ab24dc34deb12485bc3c67987ff6c1cc464e0a3bea96a2002680b96cd610c6227e4801eefefc8168b226c07075a619995718729c73886fcbe5758845874581805b7a34da3a1dc0c4d43023cd6104"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41a}}]}) ioctl$XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x6000, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f00000001c0)='./file2\x00', 0x12000, 0x0) 0s ago: executing program 6 (id=7164): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x2, 0x12) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000000002"}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): .695164][T13746] x_tables: unsorted underflow at hook 3 [ 1361.849420][T13750] input: syz0 as /devices/virtual/input/input335 [ 1361.947219][ T942] gspca_sonixj: i2c_w8 err -110 [ 1361.978262][T13722] overlayfs: statfs failed on './file0' [ 1362.054253][ T942] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 1362.165208][ T1230] usb 3-1: USB disconnect, device number 47 [ 1362.176002][T13776] overlayfs: failed to resolve './file0': -2 [ 1362.396140][T13792] FAULT_INJECTION: forcing a failure. [ 1362.396140][T13792] name failslab, interval 1, probability 0, space 0, times 0 [ 1362.410218][T13792] CPU: 0 UID: 0 PID: 13792 Comm: syz.5.6728 Tainted: G L syzkaller #0 PREEMPT(full) [ 1362.410251][T13792] Tainted: [L]=SOFTLOCKUP [ 1362.410260][T13792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1362.410273][T13792] Call Trace: [ 1362.410282][T13792] [ 1362.410291][T13792] dump_stack_lvl+0xe8/0x150 [ 1362.410328][T13792] should_fail_ex+0x412/0x560 [ 1362.410361][T13792] should_failslab+0xa8/0x100 [ 1362.410388][T13792] __kmalloc_cache_noprof+0x88/0x660 [ 1362.410421][T13792] ? alloc_fs_context+0x64/0xd50 [ 1362.410460][T13792] alloc_fs_context+0x64/0xd50 [ 1362.410493][T13792] ? _raw_read_unlock+0x28/0x50 [ 1362.410516][T13792] ? get_fs_type+0x407/0x480 [ 1362.410561][T13792] do_new_mount+0x187/0xd30 [ 1362.410584][T13792] ? apparmor_capable+0x126/0x170 [ 1362.410610][T13792] ? security_capable+0x7e/0x2c0 [ 1362.410639][T13792] ? __pfx_do_new_mount+0x10/0x10 [ 1362.410664][T13792] ? ns_capable+0x89/0xe0 [ 1362.410695][T13792] ? path_mount+0x690/0x10e0 [ 1362.410725][T13792] ? user_path_at+0xd4/0x160 [ 1362.410754][T13792] __se_sys_mount+0x31d/0x420 [ 1362.410786][T13792] ? __pfx___se_sys_mount+0x10/0x10 [ 1362.410817][T13792] ? __x64_sys_mount+0x20/0xc0 [ 1362.410842][T13792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.410883][T13792] do_syscall_64+0x15f/0xf80 [ 1362.410907][T13792] ? trace_irq_disable+0x3b/0x140 [ 1362.410933][T13792] ? clear_bhb_loop+0x40/0x90 [ 1362.410967][T13792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.410988][T13792] RIP: 0033:0x7f9c5959c799 [ 1362.411008][T13792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1362.411027][T13792] RSP: 002b:00007f9c5a393028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1362.411060][T13792] RAX: ffffffffffffffda RBX: 00007f9c59815fa0 RCX: 00007f9c5959c799 [ 1362.411075][T13792] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 1362.411089][T13792] RBP: 00007f9c5a393090 R08: 00002000000004c0 R09: 0000000000000000 [ 1362.411102][T13792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1362.411115][T13792] R13: 00007f9c59816038 R14: 00007f9c59815fa0 R15: 00007fff954a64e8 [ 1362.411146][T13792] [ 1362.725170][T13797] can: request_module (can-proto-0) failed. [ 1362.995677][ T942] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1363.178320][ T942] usb 3-1: Using ep0 maxpacket: 16 [ 1363.185419][ T942] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1363.199353][ T942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1363.211096][ T942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1363.225969][ T942] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1363.225988][ T942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.238287][ T942] usb 3-1: config 0 descriptor?? [ 1363.240987][T14052] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1363.390519][T14052] usb 6-1: device descriptor read/64, error -71 [ 1363.460251][T13802] 9p: Unknown access argument : -22 [ 1363.647072][T14052] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1363.797306][T14052] usb 6-1: device descriptor read/64, error -71 [ 1363.822898][ T942] hid-picolcd 0003:04D8:F002.0090: No report with id 0xf3 found [ 1363.830700][ T942] hid-picolcd 0003:04D8:F002.0090: No report with id 0xf4 found [ 1363.925380][T14052] usb usb6-port1: attempt power cycle [ 1363.960750][ T942] usb 3-1: USB disconnect, device number 48 [ 1364.072235][T13847] sd 0:0:1:0: device reset [ 1364.299256][T14052] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1364.321306][T14052] usb 6-1: device descriptor read/8, error -71 [ 1364.587837][T14052] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1364.609812][T14052] usb 6-1: device descriptor read/8, error -71 [ 1364.727375][T14052] usb usb6-port1: unable to enumerate USB device [ 1364.961282][T13856] program syz.7.6737 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1365.010364][T13859] FAULT_INJECTION: forcing a failure. [ 1365.010364][T13859] name failslab, interval 1, probability 0, space 0, times 0 [ 1365.023755][T13859] CPU: 1 UID: 0 PID: 13859 Comm: syz.7.6738 Tainted: G L syzkaller #0 PREEMPT(full) [ 1365.023778][T13859] Tainted: [L]=SOFTLOCKUP [ 1365.023783][T13859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1365.023792][T13859] Call Trace: [ 1365.023798][T13859] [ 1365.023804][T13859] dump_stack_lvl+0xe8/0x150 [ 1365.023830][T13859] should_fail_ex+0x412/0x560 [ 1365.023852][T13859] should_failslab+0xa8/0x100 [ 1365.023868][T13859] __kmalloc_cache_noprof+0x88/0x660 [ 1365.023892][T13859] ? ovl_init_fs_context+0x57/0x570 [ 1365.023913][T13859] ovl_init_fs_context+0x57/0x570 [ 1365.023931][T13859] ? mutex_init_lockdep+0xdf/0x110 [ 1365.023948][T13859] alloc_fs_context+0x9d5/0xd50 [ 1365.023977][T13859] do_new_mount+0x187/0xd30 [ 1365.023994][T13859] ? apparmor_capable+0x126/0x170 [ 1365.024013][T13859] ? security_capable+0x7e/0x2c0 [ 1365.024035][T13859] ? __pfx_do_new_mount+0x10/0x10 [ 1365.024053][T13859] ? ns_capable+0x89/0xe0 [ 1365.024075][T13859] ? path_mount+0x690/0x10e0 [ 1365.024096][T13859] ? user_path_at+0xd4/0x160 [ 1365.024118][T13859] __se_sys_mount+0x31d/0x420 [ 1365.024141][T13859] ? __pfx___se_sys_mount+0x10/0x10 [ 1365.024164][T13859] ? __x64_sys_mount+0x20/0xc0 [ 1365.024181][T13859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.024198][T13859] do_syscall_64+0x15f/0xf80 [ 1365.024250][T13859] ? trace_irq_disable+0x3b/0x140 [ 1365.024276][T13859] ? clear_bhb_loop+0x40/0x90 [ 1365.024304][T13859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.024318][T13859] RIP: 0033:0x7f609ab9c799 [ 1365.024332][T13859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1365.024345][T13859] RSP: 002b:00007f609b9ca028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1365.024360][T13859] RAX: ffffffffffffffda RBX: 00007f609ae15fa0 RCX: 00007f609ab9c799 [ 1365.024371][T13859] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 1365.024381][T13859] RBP: 00007f609b9ca090 R08: 00002000000004c0 R09: 0000000000000000 [ 1365.024390][T13859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1365.024399][T13859] R13: 00007f609ae16038 R14: 00007f609ae15fa0 R15: 00007ffc7006d958 [ 1365.024431][T13859] [ 1365.369542][T13862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1365.384079][T13862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1365.614250][ T7160] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1365.634384][T13878] netlink: 'syz.2.6741': attribute type 10 has an invalid length. [ 1365.645305][T13878] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6741'. [ 1365.753326][ T7160] usb 8-1: device descriptor read/64, error -71 [ 1365.935411][T14052] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1366.013174][ T7160] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1366.116722][T14052] usb 3-1: Using ep0 maxpacket: 16 [ 1366.124299][T14052] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1366.137542][T14052] usb 3-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 1366.146772][T14052] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.154951][T14052] usb 3-1: Product: syz [ 1366.159225][T14052] usb 3-1: Manufacturer: syz [ 1366.163938][T14052] usb 3-1: SerialNumber: syz [ 1366.170035][ T7160] usb 8-1: device descriptor read/64, error -71 [ 1366.299137][ T7160] usb usb8-port1: attempt power cycle [ 1366.410264][T14052] usb 3-1: 1:1 : sample bitwidth 130 in over sample bytes 2 [ 1366.425056][T14052] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 1366.431880][T14052] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1366.440644][T14052] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1366.466794][T14052] usb 3-1: 1:1 : sample bitwidth 130 in over sample bytes 2 [ 1366.488479][T14052] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 1366.496769][T14052] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1366.505700][T14052] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1366.522005][T14052] usb 3-1: 1:1 : sample bitwidth 130 in over sample bytes 2 [ 1366.530032][T14052] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 1366.536964][T14052] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1366.607756][T14052] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1366.624657][T14052] usb 3-1: USB disconnect, device number 49 [ 1366.637462][T13912] veth1_macvtap: left promiscuous mode [ 1366.648215][T13912] macsec0: entered promiscuous mode [ 1366.666850][ T7160] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1366.675193][T13912] veth1_macvtap: entered promiscuous mode [ 1366.688265][ T4285] udevd[4285]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1366.709108][T13912] macsec0: left promiscuous mode [ 1366.719655][ T7160] usb 8-1: device descriptor read/8, error -71 [ 1366.982527][ T7160] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1367.016427][ T7160] usb 8-1: device descriptor read/8, error -71 [ 1367.049424][T13928] FAULT_INJECTION: forcing a failure. [ 1367.049424][T13928] name failslab, interval 1, probability 0, space 0, times 0 [ 1367.063530][T13928] CPU: 0 UID: 0 PID: 13928 Comm: syz.5.6747 Tainted: G L syzkaller #0 PREEMPT(full) [ 1367.063561][T13928] Tainted: [L]=SOFTLOCKUP [ 1367.063569][T13928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1367.063581][T13928] Call Trace: [ 1367.063589][T13928] [ 1367.063598][T13928] dump_stack_lvl+0xe8/0x150 [ 1367.063632][T13928] should_fail_ex+0x412/0x560 [ 1367.063661][T13928] should_failslab+0xa8/0x100 [ 1367.063683][T13928] __kmalloc_cache_noprof+0x88/0x660 [ 1367.063714][T13928] ? ovl_init_fs_context+0xa0/0x570 [ 1367.063735][T13928] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1367.063769][T13928] ovl_init_fs_context+0xa0/0x570 [ 1367.063792][T13928] ? mutex_init_lockdep+0xdf/0x110 [ 1367.063833][T13928] alloc_fs_context+0x9d5/0xd50 [ 1367.063874][T13928] do_new_mount+0x187/0xd30 [ 1367.063898][T13928] ? apparmor_capable+0x126/0x170 [ 1367.063925][T13928] ? security_capable+0x7e/0x2c0 [ 1367.063955][T13928] ? __pfx_do_new_mount+0x10/0x10 [ 1367.063980][T13928] ? ns_capable+0x89/0xe0 [ 1367.064011][T13928] ? path_mount+0x690/0x10e0 [ 1367.064041][T13928] ? user_path_at+0xd4/0x160 [ 1367.064071][T13928] __se_sys_mount+0x31d/0x420 [ 1367.064103][T13928] ? __pfx___se_sys_mount+0x10/0x10 [ 1367.064135][T13928] ? __x64_sys_mount+0x20/0xc0 [ 1367.064170][T13928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.064190][T13928] do_syscall_64+0x15f/0xf80 [ 1367.064212][T13928] ? trace_irq_disable+0x3b/0x140 [ 1367.064236][T13928] ? clear_bhb_loop+0x40/0x90 [ 1367.064259][T13928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.064277][T13928] RIP: 0033:0x7f9c5959c799 [ 1367.064301][T13928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1367.064317][T13928] RSP: 002b:00007f9c5a393028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1367.064337][T13928] RAX: ffffffffffffffda RBX: 00007f9c59815fa0 RCX: 00007f9c5959c799 [ 1367.064351][T13928] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 1367.064364][T13928] RBP: 00007f9c5a393090 R08: 00002000000004c0 R09: 0000000000000000 [ 1367.064377][T13928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1367.064388][T13928] R13: 00007f9c59816038 R14: 00007f9c59815fa0 R15: 00007fff954a64e8 [ 1367.064417][T13928] [ 1367.301460][ T7160] usb usb8-port1: unable to enumerate USB device [ 1367.388187][T13937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1367.409442][T13937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1367.610330][T13949] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1367.637670][ T942] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 1367.690587][T13959] CUSE: unknown device info "" [ 1367.695510][T13959] CUSE: unknown device info "" [ 1367.701005][T13959] CUSE: unknown device info "" [ 1367.705988][T13959] CUSE: unknown device info "" [ 1367.711036][T13959] CUSE: zero length info key specified [ 1367.805967][ T942] usb 6-1: device descriptor read/64, error -71 [ 1367.900435][T13972] nbd: must specify at least one socket [ 1368.094436][ T942] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 1368.233422][ T942] usb 6-1: device descriptor read/64, error -71 [ 1368.318893][ T4600] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1368.334036][ T4600] Bluetooth: hci1: Injecting HCI hardware error event [ 1368.342617][ T51] Bluetooth: hci1: hardware error 0x00 [ 1368.362052][ T942] usb usb6-port1: attempt power cycle [ 1368.368311][ T7160] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1368.534065][ T7160] usb 3-1: device descriptor read/64, error -71 [ 1368.725166][ T942] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 1368.760300][ T942] usb 6-1: device descriptor read/8, error -71 [ 1368.810714][ T7160] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1368.949604][ T7160] usb 3-1: device descriptor read/64, error -71 [ 1369.024484][T14052] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1369.045823][ T942] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 1369.068362][ T7160] usb usb3-port1: attempt power cycle [ 1369.069424][ T942] usb 6-1: device descriptor read/8, error -71 [ 1369.163494][T14052] usb 8-1: device descriptor read/64, error -71 [ 1369.197898][ T942] usb usb6-port1: unable to enumerate USB device [ 1369.430774][ T7160] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1369.441455][T14052] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1369.452630][ T7160] usb 3-1: device descriptor read/8, error -71 [ 1369.591061][T14052] usb 8-1: device descriptor read/64, error -71 [ 1369.708674][ T7160] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1369.720246][T14052] usb usb8-port1: attempt power cycle [ 1369.731510][ T7160] usb 3-1: device descriptor read/8, error -71 [ 1369.848518][ T7160] usb usb3-port1: unable to enumerate USB device [ 1370.082934][T14052] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1370.105183][T14052] usb 8-1: device descriptor read/8, error -71 [ 1370.371521][T14052] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1370.394608][T14052] usb 8-1: device descriptor read/8, error -71 [ 1370.523156][T14052] usb usb8-port1: unable to enumerate USB device [ 1370.542703][ T51] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1370.691489][T14017] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6764'. [ 1370.704386][T14017] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6764'. [ 