last executing test programs: 5m37.245393446s ago: executing program 0 (id=108): r0 = syz_usb_connect$uac2(0x3, 0x8f, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201100300000020ba0d001040000102030109027d000301061002080b0100010c200009040000000101200009240180ff071d00040c2403020403050400ff011c"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x95, 0x4) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x40}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000240)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x800, 0x2, 0x1, 0x4, 0x0, 0x97}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r5 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@local, @in6=@remote, 0x4e24, 0x800, 0x4e22, 0x9280, 0xa, 0x0, 0x80, 0x4, r4, r5}, {0x7fff, 0xb, 0x3, 0x200, 0xfffffffffffffffc, 0xba07, 0x1, 0x1ff}, {0x5, 0x4, 0x8d, 0x800}, 0x9, 0x6e6bb9, 0x2, 0x1, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4d6, 0x3c}, 0x2, @in=@local, 0x34ff, 0x3, 0x1, 0xb8}}, 0xe8) syz_usb_control_io$uac2(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00032e0000002e03"]}, 0x0) 5m35.479292861s ago: executing program 0 (id=112): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001980)={{0x14}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) getsockopt(r0, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) 5m35.438536152s ago: executing program 0 (id=113): r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@remote, @in=@rand_addr=0x64010101, 0xfffd, 0xfffe, 0x0, 0x0, 0xa}, {0x5, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d1, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x4, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) syz_io_uring_setup(0x1727, &(0x7f00000002c0)={0x0, 0x7f9d, 0x4000, 0x1, 0xba}, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001700)=""/4084, 0xff4}, {&(0x7f0000000440)=""/211, 0xd3}], 0x2}, 0x40010000) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 5m35.226094545s ago: executing program 0 (id=114): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x2, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0xffffffff, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000180)={0x0, 0xd, 0x5001}) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x400, 0x6, 0xf, 0x2d, 0x2, 0x2, 0x5, 0x3f, 0x10, 0x8, 0xe8, 0xf4, 0x9}, {0x1, 0x8, 0x5, 0x3, 0x4, 0x5, 0x44, 0x2, 0x1, 0x3, 0x3, 0x60, 0x82f}, {0x7, 0x4, 0x5, 0x9, 0x9, 0x4, 0xd6, 0x4, 0x3, 0x7, 0xa, 0x2, 0x9}], 0xb}) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x8000000, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) 5m35.083175616s ago: executing program 0 (id=115): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x9, 0xd75, 0x4, {0x1, @vbi={0x8, 0x8100, 0x3, 0x41416770, [0x82, 0x7], [0xc153], 0x1}}, 0xd3}) r1 = socket(0x10, 0x2, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0xffff8880b870dffe) (async) getegid() (async) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000040732b3c00350001020301090269000301318002080b00010101200609040000000101200009242da2d8414e01faffff0900030904010000010220000904010101010220000905010940000a040908250103330407000904020000010220000904020101010220000905820910000300020825018000030f00"], 0x0) recvmsg$unix(r1, &(0x7f00000025c0)={0x0, 0x0, &(0x7f00000024c0), 0x0, &(0x7f0000002500)}, 0x10060) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, @loopback, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x6, 0x8001}}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000001c0)={'bridge0\x00', 0x20}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) (async) close(r4) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x3, 0x4009}}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r6, 0x1, 0xf, 0x0, &(0x7f0000000100)) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', r5, 0x2f, 0xe0, 0xc1, 0x6, 0x1c, @private0, @empty, 0x700, 0x10, 0xf40}}) 5m33.909689805s ago: executing program 0 (id=123): socket$inet6_sctp(0xa, 0x1, 0x84) socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) (async) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000380)={0x0, {0x39b14d69, 0xfffffffc, 0x5, 0x4, 0x3, 0x80000001}}) write$uinput_user_dev(r3, &(0x7f00000003c0)={'syz0\x00', {0x5, 0x100, 0x8, 0x7985}, 0x1e, [0x7fffffff, 0x7, 0xfffffc00, 0x2, 0x2071, 0x7, 0x0, 0x7, 0x3, 0x2, 0x0, 0xf6a3, 0x4, 0x8, 0x1000, 0x7ea, 0x51580259, 0x2, 0x81, 0x0, 0x5, 0x5, 0xb, 0xda, 0x8, 0x2, 0xe0c, 0x7, 0x5, 0x3, 0x2, 0x9, 0xfffffff9, 0xffffffff, 0x2, 0x3, 0x9, 0x1, 0x7, 0x7, 0x0, 0x400, 0x6, 0x3, 0x6, 0x14bc, 0xfff, 0x8, 0x0, 0x4, 0x7, 0x82, 0x4, 0x8, 0x5b4c508f, 0x8, 0x4, 0x7, 0x3, 0x7, 0x15c, 0x8, 0x9, 0x5], [0x7, 0x9, 0x2, 0x7, 0x4, 0x7ff, 0x8000, 0x6, 0x7ff, 0x2e2d, 0x6, 0x2, 0x8, 0x4, 0x8, 0xdfd6, 0x35e, 0x40, 0xfffffffe, 0xe211, 0x0, 0xff, 0x1000, 0xaa, 0x7, 0x1, 0x90, 0x6, 0x0, 0x3, 0x0, 0x6, 0x7f, 0x5, 0x9, 0x80000000, 0x2, 0x10000, 0x52, 0x8, 0x80, 0x7f, 0x9, 0xffffffff, 0x22, 0x0, 0x1, 0x5, 0x7, 0x9a1c, 0xfffffffe, 0x2d, 0x6, 0x7ff, 0x1, 0xb, 0x0, 0x6, 0xaf4, 0x5475, 0x4, 0x1, 0x4, 0xc], [0x0, 0xe, 0x97d6, 0x6, 0x7ff, 0x6, 0x1, 0xfffffffa, 0x2, 0x0, 0x7, 0x2, 0x0, 0xfffffffe, 0x2, 0x9, 0x7, 0x76, 0x4, 0x6, 0x5, 0x7ff, 0x2, 0x5, 0x8a32, 0x4, 0x0, 0x8000, 0x100, 0x0, 0x7fff, 0x20, 0xd, 0x8, 0x8000000, 0x9, 0x3, 0x36a9, 0x6, 0x2, 0x4, 0x8, 0x7, 0x400, 0x0, 0x0, 0xfffffffb, 0x401, 0x3, 0x8, 0x54c, 0xfffff736, 0x7, 0xfff, 0x3, 0x0, 0x10000, 0x4, 0x1ff, 0x7610, 0xa2, 0x1b78, 0x6, 0x1], [0x8, 0x5, 0x677b4e7b, 0x5, 0x400, 0x0, 0x9, 0x1, 0x401, 0x3, 0x1, 0xffffffff, 0x2, 0x6, 0x9, 0x800, 0x80000000, 0x6b, 0x0, 0x6, 0x0, 0x5, 0x8, 0x8, 0x0, 0x1, 0x2, 0xc, 0x3, 0x7, 0x0, 0x7, 0x1, 0x6, 0x4, 0x400006, 0xff, 0x1, 0x7, 0x1, 0x9, 0x3, 0x7f, 0x2, 0x2, 0x10001, 0xb5fb, 0x400, 0x710, 0x9, 0xb173, 0x3, 0x7f, 0x7, 0x3, 0x5453, 0x1, 0x6ebf, 0x8001, 0x4, 0x1, 0x9, 0xd0d, 0x6]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) (async) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$uinput_user_dev(r3, &(0x7f0000000900)={'syz1\x00', {0x9, 0x0, 0x6}, 0x37b4, [0x8, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x10001, 0x8, 0x3, 0x1, 0x0, 0x0, 0x4, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x10000000, 0xbffffffb, 0x0, 0x0, 0x4, 0x7e, 0x0, 0xfffffffd, 0x0, 0x6c230c0, 0x1, 0x0, 0x9, 0x3, 0xffffffff, 0x0, 0x4, 0x80, 0x20, 0x7, 0x3a3, 0x0, 0x0, 0x0, 0x8, 0x3, 0xfffffffb, 0x0, 0xfffff714, 0x200, 0x7, 0x2, 0x7, 0x0, 0x2000002, 0x20004, 0x0, 0x0, 0x105, 0x0, 0x800000], [0x11, 0xffff0003, 0x20003, 0xfffffffc, 0xffffffff, 0xe109, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xf3, 0x0, 0x4, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x218001, 0xfffffffe, 0x6, 0x100, 0x8, 0x10000, 0xec6a, 0x0, 0x40000000, 0xffffffff, 0xfffffffc, 0x8, 0xffffffff, 0x7fffffff, 0xfffffffc, 0x1, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0xfffffffc, 0x4, 0x18c, 0x0, 0xffffffff, 0x4000802, 0x5, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x4, 0x9dd, 0x80, 0x8000, 0x40000004, 0x6, 0x3, 0x8f, 0x7], [0xf, 0x4, 0xfffffffe, 0x40000000, 0xffffffff, 0x3, 0x9ffffff, 0x0, 0xfff, 0x0, 0xfffffffd, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x401, 0x0, 0xa, 0x420, 0xc, 0x4, 0x0, 0x0, 0x1ff, 0x3, 0xfffffffc, 0x6, 0xfffffffc, 0x2af, 0x5, 0x9, 0x0, 0x10004, 0x3, 0x0, 0x0, 0x0, 0x401, 0x401, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0x3, 0xd73d, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x3ff, 0x400000, 0x0, 0x7, 0x0, 0x0, 0x1, 0xd, 0xffffffdb], [0x3, 0x0, 0x4, 0xc58, 0x3, 0x401, 0x1000, 0x215, 0x4, 0x5, 0x100, 0x3, 0xa, 0xf862, 0x80, 0x0, 0x6, 0x0, 0x7d, 0x5, 0x7ffd, 0x9, 0x4, 0x72, 0x0, 0xfffffffe, 0x0, 0x8, 0x5d66, 0x1, 0x800000, 0x9, 0x3, 0x0, 0x0, 0x6, 0xbfb6, 0x4, 0x8, 0x5, 0x9, 0xfffffffd, 0x1, 0xffffffff, 0x100, 0x4006f, 0x6, 0x3, 0xfffffffd, 0x53591a27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x80000000, 0x5, 0x8]}, 0x45c) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6ead"], 0x0) (async) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6ead"], 0x0) syz_usb_ep_write(r4, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1") 5m18.795211717s ago: executing program 32 (id=123): socket$inet6_sctp(0xa, 0x1, 0x84) socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) (async) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000380)={0x0, {0x39b14d69, 0xfffffffc, 0x5, 0x4, 0x3, 0x80000001}}) write$uinput_user_dev(r3, &(0x7f00000003c0)={'syz0\x00', {0x5, 0x100, 0x8, 0x7985}, 0x1e, [0x7fffffff, 0x7, 0xfffffc00, 0x2, 0x2071, 0x7, 0x0, 0x7, 0x3, 0x2, 0x0, 0xf6a3, 0x4, 0x8, 0x1000, 0x7ea, 0x51580259, 0x2, 0x81, 0x0, 0x5, 0x5, 0xb, 0xda, 0x8, 0x2, 0xe0c, 0x7, 0x5, 0x3, 0x2, 0x9, 0xfffffff9, 0xffffffff, 0x2, 0x3, 0x9, 0x1, 0x7, 0x7, 0x0, 0x400, 0x6, 0x3, 0x6, 0x14bc, 0xfff, 0x8, 0x0, 0x4, 0x7, 0x82, 0x4, 0x8, 0x5b4c508f, 0x8, 0x4, 0x7, 0x3, 0x7, 0x15c, 0x8, 0x9, 0x5], [0x7, 0x9, 0x2, 0x7, 0x4, 0x7ff, 0x8000, 0x6, 0x7ff, 0x2e2d, 0x6, 0x2, 0x8, 0x4, 0x8, 0xdfd6, 0x35e, 0x40, 0xfffffffe, 0xe211, 0x0, 0xff, 0x1000, 0xaa, 0x7, 0x1, 0x90, 0x6, 0x0, 0x3, 0x0, 0x6, 0x7f, 0x5, 0x9, 0x80000000, 0x2, 0x10000, 0x52, 0x8, 0x80, 0x7f, 0x9, 0xffffffff, 0x22, 0x0, 0x1, 0x5, 0x7, 0x9a1c, 0xfffffffe, 0x2d, 0x6, 0x7ff, 0x1, 0xb, 0x0, 0x6, 0xaf4, 0x5475, 0x4, 0x1, 0x4, 0xc], [0x0, 0xe, 0x97d6, 0x6, 0x7ff, 0x6, 0x1, 0xfffffffa, 0x2, 0x0, 0x7, 0x2, 0x0, 0xfffffffe, 0x2, 0x9, 0x7, 0x76, 0x4, 0x6, 0x5, 0x7ff, 0x2, 0x5, 0x8a32, 0x4, 0x0, 0x8000, 0x100, 0x0, 0x7fff, 0x20, 0xd, 0x8, 0x8000000, 0x9, 0x3, 0x36a9, 0x6, 0x2, 0x4, 0x8, 0x7, 0x400, 0x0, 0x0, 0xfffffffb, 0x401, 0x3, 0x8, 0x54c, 0xfffff736, 0x7, 0xfff, 0x3, 0x0, 0x10000, 0x4, 0x1ff, 0x7610, 0xa2, 0x1b78, 0x6, 0x1], [0x8, 0x5, 0x677b4e7b, 0x5, 0x400, 0x0, 0x9, 0x1, 0x401, 0x3, 0x1, 0xffffffff, 0x2, 0x6, 0x9, 0x800, 0x80000000, 0x6b, 0x0, 0x6, 0x0, 0x5, 0x8, 0x8, 0x0, 0x1, 0x2, 0xc, 0x3, 0x7, 0x0, 0x7, 0x1, 0x6, 0x4, 0x400006, 0xff, 0x1, 0x7, 0x1, 0x9, 0x3, 0x7f, 0x2, 0x2, 0x10001, 0xb5fb, 0x400, 0x710, 0x9, 0xb173, 0x3, 0x7f, 0x7, 0x3, 0x5453, 0x1, 0x6ebf, 0x8001, 0x4, 0x1, 0x9, 0xd0d, 0x6]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) (async) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$uinput_user_dev(r3, &(0x7f0000000900)={'syz1\x00', {0x9, 0x0, 0x6}, 0x37b4, [0x8, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x10001, 0x8, 0x3, 0x1, 0x0, 0x0, 0x4, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x10000000, 0xbffffffb, 0x0, 0x0, 0x4, 0x7e, 0x0, 0xfffffffd, 0x0, 0x6c230c0, 0x1, 0x0, 0x9, 0x3, 0xffffffff, 0x0, 0x4, 0x80, 0x20, 0x7, 0x3a3, 0x0, 0x0, 0x0, 0x8, 0x3, 0xfffffffb, 0x0, 0xfffff714, 0x200, 0x7, 0x2, 0x7, 0x0, 0x2000002, 0x20004, 0x0, 0x0, 0x105, 0x0, 0x800000], [0x11, 0xffff0003, 0x20003, 0xfffffffc, 0xffffffff, 0xe109, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xf3, 0x0, 0x4, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x218001, 0xfffffffe, 0x6, 0x100, 0x8, 0x10000, 0xec6a, 0x0, 0x40000000, 0xffffffff, 0xfffffffc, 0x8, 0xffffffff, 0x7fffffff, 0xfffffffc, 0x1, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0xfffffffc, 0x4, 0x18c, 0x0, 0xffffffff, 0x4000802, 0x5, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x4, 0x9dd, 0x80, 0x8000, 0x40000004, 0x6, 0x3, 0x8f, 0x7], [0xf, 0x4, 0xfffffffe, 0x40000000, 0xffffffff, 0x3, 0x9ffffff, 0x0, 0xfff, 0x0, 0xfffffffd, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x401, 0x0, 0xa, 0x420, 0xc, 0x4, 0x0, 0x0, 0x1ff, 0x3, 0xfffffffc, 0x6, 0xfffffffc, 0x2af, 0x5, 0x9, 0x0, 0x10004, 0x3, 0x0, 0x0, 0x0, 0x401, 0x401, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0x3, 0xd73d, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x3ff, 0x400000, 0x0, 0x7, 0x0, 0x0, 0x1, 0xd, 0xffffffdb], [0x3, 0x0, 0x4, 0xc58, 0x3, 0x401, 0x1000, 0x215, 0x4, 0x5, 0x100, 0x3, 0xa, 0xf862, 0x80, 0x0, 0x6, 0x0, 0x7d, 0x5, 0x7ffd, 0x9, 0x4, 0x72, 0x0, 0xfffffffe, 0x0, 0x8, 0x5d66, 0x1, 0x800000, 0x9, 0x3, 0x0, 0x0, 0x6, 0xbfb6, 0x4, 0x8, 0x5, 0x9, 0xfffffffd, 0x1, 0xffffffff, 0x100, 0x4006f, 0x6, 0x3, 0xfffffffd, 0x53591a27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x80000000, 0x5, 0x8]}, 0x45c) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6ead"], 0x0) (async) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6ead"], 0x0) syz_usb_ep_write(r4, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1") 3m38.983818104s ago: executing program 4 (id=522): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x324, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffe, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xe, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect$uac3(0x4, 0xdc, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xca, 0x3, 0x1, 0x8, 0x10, 0x9, {0x8, 0xb, 0x2, 0x0, 0x1, 0x20}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x49, 0x9}, [@mixer_unit={0x9, 0x24, 0x5, 0x3, 0x78, "eddccaa0"}, @processing_unit={0x11, 0x24, 0x9, 0x2, 0x1, [0x2, 0x2, 0x0]}, @power_domain={0xa, 0x24, 0x10, 0x8, 0x6, 0x7, 0x5, "d9"}, @power_domain={0xf, 0x24, 0x10, 0xe8, 0x8, 0xd2a, 0x9, "ef52eee969cc"}, @source_unit={0xc, 0x24, 0xb, 0x4, 0x1, 0xf434, 0x3, 0xfccc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x9, 0xdf4, 0xd2, 0x1001, 0x8, 0x4, 0x3, 0xb}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x2, 0x7, 0x8, {0xa, 0x25, 0x25, 0x3ec9, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x2, 0x10, {0xa, 0x25, 0x25, 0x0, 0x3, 0x4}}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x201, 0xc6, 0x9, 0x5, 0x8, 0x1}, 0xf, &(0x7f0000000380)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x51, 0xc252}]}, 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x409}}, {0x87, &(0x7f0000000440)=@string={0x87, 0x3, "128b82f97510f1f32994ab85dd06ab74d18b3b1d29397aa2840e1a92c6ff7a906ff20545651cb4754aaf0ea6e5ed95605ee5ff960dc824a19609a4060b80bf070661da55f9f874422538421080d1ad599aff71506ec70835e8963b179bb58f2021924cb60577ca1d44cfa8465e6f4608280b83f977f979c86b6deea86aeffcf28ea848080f"}}]}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0xfffffffc, 0x1, 0x7}) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000180)=0x7ff, 0x4) syz_usb_control_io$uac3(r2, &(0x7f0000000740)={0x14, &(0x7f0000000600)={0x40, 0x22, 0x26, {0x26, 0x5, "9c1d66cd734cc94df3006ee7e708bcd582c8a242b216370a4606b9f1b6b87ebe768b8a62"}}, &(0x7f0000000640)={0x0, 0x3, 0xbf, @string={0xbf, 0x3, "18939c288bf295ecd368f689fb8051a249b77a2174627529d0b25002de83b27f8388543823d7c5fe8727cc8449aadf08371de274f31339b081ce7e25614d3f8ccd983b868a99e8491f31487ccfd98d3f434fe4cae652da91adb8dc9895c114b171a0a2ef53ca79ad5fe14214aef9a4855db3410ed470e4ec8139f4cfce98ada1ea321551174e16ac84c472014606796e7ab719f655f9d14be483ed32c3f6099459a7f301b23e3c616914d1f83da1d9b02c10e43b9f6f43fc385d659d91"}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000780)={0x0, 0xe, 0x6c, "798840cf8d5359733f73337d2da453f9b800e037792087e4e6b37e3c24a1d105b9f79335b56c9ba8979c4c54cc7bd48f5c7c954060edc4343bb37750f7e2a158fdbc2c2484809a239df048a2c7e6bb3082650ed26dd897443f1a4b1133661fd9296cb974562e6d9fa41d7788"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000880)={0x20, 0x81, 0x3, "a14262"}, &(0x7f00000008c0)={0x20, 0x82, 0x3, "1bb186"}, &(0x7f0000000900)={0x20, 0x83, 0x2, "d430"}, &(0x7f0000000940)={0x20, 0x84, 0x2, "1f3c"}, &(0x7f0000000980)={0x20, 0x85, 0x3, "750e16"}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8905, &(0x7f0000000340)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xc0840, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r5], 0xc4}}, 0x0) 3m37.126810006s ago: executing program 4 (id=527): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000000)="da95a97b152b9318cf6e14969051de4cad53c3e2b2956a4420ea9b264b0606ffcd5706c1eae05fe7ee5cf3144ad22e44e4922b7dfb76") (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r3, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x4375}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40081}, 0x10) (async) r4 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x101001) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x5, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}}, 0x4000050) (async) r6 = signalfd4(r4, &(0x7f0000000340)={[0x8]}, 0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0xbe3d}}, './file0\x00'}) (async) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$OCFS2_IOC_GROUP_ADD64(r8, 0x40186f03, &(0x7f0000000400)={0x200, 0x10, 0x8, 0x3}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000440)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f00000005c0)={0x48, 0x8, r9, 0x0, 0x4, 0xde, &(0x7f00000004c0)="5e14fef4578b62a042fcd8692afd246fa304b6ea4a71505a5c8fb4b8e3a2ffc6922a0cd8c29d3ae5861603e5a58e108a5419cbcabeb90170b4a196bc86d7afa2f23eb1f603f7ca9240ad9b9d84a26f6b71164402e96e5f7d318ef53cbd57955c3ce0b4dd807dd10a8a7f0977369a1b9e57cfd1c97e7a5c8c873974ab0f25f3788a883fcb6b07de80901cf7a18f2cdafb4877a06218078b53e9e1d6a8f56737c11c752ee3cb4781691128647051d11ee598a1a61bd3c660b9b7dedab718aab1379edabdcb9c5eef6e422f5584704e2c43c8a98b707f5ae53511f582630329", 0x1}) (async) ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f0000000640)=0x5db) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000680)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r9, 0xc00864bf, &(0x7f00000006c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f0000000700)={0x0, 0x1, r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000740)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r6, 0xc01064c4, &(0x7f00000007c0)={&(0x7f0000000780)=[r10, r11, r12], 0x3}) (async) open(&(0x7f0000000800)='./file0\x00', 0x120301, 0x18) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000880)={{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000980)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000000f80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f40)={&(0x7f00000009c0)={0x568, 0x35, 0x4, 0x70bd2a, 0x25dfdbfb, {0x12}, [@generic="77c5cceadc6464d9047b909b43d98e4a15e2238375479ec2f9a64fda9dc1d5645e85c4d642504faae1d3a66e5cfd2bca6503f71f21c3abcff4a360d6766658ae8948c835203c3c6b5a54163f95e6b65383714ad3941d3139745a4f28861f8ecf4b37d9fd41dda5fa30c9a36859366df92b0f000b533e629b79c4f8a287142d542db0efc73e29e3720b761ae55bae67a7b38b8fdec43b6c99d52905b8a57a32cd1e5f8dba", @typed={0x14, 0xa1, 0x0, 0x0, @ipv6=@local}, @generic="f7df2279e1877adaa413fa5a97a3408305dc217e38851758425500cd4c6d2e0efcc97f2dc46ce98693f4da00725f3a3828be97f6d884c1425780d51f8049a085327e7bab8bd954c9c49c711c48626bfc9e1b29addee61d2313e95a812148d05669e5dc9a732019e76a14a20dc4716fabbceaf3ade7ec1ed963dd8d", @typed={0xc, 0x6a, 0x0, 0x0, @u64=0x6}, @generic="6ba0372c657c4ba54923f50bb1d95d84ad8d3c7939afe13b018a19e32a01b26ed549e32692ee0344ea2b2d3aa61c2d966115485d0c6c12e5a7ec5410451201d5a266c4cae761497c68f2084dddb3ef8a44b5196b52b999e87fbe9786f2f7091a9ff44f7b2b9cc020467fe0068eef5b9d830e6c9d39cc35af530392142b2406fd209277f1b0cc94226d2bdafa79012a3cccdce3057a3f6e0135f34c059cf0d33fdf95f868ade13f7c6feebeb6d0c25c39aea2c97cff999d0d4b52b4b944a63d8162dfb6c279b1d8d5c2c4026ed9936439b0b0fea4fe664b1e988ccaa92e96f1f11b38f9a59a42f8adce00d748f896852cecc8cc3805edb87f", @generic="b0c1e9341b225bc72e6a265e18d663319c017ccef17fbd611d5f9afa4b49c1e8c1f58d3ec25db209cd147d887085166c3d66a0495130cff033002fb0d8a849b0f211e86d7c4143e8eecb696a3d", @nested={0x18e, 0xdb, 0x0, 0x1, [@typed={0x8, 0x24, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x41}, @nested={0x4, 0xed}, @generic="4eef91b7ba04cfcd0097b3d710059303a2a97e1393207e62699899576f9338e1c1769bdbc9c1b82a0daed753feead5edd6a9e97edbe4602b3fd9b5befe20525b724a8d4d4b7199cabb08cf897b7f8e70ed1ba032e9353c8560fa4466319c1ec4d330596743f1de7086b7e93516fd41bc4cebe4f9f8b82a5f711edfa4e22c2d37d2ae4160118121551d22c54c8e7a5d6e8e9fe557ed35f368b0c7ad341cf82fc3cf341fc69d98a097f89f5ea37e40728354cc6b09b8185e731a5dd1", @typed={0x4, 0xfa}, @generic="0e0c630c3e181486b64705225f5b18ffb7ddb066ca8181fe462b325f414cdcc36fa1eb0212c41ffcecaae0829cb9321843df8c22a1da55e65ae30df5eb84363ae18ea7f7a67a1dcc5ed631662e16e010e47d1879aa8efd8f58a5215404cf5d633ed1ddb549b47ee8b97cb1426fc3c742a5b784be6d94406f70d3ed7aca342930ea9ae173a2f12b93dc3bcc364dc9756cc247b43ec4f1adb55d0d3c39a6f3713516fe314032fe0a53e1441c1a3c639beeb0556c42f13f37ea96e88b"]}, @nested={0x92, 0xcd, 0x0, 0x1, [@nested={0x4, 0x56}, @typed={0x8, 0x46, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0xa, 0x0, 0x0, @uid=r14}, @generic="6e4f7705cb51c1fcc5e2724b66c547a07c2044ba224769de3bc93d2eb31dffc2fa23defeaefa22099c374cd3ade0f27ae9a3e04fc2ff2dc067fca7b746934dfa2c5f26ba75693a113e7fa0f02a10dd4643ada872ffcfdc4de85529b67d48c0bf7bcef99bda82039c997edf3bee4f6ab76cdc", @nested={0x4, 0x12c}, @nested={0x4, 0x124}]}, @generic="08cdcd01a18672564a56e7420440d5dc70a5d13f4ae1c94fdff2b6cedad415996f2ac913b699d9864242ebdabe13cff714cb44f4c51568a41fdef3340fb869ca9e9864d34967c2da98058659133cd5d71ad46f0ff5af0dcc92a435dffb7b807da1839131deb400e3a1d87c00db8fcd63ae7a6f6ef738a39a9d7fdba18b6713a2c78c723d525acb1e6a548158a253fb3b082ce7f2ef3f3f98a10bfe5df451b5a059f2c33ca22c3b958df003b7"]}, 0x568}, 0x1, 0x0, 0x0, 0x4}, 0x8084) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r6, 0xc0106441, &(0x7f0000000fc0)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r2, 0xc028644b, &(0x7f0000001000)={r15, 0x8001, 0xe0000, 0x9, 0x10001, 0x0, 0x9, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r16, &(0x7f0000001380)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001340)={&(0x7f0000001080)={0x2ac, r3, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) sendmsg$TEAM_CMD_NOOP(r16, &(0x7f0000001700)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001400)={0x290, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r13}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r13}, {0x160, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x52f}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x0, 0x69, 0xfc, 0x8}, {0x1, 0x3, 0xff, 0x5}, {0x9, 0x2, 0x1, 0x4}, {0x8, 0x2, 0x4, 0x5}, {0x7, 0xf, 0x15}, {0x7, 0x1, 0x2, 0x10000}, {0xacb, 0x7f, 0x2, 0x8}]}}}]}}, {{0x8, 0x1, r13}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r13}}}]}}]}, 0x290}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 3m36.916529467s ago: executing program 4 (id=529): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1ea7, 0x907, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0xc, "", [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x10, 0xfb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xb5, 0x6, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB='*#('], 0x0, 0x0, 0x0, 0x0}, 0x0) open(0x0, 0x102, 0x1c0) 3m35.230173686s ago: executing program 4 (id=534): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) r1 = memfd_create(&(0x7f0000001080)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\xfb\'\t\x19\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b\xca\xb3\xf0\x1e\xe9+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZj*\xa7z\xfd\xb9\n\xed\'\x92\xfe\xe7w\xf1$\xeax\xa7%(a\xba\xaee\xb6P}\x1f\x06og\"F\xeeL\x16[\xc6\xfbn\r\xa1\xbd\xa7\xdbm\x94G2v\xc6x\xa3\x8a\xfb\xfa\xbb\xcc\x8f\x8a\xfb-%6\x1a4\fbTR\xb4)5?NL\x96\x85\x14\fK\xfb<\xa4\f&g\n\xe1\xc8\x9f\"X\x84n\xce\tIo\x1c\xb4\xdeu_\x93Y\xb5\n\'\xba\xbdv\x8aU\x88\x88\xa9\xcaiv\xbcc\xc3\xb9\xb3\x1d\xea\xdf\x1cQ\x02\xf3\xe8+U\f(h\x1a+\x9d\xae\x19\xf2\x8fr\xca\xa4NUD\x00\xab\xe8\xbf+\xa5\xeb\xaf\x17\x8e\xfbQ\x05\xed!