1370.713393][T14017] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6764'. [ 1371.119923][ T29] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1371.272760][T14034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6768'. [ 1371.282096][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 1371.294468][ T29] usb 6-1: config 7 has an invalid interface number: 94 but max is 0 [ 1371.303084][ T29] usb 6-1: config 7 has no interface number 0 [ 1371.309343][ T29] usb 6-1: config 7 interface 94 altsetting 0 endpoint 0x2 has an invalid bInterval 65, changing to 7 [ 1371.321071][ T29] usb 6-1: config 7 interface 94 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1371.337306][ T29] usb 6-1: New USB device found, idVendor=1199, idProduct=0220, bcdDevice=96.96 [ 1371.350670][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.358897][ T29] usb 6-1: Product: syz [ 1371.363124][ T29] usb 6-1: Manufacturer: syz [ 1371.368358][ T29] usb 6-1: SerialNumber: syz [ 1371.613206][ T29] sierra 6-1:7.94: Sierra USB modem converter detected [ 1371.625691][ T29] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 1371.637692][ T29] usb 6-1: Sierra USB modem converter now attached to ttyUSB1 [ 1371.655177][ T29] usb 6-1: USB disconnect, device number 71 [ 1371.676853][ T29] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1371.697955][T13052] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1371.711510][ T29] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1371.722691][ T29] sierra 6-1:7.94: device disconnected [ 1371.871682][T13052] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1371.881803][T13052] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.890085][T13052] usb 3-1: Product: syz [ 1371.894365][T13052] usb 3-1: Manufacturer: syz [ 1371.899077][T13052] usb 3-1: SerialNumber: syz [ 1371.910678][T13052] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1371.936108][ T942] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1372.150858][T14041] x_tables: unsorted underflow at hook 3 [ 1372.159816][T14041] block nbd2: Cannot use ioctl interface on a netlink controlled device. [ 1372.183556][T14041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.197696][T14041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.311004][T14093] netlink: 'syz.7.6772': attribute type 3 has an invalid length. [ 1372.447550][T14041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.458003][T14101] x_tables: unsorted underflow at hook 3 [ 1372.473238][T14041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.521313][ T29] usb 3-1: USB disconnect, device number 54 [ 1372.563135][ T7160] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1372.737210][ T7160] usb 6-1: Using ep0 maxpacket: 8 [ 1372.745855][ T7160] usb 6-1: config 0 interface 0 altsetting 248 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1372.763314][ T7160] usb 6-1: config 0 interface 0 altsetting 248 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1372.774919][ T7160] usb 6-1: config 0 interface 0 altsetting 248 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1372.788808][ T7160] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1372.795465][ T7160] usb 6-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 1372.806440][ T7160] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.823317][ T7160] usb 6-1: config 0 descriptor?? [ 1372.937322][ T5924] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1373.110232][ T5924] usb 8-1: Using ep0 maxpacket: 16 [ 1373.115624][ T942] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1373.127660][ T942] ath9k_htc: Failed to initialize the device [ 1373.137516][ T5924] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1373.149920][ T5924] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1373.151472][ T29] usb 3-1: ath9k_htc: USB layer deinitialized [ 1373.166627][ T5924] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1373.189881][ T5924] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.210030][ T5924] usb 8-1: Product: syz [ 1373.218255][ T5924] usb 8-1: Manufacturer: syz [ 1373.223006][ T5924] usb 8-1: SerialNumber: syz [ 1373.253898][ T5924] usb 8-1: 0:2 : does not exist [ 1373.262068][ T51] Bluetooth: hci3: unexpected event for opcode 0x762f [ 1373.275511][ T7160] hid_parser_main: 38 callbacks suppressed [ 1373.275531][ T7160] zeroplus 0003:0C12:0005.0091: unknown main item tag 0x0 [ 1373.294001][ T7160] zeroplus 0003:0C12:0005.0091: unknown main item tag 0x0 [ 1373.302376][ T7160] zeroplus 0003:0C12:0005.0091: unknown main item tag 0x0 [ 1373.309672][ T7160] zeroplus 0003:0C12:0005.0091: unknown main item tag 0x0 [ 1373.317359][ T7160] zeroplus 0003:0C12:0005.0091: unknown main item tag 0x0 [ 1373.324695][ T7160] zeroplus 0003:0C12:0005.0091: unknown main item tag 0x0 [ 1373.331955][ T7160] zeroplus 0003:0C12:0005.0091: unknown main item tag 0x0 [ 1373.340190][ T7160] zeroplus 0003:0C12:0005.0091: unknown main item tag 0x0 [ 1373.347549][ T7160] zeroplus 0003:0C12:0005.0091: unknown main item tag 0x0 [ 1373.355131][ T7160] zeroplus 0003:0C12:0005.0091: unknown main item tag 0x0 [ 1373.375997][ T7160] zeroplus 0003:0C12:0005.0091: hidraw0: USB HID v0.00 Device [HID 0c12:0005] on usb-dummy_hcd.5-1/input0 [ 1373.403703][ T7160] zeroplus 0003:0C12:0005.0091: no inputs found [ 1373.510711][T12461] usb 6-1: USB disconnect, device number 72 [ 1373.535885][ T29] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1373.601557][ T5924] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1373.644657][ T5924] usb 8-1: USB disconnect, device number 32 [ 1373.678794][ T4285] udevd[4285]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1373.710285][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1373.722816][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1373.733455][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1373.744380][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1373.759571][ T29] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 1373.768724][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.777003][ T29] usb 3-1: Product: syz [ 1373.781196][ T29] usb 3-1: Manufacturer: syz [ 1373.786018][ T29] usb 3-1: SerialNumber: syz [ 1373.795838][ T29] usb 3-1: config 0 descriptor?? [ 1373.804476][ T29] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1374.051212][ T29] usb 3-1: USB disconnect, device number 55 [ 1374.272200][T14216] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6786'. [ 1374.322030][T14219] overlayfs: missing 'lowerdir' [ 1374.366788][T14221] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1374.377223][ T7160] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 1374.544496][ T7160] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1374.561846][ T7160] usb 6-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 1374.573034][ T7160] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.583184][ T7160] usb 6-1: Product: syz [ 1374.590316][ T7160] usb 6-1: Manufacturer: syz [ 1374.595479][ T7160] usb 6-1: SerialNumber: syz [ 1374.612173][ T7160] usb 6-1: config 0 descriptor?? [ 1374.623749][ T7160] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 1374.709098][T14242] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1374.718841][T14242] overlayfs: failed to set xattr on upper [ 1374.726524][T14242] overlayfs: ...falling back to redirect_dir=nofollow. [ 1374.736577][T14242] overlayfs: ...falling back to uuid=null. [ 1374.744325][T14242] overlayfs: conflicting lowerdir path [ 1374.816413][T14248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6791'. [ 1374.847800][ T7160] usb 6-1: USB disconnect, device number 73 [ 1375.193008][ T29] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 1375.203824][ T1783] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1375.355284][ T29] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1375.366962][ T1783] usb 3-1: Using ep0 maxpacket: 8 [ 1375.372055][ T29] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1375.383115][ T29] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1375.393339][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.406348][ T1783] usb 3-1: config 5 has an invalid interface number: 155 but max is 3 [ 1375.418591][ T1783] usb 3-1: config 5 has an invalid interface number: 162 but max is 3 [ 1375.426870][ T1783] usb 3-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 1375.436806][ T1783] usb 3-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 1375.445664][ T1783] usb 3-1: config 5 has an invalid interface number: 8 but max is 3 [ 1375.453943][ T1783] usb 3-1: config 5 has no interface number 0 [ 1375.461404][ T1783] usb 3-1: config 5 has no interface number 1 [ 1375.481637][ T1783] usb 3-1: config 5 has no interface number 2 [ 1375.487875][ T1783] usb 3-1: config 5 interface 155 altsetting 251 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1375.501634][ T1783] usb 3-1: config 5 interface 155 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 1375.514527][ T1783] usb 3-1: config 5 interface 155 altsetting 251 has a duplicate endpoint with address 0x1, skipping [ 1375.526624][ T1783] usb 3-1: config 5 interface 155 altsetting 251 has a duplicate endpoint with address 0x4, skipping [ 1375.538133][ T1783] usb 3-1: config 5 interface 155 altsetting 251 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1375.549551][ T1783] usb 3-1: config 5 interface 155 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 1375.560941][ T1783] usb 3-1: config 5 interface 155 altsetting 251 bulk endpoint 0xC has invalid maxpacket 64 [ 1375.572090][ T1783] usb 3-1: config 5 interface 155 altsetting 251 has a duplicate endpoint with address 0xE, skipping [ 1375.583229][ T1783] usb 3-1: config 5 interface 155 altsetting 251 has a duplicate endpoint with address 0xD, skipping [ 1375.594580][ T1783] usb 3-1: config 5 interface 162 altsetting 9 has an endpoint descriptor with address 0x19, changing to 0x9 [ 1375.607298][ T1783] usb 3-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 1375.619696][ T1783] usb 3-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0x83, skipping [ 1375.630871][ T1783] usb 3-1: config 5 interface 162 altsetting 9 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1375.643516][ T1783] usb 3-1: config 5 interface 162 altsetting 9 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1375.654719][ T1783] usb 3-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 1375.665575][ T1783] usb 3-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 1375.676723][ T1783] usb 3-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 1375.687762][ T1783] usb 3-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 1375.698751][ T1783] usb 3-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 1375.710937][ T1783] usb 3-1: config 5 interface 162 altsetting 9 endpoint 0x2 has invalid maxpacket 1128, setting to 64 [ 1375.722096][ T1783] usb 3-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 1375.733383][ T1783] usb 3-1: config 5 interface 3 altsetting 22 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1375.745204][ T1783] usb 3-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0x4, skipping [ 1375.756137][ T1783] usb 3-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0xD, skipping [ 1375.768104][ T1783] usb 3-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0x3, skipping [ 1375.778987][ T1783] usb 3-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0x4, skipping [ 1375.789872][ T1783] usb 3-1: config 5 interface 3 altsetting 22 has an invalid descriptor for endpoint zero, skipping [ 1375.800914][ T1783] usb 3-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0x4, skipping [ 1375.811809][ T1783] usb 3-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0x1, skipping [ 1375.823498][ T1783] usb 3-1: config 5 interface 3 altsetting 22 has an invalid descriptor for endpoint zero, skipping [ 1375.834731][ T1783] usb 3-1: config 5 interface 3 altsetting 22 endpoint 0xF has invalid wMaxPacketSize 0 [ 1375.844519][ T1783] usb 3-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0x9, skipping [ 1375.859349][ T1783] usb 3-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0x3, skipping [ 1375.870312][ T1783] usb 3-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 1375.889994][ T1783] usb 3-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 1375.909325][ T1783] usb 3-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 1375.921372][ T1783] usb 3-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 1375.939231][ T1783] usb 3-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 1375.950249][ T1783] usb 3-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 1375.964318][ T1783] usb 3-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 1375.974986][ T1783] usb 3-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 1375.985787][ T1783] usb 3-1: config 5 interface 8 altsetting 7 has an endpoint descriptor with address 0x2F, changing to 0xF [ 1375.997452][ T1783] usb 3-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 1376.008078][ T1783] usb 3-1: config 5 interface 8 altsetting 7 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1376.019200][ T1783] usb 3-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 1376.029881][ T1783] usb 3-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 1376.041436][ T1783] usb 3-1: config 5 interface 155 has no altsetting 0 [ 1376.048768][ T1783] usb 3-1: config 5 interface 162 has no altsetting 0 [ 1376.055736][ T1783] usb 3-1: config 5 interface 3 has no altsetting 0 [ 1376.062478][ T1783] usb 3-1: config 5 interface 8 has no altsetting 0 [ 1376.072373][ T1783] usb 3-1: New USB device found, idVendor=05e3, idProduct=f191, bcdDevice=f4.64 [ 1376.085032][ T1783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.093131][ T1783] usb 3-1: Product: ц [ 1376.097219][ T1783] usb 3-1: Manufacturer: 纭㞰 [ 1376.102415][ T1783] usb 3-1: SerialNumber: ᱀ [ 1376.113238][T14264] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1376.305668][ T29] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 1376.317862][ T29] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input337 [ 1376.329301][ T29] input: failed to attach handler kbd to device input337, error: -5 [ 1376.361081][ T29] usb 8-1: USB disconnect, device number 33 [ 1376.435356][ T1783] usb 3-1: USB disconnect, device number 56 [ 1376.768794][T14324] x_tables: ip_tables: udp match: only valid for protocol 17 [ 1376.780057][T14323] x_tables: ip_tables: udp match: only valid for protocol 17 [ 1376.802704][ T51] Bluetooth: hci3: unexpected event for opcode 0x762f [ 1376.873253][T14323] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6800'. [ 1377.089451][T14354] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1377.149628][ T1783] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1377.214404][ T5924] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1377.309758][ T1783] usb 6-1: Using ep0 maxpacket: 16 [ 1377.323561][ T1783] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 1377.344225][ T1783] usb 6-1: config 0 has no interface number 0 [ 1377.356254][ T1783] usb 6-1: too many endpoints for config 0 interface 151 altsetting 55: 53, using maximum allowed: 30 [ 1377.368125][ T1783] usb 6-1: config 0 interface 151 altsetting 55 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 1377.387873][ T1783] usb 6-1: config 0 interface 151 has no altsetting 0 [ 1377.396212][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1377.400245][ T1783] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1377.409642][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1377.417181][ T1783] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.433067][ T5924] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 1377.434482][ T1783] usb 6-1: Product: syz [ 1377.445388][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.450467][ T1783] usb 6-1: Manufacturer: syz [ 1377.461517][ T1783] usb 6-1: SerialNumber: syz [ 1377.468000][ T5924] usb 3-1: config 0 descriptor?? [ 1377.482360][ T1783] usb 6-1: config 0 descriptor?? [ 1377.546048][T12461] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1377.705302][T12461] usb 8-1: Using ep0 maxpacket: 8 [ 1377.713316][ T1783] visor 6-1:0.151: Sony Clie 3.5 converter detected [ 1377.726788][ T1783] usb 6-1: clie_3_5_startup: get config number failed: -71 [ 1377.736353][ T1783] visor 6-1:0.151: probe with driver visor failed with error -71 [ 1377.745343][T12461] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1377.759043][T12461] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1377.762868][ T1783] usb 6-1: USB disconnect, device number 74 [ 1377.768792][T12461] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1377.783649][T12461] usb 8-1: Manufacturer: syz [ 1377.788315][T12461] usb 8-1: SerialNumber: syz [ 1378.036090][T12461] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1378.047386][T12461] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1378.058050][T12461] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1378.065218][T12461] usb 8-1: media controller created [ 1378.081965][T12461] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1378.108006][T12461] zl10353_read_register: readreg error (reg=127, ret==0) [ 1378.147618][T12461] usb 8-1: USB disconnect, device number 34 [ 1378.165024][ T5924] usbhid 3-1:0.0: can't add hid device: -71 [ 1378.173043][ T5924] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1378.200630][ T5924] usb 3-1: USB disconnect, device number 57 [ 1378.380436][T14414] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6812'. [ 1378.425741][T14414] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 512 [ 1378.617125][T14424] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1378.734190][T12461] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1378.913298][T12461] usb 6-1: Using ep0 maxpacket: 8 [ 1378.920605][T12461] usb 6-1: config 5 has an invalid interface number: 155 but max is 3 [ 1378.930117][T12461] usb 6-1: config 5 has an invalid interface number: 162 but max is 3 [ 1378.938623][T12461] usb 6-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 1378.947497][T12461] usb 6-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 1378.956791][T12461] usb 6-1: config 5 has an invalid interface number: 8 but max is 3 [ 1378.964789][T12461] usb 6-1: config 5 has no interface number 0 [ 1378.971044][T12461] usb 6-1: config 5 has no interface number 1 [ 1378.977144][T12461] usb 6-1: config 5 has no interface number 2 [ 1378.983375][T12461] usb 6-1: config 5 interface 155 altsetting 251 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1378.994984][T12461] usb 6-1: config 5 interface 155 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 1379.006081][T12461] usb 6-1: config 5 interface 155 altsetting 251 has a duplicate endpoint with address 0x1, skipping [ 1379.017785][T12461] usb 6-1: config 5 interface 155 altsetting 251 has a duplicate endpoint with address 0x4, skipping [ 1379.028804][ T5924] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1379.036511][T12461] usb 6-1: config 5 interface 155 altsetting 251 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1379.047847][T12461] usb 6-1: config 5 interface 155 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 1379.059250][T12461] usb 6-1: config 5 interface 155 altsetting 251 bulk endpoint 0xC has invalid maxpacket 64 [ 1379.069913][T12461] usb 6-1: config 5 interface 155 altsetting 251 has a duplicate endpoint with address 0xE, skipping [ 1379.080885][T12461] usb 6-1: config 5 interface 155 altsetting 251 has a duplicate endpoint with address 0xD, skipping [ 1379.091796][T12461] usb 6-1: config 5 interface 162 altsetting 9 has an endpoint descriptor with address 0x19, changing to 0x9 [ 1379.104037][T12461] usb 6-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 1379.106548][ T29] usb 8-1: new low-speed USB device number 35 using dummy_hcd [ 1379.115043][T12461] usb 6-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0x83, skipping [ 1379.133133][T12461] usb 6-1: config 5 interface 162 altsetting 9 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1379.144510][T12461] usb 6-1: config 5 interface 162 altsetting 9 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1379.155486][T12461] usb 6-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 1379.166251][T12461] usb 6-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 1379.178022][T12461] usb 6-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 1379.188844][T12461] usb 6-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 1379.199602][T12461] usb 6-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 1379.210585][T12461] usb 6-1: config 5 interface 162 altsetting 9 endpoint 0x2 has invalid maxpacket 1128, setting to 64 [ 1379.222248][T12461] usb 6-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 1379.233033][T12461] usb 6-1: config 5 interface 3 altsetting 22 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1379.244731][T12461] usb 6-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0x4, skipping [ 1379.255638][T12461] usb 6-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0xD, skipping [ 1379.266615][T12461] usb 6-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0x3, skipping [ 1379.268138][ T29] usb 8-1: device descriptor read/64, error -71 [ 1379.277317][T12461] usb 6-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0x4, skipping [ 1379.277341][T12461] usb 6-1: config 5 interface 3 altsetting 22 has an invalid descriptor for endpoint zero, skipping [ 1379.277467][T12461] usb 6-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0x4, skipping [ 1379.277490][T12461] usb 6-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0x1, skipping [ 1379.327388][T12461] usb 6-1: config 5 interface 3 altsetting 22 has an invalid descriptor for endpoint zero, skipping [ 1379.338397][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1379.349220][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 59382, setting to 1024 [ 1379.360583][ T5924] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1379.369696][T12461] usb 6-1: config 5 interface 3 altsetting 22 endpoint 0xF has invalid wMaxPacketSize 0 [ 1379.379617][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.387661][T12461] usb 6-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0x9, skipping [ 1379.399523][T12461] usb 6-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0x3, skipping [ 1379.411244][ T5924] usb 3-1: config 0 descriptor?? [ 1379.416972][T12461] usb 6-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 1379.417941][T14434] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1379.427742][T12461] usb 6-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 1379.445950][T12461] usb 6-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 1379.456606][T12461] usb 6-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 1379.467989][T12461] usb 6-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 1379.470970][ T5924] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1379.487770][T12461] usb 6-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 1379.498346][T12461] usb 6-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 1379.509115][T12461] usb 6-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 1379.519804][T12461] usb 6-1: config 5 interface 8 altsetting 7 has an endpoint descriptor with address 0x2F, changing to 0xF [ 1379.531854][T12461] usb 6-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 1379.543175][T12461] usb 6-1: config 5 interface 8 altsetting 7 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1379.554097][T12461] usb 6-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 1379.564771][T12461] usb 6-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 1379.575379][T12461] usb 6-1: config 5 interface 155 has no altsetting 0 [ 1379.576409][ T29] usb 8-1: new low-speed USB device number 36 using dummy_hcd [ 1379.589856][T12461] usb 6-1: config 5 interface 162 has no altsetting 0 [ 1379.596947][T12461] usb 6-1: config 5 interface 3 has no altsetting 0 [ 1379.603693][T12461] usb 6-1: config 5 interface 8 has no altsetting 0 [ 1379.613771][T12461] usb 6-1: New USB device found, idVendor=05e3, idProduct=f191, bcdDevice=f4.64 [ 1379.623034][T12461] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.631179][T12461] usb 6-1: Product: ц [ 1379.635333][T12461] usb 6-1: Manufacturer: 纭㞰 [ 1379.640556][T12461] usb 6-1: SerialNumber: ᱀ [ 1379.651846][T14419] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1379.691138][T14434] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1379.703295][T14434] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1379.726228][ T5924] spca561 3-1:0.0: probe with driver spca561 failed with error -22 [ 1379.736496][ T29] usb 8-1: device descriptor read/64, error -71 [ 1379.741966][ T5924] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1379.749972][ T5924] usb 3-1: MIDIStreaming interface descriptor not found [ 1379.863641][ T5924] usb 3-1: USB disconnect, device number 58 [ 1379.871048][ T29] usb usb8-port1: attempt power cycle [ 1379.949113][T12461] usb 6-1: USB disconnect, device number 75 [ 1380.249589][ T29] usb 8-1: new low-speed USB device number 37 using dummy_hcd [ 1380.276079][ T29] usb 8-1: device descriptor read/8, error -71 [ 1380.321836][ T51] Bluetooth: hci4: unexpected event for opcode 0x760d [ 1380.560379][ T29] usb 8-1: new low-speed USB device number 38 using dummy_hcd [ 1380.594169][ T29] usb 8-1: device descriptor read/8, error -71 [ 1380.664214][T14501] kvm: user requested TSC rate below hardware speed [ 1380.710235][ T29] usb usb8-port1: unable to enumerate USB device [ 1380.839270][T14512] overlayfs: missing 'workdir' [ 1381.129553][ T51] Bluetooth: hci4: unexpected event for opcode 0x760d [ 1381.639519][T12461] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1381.799878][T12461] usb 3-1: Using ep0 maxpacket: 16 [ 1381.806553][T12461] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 1381.814839][T12461] usb 3-1: config 0 has no interface number 0 [ 1381.821074][T12461] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1381.821360][ T29] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1381.836050][T12461] usb 3-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x3E, changing to 0xE [ 1381.851217][T12461] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0xE has invalid maxpacket 92 [ 1381.863507][T12461] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1381.872760][T12461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.880848][T12461] usb 3-1: Product: syz [ 1381.885040][T12461] usb 3-1: Manufacturer: syz [ 1381.891195][T12461] usb 3-1: SerialNumber: syz [ 1381.899926][T12461] usb 3-1: config 0 descriptor?? [ 1381.905741][T14543] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1381.913373][T14543] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1382.024215][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 1382.033695][ T29] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1382.044958][ T29] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1382.056578][ T29] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1382.066515][ T29] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1382.075444][ T29] usb 6-1: Product: syz [ 1382.080021][ T29] usb 6-1: Manufacturer: syz [ 1382.100100][ T29] hub 6-1:4.0: USB hub found [ 1382.146807][T14543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.158067][T14543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.181542][T12461] qcserial 3-1:0.49: Qualcomm USB modem converter detected [ 1382.207214][T12461] usb 3-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 1382.222749][T12461] usb 3-1: USB disconnect, device number 59 [ 1382.235362][T12461] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 1382.271951][T12461] qcserial 3-1:0.49: device disconnected [ 1382.308499][ T29] hub 6-1:4.0: 2 ports detected [ 1382.533597][T14557] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6833'. [ 1382.708791][ T7160] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1382.718051][ T29] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 1382.726110][ T29] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 1382.762590][ T29] usb 6-1: USB disconnect, device number 76 [ 1382.858275][ T7160] usb 8-1: device descriptor read/64, error -71 [ 1382.920996][ T51] Bluetooth: hci4: unexpected event for opcode 0x040d [ 1383.092968][T14623] netlink: 'syz.2.6840': attribute type 10 has an invalid length. [ 1383.114832][ T7160] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1383.165564][T14627] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6841'. [ 1383.272945][ T7160] usb 8-1: device descriptor read/64, error -71 [ 1383.366800][T14642] netlink: 'syz.5.6843': attribute type 20 has an invalid length. [ 1383.404212][ T7160] usb usb8-port1: attempt power cycle [ 1383.535500][T14653] pim6reg: entered allmulticast mode [ 1383.597149][T14661] syzkaller1: entered promiscuous mode [ 1383.603490][T14661] syzkaller1: entered allmulticast mode [ 1383.777515][ T7160] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1383.802966][ T7160] usb 8-1: device descriptor read/8, error -71 [ 1383.876718][T14679] netlink: 'syz.5.6850': attribute type 10 has an invalid length. [ 1383.891227][T14679] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1383.903033][T14679] netlink: 'syz.5.6850': attribute type 89 has an invalid length. [ 1384.066167][ T7160] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1384.088528][ T7160] usb 8-1: device descriptor read/8, error -71 [ 1384.217765][ T7160] usb usb8-port1: unable to enumerate USB device [ 1384.354912][T13052] usb 6-1: new full-speed USB device number 77 using dummy_hcd [ 1384.386930][ T29] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1384.518226][T13052] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1384.527400][T13052] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.535433][T13052] usb 6-1: Product: syz [ 1384.539709][T13052] usb 6-1: Manufacturer: syz [ 1384.544384][T13052] usb 6-1: SerialNumber: syz [ 1384.552058][T13052] usb 6-1: config 0 descriptor?? [ 1384.563025][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1384.576509][ T29] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1384.586197][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.597347][ T29] usb 3-1: config 0 descriptor?? [ 1384.775430][T13052] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1384.825162][T14695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.835301][T14695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.274832][T14695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.283909][T14695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.296979][T14695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.306836][T14695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.965917][T14732] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6858'. [ 1386.300972][T14690] netlink: 'syz.5.6852': attribute type 28 has an invalid length. [ 