\xfe_L\xb1\x97\xe7\x02)\x1e\xd0\xfcj#r\xcb\xb4\xa6\t\xc3:w\x0f\x82,\xd3\xe5\r\xe1\x85\v\xc5y\x88\x89z_)\x8dV>M5\x90\xd3.\x8a_\xfa\x9d\x98\xef\x97\tiBY5\x84~\xff\x8d\xbb}I\xa1)\xea\xb5l\x19\x00\xac\xc1\x14#\xbc=\xf4\xac\xde}\xf5\x12\xc5\x83\xf6\v\x1b\x92\x02\"\x10^\n\x96\xc2\xbcK9\x02\xb74B\xb3\xcbt\xde\x9e\x82S\x8f\xdb\x94\x02\x90Sb\xb8\xcbS\xbb\xca\x83x\xd5j\x90\xf1\x91\xe0\x8aQl\n^\xbc\xea\x90$\xb7\xaa)\xad,\xb1g\x94UGj\x8c\xc6}U\x02\\\"fb\xc3\x0e\x84%F\xa5\x14\xfb\x89t\xef\a\xdb\xab/\xe3\x8c 5A\xcd\x02t', 0x2) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x800, &(0x7f00000001c0)='grpquota') lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file2\x00', 0x40, 0x23) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$PTRACE_SETSIGMASK(0x420b, r2, 0x8, &(0x7f0000000100)={[0x3]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) ptrace$cont(0x9, r2, 0x1, 0x1ff) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009002420"], 0x0) 3m33.158764069s ago: executing program 4 (id=540): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xc048819}, 0x80000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x10, 0x0, 0x2000000, 0x0, 0x2700, 0x6, 0x0, 0x2, 0x20000000}}) (async) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x404c840) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10005, 0x1, 0x4, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000380)="66b80e010f00d0b0060f21a20f01c50f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b949030000c744240000900000c74424020b300000c7442406000000000f011c24b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x7a}], 0x1, 0x90, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m32.291343165s ago: executing program 4 (id=542): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000000040)=0x2, 0x4) listen(r0, 0x3) 3m32.018583276s ago: executing program 33 (id=542): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000000040)=0x2, 0x4) listen(r0, 0x3) 2m30.100639725s ago: executing program 5 (id=751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x40000) 2m30.007639673s ago: executing program 5 (id=752): socket$inet6_tcp(0xa, 0x1, 0x0) (async) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x420401, 0x0) fsetxattr(r0, &(0x7f0000000100)=@known='com.apple.system.Security\x00', &(0x7f0000000140)='\x00', 0x1, 0x0) (async) syz_usb_connect$uac2(0x0, 0xa3, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000010410e4942400001020301090291000301090008080b00020100201009040000000101200009240100080731000611240804050100010002000300020000000b2406020406040600f2000c2403060004080502"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 2m28.544849751s ago: executing program 5 (id=753): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) select(0xff00, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x100}, 0x0, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf250900000008000300", @ANYRES32=r4, @ANYBLOB="0800370002"], 0x34}, 0x1, 0x0, 0x0, 0x48014}, 0x489c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty, 0x8}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000005, 0xdb}, 0x9c) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x80000) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='vlan0\x00', 0x10) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffffffffffffffff, 0x2}, 0x19) write(r0, &(0x7f0000000040)='\t\x00\x00\x00', 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="c125b13b", @ANYRES16=r7, @ANYBLOB="f32700000000fedbdf2507000000bc0002804400038008000100010100000800010009000000080001000800000008000100b0000000080001000200000008000200ff0700000800020002000000080002000700000008000200ff0f00000800020000000010080001000800000008000100a7f2ffff080001000300000004000400040004003c00038008000100030000000800020002000000080001000200000008000100080000000800010007000000080002000300000008000200030000000800020007000000"], 0xd0}, 0x1, 0x0, 0x0, 0x6}, 0x4020) 2m28.167192802s ago: executing program 5 (id=755): r0 = syz_socket_connect_nvme_tcp() r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r1) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "0f57e611c8da8af32ed98a22d3e0ac8492df23752344507178c06d80db05e73f89c0fcfd02d5c82d25ecd9199a85cb38bbf4295c1f16c4d6fcec69267741c40c", 0x13}, 0x48, r2) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x55) setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, &(0x7f00000001c0)={0xd, 0xf, 0x5, 0x6}, 0x10) keyctl$unlink(0x9, r3, r2) recvfrom$inet_nvme(r0, &(0x7f0000000080)=""/160, 0xa0, 0x1, 0x0, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="305c06", 0x3, 0xfffffffffffffffe) capset(&(0x7f0000000040)={0x20071026}, 0x0) syz_usb_connect(0x3, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="92010002508bf5088205cae60bd30102030109023400010301600209042d0202ff6229010a24010c000302010209050101000203ff0609050a030800030101072501"], 0x0) syz_socket_connect_nvme_tcp() (async) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r1) (async) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "0f57e611c8da8af32ed98a22d3e0ac8492df23752344507178c06d80db05e73f89c0fcfd02d5c82d25ecd9199a85cb38bbf4295c1f16c4d6fcec69267741c40c", 0x13}, 0x48, r2) (async) pipe2$watch_queue(&(0x7f0000000180), 0x80) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x55) (async) setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, &(0x7f00000001c0)={0xd, 0xf, 0x5, 0x6}, 0x10) (async) keyctl$unlink(0x9, r3, r2) (async) recvfrom$inet_nvme(r0, &(0x7f0000000080)=""/160, 0xa0, 0x1, 0x0, 0x0) (async) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="305c06", 0x3, 0xfffffffffffffffe) (async) capset(&(0x7f0000000040)={0x20071026}, 0x0) (async) syz_usb_connect(0x3, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="92010002508bf5088205cae60bd30102030109023400010301600209042d0202ff6229010a24010c000302010209050101000203ff0609050a030800030101072501"], 0x0) (async) 2m27.15069968s ago: executing program 5 (id=758): prctl$PR_SET_VMA(0x3d, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000a98000/0x1000)=nil, 0x1000, 0x0, 0x110, r0, 0xcc0d0000) (async) mmap(&(0x7f0000a98000/0x1000)=nil, 0x1000, 0x0, 0x110, r0, 0xcc0d0000) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400), 0x121302, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)=0x4080000) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x3053, 0xffffff4a) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x3053, 0xffffff4a) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) (async) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r1, 0x0, 0x0, 0x7ffffffff000, 0x0, 0x0) (async) recvfrom(r1, 0x0, 0x0, 0x7ffffffff000, 0x0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f00000002c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x120) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in=@multicast1, 0x0, 0x2b}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x1, 0xff, 0x0, 0xfffffffc}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@empty, 0x3502, 0x0, 0x0, 0x0, 0x4}, {{@in6=@loopback, 0x4d2, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x0, 0x0, 0x7}, {{@in6=@mcast2, 0x4d5, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in=@empty, 0xffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x0, @in6=@mcast1, 0x0, 0x1, 0x0, 0xd2}]}]}, 0x23c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r7, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x8000}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_usb_connect$uac1(0xb952b2dab7ce9d19, 0xa6, &(0x7f0000000080)=ANY=[], 0x0) 2m25.495191606s ago: executing program 5 (id=761): fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x1, 0x0, 0xc, 0xfffffffffffffffd}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, 0x103) mount$cgroup(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000080)={[{@nofavordynmods}]}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000280)="e3", 0x1, 0x40004, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000380)="98e2d2", 0x3, 0x4004080, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0), 0x242002, 0x0) fcntl$setstatus(r2, 0x403, 0x26c00) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x80082102, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'rose0\x00'}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x129f61) poll(&(0x7f0000000040)=[{r3, 0x400}], 0x1, 0x4) 2m9.749630104s ago: executing program 34 (id=761): fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x1, 0x0, 0xc, 0xfffffffffffffffd}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, 0x103) mount$cgroup(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000080)={[{@nofavordynmods}]}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000280)="e3", 0x1, 0x40004, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000380)="98e2d2", 0x3, 0x4004080, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0), 0x242002, 0x0) fcntl$setstatus(r2, 0x403, 0x26c00) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x80082102, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'rose0\x00'}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x129f61) poll(&(0x7f0000000040)=[{r3, 0x400}], 0x1, 0x4) 9.423090871s ago: executing program 3 (id=1230): syz_usb_connect(0x5, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x55, 0x5e, 0x43, 0x8, 0x10d2, 0x3620, 0x839c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x45, 0x80, 0xc, "", [{{0x9, 0x4, 0x5b, 0x6, 0x0, 0xc2, 0x4, 0x43, 0x2}}]}}]}}, 0x0) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x55, 0x5e, 0x43, 0x8, 0x10d2, 0x3620, 0x839c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x45, 0x80, 0xc, "", [{{0x9, 0x4, 0x5b, 0x6, 0x0, 0xc2, 0x4, 0x43, 0x2}}]}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x9, 0x0, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x9, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$l2tp(0x2, 0x2, 0x73) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000280)="36642ef466b91004000066b80b00000066ba000000000f30360f01c566b94b08000066b8fa5b000066ba000000000f300fae8fc30066b80500000066b9d40000000f01d9f4440f20c066350a000000440f22c00f070fc72a", 0xfffffffffffffeda}], 0x1, 0x74, 0x0, 0x0) pipe(&(0x7f0000000580)) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='t\x00ans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) accept4$alg(r5, 0x0, 0x0, 0x80000) (async) accept4$alg(r5, 0x0, 0x0, 0x80000) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x401, 0x40000000000000, 0x200000000000, 0x0, 0x80000000000, 0x7}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x1000000002, 0x0, 0xfffffffffffffffc, 0x6}, 0x0, 0x0) syz_usb_connect(0x1, 0x82c, &(0x7f00000005c0)={{0x12, 0x1, 0x250, 0x94, 0x15, 0x72, 0x10, 0x10c4, 0xea7a, 0x9e04, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81a, 0x3, 0x2, 0xfe, 0x0, 0x4, "", [{{0x9, 0x4, 0x58, 0x81, 0x6, 0x5d, 0xd5, 0xb6, 0x8, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "d29c"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xf800, 0x7698, 0xff}, [@obex={0x5, 0x24, 0x15, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x0, 0x5, 0x3, 0x0, 0x90}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x4}, @dmm={0x7, 0x24, 0x14, 0xed, 0x1000}, @mbim={0xc, 0x24, 0x1b, 0x40, 0xfff7, 0x8, 0x9, 0xb147, 0x79}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "8b9fe5c4bed3"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xa, 0x0, 0x10}, [@mbim_extended={0x8, 0x24, 0x1c, 0xcc6, 0x9, 0xfff8}, @ncm={0x6, 0x24, 0x1a, 0x5, 0x8}]}], [{{0x9, 0x5, 0x2, 0x4, 0x3ff, 0x35, 0x5, 0x4}}, {{0x9, 0x5, 0x6, 0xc, 0x3ff, 0x1, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xfffe}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfc, 0xd}]}}, {{0x9, 0x5, 0x7, 0xc, 0x400, 0x5, 0x7, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3e, 0xfff}, @generic={0xf1, 0x31, "fd90bfd0730888d6deb65345c0905bbdbd7ab21128d9a2ea87f5c1ef56f1ac17a53cd94c75a99fedee027f97c9c4130517525b3c018c9bbf5fbdb4efd25f32b18d6bbc474b3475ca6487c553b943c89bb22e47c155c5a6e7165d2a7e1b7ec5b0dc8be4dad41ca21afdbb425419bae9445eb5d47e05df119cd29484baa151b8ea84991a73d5b8698bb109dd654aacf8bfcb6aacbe0f4a8706c1ba4dc037526e7047ee8b1a3cf9284858582cdc63a87cab6c9121b827163f755ae7f88a3cda4abacf1132ecc579829d1931e0502a9ea6baffbf6156941f6c9895e535d6607ce0ae4e6c4221ba9c9b0a4b67e49089454c"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x2, 0x4, 0xe}}, {{0x9, 0x5, 0x5, 0x4, 0x0, 0x80, 0x4f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x9}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x8, 0x5, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x5}]}}]}}, {{0x9, 0x4, 0x4, 0x1, 0x3, 0x7, 0x6f, 0x6b, 0x1, [], [{{0x9, 0x5, 0xe, 0x8, 0x10, 0x8, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xb}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x7f, 0x6, 0x43, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x5}]}}, {{0x9, 0x5, 0x3, 0x1, 0x10, 0xa, 0x4, 0x2b}}]}}, {{0x9, 0x4, 0x4e, 0x6, 0xf, 0x39, 0xa, 0x41, 0x5, [], [{{0x9, 0x5, 0x80, 0x0, 0x40, 0x4, 0x8, 0x5e, [@generic={0x19, 0x24, "50faa2130f1125c503816651fbf70dfa217662d414d573"}]}}, {{0x9, 0x5, 0x0, 0x7, 0x400, 0x31, 0x0, 0x0, [@generic={0x81, 0x0, "dd7d321b44e32bc1c19ff7acd229536653913c413861959bc63083a4ba50d9db4654904a33064518a0f2350c6b93c02ff5b246ea48979f66aae780db93c4733f02b510d90b513c97add3b25107a5c7305e4cd409d67b05df041c70e9fefcd90dca8e3ed9c76a0b5591fa5d8e788bef4040923d4da68444573685ba423d0278"}, @generic={0x23, 0x25, "dee1d573ce117c6c0782b6867e0808f94d6d666633818d167a85f17df45ce8f63b"}]}}, {{0x9, 0x5, 0x1, 0xd316e6539a82a1e6, 0x3ff, 0x5, 0x81, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xc}, @generic={0x56, 0x30, "10547b4d45bcb8a397791c704cb2818e0c9f728da3a29268dcc4aaef8f7904b73baea5ef27fdf6a004503d98b27a693beb76c95db4da676e175cda5c6901744dfcfe91b1ec0f59e3ffcfa4514157b4e01df7b46f"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x1, 0x5, 0x6, [@generic={0xc2, 0xe, "847063abb02e44f25a9cfa885c611823eb542b1d7cf7800cdaf3ab2f616564b3e821e5d13b0974ba5ba1c01acacd4a40b2a0a5f2c0f2b2b621a290952e5b7037a5267df1699bd2b3fc390cf915ac96bd70d5daf5d21a168844b4d39f8af89d5b97cae6aecfcd77874bca40fd548379041772f39a5d05275fcffec2460e78f44a6f0277d96ce144dfff5083eae0735682d1e3ab3ce231de1857285455d521c2f6c69e9af0081b5a79ee688b8b16d4e267d9098bb4f7ff38cd372f70b629476ad4"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0x3, 0x1, 0xf9, [@generic={0xdb, 0x3, "5c23756ea348f6c091ecea0ec18ce0e4797840b1c6caf418dff920cfae54a2b752f37e46d3d21600d3f3502b55ebc3f4e8f167a587f6632b0b011c68fdc69a80aec62b8751f2939e656ed0f7741716971826520b59c24ca79ba5610fb4f2a35a0299fd03f3b84f64477f6315ffd584cac673714db9db3d2969ffaa93967e9f6833abe180939946cdfd1870284ad70a79eb1d74fccca201c6b796c17c7dbfad933e9f2ad04bfa9c6bd725d6d3d8b6e158aedfb0555b6c5706a067f15e8acb3119a2486460a66da2d94752151fdfbcd9623503fa72cd4beea7bb"}, @generic={0xe7, 0x8, "6464645299e59b156d764f2532daa775cff5e1988413618510fd09f0ad40c49495aac8d1c386471d9d89724317232a45cd6f27ef315596321e908da12969a58f6808b9b67d06a2bece211dc54e58f2f5eba6f9af0fbd8dca30a82a93c40320cf445a6919d5f361bcbded2bc1e1c66a24ff08823c32108b52d4788247380aeb8b74f62252ed0536f13ea6ead3ef127b9466410d58559496e24982e886628134f80a65cceab4649a8a822296e7c19c1b5fb4b7bb733ec9a83261cc594a2fa9468260d7d09d8cbdcb9302d7741c22b16d86f0564c72dc8fcbc6485d7bfa55a84af48193ad8f68"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x7, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7}]}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0x8, 0x7, 0x5, [@generic={0x35, 0xf, "f673ad02f025195c68df944f10de082b45a0475e907bbd6b6a158569972cde61a4c7363fe927332fea28a3023f213e57e54793"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x40, 0x2, 0x2, 0x45, [@generic={0xab, 0xe, "f2a2783de3390f271c8363cc26bced4705e530120d543f76a7646e13ac15df6f56678a3274d7d34a57692660b0edc24ddf709ba6ea1f5d81424ae28a3b09ae07dc2e160358407160c7c16cd46b3192ea345871f5118c66bf7db40683f44904c140d64a2a5e5c507f1f6ebd65ce4d88cc91cf6c5dcabae1d3ccf4b0153963425b460a45420df884f43f56c6a4a957e93ed3ffd9ecb18da5ed4c8587e4d80e2eff81b71aeade8f9c33f6"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x1e, 0x4}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x7, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0xfff}, @generic={0x60, 0x1, "268a47865c655394e12ee48c7adb9d4ff0fdc15ddd20c924c008ca856378ccaceb6c86dd3af3e9c3b4512fd3a398699c50140d5c249cfc2098335d079cd66a27ae80c9c9c2b6ae9c2d89d2ac0123eb674aea0d783bbe922f038f869f797b"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x10, 0x8, 0x10, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0xc5}]}}, {{0x9, 0x5, 0xd, 0x4, 0x20, 0x9, 0xda, 0x4e}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x1, 0x7f, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x4}, @generic={0x87, 0x0, "ae882021025d099bc5883c8e9fb9c4d7545446ca664060526ed6d05a485ea114afcd36db16ec76b05bd38c38ac76c1bc74767ef56a8207e3ef375b51d89a8c3439467161b141da717422ac70046e22d4ec57536ef5e2ef4ee3e47fa63b72c76606218770fdf06749a5631aa8d639f9530e76eb8a1f0b477901b897d8ab2e600a6ce7c895c7"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x9, 0xe, 0xff}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0x10, 0x2e, 0x99, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}]}}]}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x300, 0x4, 0x6e, 0xff, 0x40, 0x9}, 0x46, &(0x7f0000000e40)={0x5, 0xf, 0x46, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x8, 0xa, 0x1}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x8, 0xf000, 0x7a, [0x3f00, 0x3f00, 0xc000, 0x0, 0xff3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "2acddb82f3026566bd5a3776c21574f9"}]}, 0x1, [{0x5e, &(0x7f0000000ec0)=@string={0x5e, 0x3, "2b0e9442ea1ba63959d7efe731a268780fb8c4bf2dbe3224820db8159816b29d41bc993eea5b42f2d2abb57d8b8c94e9af751e2612bcc45cad3d46ae3ea90364cc87044425098de0ee9f514097933ef8b83fc93f27aae6b8c6ce654e"}}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) 9.122200883s ago: executing program 3 (id=1231): syz_usb_connect$uac3(0x5, 0x85, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010e4087f014000010203010902730003010ab00f080b00020126309e0904000000010130000a2401060f000700000005240c07000904110000010230000904010101010230000905fe092001040a140a252505000000506fff0904", @ANYRES32], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r2, &(0x7f0000000000)=0x8, r2, 0x0, 0x4, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_connect(0x6, 0x68, &(0x7f0000000000)=ANY=[], 0x0) readv(r1, &(0x7f0000002a80)=[{&(0x7f00000003c0)=""/253, 0xfd}, {&(0x7f0000000500)=""/113, 0x71}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002840)=""/125, 0x7d}, {&(0x7f0000002700)=""/165, 0xa5}, {&(0x7f00000027c0)=""/111, 0x6f}, {&(0x7f0000002600)=""/236, 0xec}, {&(0x7f0000002980)=""/243, 0xf3}], 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x2, 0x80805, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="00009914a9b1", @ANYRES64=r3], 0xb2) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, &(0x7f0000000000)={0x2, "0dae10365f19f9dddacbbbbb0b924d1228a625186ac3ae0761bb609f0990708f75d25f43016d39746ac5dda722a9f33e30ee521894081a7df7ae8e860a8cc88f", {0x1, 0x6}}) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000240)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x7f, 0x3a, '#.]-&-}/', 0x3a, 'syz1\x00', 0x3a, './file0', 0x3a, [0x46, 0x43, 0x43]}, 0x37) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/60, 0x3c, 0x1, &(0x7f0000000100)=""/122, 0x7a}, &(0x7f00000001c0)=0x40) 7.386482322s ago: executing program 3 (id=1235): socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$cdc_ecm(0x5, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001020000102505a1a440000102030109025c000101002005090400020302060081052406000005240004000d240f010900000004000900320c241b05000b0005030500051524120700a317ad2bc1887cf93a0428afea79cb413996407f7238bef18aa88b045e4f01a607c0"], &(0x7f0000000540)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x0, 0x4, 0x5, 0x10, 0x8}, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xc2aef762f6062cca}}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1a) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/224, 0xe0}], 0x1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6}, 0x10) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000002c0), 0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f00000001c0)=0x3f) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000180)=0xb7) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet(0x2, 0x2, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) getsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000380), 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r8, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r7, &(0x7f0000004200)={0x2020}, 0x2020) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000080)='T01\n', 0x4}, {&(0x7f0000000040)='F', 0x1}], 0x2) 5.530788736s ago: executing program 2 (id=1239): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000111000/0x3000)=nil, 0x3000, 0x1, 0x40010, r0, 0xccc1f000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x14, r2, 0x1, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x20004010}, 0x840) (async) r3 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000001100)={&(0x7f0000000100)=[0x200, 