1386.313455][T13052] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1386.329676][T13052] usb 6-1: USB disconnect, device number 77 [ 1386.332703][ T9738] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1386.504110][ T9738] usb 8-1: Using ep0 maxpacket: 16 [ 1386.511128][ T9738] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1386.521579][ T9738] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1386.532689][ T9738] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1386.543687][ T9738] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1386.554378][ T9738] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1386.568650][ T9738] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1386.577725][ T9738] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1386.586196][ T9738] usb 8-1: Manufacturer: syz [ 1386.596032][ T9738] usb 8-1: config 0 descriptor?? [ 1386.878085][ T9738] rc_core: IR keymap rc-hauppauge not found [ 1386.884505][ T9738] Registered IR keymap rc-empty [ 1386.890774][ T9738] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1386.910598][ T9738] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1386.943471][ T9738] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1386.959567][ T9738] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input339 [ 1386.983001][ T9738] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1387.006716][ T9738] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1387.051080][ T9738] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1387.091668][ T9738] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1387.135284][ T9738] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1387.155945][ T9738] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1387.177134][ T9738] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1387.198637][ T9738] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1387.220766][ T9738] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1387.241495][ T9738] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1387.266058][ T9738] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1387.275414][ T9738] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1387.323105][T14734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1387.335917][T14734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1387.353193][T14734] netlink: 'syz.7.6859': attribute type 89 has an invalid length. [ 1387.373694][T13052] usb 8-1: USB disconnect, device number 43 [ 1387.412737][ T29] usbhid 3-1:0.0: can't add hid device: -71 [ 1387.429572][ T29] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1387.452951][ T29] usb 3-1: USB disconnect, device number 60 [ 1387.743706][T14810] netlink: 'syz.6.6866': attribute type 3 has an invalid length. [ 1387.906066][T14820] netlink: 'syz.2.6867': attribute type 27 has an invalid length. [ 1388.181137][T14840] QAT: failed to copy from user. [ 1388.939646][T14912] adf_ctl_ioctl: 15 callbacks suppressed [ 1388.939665][T14912] QAT: Invalid ioctl 1075342989 [ 1388.951815][T14912] No source specified [ 1389.172256][T14924] overlay: Unknown parameter ':' [ 1389.519262][ T29] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 1389.681144][ T29] usb 3-1: not running at top speed; connect to a high speed hub [ 1389.693007][ T29] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1389.713167][ T29] usb 3-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.40 [ 1389.727494][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.736717][ T7160] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1389.744743][ T29] usb 3-1: Product: syz [ 1389.748961][ T29] usb 3-1: Manufacturer: syz [ 1389.754125][ T29] usb 3-1: SerialNumber: syz [ 1389.761520][T14946] netlink: 'syz.7.6889': attribute type 21 has an invalid length. [ 1389.775053][T14946] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6889'. [ 1389.784564][T14946] netlink: 'syz.7.6889': attribute type 4 has an invalid length. [ 1389.792715][T14946] netlink: 'syz.7.6889': attribute type 3 has an invalid length. [ 1389.916857][ T7160] usb 6-1: config index 0 descriptor too short (expected 54328, got 56) [ 1389.926694][ T7160] usb 6-1: config 2 has too many interfaces: 151, using maximum allowed: 32 [ 1389.936051][ T7160] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.947528][ T7160] usb 6-1: config 2 has 1 interface, different from the descriptor's value: 151 [ 1389.957811][ T7160] usb 6-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1389.971547][ T7160] usb 6-1: config 2 interface 0 has no altsetting 0 [ 1389.983503][ T7160] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 1389.995862][T14928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1390.007524][ T7160] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.018281][T14927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1390.030320][ T7160] usb 6-1: Product: syz [ 1390.037674][ T7160] usb 6-1: Manufacturer: syz [ 1390.044455][T14927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1390.055938][ T7160] usb 6-1: SerialNumber: syz [ 1390.060889][T14928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1390.097668][ T29] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input340 [ 1390.110363][ T5194] bcm5974 3-1:1.0: could not read from device [ 1390.132135][ T5194] bcm5974 3-1:1.0: could not read from device [ 1390.149253][ T5194] bcm5974 3-1:1.0: could not read from device [ 1390.151751][ T29] usb 3-1: USB disconnect, device number 61 [ 1390.167286][ T5194] bcm5974 3-1:1.0: could not read from device [ 1390.525785][ T7160] ims_pcu 6-1:2.0: Missing CDC union descriptor [ 1390.532999][ T7160] ims_pcu 6-1:2.0: probe with driver ims_pcu failed with error -22 [ 1390.549172][ T7160] usb 6-1: USB disconnect, device number 78 [ 1390.718701][T14998] QAT: Invalid ioctl 1076910120 [ 1390.724169][T14998] QAT: Invalid ioctl -1068490496 [ 1391.245381][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1391.512426][T15041] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6905'. [ 1391.679474][ T29] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1391.693265][T15051] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6908'. [ 1391.850812][ T29] usb 8-1: Using ep0 maxpacket: 16 [ 1391.880388][ T29] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1391.919763][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1391.979890][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1392.016612][ T29] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1392.040182][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1392.063544][ T29] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1392.072894][ T29] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1392.081219][ T29] usb 8-1: Manufacturer: syz [ 1392.121785][ T29] usb 8-1: config 0 descriptor?? [ 1392.163651][T15079] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1392.426186][ T29] rc_core: IR keymap rc-hauppauge not found [ 1392.432408][ T29] Registered IR keymap rc-empty [ 1392.443933][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1392.470935][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1392.502562][ T5924] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1392.510805][ T29] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1392.535858][ T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input341 [ 1392.563487][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1392.602886][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1392.630501][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1392.663752][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1392.684278][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 1392.693783][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1392.703223][ T5924] usb 3-1: config 0 has an invalid descriptor of length 183, skipping remainder of the config [ 1392.715089][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1392.728380][ T5924] usb 3-1: config 0 interface 0 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1392.741828][ T5924] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1392.748233][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1392.749860][ T5924] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 1392.771875][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.789980][ T5924] usb 3-1: config 0 descriptor?? [ 1392.790302][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1392.807586][ T5924] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1392.822032][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1392.854297][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1392.877409][ T29] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1392.887945][ T29] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1392.902361][ T29] usb 8-1: USB disconnect, device number 44 [ 1392.992841][ T9738] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1393.153148][ T9738] usb 6-1: Using ep0 maxpacket: 16 [ 1393.159878][ T9738] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 1393.170098][ T9738] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1393.179367][ T9738] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.187597][ T9738] usb 6-1: Product: syz [ 1393.191854][ T9738] usb 6-1: Manufacturer: syz [ 1393.196609][ T9738] usb 6-1: SerialNumber: syz [ 1393.205815][ T9738] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1393.213037][ T9738] r8152-cfgselector 6-1: config 0 descriptor?? [ 1393.712479][ T9738] r8152-cfgselector 6-1: USB disconnect, device number 79 [ 1393.751816][ T5924] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1393.898178][T15166] block nbd2: NBD_DISCONNECT [ 1393.903431][T15166] block nbd2: Send disconnect failed -32 [ 1393.909704][T15166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6911'. [ 1393.918766][ T5924] usb 8-1: Using ep0 maxpacket: 8 [ 1393.927091][ T5924] usb 8-1: config 5 has an invalid interface number: 155 but max is 3 [ 1393.935510][ T5924] usb 8-1: config 5 has an invalid interface number: 162 but max is 3 [ 1393.943725][ T5924] usb 8-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 1393.952582][ T5924] usb 8-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 1393.961399][ T5924] usb 8-1: config 5 has an invalid interface number: 8 but max is 3 [ 1393.969451][ T5924] usb 8-1: config 5 has no interface number 0 [ 1393.975619][ T5924] usb 8-1: config 5 has no interface number 1 [ 1393.982462][ T5924] usb 8-1: config 5 has no interface number 2 [ 1393.988934][ T5924] usb 8-1: config 5 interface 155 altsetting 251 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1394.000627][ T5924] usb 8-1: config 5 interface 155 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 1394.011761][ T5924] usb 8-1: config 5 interface 155 altsetting 251 has a duplicate endpoint with address 0x1, skipping [ 1394.022662][ T5924] usb 8-1: config 5 interface 155 altsetting 251 has a duplicate endpoint with address 0x4, skipping [ 1394.033625][ T5924] usb 8-1: config 5 interface 155 altsetting 251 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1394.044838][ T5924] usb 8-1: config 5 interface 155 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 1394.056014][T13052] psmouse serio38: Failed to reset mouse on : -5 [ 1394.062916][ T5924] usb 8-1: config 5 interface 155 altsetting 251 bulk endpoint 0xC has invalid maxpacket 64 [ 1394.073210][ T5924] usb 8-1: config 5 interface 155 altsetting 251 has a duplicate endpoint with address 0xE, skipping [ 1394.084211][ T5924] usb 8-1: config 5 interface 155 altsetting 251 has a duplicate endpoint with address 0xD, skipping [ 1394.095353][ T5924] usb 8-1: config 5 interface 162 altsetting 9 has an endpoint descriptor with address 0x19, changing to 0x9 [ 1394.107517][ T5924] usb 8-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 1394.118318][ T5924] usb 8-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0x83, skipping [ 1394.129176][ T5924] usb 8-1: config 5 interface 162 altsetting 9 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1394.140107][ T5924] usb 8-1: config 5 interface 162 altsetting 9 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1394.151552][ T5924] usb 8-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 1394.163303][ T5924] usb 8-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 1394.174052][ T5924] usb 8-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 1394.184821][ T5924] usb 8-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 1394.195668][ T5924] usb 8-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 1394.206579][ T5924] usb 8-1: config 5 interface 162 altsetting 9 endpoint 0x2 has invalid maxpacket 1128, setting to 64 [ 1394.218317][ T5924] usb 8-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 1394.229274][ T5924] usb 8-1: config 5 interface 3 altsetting 22 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1394.241108][ T5924] usb 8-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0x4, skipping [ 1394.252142][ T5924] usb 8-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0xD, skipping [ 1394.263030][ T5924] usb 8-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0x3, skipping [ 1394.286376][ T5924] usb 8-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0x4, skipping [ 1394.298943][ T5924] usb 8-1: config 5 interface 3 altsetting 22 has an invalid descriptor for endpoint zero, skipping [ 1394.324408][ T5924] usb 8-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0x4, skipping [ 1394.346194][ T5924] usb 8-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0x1, skipping [ 1394.357716][ T5924] usb 8-1: config 5 interface 3 altsetting 22 has an invalid descriptor for endpoint zero, skipping [ 1394.368707][ T5924] usb 8-1: config 5 interface 3 altsetting 22 endpoint 0xF has invalid wMaxPacketSize 0 [ 1394.374181][T15169] netlink: 'syz.5.6920': attribute type 21 has an invalid length. [ 1394.379228][ T5924] usb 8-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0x9, skipping [ 1394.389486][T15169] netlink: 388 bytes leftover after parsing attributes in process `syz.5.6920'. [ 1394.397621][ T5924] usb 8-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0x3, skipping [ 1394.419927][ T5924] usb 8-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 1394.431393][ T5924] usb 8-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 1394.442254][ T5924] usb 8-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 1394.453064][ T5924] usb 8-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 1394.463941][ T5924] usb 8-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 1394.474725][ T5924] usb 8-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 1394.485541][ T5924] usb 8-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 1394.496691][ T5924] usb 8-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 1394.508208][ T5924] usb 8-1: config 5 interface 8 altsetting 7 has an endpoint descriptor with address 0x2F, changing to 0xF [ 1394.534845][ T5924] usb 8-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 1394.551397][ T5924] usb 8-1: config 5 interface 8 altsetting 7 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1394.562443][ T5924] usb 8-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 1394.584805][ T5924] usb 8-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 1394.596561][ T5924] usb 8-1: config 5 interface 155 has no altsetting 0 [ 1394.603382][ T5924] usb 8-1: config 5 interface 162 has no altsetting 0 [ 1394.610818][ T5924] usb 8-1: config 5 interface 3 has no altsetting 0 [ 1394.617444][ T5924] usb 8-1: config 5 interface 8 has no altsetting 0 [ 1394.626038][ T5924] usb 8-1: New USB device found, idVendor=05e3, idProduct=f191, bcdDevice=f4.64 [ 1394.635893][ T5924] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.643942][ T5924] usb 8-1: Product: ц [ 1394.648768][ T5924] usb 8-1: Manufacturer: 纭㞰 [ 1394.654111][ T5924] usb 8-1: SerialNumber: ᱀ [ 1394.673588][T15149] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1394.831651][T12461] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1394.934477][ T5924] usb 8-1: USB disconnect, device number 45 [ 1394.970552][T12461] usb 6-1: device descriptor read/64, error -71 [ 1395.227149][T12461] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1395.366247][T12461] usb 6-1: device descriptor read/64, error -71 [ 1395.485028][T12461] usb usb6-port1: attempt power cycle [ 1395.804415][ T5924] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1395.858376][T12461] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1395.879933][T12461] usb 6-1: device descriptor read/8, error -71 [ 1395.964854][ T5924] usb 8-1: Using ep0 maxpacket: 32 [ 1395.972561][ T5924] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1395.981746][ T5924] usb 8-1: config 1 has an invalid interface number: 224 but max is 0 [ 1395.990814][ T5924] usb 8-1: config 1 has no interface number 0 [ 1395.997190][ T5924] usb 8-1: config 1 interface 224 has no altsetting 0 [ 1396.006475][ T5924] usb 8-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice=4e.f0 [ 1396.015586][ T5924] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.023621][ T5924] usb 8-1: Product: syz [ 1396.027767][ T5924] usb 8-1: Manufacturer: syz [ 1396.034011][ T5924] usb 8-1: SerialNumber: syz [ 1396.135900][T12461] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1396.157869][T12461] usb 6-1: device descriptor read/8, error -71 [ 1396.268352][ T5924] gspca_main: benq-2.14.0 probing 04a5:3035 [ 1396.275748][T12461] usb usb6-port1: unable to enumerate USB device [ 1396.286385][ T5924] usb 8-1: USB disconnect, device number 46 [ 1397.108676][T14052] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1397.279885][T14052] usb 8-1: Using ep0 maxpacket: 32 [ 1397.287009][T14052] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1397.295370][T14052] usb 8-1: config 0 has no interface number 0 [ 1397.301628][T14052] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1397.310542][T14052] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1397.320229][T14052] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.329074][T14052] usb 8-1: Product: syz [ 1397.333353][T14052] usb 8-1: Manufacturer: syz [ 1397.337984][T14052] usb 8-1: SerialNumber: syz [ 1397.345450][T14052] usb 8-1: config 0 descriptor?? [ 1397.932301][T13052] misc userio: Buffer overflowed, userio client isn't keeping up [ 1397.998319][T14052] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 1398.013033][T14052] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1398.042826][T14052] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1398.068898][T14052] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1398.089193][T14052] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1398.102178][T14052] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1398.112280][T14052] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 1398.126316][T14052] usb 8-1: USB disconnect, device number 47 [ 1398.275999][T15269] netlink: 'syz.5.6930': attribute type 1 has an invalid length. [ 1398.648274][ T7160] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1398.690974][T14052] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1398.787135][ T7160] usb 6-1: device descriptor read/64, error -71 [ 1398.851388][T14052] usb 8-1: Using ep0 maxpacket: 8 [ 1398.865541][T14052] usb 8-1: config 5 has an invalid interface number: 155 but max is 3 [ 1398.878803][T14052] usb 8-1: config 5 has an invalid interface number: 162 but max is 3 [ 1398.888204][T14052] usb 8-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 1398.897578][T14052] usb 8-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 1398.906715][T14052] usb 8-1: config 5 has an invalid interface number: 8 but max is 3 [ 1398.915120][T14052] usb 8-1: config 5 has no interface number 0 [ 1398.923216][T14052] usb 8-1: config 5 has no interface number 1 [ 1398.930288][T14052] usb 8-1: config 5 has no interface number 2 [ 1398.936463][T14052] usb 8-1: config 5 interface 155 altsetting 251 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1398.949798][T14052] usb 8-1: config 5 interface 155 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 1398.962893][T14052] usb 8-1: config 5 interface 155 altsetting 251 has a duplicate endpoint with address 0x1, skipping [ 1398.975428][T14052] usb 8-1: config 5 interface 155 altsetting 251 has a duplicate endpoint with address 0x4, skipping [ 1398.988298][T14052] usb 8-1: config 5 interface 155 altsetting 251 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1398.999593][T14052] usb 8-1: config 5 interface 155 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 1399.011000][T14052] usb 8-1: config 5 interface 155 altsetting 251 bulk endpoint 0xC has invalid maxpacket 64 [ 1399.021292][T14052] usb 8-1: config 5 interface 155 altsetting 251 has a duplicate endpoint with address 0xE, skipping [ 1399.037082][T14052] usb 8-1: config 5 interface 155 altsetting 251 has a duplicate endpoint with address 0xD, skipping [ 1399.044291][ T7160] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1399.060158][T14052] usb 8-1: config 5 interface 162 altsetting 9 has an endpoint descriptor with address 0x19, changing to 0x9 [ 1399.077017][T14052] usb 8-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 1399.090620][T14052] usb 8-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0x83, skipping [ 1399.102112][T14052] usb 8-1: config 5 interface 162 altsetting 9 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1399.113654][T14052] usb 8-1: config 5 interface 162 altsetting 9 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1399.124890][T14052] usb 8-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 1399.136519][T14052] usb 8-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 1399.147569][T14052] usb 8-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 1399.158597][T14052] usb 8-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 1399.169438][T14052] usb 8-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 1399.180552][T14052] usb 8-1: config 5 interface 162 altsetting 9 endpoint 0x2 has invalid maxpacket 1128, setting to 64 [ 1399.191615][T14052] usb 8-1: config 5 interface 162 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 1399.202576][T14052] usb 8-1: config 5 interface 3 altsetting 22 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1399.214451][T14052] usb 8-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0x4, skipping [ 1399.221058][ T7160] usb 6-1: device descriptor read/64, error -71 [ 1399.225132][T14052] usb 8-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0xD, skipping [ 1399.241974][T14052] usb 8-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0x3, skipping [ 1399.253553][T14052] usb 8-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0x4, skipping [ 1399.280679][T14052] usb 8-1: config 5 interface 3 altsetting 22 has an invalid descriptor for endpoint zero, skipping [ 1399.291882][T14052] usb 8-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0x4, skipping [ 1399.302816][T14052] usb 8-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0x1, skipping [ 1399.328781][T13052] input: PS/2 Generic Mouse as /devices/serio38/input/input342 [ 1399.337268][T14052] usb 8-1: config 5 interface 3 altsetting 22 has an invalid descriptor for endpoint zero, skipping [ 1399.350273][T14052] usb 8-1: config 5 interface 3 altsetting 22 endpoint 0xF has invalid wMaxPacketSize 0 [ 1399.360882][T14052] usb 8-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0x9, skipping [ 1399.365847][ T7160] usb usb6-port1: attempt power cycle [ 1399.372770][T14052] usb 8-1: config 5 interface 3 altsetting 22 has a duplicate endpoint with address 0x3, skipping [ 1399.387662][T14052] usb 8-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 1399.398387][T14052] usb 8-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 1399.408959][T14052] usb 8-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 1399.420838][T14052] usb 8-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 1399.431440][T14052] usb 8-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 1399.442353][T14052] usb 8-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 1399.453883][T14052] usb 8-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 1399.472991][T14052] usb 8-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 1399.495319][T14052] usb 8-1: config 5 interface 8 altsetting 7 has an endpoint descriptor with address 0x2F, changing to 0xF [ 1399.517921][T14052] usb 8-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 1399.532437][T14052] usb 8-1: config 5 interface 8 altsetting 7 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1399.555534][T14052] usb 8-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 1399.578914][T13052] psmouse serio38: Failed to enable mouse on [ 1399.585062][T14052] usb 8-1: config 5 interface 8 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 1399.606542][T14052] usb 8-1: config 5 interface 155 has no altsetting 0 [ 1399.620992][T14052] usb 8-1: config 5 interface 162 has no altsetting 0 [ 1399.638692][T14052] usb 8-1: config 5 interface 3 has no altsetting 0 [ 1399.653836][T14052] usb 8-1: config 5 interface 8 has no altsetting 0 [ 1399.677808][T14052] usb 8-1: New USB device found, idVendor=05e3, idProduct=f191, bcdDevice=f4.64 [ 1399.691644][ T29] usb 3-1: USB disconnect, device number 62 [ 1399.695826][T14052] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.716563][T14052] usb 8-1: Product: ц [ 1399.726818][T14052] usb 8-1: Manufacturer: 纭㞰 [ 1399.738539][T14052] usb 8-1: SerialNumber: ᱀ [ 1399.758399][T15272] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1399.802792][ T7160] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1399.826717][ T7160] usb 6-1: device descriptor read/8, error -71 [ 1400.058233][T14052] usb 8-1: USB disconnect, device number 48 [ 1400.107254][ T7160] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1400.178421][ T7160] usb 6-1: device descriptor read/8, error -71 [ 1400.305610][ T7160] usb usb6-port1: unable to enumerate USB device [ 1400.583962][T15348] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1400.696950][T15354] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6941'. [ 1400.706268][T15354] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6941'. [ 1400.722850][T15354] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6941'. [ 1401.078126][T15371] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 1401.149727][T14052] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1401.471184][T14052] usb 3-1: Using ep0 maxpacket: 8 [ 1401.524212][T14052] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.572023][T14052] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1401.664583][T14052] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1401.801398][T15362] block nbd7: shutting down sockets [ 1401.819390][T14052] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1401.839098][T14052] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1401.853218][T14052] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1401.862705][T14052] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.876113][T14052] usb 3-1: config 0 descriptor?? [ 1402.037540][T15393] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6948'. [ 1402.062721][T15393] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6948'. [ 1402.085630][T15393] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6948'. [ 1402.111520][T15399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1402.135581][T15399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.218147][T13052] usb 3-1: USB disconnect, device number 63 [ 1402.354260][T15431] autofs4:pid:15431:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 1402.421934][T14052] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1402.456416][T15434] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6955'. [ 1402.479982][T15434] overlayfs: failed to resolve '/?/驘}o': -2 [ 1402.560910][ T7160] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1402.594736][T14052] usb 6-1: Using ep0 maxpacket: 8 [ 1402.603349][T14052] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1402.612526][T14052] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1402.620792][T14052] usb 6-1: Product: syz [ 1402.625187][T13052] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1402.632868][T14052] usb 6-1: Manufacturer: syz [ 1402.638448][T14052] usb 6-1: SerialNumber: syz [ 1402.648589][T14052] usb 6-1: config 0 descriptor?? [ 1402.661934][T14052] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1402.721844][ T7160] usb 8-1: Using ep0 maxpacket: 32 [ 1402.729267][ T7160] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1402.738854][ T7160] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.763708][ T7160] usb 8-1: config 0 descriptor?? [ 1402.778602][ T7160] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1402.808689][T13052] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1402.818982][T13052] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1402.831211][T13052] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1402.841624][T13052] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1402.852144][ T30] audit: type=1326 audit(1775222759.100:7447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15447 comm="syz.6.6957" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f256159c799 code=0x0 [ 1402.852985][T13052] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.891373][T13052] usb 3-1: config 0 descriptor?? [ 1403.104303][T14052] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 1403.116285][T14052] sq905 6-1:0.0: probe with driver sq905 failed with error -71 [ 1403.135711][T14052] usb 6-1: USB disconnect, device number 88 [ 1403.205688][ T7160] gspca_sunplus: reg_w_riv err -71 [ 1403.215708][ T7160] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 1403.229796][ T7160] usb 8-1: USB disconnect, device number 49 [ 1403.350718][T13052] hid_parser_main: 28 callbacks suppressed [ 1403.350742][T13052] hid-rmi 0003:0461:4E72.0092: unknown main item tag 0x2 [ 1403.364480][T13052] hid-rmi 0003:0461:4E72.0092: unknown main item tag 0x0 [ 1403.372382][T13052] hid-rmi 0003:0461:4E72.0092: unknown main item tag 0x0 [ 1403.379603][T13052] hid-rmi 0003:0461:4E72.0092: unbalanced collection at end of report description [ 1403.389423][T13052] hid-rmi 0003:0461:4E72.0092: parse failed [ 1403.395596][T13052] hid-rmi 0003:0461:4E72.0092: probe with driver hid-rmi failed with error -22 [ 1403.562976][T15422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1403.571966][T15422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1403.695066][T15478] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6958'. [ 1403.704439][T15478] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6958'. [ 1403.718116][T15478] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6958'. [ 1403.963710][T13052] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1404.144637][T13052] usb 6-1: config index 0 descriptor too short (expected 7768, got 18) [ 1404.153306][T13052] usb 