0xd2, 0x101, 0x8, 0x0, 0x849, 0x5, 0xd76, 0x68, 0x0, 0x5, 0x3, 0x4, 0x7, 0xa5f, 0x1, 0x0, 0x7, 0x5, 0x4, 0x8, 0xfffffe53, 0x5, 0x3558, 0x0, 0x627, 0x9, 0x6, 0x8, 0x2, 0x66d3, 0x80, 0x5, 0x80000000, 0x81, 0x8, 0x4, 0x0, 0x1, 0x4, 0x5, 0x3, 0xfffffffd, 0x3, 0x5, 0x2, 0x3, 0x2, 0x0, 0xffffffff, 0x4, 0x5, 0xffffffff, 0x9, 0x400, 0x4, 0xfffffff8, 0x9b08, 0x6, 0xd, 0x7fff, 0xb5, 0x45, 0x4, 0x3, 0xa, 0x7abf, 0x1ff, 0x5, 0x800, 0x9, 0xe4bb, 0x5, 0x8, 0x0, 0x325180f4, 0x1, 0x5, 0x2, 0x101, 0xae2, 0x0, 0xffff0000, 0xfffffffb, 0x400, 0xcba5, 0x6, 0xab20, 0xb, 0x7, 0x0, 0x4, 0x8, 0x7, 0x1ff, 0x3, 0xa393, 0x3, 0x7fff, 0x8, 0x9, 0x3, 0x3, 0x5, 0x6d72a3a2, 0x7f, 0xffff, 0x0, 0x9, 0x9, 0xffb, 0x0, 0x1, 0x1, 0x1, 0x1, 0xfffffff5, 0x8, 0x48cc, 0x4f, 0x4f7c, 0x5, 0xc8, 0x2, 0x5c, 0xfffffffc, 0x4, 0x80000000, 0x800, 0x6, 0x9, 0x950d0c00, 0x0, 0x1, 0x8, 0xcc, 0x3, 0xcc72, 0xa, 0x5, 0x6, 0xefd, 0x7, 0x62c861f1, 0x7ff, 0x1, 0x3d, 0x4000000, 0x401, 0x7, 0x40, 0x2, 0xfffffffe, 0x5, 0xfffffffc, 0xcdf7, 0x40, 0x7, 0xe, 0x805, 0x2d, 0x5, 0x7ff, 0x7e0, 0x8, 0x0, 0xe, 0x4, 0x553, 0x2, 0x90, 0x992, 0xa, 0x400, 0x8, 0x4, 0x5, 0xc, 0x8, 0x4, 0x9, 0x1, 0xc, 0x5, 0x2, 0x368, 0x3, 0xbba3, 0x0, 0xd86, 0x5, 0x32c1, 0x1, 0x3ccb, 0xc, 0x80, 0x101, 0x2, 0xffff0405, 0x33, 0xfffff5e9, 0x7fffffff, 0x2, 0xb83, 0x4, 0x4, 0x7fff, 0xe, 0x8, 0x1, 0x1, 0x3, 0xc1f, 0x82a, 0x5, 0xfffffffe, 0x5875, 0xf, 0x2, 0x3, 0x78e, 0x7ff, 0x800, 0x10, 0x9, 0x1, 0x8, 0x1, 0x2, 0x9, 0xffffffff, 0x84f, 0xff, 0x0, 0x1, 0x1c00020, 0x4, 0xffff, 0x1, 0x9, 0x88a, 0xffffffff, 0x3a, 0x7, 0x8000, 0x1, 0x1, 0x6, 0x6, 0x1f7f21d6, 0x9, 0x80000000, 0x1, 0x1, 0x0, 0x0, 0x8000, 0x101, 0x1, 0x22d, 0x92, 0x4, 0x4, 0x0, 0x1, 0x8001, 0x8, 0x8, 0x6, 0x4, 0xa, 0xfffffffe, 0x2, 0x3, 0xe6, 0x6, 0x9, 0x7f, 0x8, 0x18, 0x1ff, 0x6, 0x9, 0x1ff, 0x1, 0x3, 0x6, 0x10001, 0xb0fd, 0x1, 0x401, 0xbea5, 0x2, 0x65c80, 0xff, 0x4, 0x0, 0xfffffff0, 0xc, 0x10001, 0x66a, 0x0, 0x51f, 0x4, 0x68, 0xb06, 0x0, 0x8, 0x6, 0x8, 0x11, 0x7fff, 0x1, 0x6, 0x1ff, 0x2, 0xd, 0x17, 0x0, 0x1, 0xfffffc01, 0x5, 0x2, 0x5cd80000, 0x6, 0x62, 0x6, 0x9, 0x8000, 0xbfae, 0x0, 0x0, 0x10000, 0x6, 0x80, 0x0, 0x7f, 0xffff, 0x1ff, 0xfffe0000, 0x0, 0x2, 0x5, 0x4, 0x6, 0x2fb, 0x3, 0xffff, 0x800, 0x6, 0xfffff63d, 0x5, 0x6, 0x1, 0x10001, 0x3, 0x3, 0x401, 0xb, 0x10, 0x3, 0x6, 0xf713, 0x0, 0xb5, 0x5, 0x9, 0x9, 0x3, 0x6, 0x10001, 0xc6, 0xed9, 0x3, 0x3b, 0x1, 0x3, 0xfffffff7, 0x6, 0x7f, 0xffffffff, 0x0, 0x7fff, 0x1000, 0x8, 0xfffffff3, 0x8, 0xffff, 0x6b, 0x6, 0xcb64, 0x8001, 0xe697, 0x7, 0xfffffff3, 0x2, 0x2, 0x4, 0x9, 0x6, 0x5, 0xffff, 0x4, 0x1, 0xffffffff, 0xfffffff9, 0x1, 0x1, 0x5, 0x6, 0x6, 0xc000, 0x1, 0x7ff, 0x7fff, 0x9, 0x0, 0xffff, 0xe3, 0x68b4, 0x9, 0x5e4, 0x5, 0x6, 0x3, 0x6, 0x8, 0xb04, 0xa, 0xffffff80, 0x800, 0xa, 0x7, 0x200, 0x5, 0xc88c, 0x9, 0x6, 0x3, 0xef8d, 0x1, 0x6, 0x800, 0x4, 0x8, 0x8, 0x5, 0xf4b, 0xfffffffa, 0xb553, 0x80000000, 0x6, 0x4, 0x1ffc000, 0x4, 0x6, 0x4262, 0x7fff, 0x2001ff, 0x0, 0x80, 0x5, 0xfffffffc, 0x80, 0xd, 0x0, 0x5, 0x3ff, 0x1, 0x7ff, 0x8, 0xfff, 0x0, 0xd39, 0xffffffff, 0x7, 0x10001, 0x100, 0x1, 0x6, 0x7, 0x9, 0x5, 0x3, 0x5, 0x1, 0x81, 0x2, 0x0, 0xdfe, 0x4, 0xffffff8f, 0x0, 0x1, 0x9, 0x39, 0x869, 0x15b8, 0x4, 0x3, 0x7, 0x7, 0xc, 0x3237, 0x7fffffff, 0x2, 0xf5d, 0x7fff, 0x9, 0x7, 0x4800, 0xfffffff3, 0x7f, 0x1000, 0x5, 0x6, 0x9, 0x6f, 0xffffff01, 0xe, 0x0, 0x2, 0x3, 0xffffffff, 0xa01, 0xffffffff, 0xff, 0x21f, 0xd, 0xfffffff8, 0x9a5, 0xac37, 0x8, 0x5, 0x2, 0x3, 0x3, 0x9, 0x800, 0x1, 0x6ed8, 0x9, 0x3, 0x2, 0x7, 0x2, 0x9, 0x4, 0x0, 0x7, 0x7, 0x4, 0x6, 0x1ff, 0x9, 0x4, 0x3, 0x64, 0x10001, 0x2f67, 0x1, 0x4a3f3cc9, 0xec, 0xf0f, 0x806, 0x1, 0x3fb, 0x6, 0x10001, 0x2, 0xb7a, 0x80, 0x800, 0x58, 0xf1d, 0x200, 0x91a, 0x0, 0x117, 0x8, 0x8, 0xd9, 0x1, 0xfffffff7, 0x6, 0x7bd7, 0x8, 0x2, 0x6, 0x7, 0x5, 0x7, 0xf0, 0xfffffff8, 0x80000000, 0x585, 0x3, 0x5, 0x6, 0x4, 0x101, 0x6, 0x2, 0x1000, 0x8, 0xffff3cb4, 0x7, 0xfffffffd, 0xe, 0x2, 0x4, 0xffffffff, 0x65, 0x6, 0x2, 0x200, 0x100, 0xffff, 0x2, 0x2, 0x7, 0xccd1, 0x2, 0x4020, 0x6a, 0xf, 0xac5f, 0x2d44, 0x1, 0x10, 0x0, 0xbb5, 0x9, 0x1ff, 0x2, 0x6, 0x6, 0x3, 0x80, 0x5, 0x2, 0x400000, 0x5, 0x100000, 0x3, 0x1ff, 0x9, 0xa56, 0x4, 0x2, 0x9, 0xbae, 0x800, 0x6, 0x7, 0xc, 0x80, 0x0, 0xb, 0x6448, 0x7, 0x1, 0x101, 0x6, 0x8, 0xc, 0x4, 0x4, 0x9, 0x1, 0x63d6e4e, 0x5, 0x4, 0xc78, 0x1, 0x5, 0xc69, 0x6, 0x40, 0xffffa5c1, 0x7, 0x1, 0x8, 0x1, 0x672, 0x101, 0x5, 0x3, 0x4, 0x2, 0xfffffff9, 0x5, 0x3, 0x7fff, 0x6, 0x6, 0xaf8, 0x7, 0x5, 0x4, 0x64b, 0x10, 0x8, 0x20, 0x2, 0x200, 0x3, 0x6, 0x7, 0x5, 0x5, 0xe4, 0xfffffff8, 0x9, 0x1000, 0x4000006, 0x7, 0x40, 0x4, 0x2, 0xc9c3, 0x9, 0x5, 0x9, 0x991, 0x304, 0xfffff800, 0x2, 0x1ff, 0x3, 0x10000, 0xfffff193, 0x3, 0x8, 0xfffffffb, 0xbaca, 0x6, 0x4, 0x80000000, 0x8bf8, 0x4, 0x2, 0x7, 0x9, 0x7fffffff, 0x9, 0x8, 0x6, 0x1f0, 0x0, 0x0, 0x4, 0xf817, 0x101, 0x3, 0xc, 0x7, 0x1, 0x7, 0x8, 0x1, 0x3, 0x3, 0x2, 0x8, 0x1, 0x8, 0x3892, 0xfffffffb, 0x5, 0xe05a, 0x40000, 0x1ff, 0x7b, 0x81, 0x401, 0x7fffffff, 0x1, 0x5, 0x9694, 0x0, 0x0, 0x0, 0x8, 0xfff, 0x0, 0xffffff01, 0x3, 0x4, 0x3f6e, 0x4, 0x1, 0x2, 0xffff, 0x401, 0x3, 0x7, 0x1, 0x40, 0x6, 0x0, 0x40, 0x5, 0x1, 0x20, 0x1ef, 0xfffffffa, 0x3, 0x1, 0x5, 0xe868, 0x6, 0x621, 0x0, 0x0, 0x1, 0x9, 0x90f, 0xfffff801, 0x7, 0x1041, 0x6, 0xa4d, 0x6, 0x6, 0x9, 0x1000, 0x80, 0x5, 0x1, 0x10000000, 0x7, 0x9, 0x5, 0x40, 0x19, 0x5, 0x0, 0x3, 0x2, 0x7, 0x2000000, 0x4, 0x8001, 0x9, 0x3c, 0x11, 0x6041, 0x5, 0x3, 0x0, 0x3, 0x0, 0x6, 0xecf4, 0x4, 0x3, 0x0, 0x8, 0xca52, 0x6, 0x5, 0x4, 0x6, 0x4, 0x15, 0x4, 0x2, 0x400, 0x5, 0xba6, 0x400, 0xfffff184, 0x1, 0x4f9b, 0x8, 0x5f, 0x69c, 0x6, 0x1, 0xd13d56d0, 0x3, 0x2c, 0x2, 0x5, 0x7, 0xd80, 0x800, 0xd4, 0xffffffff, 0x1, 0x0, 0x6, 0x2, 0x2, 0xbf, 0x881, 0x9, 0x3, 0x157, 0x8001, 0xf78, 0x2, 0x7fff, 0x2, 0x1, 0x5, 0x3, 0x68000000, 0x401, 0x2, 0x6, 0x0, 0x401, 0x6, 0xfffffffc, 0xd, 0x4, 0xbb38, 0x1, 0x110, 0x6b, 0x9, 0x7, 0x8, 0x1, 0x7, 0x80000000, 0x0, 0x1000, 0x6, 0x2, 0x5, 0x6, 0x4, 0x6, 0x120000, 0xc, 0x20, 0x2e9, 0x3, 0x70, 0x4f, 0x4, 0x3, 0x64b7, 0xe, 0x4, 0x7, 0x8, 0x3, 0xd7b, 0x0, 0x9, 0x10001, 0xfed, 0x1, 0x5, 0x0, 0x9, 0xffff, 0x8, 0xa72, 0x6, 0x2, 0x1ff, 0x1, 0x6, 0xfffffffa, 0x5, 0x88f, 0x2, 0x4, 0x0, 0xf9, 0x5c05, 0xebc7, 0x9, 0x4, 0x7, 0x6, 0x3, 0xd68, 0x4, 0x8, 0x7, 0xdc, 0x9, 0xf95, 0xf, 0x1200, 0xfffffffa, 0x1937, 0x5, 0x8, 0x6, 0x80000001, 0xa5a, 0x20000c5, 0x7fff, 0xa, 0x3ff, 0x5, 0x8, 0x7, 0x356e9cc6, 0x10000, 0x1, 0x0, 0x1, 0x4, 0xb5f6, 0x6, 0xd, 0x3, 0x2, 0xfffffff1, 0x2, 0x9, 0x4, 0x401, 0x3ff, 0x739], 0x363c1bde4291c02b, 0x400, 0x6}) (async) socket(0x1e, 0xa, 0x80) 5.491449116s ago: executing program 2 (id=1240): r0 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5dP\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x05\x00'/474, 0x6) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x12, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x83, &(0x7f0000000480)={r4}, 0x8) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5dP\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x05\x00'/474, 0x6) (async) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x12, r0, 0x0) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x83, &(0x7f0000000480)={r4}, 0x8) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) (async) 5.326139001s ago: executing program 2 (id=1241): ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) (async) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) r1 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) close(r1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000080)={0xffff0000, 0x7}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf25020202000900030085797a32000000000900010073797a"], 0x40}, 0x1, 0x40030000000000, 0x0, 0x20040841}, 0x8000) syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x183003) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x183003) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f00000011c0)=""/230) syz_open_dev$video(&(0x7f0000000580), 0x7, 0x80) (async) r5 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x80) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @string=0x0}}) (async) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @string=0x0}}) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r6, &(0x7f00000002c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x120) ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x80811501, &(0x7f0000000140)={0x80}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040000010300000009210000000122f80409058103"], 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'ip6gre0\x00', 0x2}, 0x18) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) close(0x3) syz_usb_control_io(r7, 0x0, 0x0) ioctl$HIDIOCGPHYS(r4, 0x80404812, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000001840)=[@increfs={0x40046304, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000001840)=[@increfs={0x40046304, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r10, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r10, &(0x7f0000000000), 0x6) syz_usb_control_io$hid(r7, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) socket(0x4, 0x800, 0xf3) (async) socket(0x4, 0x800, 0xf3) 4.877672873s ago: executing program 6 (id=1243): syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003c9a44c1002030109021200010706100500"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x41, &(0x7f0000000080)=@string={0x41, 0x3, "63b32991d672b1012dc52145114a3717cd47c866743cd43d370d73a4becd1dabf828e236cb50168ceefcf34c65245645e6a3b2fcec169604f0f046e3109f54"}}]}) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 3.905591853s ago: executing program 3 (id=1246): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x1201, 0x2, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 3.285136532s ago: executing program 2 (id=1247): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') fchdir(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESOCT=r0], 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="06000000c95d"}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) sendmsg$netlink(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="300000002e0003050003"], 0x30}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x50) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x2000000000100) syz_usb_disconnect(r1) futimesat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x77359400}}) read$char_usb(r7, 0x0, 0x0) 3.067233522s ago: executing program 3 (id=1248): ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f0000000040)=0x800) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8949, &(0x7f0000000040)={'bond0\x00', @random="cffeb232e04c"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x2, 0x0, 0x1, 0xeb7}]}) syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x2, 0x7, 0x8, 0x80000000, 0x2, 0xffffffffffffffff}) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r7, 0xc08c5336, &(0x7f0000000000)={0x0, 0x1, 0x1, 'queue0\x00', 0x8000}) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xa, &(0x7f0000000240)=0x40001003, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000000100)) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001500010026bdff7f0000df250f"], 