6-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 1404.163908][T13052] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.178323][T13052] usb 6-1: config 0 descriptor?? [ 1404.404504][T15479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1404.415406][T15479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1404.426268][T15479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1404.438198][T15479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1404.448337][T15479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1404.457936][T15479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1404.466848][T15479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1404.476521][T15479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1404.486361][T15479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1404.495840][T15479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1404.532164][T14052] usb 6-1: USB disconnect, device number 89 [ 1404.560104][T13052] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1404.752528][T13052] usb 8-1: Using ep0 maxpacket: 16 [ 1404.759713][T13052] usb 8-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1404.770094][T13052] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1404.781719][T13052] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1404.792869][T13052] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1404.808001][T13052] usb 8-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1404.817184][T13052] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.825193][T13052] usb 8-1: Product: syz [ 1404.830310][T13052] usb 8-1: Manufacturer: syz [ 1404.834969][T13052] usb 8-1: SerialNumber: syz [ 1404.842303][T13052] usb 8-1: config 0 descriptor?? [ 1405.071536][T13052] appledisplay: Apple Cinema Display connected [ 1405.297300][ T7160] usb 8-1: USB disconnect, device number 50 [ 1405.297519][ C0] usb 8-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 1405.320485][ T7160] appledisplay: Apple Cinema Display disconnected [ 1405.410930][T15559] input: syz0 as /devices/virtual/input/input343 [ 1405.543200][T14052] usb 3-1: USB disconnect, device number 64 [ 1405.601333][ T51] Bluetooth: hci4: unexpected event for opcode 0x040d [ 1405.821543][ T5924] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1405.981836][ T5924] usb 6-1: Using ep0 maxpacket: 8 [ 1405.997808][ T5924] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 1406.014672][ T5924] usb 6-1: config 0 has no interface number 0 [ 1406.028886][ T5924] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1406.053975][ T5924] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 1406.079540][ T5924] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1406.114569][ T5924] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1406.137895][ T5924] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1406.148907][ T5924] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1406.165903][ T5924] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1406.183073][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.193266][ T5924] usb 6-1: Product: syz [ 1406.198040][ T5924] usb 6-1: Manufacturer: syz [ 1406.202812][ T5924] usb 6-1: SerialNumber: syz [ 1406.214375][ T5924] usb 6-1: config 0 descriptor?? [ 1406.360478][T15640] netlink: 'syz.6.6982': attribute type 21 has an invalid length. [ 1406.370364][T15640] netlink: 'syz.6.6982': attribute type 164 has an invalid length. [ 1406.381793][T15642] __nla_validate_parse: 64 callbacks suppressed [ 1406.381813][T15642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6981'. [ 1406.459037][ T5924] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 1406.600184][T15655] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6983'. [ 1406.666092][T12461] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1406.677487][ T30] audit: type=1326 audit(1775222762.683:7448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15586 comm="syz.5.6970" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c5959c799 code=0x0 [ 1406.837419][T12461] usb 3-1: Using ep0 maxpacket: 8 [ 1406.844764][T12461] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1406.855532][T12461] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1406.856538][T15664] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6984'. [ 1406.865819][T12461] usb 3-1: config 0 has no interface number 0 [ 1406.865867][T12461] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1406.865891][T12461] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1406.865928][T12461] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1406.865949][T12461] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.876135][T12461] usb 3-1: config 0 descriptor?? [ 1406.897425][T12461] ldusb 3-1:0.55: Interrupt in endpoint not found [ 1407.068885][T15672] netlink: 180 bytes leftover after parsing attributes in process `syz.7.6986'. [ 1407.097579][T12461] usb 3-1: USB disconnect, device number 65 [ 1407.661315][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 1407.666032][ T29] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1407.692351][ T29] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1408.805863][T13052] usb 6-1: USB disconnect, device number 90 [ 1408.861818][T15708] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6989'. [ 1409.263943][T13052] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1409.436667][T13052] usb 6-1: config 0 has an invalid interface number: 64 but max is -1 [ 1409.444958][T13052] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1409.454127][T13052] usb 6-1: config 0 has no interface number 0 [ 1409.460317][T13052] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=86.34 [ 1409.469677][T13052] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.481558][T13052] usb 6-1: config 0 descriptor?? [ 1410.054986][ T29] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1410.055128][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 1410.061166][ T29] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1412.278709][ T29] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1412.278749][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 1412.291607][ T29] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 1412.415809][ T29] usb 6-1: USB disconnect, device number 91 [ 1412.521051][T15754] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6992'. [ 1412.635785][T15765] netlink: 703 bytes leftover after parsing attributes in process `syz.5.6993'. [ 1412.657061][T15771] blktrace: Concurrent blktraces are not allowed on loop4 [ 1413.155455][T12461] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1413.340537][T12461] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1413.358511][ T5924] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1413.368271][T12461] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1413.382433][T12461] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1413.392816][T12461] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.400864][T12461] usb 8-1: Product: syz [ 1413.405530][T12461] usb 8-1: Manufacturer: syz [ 1413.410199][T12461] usb 8-1: SerialNumber: syz [ 1413.425737][T12461] cdc_mbim 8-1:1.0: skipping garbage [ 1413.518854][ T5924] usb 6-1: device descriptor read/64, error -71 [ 1413.638143][T15785] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1413.775352][ T5924] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1413.882613][T15828] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1413.890287][T12461] cdc_mbim 8-1:1.0: setting tx_max = 16384 [ 1413.898632][T12461] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device [ 1413.924100][T12461] wwan wwan0: port wwan0mbim0 attached [ 1413.929830][ T5924] usb 6-1: device descriptor read/64, error -71 [ 1413.943816][T12461] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.7-1, CDC MBIM, a2:a4:e2:c3:b4:46 [ 1414.053786][ T5924] usb usb6-port1: attempt power cycle [ 1414.105002][ T1783] usb 8-1: USB disconnect, device number 51 [ 1414.116961][ T1783] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.7-1, CDC MBIM [ 1414.228090][ T1783] wwan wwan0: port wwan0mbim0 disconnected [ 1414.363822][T13052] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1414.428033][ T5924] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1414.482531][ T5924] usb 6-1: device descriptor read/8, error -71 [ 1414.535945][T13052] usb 3-1: Using ep0 maxpacket: 8 [ 1414.543305][T13052] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1414.552876][T13052] usb 3-1: config 8 has an invalid interface number: 10 but max is 0 [ 1414.561299][T13052] usb 3-1: config 8 has no interface number 0 [ 1414.570001][T13052] usb 3-1: config 8 interface 10 altsetting 9 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1414.581274][T13052] usb 3-1: config 8 interface 10 altsetting 9 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1414.592885][T13052] usb 3-1: config 8 interface 10 has no altsetting 0 [ 1414.603006][T13052] usb 3-1: New USB device found, idVendor=0711, idProduct=0901, bcdDevice= 7.52 [ 1414.613073][T13052] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.621918][T13052] usb 3-1: Product: syz [ 1414.626256][T13052] usb 3-1: Manufacturer: syz [ 1414.632052][T13052] usb 3-1: SerialNumber: syz [ 1414.701575][T15881] netlink: 'syz.7.7009': attribute type 21 has an invalid length. [ 1414.712744][T15881] netlink: 128 bytes leftover after parsing attributes in process `syz.7.7009'. [ 1414.723991][T15881] netlink: 'syz.7.7009': attribute type 4 has an invalid length. [ 1414.734752][T15881] netlink: 3 bytes leftover after parsing attributes in process `syz.7.7009'. [ 1414.772395][ T5924] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1414.802252][ T5924] usb 6-1: device descriptor read/8, error -71 [ 1414.870808][T13052] sisusb 3-1:8.10: Invalid USB2VGA device [ 1414.880344][T13052] sisusb 3-1:8.10: probe with driver sisusb failed with error -22 [ 1414.903243][T13052] usb 3-1: USB disconnect, device number 66 [ 1414.932211][ T5924] usb usb6-port1: unable to enumerate USB device [ 1415.496825][T13052] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1415.681589][T13052] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1415.691236][T13052] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.704413][T13052] usb 8-1: config 0 descriptor?? [ 1415.726147][T13052] cp210x 8-1:0.0: cp210x converter detected [ 1415.763058][T15941] sg_write: data in/out 439260/178 bytes for SCSI command 0x0-- guessing data in; [ 1415.763058][T15941] program syz.2.7018 not setting count and/or reply_len properly [ 1416.074188][ T1783] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1416.154915][T13052] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1416.164109][T13052] cp210x 8-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1416.173874][T13052] cp210x 8-1:0.0: GPIO initialisation failed: -71 [ 1416.185249][T13052] usb 8-1: cp210x converter now attached to ttyUSB0 [ 1416.199655][T13052] usb 8-1: USB disconnect, device number 52 [ 1416.212612][T13052] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1416.221611][T13052] cp210x 8-1:0.0: device disconnected [ 1416.248182][ T1783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1416.277759][ T1783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1416.301123][ T1783] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1416.317960][ T1783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.331993][ T1783] usb 3-1: config 0 descriptor?? [ 1416.406434][T15986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7023'. [ 1416.672493][ T1230] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1416.772924][ T1783] usbhid 3-1:0.0: can't add hid device: -71 [ 1416.780372][ T1783] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1416.796566][ T1783] usb 3-1: USB disconnect, device number 67 [ 1416.834456][ T1230] usb 6-1: Using ep0 maxpacket: 32 [ 1416.841293][ T1230] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1416.849882][ T1230] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1416.860238][ T1230] usb 6-1: config 0 has no interface number 0 [ 1416.866503][ T1230] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1416.882337][ T1230] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1416.893645][ T1230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.902292][ T1230] usb 6-1: Product: syz [ 1416.906467][ T1230] usb 6-1: Manufacturer: syz [ 1416.911232][ T1230] usb 6-1: SerialNumber: syz [ 1416.919413][ T1230] usb 6-1: config 0 descriptor?? [ 1416.928756][ T1230] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 1416.936702][ T1230] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 1417.025492][T14052] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1417.141172][ T1230] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1417.188423][T14052] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1417.197436][T14052] usb 8-1: config 64 has an invalid interface number: 205 but max is 0 [ 1417.205703][T14052] usb 8-1: config 64 has no interface number 0 [ 1417.211995][T14052] usb 8-1: config 64 interface 205 has no altsetting 0 [ 1417.221326][T14052] usb 8-1: New USB device found, idVendor=050d, idProduct=0109, bcdDevice=1f.ce [ 1417.231600][T14052] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.241779][T14052] usb 8-1: Product: syz [ 1417.246024][T14052] usb 8-1: Manufacturer: syz [ 1417.250779][T14052] usb 8-1: SerialNumber: syz [ 1417.361600][ T1230] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 1417.496080][T14052] mct_u232 8-1:64.205: MCT U232 converter detected [ 1417.514658][T14052] mct_u232 ttyUSB0: expected endpoint missing [ 1417.527560][T14052] usb 8-1: USB disconnect, device number 53 [ 1417.548121][T14052] mct_u232 8-1:64.205: device disconnected [ 1417.596032][T16026] netlink: 'syz.2.7027': attribute type 21 has an invalid length. [ 1417.605686][T16026] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7027'. [ 1417.643229][T12237] Bluetooth: hci2: Frame reassembly failed (-84) [ 1417.736766][T16037] input: syz1 as /devices/virtual/input/input345 [ 1417.829304][T13052] usb 6-1: USB disconnect, device number 96 [ 1417.851393][T13052] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 1417.896113][T16055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1417.906272][T16055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1418.136244][T16076] hfsplus: unable to find HFS+ superblock [ 1418.393697][ T1783] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1418.554009][ T1783] usb 8-1: Using ep0 maxpacket: 16 [ 1418.560765][ T1783] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1418.571395][ T1783] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1418.582507][ T1783] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1418.591670][ T1783] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.599764][ T1783] usb 8-1: Product: syz [ 1418.603941][ T1783] usb 8-1: Manufacturer: syz [ 1418.608629][ T1783] usb 8-1: SerialNumber: syz [ 1418.625433][ T1783] usb 8-1: 0:2 : does not exist [ 1418.843378][ T1783] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1418.884564][ T1783] usb 8-1: USB disconnect, device number 54 [ 1418.928827][ T4285] udevd[4285]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1419.113455][T16107] fuse: Bad value for 'fd' [ 1419.483632][T16136] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.7040'. [ 1419.807440][ T51] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1419.809223][ T4600] Bluetooth: hci2: command 0x1003 tx timeout [ 1419.907677][ T5924] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 1419.926125][ T5924] hid-generic 0000:0000:0000.0093: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1420.170666][T16156] hid-generic 0000:0000:0000.0093: pid 16156 passed too short report [ 1420.301266][T16174] vxcan0: tx address claim with different name [ 1420.310236][T16174] netlink: 'syz.2.7046': attribute type 13 has an invalid length. [ 1420.320560][T16174] netlink: 'syz.2.7046': attribute type 10 has an invalid length. [ 1420.340708][T16174] team0 (unregistering): Port device team_slave_0 removed [ 1420.350628][T16174] team0 (unregistering): Port device team_slave_1 removed [ 1420.724262][ T7160] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1420.884596][ T7160] usb 3-1: Using ep0 maxpacket: 32 [ 1420.891407][ T7160] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1420.901387][ T7160] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.914801][ T7160] usb 3-1: config 0 descriptor?? [ 1420.931757][ T7160] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1420.948783][ T5924] usb 8-1: new full-speed USB device number 55 using dummy_hcd [ 1421.000412][T16199] overlayfs: failed to resolve 'permit_directio': -2 [ 1421.136035][ T5924] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1421.154518][ T7160] gspca_nw80x: reg_w err -71 [ 1421.163735][ T5924] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.167211][ T7160] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 1421.178102][ T5924] usb 8-1: Product: syz [ 1421.185939][ T5924] usb 8-1: Manufacturer: syz [ 1421.190626][ T5924] usb 8-1: SerialNumber: syz [ 1421.198437][ T7160] usb 3-1: USB disconnect, device number 68 [ 1421.213260][ T5924] usb 8-1: config 0 descriptor?? [ 1421.233223][T16212] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7052'. [ 1421.233333][ T5924] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1421.251032][T16213] loop6: detected capacity change from 0 to 7 [ 1421.261285][ C1] blk_print_req_error: 25 callbacks suppressed [ 1421.261342][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1421.276716][ C1] buffer_io_error: 14 callbacks suppressed [ 1421.276731][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1421.293808][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1421.303047][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1421.311115][T16212] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7052'. [ 1421.311332][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1421.329314][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1421.339280][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1421.348461][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1421.358944][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1421.368138][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1421.376309][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1421.385458][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1421.393523][T16213] ldm_validate_partition_table(): Disk read failed. [ 1421.396945][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1421.409307][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1421.417423][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1421.426630][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1421.443265][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1421.444345][T16189] tmpfs: Unknown parameter 'noinode32' [ 1421.452470][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1421.466692][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1421.475932][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1421.485572][T16213] Dev loop6: unable to read RDB block 0 [ 1421.491921][T16213] loop6: unable to read partition table [ 1421.499232][T16213] loop6: partition table beyond EOD, truncated [ 1421.510465][T16213] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1421.804952][T16234] vivid-004: disconnect [ 1421.816289][T16233] vivid-004: reconnect [ 1422.128939][T16189] openvswitch: netlink: EtherType 50a is less than min 600 [ 1422.576958][ T5924] gspca_stk1135: reg_w 0xd err -71 [ 1422.587401][ T5924] gspca_stk1135: serial bus timeout: status=0x00 [ 1422.601522][ T5924] gspca_stk1135: Sensor write failed [ 1422.612884][ T5924] gspca_stk1135: serial bus timeout: status=0x00 [ 1422.631562][ T5924] gspca_stk1135: Sensor write failed [ 1422.648555][ T5924] gspca_stk1135: serial bus timeout: status=0x00 [ 1422.656679][ T5924] gspca_stk1135: Sensor read failed [ 1422.669954][ T5924] gspca_stk1135: serial bus timeout: status=0x00 [ 1422.684875][ T5924] gspca_stk1135: Sensor read failed [ 1422.696081][ T5924] gspca_stk1135: Detected sensor type unknown (0x0) [ 1422.712857][ T5924] gspca_stk1135: serial bus timeout: status=0x00 [ 1422.723323][ T5924] gspca_stk1135: Sensor read failed [ 1422.735526][ T5924] gspca_stk1135: serial bus timeout: status=0x00 [ 1422.752786][ T5924] gspca_stk1135: Sensor read failed [ 1422.763252][ T5924] gspca_stk1135: serial bus timeout: status=0x00 [ 1422.776750][ T5924] gspca_stk1135: Sensor write failed [ 1422.791943][ T5924] gspca_stk1135: serial bus timeout: status=0x00 [ 1422.800515][ T5924] gspca_stk1135: Sensor write failed [ 1422.808060][ T5924] stk1135 8-1:0.0: probe with driver stk1135 failed with error -71 [ 1422.827684][ T5924] usb 8-1: USB disconnect, device number 55 [ 1422.936546][T16278] overlayfs: failed to resolve './file1': -2 [ 1423.705378][T16350] binder: 16349:16350 ioctl 400c620e 200000000140 returned -22 [ 1423.810788][T16358] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7071'. [ 1424.167076][ T4600] Bluetooth: hci2: command 0x1003 tx timeout [ 1424.175965][ T51] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1424.241453][ T1783] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1424.284265][ T5924] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1424.425544][ T1783] usb 6-1: Using ep0 maxpacket: 8 [ 1424.447824][ T1783] usb 6-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1424.463216][ T5924] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1424.474530][ T1783] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1424.487311][ T5924] usb 8-1: can't read configurations, error -61 [ 1424.494189][ T1783] usb 6-1: New USB device found, idVendor=03fc, idProduct=05d8, bcdDevice= 0.40 [ 1424.508356][ T1783] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.516937][ T1783] usb 6-1: Product: Ё [ 1424.523459][ T1783] usb 6-1: Manufacturer: 丂ఒ웽勐莑ヌ毑啮ኤ渁繈娵ﾆᚢ欐똲幷袀哖㯊颔蚞ԫ㝡귩挫럙⵹쮁뀷ꇰⱠ騅ꚞ迧版葍憀㨶᫿겎ଝ䜁粨싚ಾ㇑儏펬ꀘ誚큥瞟轾貿ﻗᵪ㍶ࠈꗣ膥ᅆ滟欣室⼗ȷ剕攳༻胋꼵㤲䮋曳楍醫셫캊㒃π鴧㿨勀ౚ鷎疗画咉鍒喹ꬭ꘍閎ዩ킗虷敱ꖖ [ 1424.560504][ T1783] usb 6-1: SerialNumber: 뼷렼홬耔哹똯潹⢱틄ᥲ詟鶔ᮗ媭톘ᐧ銪潟骓毆깷ዸỴ᳑ [ 1424.581024][T16407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7078'. [ 1424.647760][ T5924] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1424.842857][ T5924] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1424.861529][ T5924] usb 8-1: can't read configurations, error -61 [ 1424.869966][ T5924] usb usb8-port1: attempt power cycle [ 1425.041945][ T1783] usbhid 6-1:1.0: can't add hid device: -71 [ 1425.058898][ T1783] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1425.084706][ T1783] usb 6-1: USB disconnect, device number 97 [ 1425.284217][ T5924] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1425.313609][ T5924] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1425.326008][ T5924] usb 8-1: can't read configurations, error -61 [ 1425.535135][ T5924] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1425.559681][ T5924] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1425.573440][ T5924] usb 8-1: can't read configurations, error -61 [ 1425.587460][ T5924] usb usb8-port1: unable to enumerate USB device [ 1426.261942][ T1783] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1426.422329][ T5924] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1426.422698][ T1783] usb 3-1: Using ep0 maxpacket: 32 [ 1426.437591][ T1783] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 1426.449293][ T1783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 52, changing to 7 [ 1426.460611][ T1783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 17952, setting to 1024 [ 1426.473998][ T1783] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1426.483847][ T1783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.492083][ T1783] usb 3-1: Product: syz [ 1426.496279][ T1783] usb 3-1: Manufacturer: syz [ 1426.500979][ T1783] usb 3-1: SerialNumber: syz [ 1426.509367][ T1783] usb 3-1: config 0 descriptor?? [ 1426.518236][ T1783] usb 3-1: no audio or video endpoints found [ 1426.595052][ T5924] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1426.603420][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1426.614441][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1426.624196][ T5924] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1426.637207][ T5924] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1426.646273][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.660927][ T5924] usb 6-1: config 0 descriptor?? [ 1426.733948][ T942] usb 3-1: USB disconnect, device number 69 [ 1427.102600][ T5924] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 1427.111233][ T5924] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 1427.118751][ T5924] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 1427.126213][ T5924] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 1427.135566][ T5924] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 1427.143190][ T5924] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 1427.150680][ T5924] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 1427.158101][ T5924] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 1427.166347][ T5924] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 1427.173940][ T5924] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 1427.188496][ T5924] plantronics 0003:047F:FFFF.0094: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1427.593223][T16524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7093'. [ 1427.627785][T16524] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7093'. [ 1428.103169][ T5924] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1428.250441][ T942] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 1428.298636][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1428.322649][ T1783] usb 6-1: USB disconnect, device number 98 [ 1428.323655][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1428.359732][ T5924] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1428.396389][ T5924] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1428.415870][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.448453][ T5924] usb 3-1: config 0 descriptor?? [ 1428.470558][ T942] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.490114][ T5924] hub 3-1:0.0: USB hub found [ 1428.495103][ T942] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1428.504771][ T942] usb 8-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1428.514249][ T942] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.522605][ T942] usb 8-1: Product: syz [ 1428.526856][ T942] usb 8-1: Manufacturer: syz [ 1428.536127][ T942] usb 8-1: SerialNumber: syz [ 1428.572387][ T942] usb 8-1: config 0 descriptor?? [ 1428.599636][ T942] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1428.642541][T16573] IPVS: set_ctl: invalid protocol: 59 10.1.1.2:20002 [ 1428.644947][ T942] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1428.660310][ T942] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1428.670011][ T942] usb 8-1: media controller created [ 1428.694901][ T942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1428.715000][ T5924] hub 3-1:0.0: 11 ports detected [ 1428.723587][ T5924] hub 3-1:0.0: insufficient power available to use all downstream ports [ 1428.794343][ T942] DVB: Unable to find symbol tda10046_attach() [ 1428.821169][ T942] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1428.861162][ T942] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1428.929465][ T5924] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 1428.944840][ T5924] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 1429.011397][ T5924] usb 3-1: USB disconnect, device number 70 [ 1429.445845][T16627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1429.832854][ T1230] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1430.007295][ T1230] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1430.042309][ T1230] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1430.056537][ T1230] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1430.063921][ T1230] usb 3-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 1430.073374][ T1230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.088370][ T1230] usb 3-1: config 0 descriptor?? [ 1430.094456][T16634] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1430.597031][ T1230] input: HID 0458:5012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5012.0095/input/input346 [ 1430.743490][ T1230] input: HID 0458:5012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5012.0095/input/input347 [ 1430.803648][ T1230] kye 0003:0458:5012.0095: input,hiddev0,hidraw0: USB HID v80.01 Device [HID 0458:5012] on usb-dummy_hcd.2-1/input0 [ 1430.816536][T13052] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1430.900882][ T1230] usb 3-1: USB disconnect, device number 71 [ 1431.046953][T16710] fido_id[16710]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1431.285479][ T942] dvb_usb_m920x 8-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1431.305267][ T942] usb 8-1: USB disconnect, device number 60 [ 1431.403291][T16750] netlink: 'syz.7.7118': attribute type 3 has an invalid length. [ 1431.417259][T16750] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7118'. [ 1431.511577][T16758] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1431.871683][T16790] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7128'. [ 1431.972445][T16794] Bluetooth: hci1: invalid length 3, exp 2 for type 9 [ 1431.982050][T16794] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7129'. [ 1431.991117][T16794] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1432.103299][T16802] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1432.430502][T13052] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1432.601536][T13052] usb 3-1: Using ep0 maxpacket: 16 [ 1432.614885][T13052] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1432.624086][T13052] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.637358][T13052] usb 3-1: config 0 descriptor?? [ 1432.653390][T13052] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1432.862113][T16806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1432.874410][T16806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1432.889803][T16806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1432.901369][T16806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1432.954332][T14052] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1433.001728][T16826] nvme_fabrics: missing parameter 'transport=%s' [ 1433.008758][T16826] nvme_fabrics: missing parameter 'nqn=%s' [ 1433.118126][T16831] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7138'. [ 1433.139781][T14052] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1433.164225][T14052] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1433.173681][ T30] audit: type=1326 audit(1775222787.452:7449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16805 comm="syz.2.7134" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4b759c799 code=0x0 [ 