0x14}, 0x1, 0x0, 0x0, 0x48880}, 0x40010) sendmsg$inet(r5, &(0x7f0000000940)={&(0x7f00000001c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, 0x0}, 0x30004081) socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300), 0x37e, 0x0, 0x0, 0x1f00c00e}, 0x4880) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280008000000199c8f0b0d43a827a4a031e4ace4a001477208368ef76b8442e7a1432571d4b21adf25057c0fffffffff08009d00", @ANYRES32=r4, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x484a4}, 0x4008030) 2.742254949s ago: executing program 1 (id=1250): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) r1 = syz_clone3(&(0x7f0000002400)={0x0, &(0x7f00000021c0)=0xffffffffffffffff, &(0x7f0000002200), &(0x7f0000002240), {0x1a}, &(0x7f0000002280)=""/31, 0x1f, &(0x7f00000022c0)=""/204, &(0x7f00000023c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x7}, 0x58) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002600)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000002700)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000002740)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004800)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000004900)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000004940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004bc0)={0x0, 0x0, 0x0}, &(0x7f0000004c00)=0xc) lstat(&(0x7f0000004c40)='./file0\x00', &(0x7f0000004c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000004d00)='./file0\x00', &(0x7f0000004d40)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000004dc0)='./file0\x00', &(0x7f0000004e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000004e80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004ec0)={{{@in=@private, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000004fc0)=0xe8) getgroups(0x5, &(0x7f0000005000)=[0xffffffffffffffff, 0x0, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff]) fstat(0xffffffffffffffff, &(0x7f0000005040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000050c0)='./file0\x00', &(0x7f0000005100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000005580)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000005680)=0xe8) getgroups(0x3, &(0x7f00000056c0)=[0xee01, 0x0, 0xffffffffffffffff]) lstat(&(0x7f0000005800)='./file0\x00', &(0x7f0000005840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000000040)="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", 0x2000, &(0x7f0000005a00)={&(0x7f0000002040)={0x50, 0x0, 0x6, {0x7, 0x2d, 0x68, 0x100000, 0xa, 0x8, 0x3, 0x40000000, 0x0, 0x0, 0x1, 0x3}}, &(0x7f00000020c0)={0x18, 0xfffffffffffffffe, 0xfffffffffffffffb, {0x5}}, &(0x7f0000002100)={0x18, 0xb, 0x3, {0x3}}, &(0x7f0000002140)={0x18, 0xffffffffffffffda, 0xff, {0xffff}}, &(0x7f0000002180)={0x18, 0xfffffffffffffffe, 0x180, {0x1ff}}, &(0x7f0000002480)={0x28, 0x0, 0x8, {{0x1, 0x100, 0x1, r1}}}, &(0x7f00000024c0)={0x60, 0x0, 0x2, {{0x7, 0x8001, 0xd, 0x6, 0xffffffff, 0x0, 0x4, 0x5}}}, &(0x7f0000002540)={0x18, 0xfffffffffffffffe, 0x6}, &(0x7f0000002580)={0x14, 0x0, 0x3, {']{]\x00'}}, &(0x7f00000025c0)={0x20, 0xfffffffffffffff5, 0x8, {0x0, 0x80f1f3f894315bb1}}, &(0x7f0000004780)={0x78, 0x0, 0x100, {0x6, 0x5, 0x0, {0x6, 0x800, 0x3, 0x17f2, 0x7, 0x5, 0xf, 0x3ff, 0x9, 0x2000, 0x0, r3, r6, 0xa47, 0x3}}}, &(0x7f00000049c0)={0x90, 0x0, 0x80000001, {0x2, 0x2, 0x100000001, 0x1, 0x6eb2, 0x8, {0x5, 0xffffffffffffffff, 0x7fff, 0x7fffffffffffffff, 0x9, 0x1, 0x4, 0x2, 0x7, 0x1000, 0x3, r7, r9, 0x4b7, 0x4}}}, &(0x7f0000004a80)={0x138, 0x0, 0xd8a8, [{0x2, 0x9, 0x4, 0x6, ')^\xc5q'}, {0x1, 0x8, 0x9, 0x400, '++!\\{}Z*!'}, {0x0, 0xc0000000, 0x2, 0xf38, '),'}, {0x4, 0xc6, 0x1, 0x0, '*'}, {0x3, 0xc8df, 0x2, 0x9b9e, ',\''}, {0x4, 0x8, 0x5, 0xd, '$\x8e:*\''}, {0x5, 0x0, 0x0, 0x200}, {0x0, 0x9, 0xd, 0x7, ',-\v&%-]\\-/:{\x96'}, {0x3, 0x2, 0x7, 0x3, '(\xfa())z#'}]}, &(0x7f0000005180)={0x3d0, 0xfffffffffffffffe, 0x7, [{{0x3, 0x2, 0x4, 0x7, 0x7fff, 0x89, {0x3, 0x101, 0x8, 0x101, 0x2, 0x7, 0x1, 0x8, 0x1, 0x6000, 0x7f, 0xee01, r10, 0xff, 0x3}}, {0x3, 0x6, 0x2, 0x2, '::'}}, {{0x6, 0x3, 0x4, 0x9, 0xd8c4, 0x0, {0x4, 0x4, 0x1, 0x3, 0x40, 0x4e, 0xffff, 0x3, 0x4, 0x4000, 0x5, r11, r13, 0xffffffff, 0x7f}}, {0x3, 0x6, 0x3, 0x7fff, '(&$'}}, {{0x3, 0x0, 0x3, 0x8, 0xb, 0x0, {0x6, 0x6, 0x3, 0x8, 0x8, 0x5, 0x6, 0xb, 0x0, 0xa000, 0x9, r14, r15, 0x9, 0x1ff}}, {0x6, 0x0, 0x1, 0x974, 'R'}}, {{0x2, 0x2, 0x7, 0x2, 0x7, 0xfffffffe, {0x1, 0x8000, 0x9, 0x2b, 0x81, 0x3, 0xa6, 0x2, 0x2, 0xa000, 0x42d, r17, 0xee00, 0x200, 0x8}}, {0x3, 0x5, 0x3, 0x5, '-$.'}}, {{0x4, 0x3, 0x3, 0xff, 0xff1, 0x9, {0x0, 0xe, 0x0, 0x0, 0xffffffffffff5b70, 0x2, 0xff, 0x200, 0x2a6, 0x2000, 0x5, r18, r20, 0x9, 0x10001}}, {0x2, 0x401, 0x0, 0x4}}, {{0x3, 0x1, 0x0, 0xf, 0xc, 0x10000, {0x3, 0x7fffffff, 0x3, 0x7, 0x8000, 0xde, 0x7, 0x9, 0x40000000, 0x1000, 0x0, r21, r23, 0xffffffff, 0x5}}, {0x6, 0x249f, 0xa, 0x10, '\'[{!#:&/\xf2-'}}]}, &(0x7f0000005700)={0xa0, 0x0, 0x8, {{0x4, 0x3, 0x9, 0x7, 0x2, 0x1, {0x5, 0x7ff, 0x2, 0xb, 0x401, 0x80000001, 0x391, 0x10, 0x1, 0xa000, 0x6, r24, r25, 0x3, 0x18}}, {0x0, 0x2}}}, &(0x7f00000057c0)={0x20, 0x0, 0x39b9, {0x3, 0x4, 0x0, 0x2}}, &(0x7f00000058c0)={0x130, 0x0, 0x8000000000000001, {0x7ff, 0x7, 0x0, '\x00', {0x40, 0xffffffff, 0x401, 0xfffffe00, 0xffffffffffffffff, r27, 0x1000, '\x00', 0x0, 0x7, 0x5, 0x7f, {0x5, 0x59}, {0xffffffffffffffff, 0x5}, {0x10001, 0xfffffffd}, {0x8, 0x7ec3}, 0x0, 0xa, 0x3, 0x6}}}}) connect$inet(r2, &(0x7f0000005ac0)={0x2, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setgroups(0x6, &(0x7f0000005b00)=[r19, r22, r10, r12, r10, r6]) read$FUSE(r16, &(0x7f0000005b40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r16, &(0x7f0000007b80)={0x1f0, 0x0, r4, [{{0x0, 0x3, 0x73, 0xece, 0x8, 0x3, {0x6, 0x7ff, 0x9, 0x6, 0x1, 0x1, 0x3, 0x4, 0x0, 0x6000, 0x0, r8, r26, 0x7ff, 0x7}}, {0x2, 0x1, 0x4, 0x99, ')^\xc5q'}}, {{0x4, 0x2, 0x5, 0x0, 0x1, 0x9, {0x1, 0x9e, 0x8, 0x0, 0xb, 0x1, 0x40, 0x7, 0xff, 0xa000, 0x3, r7, r28, 0xcb, 0x7}}, {0x4, 0x80000000, 0x4, 0x8, ']{]\x00'}}, {{0x1, 0x0, 0x1ff, 0x8, 0xb, 0x7, {0x5, 0x1, 0x7, 0x8, 0x6, 0x6, 0x45157b05, 0x0, 0xb7cd, 0x6000, 0xdc, r5, r22, 0x10, 0xfffffff8}}, {0x0, 0x4, 0x3, 0x8, '\'@#'}}]}, 0x1f0) sendto(r0, &(0x7f0000007d80)="ff0c927b5b0b3f25c0b9807a6a16667ac875af771bb4a7ebc5ad63a6862aa94730c008520204edfde1e95aeb428a0a7f2086f94160d1336f72cd33ad2e1e70a9ea5dc4d3a59c4475bf64a2a20c380c759bb31a03fc0bc52f76c88831bae38852f20956646fe9f89e1b6b835daca1d3f50bf234f00e1b1a98ac7ad88d785d0bb2ea2b984e026cf5dd42ea27597efc5bece82827251aeecb1750c370242c367b328ff7921c150e437751a5dead3c03031406", 0xb1, 0x0, &(0x7f0000007e40)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) newfstatat(0xffffffffffffff9c, &(0x7f0000007ec0)='./file0\x00', &(0x7f0000007f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setgroups(0x2, &(0x7f0000007f80)=[r29, r27]) syz_usb_connect(0x3, 0xfe0, &(0x7f0000007fc0)={{0x12, 0x1, 0x250, 0x93, 0x4f, 0xa9, 0x40, 0xbb4, 0xa8a, 0xcc9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfce, 0x3, 0x4, 0x1, 0x10, 0x0, "", [{{0x9, 0x4, 0x4b, 0x9, 0xc, 0x14, 0xe0, 0x46, 0x8, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "df"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8, 0x8, 0x3}, {0x6, 0x24, 0x1a, 0x559c, 0x29}, [@mdlm_detail={0xec, 0x24, 0x13, 0xfc, "7905051a55871d83218d10835ca8d0c6aaf61d779480de4f1fed7f0342d211d16f18bbb6da0749f182bc4d0f68e86f35709074fd281e3bb995de5ee625aad351e89a2e2f4e7bd9287892f045e3df186a776c39bb6d16b3ee0334be9f2b4b9639aa437f25aaed9af3fc962f7546405b7411625f502b0d484082cb09228d385edd9a15df6f9c0f29ba2439a822cb304c53eddcdeb4808f59fb689da99f47dcb75c3843c3bc09f8c3622e77c6166a71ee9af07ce25db6ff3d28265ff14352ff460ab492396258705d71f69bcd79978346fac00569389075fc7135142e448dc09a23838ecb220ab85d63"}, @country_functional={0x6, 0x24, 0x7, 0xe0, 0xd}, @mdlm={0x15, 0x24, 0x12, 0x4}, @mdlm_detail={0x8c, 0x24, 0x13, 0xff, "93f36b846aa1ab4957ffc4bff4701c80cf50923399a8c42b486d7e29507d4721dbb19f5772f083f040b3fb2c5b5a46c15a27cfebc41d1e43d75a3c681ebe936ed208987e6884fa2b9b6a38f48aa7673bc4178d427c8ffc0a1356e1f2a9271c43bf08bc4468a3a898ca6601bd08f020f99ff98c27eca44b8fdeedd54d9fdabd5bddf773d9d0cd7617"}, @mdlm={0x15, 0x24, 0x12, 0x3}]}, @hid_hid={0x9, 0x21, 0x6, 0xe, 0x1, {0x22, 0x751}}], [{{0x9, 0x5, 0x3, 0x8, 0x8, 0xf8, 0xa, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x20}]}}, {{0x9, 0x5, 0xe, 0x2, 0x8, 0x5, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x6}, @generic={0xc3, 0x3f, "68d07a1ef05712aef0a4e47664d3c67e140ea257f5ab2f6ed92aa5d72dcaaae318957071768d14a30e6d3224c1e3c03740ec6bd8e77ba7d765ea2c3c9b9bec24601d73271d87f61d6d4557a377dca086ccc3f7de1e73b73a36d9e33ef9a4fcee5948381a5200eba4dbd900d80f21bb9d220e28aac46be67aaa9bd61978becb2742917c4974fc0c33ff145d65c29d03db97978c5137b7f320ebbc62e23323e257a4b170e5d28e3876064cf97cfecc772ae2a022854c24de0279f8d7a1ba0b2ab55a"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0xd4, 0xd, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0xb1}, @generic={0xfd, 0x2e, "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"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x3, 0x7, 0x9}}, {{0x9, 0x5, 0xa, 0x4, 0x200, 0x1, 0x6, 0xe9}}, {{0x9, 0x5, 0x80, 0x8, 0x400, 0x6, 0x2, 0x8}}, {{0x9, 0x5, 0x80, 0x866b6dba16528ba, 0x20, 0x0, 0x6, 0x3, [@generic={0x59, 0x10, "379639ded1c6a259f93e61b05ef15fd7bb3ba1447fc435168e8283ba994d164220c0115ae163cc60e3e043c33a9ac85db0ae2ae5dff458c5dbd899db0e34688d6c19686e62aa928689b8eea64c47ee60737525cdc04ec3"}, @generic={0x28, 0x11, "0f6f66443f942e9e5d02475b2b30ade40dfaba12cb12c24e22b2b7dc2b468d53549e0e3e5cca"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0xc, 0x5, 0x1, [@generic={0x70, 0x5, "3409887b1a3a286645bf4809330d447492e82e96eb7ad7132ffc3bc371e4bd5d3c4b876d365c544e63785e478553a7cce05d17fde0c030c9ee9117e952c115eef7bea0abd292e8a857d745df786c17551a4e671146af71e0fb87c55577a3184276485ab4ab5063ec6a2489132cfc"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x200, 0xee, 0x1, 0x5, [@generic={0x4b, 0xb, "86d7d7e819dc768afbdc34fa5510e13d8efd259ca613014610bfb753c9a46978105f1a9485d0281f15a506f507f3abf7e4f252369e0c0c7008ed1d82525ad96b974025f188f68f4736"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0x7fff}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x7, 0x81, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0xb, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x80}, @generic={0xb9, 0x8, "4272a6ef21e4231bf8aebb52612595ac4646eb7b6b8134f0a92dcb69bb2dab6dea34a405f479c7d71b54c2d8e4fa020708824840981c048538b235791250420419d5c275316514816b0850d527c6eeea5e315c90cf763f83c57877e5c2d71766822701dd42243d71a01e4b3e34bcd584e5c8e869b8f5b579035bd7e71a5535c94fed552c338978c18cf90d27131348f8ee703d69d1fdc616947334f5f0d31b6dd683a0fcf3329171f5268aaa2c4f4c969499dcdb0ef0b8"}]}}, {{0x9, 0x5, 0x6, 0x18, 0x30, 0x60, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xa, 0x9}]}}]}}, {{0x9, 0x4, 0x15, 0x8, 0x9, 0xff, 0xff, 0xff, 0x6, [], [{{0x9, 0x5, 0xb, 0x4, 0x250, 0x1, 0x1, 0x2}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x6, 0x7f, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf7, 0x2}, @generic={0xdb, 