1433.195669][T14052] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.209523][T14052] usb 6-1: config 0 descriptor?? [ 1433.447471][T13052] gspca_sonixj: reg_r err -110 [ 1433.452409][T13052] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 1433.510193][ T1783] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 1433.649317][ T1783] usb 8-1: device descriptor read/64, error -71 [ 1433.659996][T14052] keytouch 0003:0926:3333.0096: fixing up Keytouch IEC report descriptor [ 1433.673717][T14052] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0096/input/input348 [ 1433.782487][T14052] keytouch 0003:0926:3333.0096: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1433.905804][ T1783] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 1434.044771][ T1783] usb 8-1: device descriptor read/64, error -71 [ 1434.163276][ T1783] usb usb8-port1: attempt power cycle [ 1434.435619][T16868] netlink: 'syz.6.7142': attribute type 2 has an invalid length. [ 1434.526148][ T1783] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 1434.560357][ T1783] usb 8-1: device descriptor read/8, error -71 [ 1434.581956][T16862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.592627][T16862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.610761][T16862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.624741][T16862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.659649][T14052] usb 6-1: USB disconnect, device number 100 [ 1434.825164][ T1783] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 1434.868644][ T1783] usb 8-1: device descriptor read/8, error -71 [ 1434.996763][ T1783] usb usb8-port1: unable to enumerate USB device [ 1435.026920][T16921] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1435.046212][T16921] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7147'. [ 1435.153850][T16926] virtio-fs: tag not found [ 1435.481220][ T1783] usb 3-1: USB disconnect, device number 72 [ 1435.527805][T16945] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1435.540747][T16945] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1435.594027][T16948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.606117][T16948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.938130][ T1783] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1436.110331][ T1783] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.122932][ T1783] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1436.132462][ T1783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.140785][ T1783] usb 3-1: Product: syz [ 1436.144992][ T1783] usb 3-1: Manufacturer: syz [ 1436.149609][ T1783] usb 3-1: SerialNumber: syz [ 1436.159108][ T1783] usb 3-1: config 0 descriptor?? [ 1436.168645][ T1783] usb 3-1: ucan: probing device on interface #0 [ 1436.175566][ T1783] usb 3-1: ucan: invalid EP count (0) [ 1436.181164][ T1783] usb 3-1: ucan: probe failed; try to update the device firmware [ 1436.289766][ T1230] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1436.380759][ T942] usb 3-1: USB disconnect, device number 73 [ 1436.460951][ T1230] usb 6-1: Using ep0 maxpacket: 32 [ 1436.474732][ T1230] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1436.484829][ T1230] usb 6-1: config 0 has no interface number 0 [ 1437.071096][ T4600] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1437.116854][ T4600] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1437.130828][ T4600] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1437.140299][ T4600] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1437.150246][ T4600] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1437.256750][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1437.267195][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1437.277776][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1437.300841][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1437.317532][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1437.393050][ T1230] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1437.402442][ T1230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.410479][ T1230] usb 6-1: Product: syz [ 1437.427834][ T1230] usb 6-1: Manufacturer: syz [ 1437.453025][ T1230] usb 6-1: SerialNumber: syz [ 1437.492455][ T1230] usb 6-1: config 0 descriptor?? [ 1437.552836][T17064] ================================================================== [ 1437.560942][T17064] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x350 [ 1437.568634][T17064] Read of size 8 at addr ffff88802d0f8a18 by task syz.2.7163/17064 [ 1437.576546][T17064] [ 1437.578894][T17064] CPU: 0 UID: 0 PID: 17064 Comm: syz.2.7163 Tainted: G L syzkaller #0 PREEMPT(full) [ 1437.578919][T17064] Tainted: [L]=SOFTLOCKUP [ 1437.578927][T17064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1437.578940][T17064] Call Trace: [ 1437.578947][T17064] [ 1437.578956][T17064] dump_stack_lvl+0xe8/0x150 [ 1437.578989][T17064] print_address_description+0x55/0x1e0 [ 1437.579020][T17064] ? dvb_device_open+0xc4/0x350 [ 1437.579050][T17064] print_report+0x58/0x70 [ 1437.579075][T17064] kasan_report+0x117/0x150 [ 1437.579096][T17064] ? dvb_device_open+0xc4/0x350 [ 1437.579128][T17064] dvb_device_open+0xc4/0x350 [ 1437.579159][T17064] ? do_raw_spin_unlock+0xf5/0x210 [ 1437.579185][T17064] chrdev_open+0x4cd/0x5e0 [ 1437.579207][T17064] ? __pfx_chrdev_open+0x10/0x10 [ 1437.579228][T17064] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1437.579259][T17064] ? __pfx_chrdev_open+0x10/0x10 [ 1437.579278][T17064] do_dentry_open+0x785/0x14e0 [ 1437.579308][T17064] vfs_open+0x3b/0x340 [ 1437.579329][T17064] ? path_openat+0x2df0/0x3860 [ 1437.579347][T17064] path_openat+0x2e08/0x3860 [ 1437.579371][T17064] ? __pfx_stack_trace_save+0x10/0x10 [ 1437.579403][T17064] ? stack_depot_save_flags+0x33/0x810 [ 1437.579431][T17064] ? __pfx_path_openat+0x10/0x10 [ 1437.579448][T17064] ? __x64_sys_openat+0x138/0x170 [ 1437.579475][T17064] ? __lock_acquire+0x6b5/0x2cf0 [ 1437.579508][T17064] do_file_open+0x23e/0x4a0 [ 1437.579527][T17064] ? __pfx_do_file_open+0x10/0x10 [ 1437.579554][T17064] ? _raw_spin_unlock+0x28/0x50 [ 1437.579572][T17064] ? alloc_fd+0x64b/0x6c0 [ 1437.579618][T17064] do_sys_openat2+0x113/0x200 [ 1437.579644][T17064] ? __se_sys_futex+0x3a8/0x450 [ 1437.579662][T17064] ? __pfx_do_sys_openat2+0x10/0x10 [ 1437.579702][T17064] ? rcu_is_watching+0x15/0xb0 [ 1437.579721][T17064] __x64_sys_openat+0x138/0x170 [ 1437.579747][T17064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.579768][T17064] do_syscall_64+0x15f/0xf80 [ 1437.579791][T17064] ? trace_irq_disable+0x3b/0x140 [ 1437.579813][T17064] ? clear_bhb_loop+0x40/0x90 [ 1437.579834][T17064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.579853][T17064] RIP: 0033:0x7fd4b755cfce [ 1437.579888][T17064] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1437.579908][T17064] RSP: 002b:00007fd4b83c5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1437.579931][T17064] RAX: ffffffffffffffda RBX: 00007fd4b83c66c0 RCX: 00007fd4b755cfce [ 1437.579949][T17064] RDX: 0000000000000e82 RSI: 00007fd4b83c5c00 RDI: ffffffffffffff9c [ 1437.579966][T17064] RBP: 00007fd4b83c5c00 R08: 0000000000000000 R09: 0000000000000000 [ 1437.579980][T17064] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1437.579994][T17064] R13: 00007fd4b7816038 R14: 00007fd4b7815fa0 R15: 00007ffdcd1311b8 [ 1437.580020][T17064] [ 1437.580028][T17064] [ 1437.861418][T17064] Allocated by task 1: [ 1437.865495][T17064] kasan_save_track+0x3e/0x80 [ 1437.870207][T17064] __kasan_kmalloc+0x93/0xb0 [ 1437.874809][T17064] __kmalloc_cache_noprof+0x31c/0x660 [ 1437.880202][T17064] dvb_register_device+0x2fd/0x21e0 [ 1437.885423][T17064] dvb_register_frontend+0x61b/0x920 [ 1437.890723][T17064] vidtv_bridge_probe+0x9aa/0xf80 [ 1437.895783][T17064] platform_probe+0xf9/0x190 [ 1437.900378][T17064] really_probe+0x267/0xaf0 [ 1437.904922][T17064] __driver_probe_device+0x18c/0x320 [ 1437.910238][T17064] driver_probe_device+0x4f/0x240 [ 1437.915284][T17064] __driver_attach+0x34c/0x640 [ 1437.920064][T17064] bus_for_each_dev+0x23b/0x2c0 [ 1437.924942][T17064] bus_add_driver+0x345/0x670 [ 1437.929637][T17064] driver_register+0x23a/0x320 [ 1437.934439][T17064] vidtv_bridge_init+0x28/0x50 [ 1437.939301][T17064] do_one_initcall+0x250/0x870 [ 1437.944146][T17064] do_initcall_level+0x104/0x190 [ 1437.949138][T17064] do_initcalls+0x59/0xa0 [ 1437.953493][T17064] kernel_init_freeable+0x2a6/0x3e0 [ 1437.958717][T17064] kernel_init+0x1d/0x1d0 [ 1437.963060][T17064] ret_from_fork+0x514/0xb70 [ 1437.967663][T17064] ret_from_fork_asm+0x1a/0x30 [ 1437.972442][T17064] [ 1437.974768][T17064] Freed by task 16802: [ 1437.978833][T17064] kasan_save_track+0x3e/0x80 [ 1437.983525][T17064] kasan_save_free_info+0x46/0x50 [ 1437.988558][T17064] __kasan_slab_free+0x5c/0x80 [ 1437.993349][T17064] kfree+0x1c5/0x640 [ 1437.997265][T17064] dvb_device_open+0x2cd/0x350 [ 1438.002047][T17064] chrdev_open+0x4cd/0x5e0 [ 1438.006475][T17064] do_dentry_open+0x785/0x14e0 [ 1438.011242][T17064] vfs_open+0x3b/0x340 [ 1438.015317][T17064] path_openat+0x2e08/0x3860 [ 1438.019925][T17064] do_file_open+0x23e/0x4a0 [ 1438.024442][T17064] do_sys_openat2+0x113/0x200 [ 1438.029130][T17064] __x64_sys_openat+0x138/0x170 [ 1438.033990][T17064] do_syscall_64+0x15f/0xf80 [ 1438.038592][T17064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.044492][T17064] [ 1438.046820][T17064] The buggy address belongs to the object at ffff88802d0f8a00 [ 1438.046820][T17064] which belongs to the cache kmalloc-256 of size 256 [ 1438.060884][T17064] The buggy address is located 24 bytes inside of [ 1438.060884][T17064] freed 256-byte region [ffff88802d0f8a00, ffff88802d0f8b00) [ 1438.074630][T17064] [ 1438.076991][T17064] The buggy address belongs to the physical page: [ 1438.083416][T17064] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d0f8 [ 1438.092181][T17064] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1438.100697][T17064] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1438.108251][T17064] page_type: f5(slab) [ 1438.112240][T17064] raw: 00fff00000000040 ffff88813fe38b40 dead000000000122 0000000000000000 [ 1438.120832][T17064] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1438.129436][T17064] head: 00fff00000000040 ffff88813fe38b40 dead000000000122 0000000000000000 [ 1438.138113][T17064] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1438.146784][T17064] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 1438.155461][T17064] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1438.164133][T17064] page dumped because: kasan: bad access detected [ 1438.170611][T17064] page_owner tracks the page as allocated [ 1438.176346][T17064] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 16193442982, free_ts 0 [ 1438.196079][T17064] post_alloc_hook+0x231/0x280 [ 1438.200906][T17064] get_page_from_freelist+0x24ba/0x2540 [ 1438.206485][T17064] __alloc_frozen_pages_noprof+0x233/0x3d0 [ 1438.212301][T17064] allocate_slab+0x77/0x660 [ 1438.216819][T17064] refill_objects+0x339/0x3d0 [ 1438.221512][T17064] __pcs_replace_empty_main+0x321/0x720 [ 1438.227076][T17064] __kmalloc_cache_noprof+0x392/0x660 [ 1438.232479][T17064] bus_add_driver+0x162/0x670 [ 1438.237177][T17064] driver_register+0x23a/0x320 [ 1438.241965][T17064] usb_register_driver+0x1e4/0x390 [ 1438.247127][T17064] do_one_initcall+0x250/0x870 [ 1438.251912][T17064] do_initcall_level+0x104/0x190 [ 1438.256869][T17064] do_initcalls+0x59/0xa0 [ 1438.261213][T17064] kernel_init_freeable+0x2a6/0x3e0 [ 1438.266414][T17064] kernel_init+0x1d/0x1d0 [ 1438.270771][T17064] ret_from_fork+0x514/0xb70 [ 1438.275394][T17064] page_owner free stack trace missing [ 1438.280764][T17064] [ 1438.283102][T17064] Memory state around the buggy address: [ 1438.288736][T17064] ffff88802d0f8900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1438.296810][T17064] ffff88802d0f8980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1438.304873][T17064] >ffff88802d0f8a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1438.312939][T17064] ^ [ 1438.317793][T17064] ffff88802d0f8a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1438.325869][T17064] ffff88802d0f8b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1438.333933][T17064] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1438.647254][T17064] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1438.654516][T17064] CPU: 1 UID: 0 PID: 17064 Comm: syz.2.7163 Tainted: G L syzkaller #0 PREEMPT(full) [ 1438.665471][T17064] Tainted: [L]=SOFTLOCKUP [ 1438.669806][T17064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1438.679904][T17064] Call Trace: [ 1438.683207][T17064] [ 1438.686166][T17064] vpanic+0x56c/0xa60 [ 1438.690187][T17064] ? __pfx_vpanic+0x10/0x10 [ 1438.694732][T17064] ? __pfx___schedule+0x10/0x10 [ 1438.699607][T17064] panic+0xc5/0xd0 [ 1438.703357][T17064] ? __pfx_panic+0x10/0x10 [ 1438.707783][T17064] ? preempt_schedule_thunk+0x16/0x30 [ 1438.713176][T17064] ? dvb_device_open+0xc4/0x350 [ 1438.718042][T17064] check_panic_on_warn+0x89/0xb0 [ 1438.723051][T17064] ? dvb_device_open+0xc4/0x350 [ 1438.727921][T17064] end_report+0x73/0x170 [ 1438.732177][T17064] ? dvb_device_open+0xc4/0x350 [ 1438.737048][T17064] kasan_report+0x128/0x150 [ 1438.741575][T17064] ? dvb_device_open+0xc4/0x350 [ 1438.746447][T17064] dvb_device_open+0xc4/0x350 [ 1438.751158][T17064] ? do_raw_spin_unlock+0xf5/0x210 [ 1438.756282][T17064] chrdev_open+0x4cd/0x5e0 [ 1438.760722][T17064] ? __pfx_chrdev_open+0x10/0x10 [ 1438.765691][T17064] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1438.772040][T17064] ? __pfx_chrdev_open+0x10/0x10 [ 1438.776984][T17064] do_dentry_open+0x785/0x14e0 [ 1438.781761][T17064] vfs_open+0x3b/0x340 [ 1438.785861][T17064] ? path_openat+0x2df0/0x3860 [ 1438.790648][T17064] path_openat+0x2e08/0x3860 [ 1438.795262][T17064] ? __pfx_stack_trace_save+0x10/0x10 [ 1438.800668][T17064] ? stack_depot_save_flags+0x33/0x810 [ 1438.806153][T17064] ? __pfx_path_openat+0x10/0x10 [ 1438.811123][T17064] ? __x64_sys_openat+0x138/0x170 [ 1438.816197][T17064] ? __lock_acquire+0x6b5/0x2cf0 [ 1438.821168][T17064] do_file_open+0x23e/0x4a0 [ 1438.825683][T17064] ? __pfx_do_file_open+0x10/0x10 [ 1438.830724][T17064] ? _raw_spin_unlock+0x28/0x50 [ 1438.835585][T17064] ? alloc_fd+0x64b/0x6c0 [ 1438.839931][T17064] do_sys_openat2+0x113/0x200 [ 1438.844628][T17064] ? __se_sys_futex+0x3a8/0x450 [ 1438.849498][T17064] ? __pfx_do_sys_openat2+0x10/0x10 [ 1438.854726][T17064] ? rcu_is_watching+0x15/0xb0 [ 1438.859506][T17064] __x64_sys_openat+0x138/0x170 [ 1438.864373][T17064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.870457][T17064] do_syscall_64+0x15f/0xf80 [ 1438.875062][T17064] ? trace_irq_disable+0x3b/0x140 [ 1438.880145][T17064] ? clear_bhb_loop+0x40/0x90 [ 1438.884849][T17064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.890765][T17064] RIP: 0033:0x7fd4b755cfce [ 1438.895205][T17064] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1438.914823][T17064] RSP: 002b:00007fd4b83c5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1438.923254][T17064] RAX: ffffffffffffffda RBX: 00007fd4b83c66c0 RCX: 00007fd4b755cfce [ 1438.931238][T17064] RDX: 0000000000000e82 RSI: 00007fd4b83c5c00 RDI: ffffffffffffff9c [ 1438.939219][T17064] RBP: 00007fd4b83c5c00 R08: 0000000000000000 R09: 0000000000000000 [ 1438.947196][T17064] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1438.955174][T17064] R13: 00007fd4b7816038 R14: 00007fd4b7815fa0 R15: 00007ffdcd1311b8 [ 1438.963161][T17064] [ 1438.967033][T17064] Kernel Offset: disabled [ 1438.971356][T17064] Rebooting in 86400 seconds..