0xc, "a2d39f2bd79ea4f6859b86cc54ca9ca12126fa0ef8f4e5e391bee2ae0207529315c2c7cebe9678bc56b0c0d2269aaf3a2193bcc23cbe2a51c7c12b871a4a0bde09af92f7d260d4f6484273af8324af46d2634ddda559932ed7942194c1da6c82e3541a8fdd58189957eeec6f076b90a79dabf462d04b55d43e93b800d95afb86c487d9a95d2119812af02130cc360ec7da502b781956c269ee9ae39d378ab61a4374bbff59f5e36a09ee5244145767d33e0ae767e13950e2135c861d2bb59f2d10dcb1c65b30cc4aa348fca2ad53284213ca43592620a7fa85"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x3ff, 0xbe, 0x6, 0xf5, [@generic={0xfc, 0xa, "3c08537c640c1bb8154add143bbbb5407a530210bed3d0dd931ebd5db6db8f2dae97a3292f7d57388d01e817f794e37b19a2d619dc9d9134c8ded1d81cc823fcc175290cf1ee1fcd8da1904b86a3ffff0de3f67031baf9b0a2f933bae292fbc1596b1c574815c50f1289e450987d6ca9f4c1b7aca407e4098ca212197be57d2e7ea3ef9599659f3a1d539b54272b34cf4bcea2325e5d4959144b129ce648bb77625e1371e5c555f464b2210a4c5eee24e83b0cb33c6e10fd45deab8211cb82845606bb30d2459f332589c1a79ea0f3c1f12f777203ba86e5c4d679b2f8727a9105457e428f14e4c699dcaabe8ddaeb7bf546abe5b99efa8243fb"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x1e7, 0x2e, 0xf9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x4}]}}, {{0x9, 0x5, 0x9, 0xc, 0x8, 0x41, 0x2, 0xf, [@generic={0x70, 0x21, "627a921765410aaaf3a348c6ff9a84be3d0a847f7b629e5dc6e253d2eca27f2d69a037ab58d623c98be415c7dc427640ad547e342930bd1e4f5d8e854b6a6c6bbe34c1614e8a1fe9233c47439e0e385ba6cb9026421ac629969dcc97f11836122cf3b1b092a291f508631c79a877"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x10, 0xba, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x9}, @generic={0xd1, 0x23, "330cf504aff208f90a7feafff4e2256ecde4515e1b3d5b9ce1cffc3e9513f403e08c215225c80f14e9933f028e8636fda2d46b2c48d4286086a8db0ee05b64f0f8d30f7e6e239126d69be0100d0df8fb57e8ad3253c66ed8ec9edc7958c174696ce6ecbc64854b9616640b2f06a3c194bd7a98acdbbb3f5ae3159e611323611c0c96663b97ba6f9b0f9e41a392ac289977a3b06a1b309b6adb428323a3c5afee23e05f1883177117472cc5d6da8c0a7714993172078ddfc00bb72d1c5e77342e272452cba8b6487c6f47b5b61b894b"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x268, 0x3, 0x80, 0x3, [@generic={0x37, 0x7, "b38f75671b9067317ec65790a8edcb71197667e5dff4b2a928d7ce35ce1773d542bdd7a209e7a626fdfde455eaff648986ae7440d5"}, @generic={0xb2, 0x22, "a587af65fd69ad37951a6fa5004a025a71a87fe684b57fac806a60a1914dfaeaade820252a037be0e3c586d19134418bfcc5beec252533401ab19a8aa925706d83bc399444bd5941e121564f773cb4a13e1758d23781e857315f19629d3966f9cd019833da3961b947c18787ad3e9ea874df8f4069f1f24b81bf8cd5bacd8d7945caf537a1def296cc84ea351e7ba2eafc9cb155edc7e12138fb68935e6a94861a1df49a3b1f11456b84094e7affd717"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x4, 0xd5, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x9}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x7, 0x9, 0x3, [@generic={0xf5, 0x1, "8b40194fa1fac2421558536ad6116450f8d91565525bf4fad35ae1438b1f1f9708440cda5ba774c8a9234c91d2c87cdeedeadcbaaa26b6391f075b6d0417ab99a1482a1f3cc84d725c23d51586dee35fd185f6155ecb19efa8ae5114f19fc57208638b3d1e2766e02f7d3f40df926d290c125298a97af1f44fa2cda0337eec0cf8d4b50c800e95e32a86afc51a6b6890fa28708ee42c095b02faff2d33c081f08d16b2883d3f4302166159c5e96583c3fad56fc89e419760eb0e3526cb9d8d66ec171e4415e0d5ccb344b59ec16bc89a7e563c8953c2ef90a1f65536eeea4f2dd1ac2f5bc7b6771fb0543ae65bce134ddfe4dc"}]}}]}}, {{0x9, 0x4, 0x6b, 0x4, 0xb, 0x24, 0x1, 0xda, 0x5, [], [{{0x9, 0x5, 0xd, 0xc, 0x40, 0x6f, 0xcc, 0x1b, [@generic={0xda, 0x4, "09e57727b131d84b751edbae8918fe3afaa04b14bb024f90ece48edc29ef019302158fee8b488ea8c376c1b3321cf92decc752caec2b7dc5c4c8839ddf436c8496a0107563d433bc04ab1b5fdcfeaaa08024bb23f7bf3ab9cfa4f4702f8592260510204d84d07bcb6c34bb176ba1605fa5158d0068ab2dc87870c7b443dc20838337bea42f54c9e11076c5ea6e93b9de4b03bd29f3a27160d21cd1c1a456f7ae524acb05948bfdd3554ac7beffc6742b96269627f89b077e8b63cd8338c3da212308cacfbba8cb0c1ca43e00d18d354eee2d7ee266fffa42"}, @generic={0x75, 0x21, "fbfc91fbb4a55b32c33105a858689da95186bd71089e3193b5eb65dc4d866d0bbb1dd8f35fe5c7a09d6b2a736b9c70b80aa524762f540dec7246e65ef445ad17d3e913fd0f32a21c45c44d21279e7dd84177a0cf08dae9896a068c1a079cf20b913dbf2be0527dd9b9be9bdd7e23cf8ba42ea8"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0xfa, 0x4, 0xfd}}, {{0x9, 0x5, 0x85, 0x0, 0x400, 0x39, 0x3e, 0x3, [@generic={0x8a, 0x0, "6b738f458a769a5f439fbaa10c0c6939744d6ec4e0df942621be98877f3387e665c88265f79ba21395e08244e60b501fbaa05a96769bd2b12753522e9d3bdae4bf2c5651ab0b9762e8a819f9bb3b0790e4495df7290871eb0513ae91f1f482458c5c328475575ae8ee8523baac7e18bc1c7fad52f73fcb588508537e3ea6eb812b5b47f5f22fa9f7"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x0, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5d, 0x4}, @generic={0x35, 0xa, "7bde58aaa8cb136873cda850425546fde5edebcd2f8cbf618d3cb1064cd1bad993c2fae6ae140695cfd33f7443cec16504f8b9"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x10, 0x0, 0x8, 0xda, [@generic={0x4d, 0x11, "70356c79402450e0efcf2485f52227896ac64ff8a34e9ba9a5a3e97ad361b8c5354b25f681160928331375c29f90db1bf6c38f6f57aba563824d00fe5562677d3417cc1085cf4fe30fd222"}, @generic={0xc8, 0x24, "7c5850c8c41f0da5985f25b8aa2eefc7c92257bdee0de2a1e66c493aeb074dc0c27b09a2573cb5ffee2b3af33b0eaa79795c59f66f8e61ba34eabdf3b7b78c9f2c538bf58ffed5769ba38db8e778bac6f7efef978c27397fa27e949285ae9447fcebe06a702305c17cb5266683004a6c881a931f0d8b68a57103603196179b90b6d746f39a5fedf13f51c6c1af26bc4dfc8d5d43831b88fd819309adede1263f5a45f2a2fcef12466c5281ad99baf818b5255443023782cc3e2d3724256a7e798559d1023d60"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x3ff, 0x0, 0xc8, 0x9}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x7f, 0xa, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xe4}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x4, 0xe, 0xc}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x1d, 0x12, 0x8, [@generic={0x84, 0x1, "b40b6e44de1f784afa039de504ec3a327d173bb16516356a743c8fb5cab575c0d531b8e41e6ecca5f2b1798ca28e03b6cf19be5c054074a504da59b4d580401121ade80c4ab4616d9ce96234476bcc3a66c1d1faa698dd5ad5c64f55e9fc4d5eb30a412ecf670e8ba0bb74d52bb64f335fec94fd230e2b14fc59af74924a43809764"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0x40, 0xff, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9d, 0xe56a}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x7, 0x99, 0x5d}}]}}]}}]}}, &(0x7f00000090c0)={0xa, &(0x7f0000008fc0)={0xa, 0x6, 0x310, 0x4, 0x2, 0x8, 0x18, 0xc0}, 0x8, &(0x7f0000009000)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000009040)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000009080)=@lang_id={0x4, 0x3, 0xc0c}}]}) socket$kcm(0x29, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 1.727181943s ago: executing program 6 (id=1251): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xfa1e0400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8500) r4 = msgget$private(0x0, 0x2) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getresgid(&(0x7f0000002240), &(0x7f0000002280), &(0x7f00000022c0)=0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000002300)={{0x3, r5, r6, 0x0, r7, 0x13b}, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x6, 0x4, 0x0, 0x2, r0, r2}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000002380)=ANY=[@ANYBLOB="180000000a1400022cbd7000ffdbdf250800010002000004f21176f9800c7e62be9c07d9c39ec0d62cb049373bbf5ec85e238898ddec7c40dc23567525e680d1b10a8f"], 0x18}, 0x1, 0x0, 0x0, 0x40084}, 0x8015) 1.609960442s ago: executing program 6 (id=1252): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)={0x2c, 0x10, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x1a, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @u32=0x10008}]}]}, 0x2c}], 0x1}, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000000)) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x87, 0x9, 0x4, 0x10000, 0x80, {}, {0x2, 0x2, 0xe, 0x1, 0x6, 0x9, "2a90dd19"}, 0xee, 0x4, {}, 0x5, 0x0, 0xffffffffffffffff}) fcntl$setflags(r2, 0x2, 0x0) 1.540198407s ago: executing program 6 (id=1253): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x46, 0xc40) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getpeername(r3, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000140)={0x3}) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x7, 0x8000001}) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r6, &(0x7f0000005dc0)={0x1f, @none, 0x18}, 0xa) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000003c0)={'comedi_parport\x00', [0x140, 0xfffffffc, 0x1000c, 0xdddd, 0x0, 0x10000, 0x7fff, 0x6, 0x7, 0xc72c, 0x2000004, 0xfffffffc, 0xc000, 0x8, 0x4ce, 0x9, 0x5, 0xad, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0x1001, 0x9, 0xaf, 0x2, 0x283, 0x8001, 0xe43f]}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x46, 0xc40) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) getpeername(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000140)={0x3}) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x7, 0x8000001}) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) (async) close_range(r5, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) connect$bt_rfcomm(r6, &(0x7f0000005dc0)={0x1f, @none, 0x18}, 0xa) (async) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000003c0)={'comedi_parport\x00', [0x140, 0xfffffffc, 0x1000c, 0xdddd, 0x0, 0x10000, 0x7fff, 0x6, 0x7, 0xc72c, 0x2000004, 0xfffffffc, 0xc000, 0x8, 0x4ce, 0x9, 0x5, 0xad, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0x1001, 0x9, 0xaf, 0x2, 0x283, 0x8001, 0xe43f]}) (async) 1.391280909s ago: executing program 1 (id=1254): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28100, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000000)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000080)) 1.390201397s ago: executing program 1 (id=1255): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0xa021, 0x2, 0x0, 0x10400, 0xd, 0x2}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170479a60f60eb8dc258ded60aee45b04a15db386", 0x30) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000005e40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000017010000030000000000d6"], 0x18, 0xc000}], 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r3, 0x40049409, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000) r7 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x404083) readv(r7, &(0x7f0000000700)=[{&(0x7f0000000200)=""/167, 0xa7}], 0x1) write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x51, 0x8, @dev={0xfe, 0x80, '\x00', 0x41}, 0x71}}}, 0xa0) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r8 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {0x0, 0x3, 0x42}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x34ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket(0x10, 0x803, 0x0) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f00000003c0)=0x3, 0x4) socket$kcm(0x10, 0x2, 0x10) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000140)=0x10001) 1.331329651s ago: executing program 1 (id=1256): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x1201, 0x2, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 905.15185ms ago: executing program 1 (id=1257): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fremovexattr(r1, &(0x7f0000000680)=@known='system.posix_acl_access\x00') setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0x200000}, 0x1f02) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000e80)=[{&(0x7f0000000080)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)='2', 0x1}, {&(0x7f0000000180)}], 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000008400000007a33ff36000000100000000e2a2d59cef4fb4944ab46338abaaa7f0a1f227e0090af1d855d006b2c0c16126fcfcac55978fda5db109937ac12565f68493a5763e9d7b27e5d13147cfd53ff86012d96af3b5f13ff343c5eafff1525934aaf89a9b82563574fdea5cbbdd4c5222548c0b63c1244a2565078a29"], 0x18, 0x40004}], 0x1, 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000001c0)={{r0, &(0x7f0000000000)='&}#\x00', 0x200040, &(0x7f0000000040)={@align=0x3, {0x8, 0x5, 0x795, 0xfffffffffffffe00}}, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0xfffffff7}, {[0x5, 0x9, 0x3, 0x9]}, 0x7, 0x0, &(0x7f0000000180)}) 522.854821ms ago: executing program 6 (id=1258): inotify_init1(0x800) (async) r0 = inotify_init1(0x800) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x0) (async) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000040)={0x3, "d707048780d79158dbc03f40fdf0b6d2be1479ac3d24836d6b0f0031c5ae6ac4ddf86418254d116def41a231d29789ec4a03b9f4bc8fd25d85d3ef4e866e1128c587e588ab7741d7fce17f5db6733152749d74edff6545ad279e1a79569241fe55b7b060e28e71c23975b906333f583f343822da4de056144ef0878921c5ffee09222ee8fe110da3789ae05234777b2e422351f32fc16f6c1285c6aa33e80b506c1f3e6410a3a761e31172fd24340744001981e70dbefe699261c4962e278452eb452427920476166dafc8c08772daa0ef01a6fec5481f9e31ee044813c85c7fec96e5d15284cfba2ff7ba1dc763f7390dc0e68e0c5e62aacb6a5b8965daa47385b35b81096d6779471b40368cdb7fcbb27d777c6aad0c310346d742c21d18a05025cc569f9ce5ddcd29ffaf4bc606c570001e148c02029e0428058a673ed8badcb0be55a6ea873660a101d32961dc5b0d9b64fb4ee974ebb5b733fc0b34d0466428767c0c3299398fe1bdc49e4280e7cbb4748310a81e85a7d321c92e2649e9056d076878938c3f34ec76fea8466c89d75ce3ae40c9a28213c2430f9685f48894c76b276a3b04f51d6567fae88aa0325bb4afd81ef35746dc821a3cc5e0d7a0ff025abb143709936fa4686a8fb8ac4a530f37d03f04bd3c21df97888faa8dc15da913f3e2c9ae1cd9369c445bc6ba86769437bf92ba474761f1cc53afbe20f3"}) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000280)) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000006c0)={0x1a9, 0x1, &(0x7f00000002c0)="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"}) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000700)={0xc2, [0x3, 0x1000], 0x9}, 0x10) (async) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000700)={0xc2, [0x3, 0x1000], 0x9}, 0x10) ioctl$KIOCSOUND(r1, 0x4b2f, 0xffffffffffffffff) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000740), 0x40000, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000780)=0x4) add_key$user(&(0x7f00000007c0), &(0x7f0000000800)={'syz', 0x0}, &(0x7f0000000840)="0acd0428efc6d117fbe7640aa42aa3ae7d1f38f1bca740e95ee5be6681db38dfb6924c139c7f3c57c05eaf9c83c593b0fdd8f8eba1cb635ffefe3c12aa1bce8dbc27b95a4572c35d301ee48df05278c70ac8b3cacfe42257adbecf5054bb41d211cc0d8da9523daa2edf4a02f2a330bf489c55", 0x73, 0xffffffffffffffff) (async) r3 = add_key$user(&(0x7f00000007c0), &(0x7f0000000800)={'syz', 0x0}, &(0x7f0000000840)="0acd0428efc6d117fbe7640aa42aa3ae7d1f38f1bca740e95ee5be6681db38dfb6924c139c7f3c57c05eaf9c83c593b0fdd8f8eba1cb635ffefe3c12aa1bce8dbc27b95a4572c35d301ee48df05278c70ac8b3cacfe42257adbecf5054bb41d211cc0d8da9523daa2edf4a02f2a330bf489c55", 0x73, 0xffffffffffffffff) r4 = add_key$user(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x1}, &(0x7f0000000940)="31e1aa214b8cfa7c4013d84343ca965d31", 0x11, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000980)={r3, 0x0, r4}, &(0x7f00000009c0)=""/147, 0x93, &(0x7f0000000ac0)={&(0x7f0000000a80)={'md5\x00'}}) (async) keyctl$dh_compute(0x17, &(0x7f0000000980)={r3, 0x0, r4}, &(0x7f00000009c0)=""/147, 0x93, &(0x7f0000000ac0)={&(0x7f0000000a80)={'md5\x00'}}) r5 = epoll_create1(0x80000) ioctl$AUTOFS_IOC_PROTOVER(r5, 0x80049363, &(0x7f0000000b00)) r6 = add_key$keyring(&(0x7f0000000b40), &(0x7f0000000b80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0xee00, r6) add_key$keyring(&(0x7f0000000bc0), &(0x7f0000000c00)={'syz', 0x2}, 0x0, 0x0, r6) (async) r7 = add_key$keyring(&(0x7f0000000bc0), &(0x7f0000000c00)={'syz', 0x2}, 0x0, 0x0, r6) keyctl$describe(0x6, r7, &(0x7f0000000c40)=""/248, 0xf8) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000d40)={{0x0, 0x4, 0xf1d, 0x1a6, 0x5, 0x4, 0x8, 0x6, 0x2, 0x8, 0x6, 0x80000000, 0x76, 0x89bb4, 0x2}}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000d40)={{0x0, 0x4, 0xf1d, 0x1a6, 0x5, 0x4, 0x8, 0x6, 0x2, 0x8, 0x6, 0x80000000, 0x76, 0x89bb4, 0x2}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000001d40)={{r8, 0x300000000, 0x6, 0x3, 0x9, 0xffffffffffffffff, 0xb, 0x8, 0x8, 0x5, 0xffff7c16, 0x8000, 0x2, 0x81, 0x6e}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) add_key$fscrypt_provisioning(&(0x7f0000001e00), &(0x7f0000001e40)={'syz', 0x1}, &(0x7f0000001e80)={0x2, 0x0, @auto=[0x1e]}, 0x9, r6) pipe2$9p(&(0x7f0000001ec0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x5880) write$P9_RATTACH(r9, &(0x7f0000001f00)={0x14, 0x69, 0x2, {0x0, 0x3, 0x8}}, 0x14) ioctl$TCSBRK(r2, 0x5409, 0x1205) (async) ioctl$TCSBRK(r2, 0x5409, 0x1205) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000001f40)={0x0, "2c69c9e069685728eec8a7fb56ae35274541e4bbc38ed32338faff16bdd80416", 0x2, 0xffff8001, 0xffff, 0x80008, 0x2}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000001fc0), 0x80) keyctl$instantiate(0xc, r7, &(0x7f0000002000)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:', 'keyring\x00'}, 0x21, r6) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000002080)={0x0, @reserved}) (async) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000002080)={0x0, @reserved}) 191.275211ms ago: executing program 2 (id=1259): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2090048, 0x0) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup(r1, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) write$P9_RRENAME(r1, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) 135.501579ms ago: executing program 6 (id=1260): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000004c0)={0x2e, 0x64, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x35c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12011003d8430b085e047507545a070003010902120001010810010904d303faff"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) 14.956975ms ago: executing program 3 (id=1261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x248}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000000) socket$inet6(0xa, 0x3, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40002100, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup(0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7ffd248f", @ANYRES16=0x0, @ANYBLOB="040026bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24010040) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000340), &(0x7f0000000380)=0x2) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r5, 0x800442d4, &(0x7f00000003c0)=0x4) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="10002dbd7000ffdbdf251700000008000300", @ANYRES32=r7, @ANYBLOB="0c00060001000000010000000c00060003000000030000000c00060002000000020000000c0006000300000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40090) rt_sigqueueinfo(0x0, 0x1d, &(0x7f00000004c0)={0x1d, 0x3, 0x79}) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) rt_sigqueueinfo(r8, 0x36, &(0x7f0000000100)={0x39, 0x10, 0x7}) 7.586898ms ago: executing program 2 (id=1262): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x68, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xa44e, @link='broadcast-link\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x4000880) mount$afs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x4080, &(0x7f0000000040)=ANY=[@ANYBLOB='dyn\x00\v']) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) getsockname(r2, 0x0, &(0x7f0000000180)=0xfffffffffffffdd9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x400}) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000000)={'nr0\x00'}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000140)={0x3, 0x2, 0x200, "c542db5d076ddb7322968772149324f57b29303f2106985754bb68f539b7c288", 0x38414762}) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002f0009002abd70e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9f47392b70f555def59af68eb7e2211521b335a3c3d498a08862df02baf33ef122e0000003936ad0f3b31f345a78840bb8175e71ff1e68e9c0d8e722b2184ecee9151ccddb025a7b3c2f9bfcfc6c44d02615c4893598a2a0775927296d63bc73f69d416bb63e3"], 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 0s ago: executing program 1 (id=1263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={0x14, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x4, 0xd7, 0x32, 0x40, 0x13d8, 0x10, 0xacd9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x2, 0x0, 0xd, "", [{{0x9, 0x4, 0x45, 0xe, 0x0, 0x2d, 0x27, 0x1c, 0x3}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): with driver cdc_ether failed with error -22 [ 391.793389][ T5797] usb 2-1: USB disconnect, device number 25 [ 391.832938][ T9565] pim6reg1: entered promiscuous mode [ 391.832953][ T9565] pim6reg1: entered allmulticast mode [ 391.861064][ T5676] usb 3-1: USB disconnect, device number 21 [ 392.000823][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 392.164633][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 392.177086][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 392.177115][ T9] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 392.177138][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 392.182039][ T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 392.182068][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.182087][ T9] usb 4-1: Product: syz [ 392.182101][ T9] usb 4-1: Manufacturer: syz [ 392.182115][ T9] usb 4-1: SerialNumber: syz [ 392.205459][ T9] usb 4-1: config 0 descriptor?? [ 392.412568][ T5598] block nbd2: Receive control failed (result -107) [ 392.619390][ T9574] nbd2: detected capacity change from 0 to 16 [ 392.673425][ T9] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 392.704620][ T5669] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 392.774642][ T32] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 392.806004][ T9547] block nbd2: Dead connection, failed to find a fallback [ 392.806023][ T9547] block nbd2: shutting down sockets [ 392.812332][ T9547] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 392.818833][ T9547] buffer_io_error: 14 callbacks suppressed [ 392.818851][ T9547] Buffer I/O error on dev nbd2, logical block 0, async page read [ 392.858773][ T9547] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 392.858837][ T9547] Buffer I/O error on dev nbd2, logical block 0, async page read [ 392.868035][ T9547] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 392.868181][ T9547] Buffer I/O error on dev nbd2, logical block 0, async page read [ 392.874572][ T5669] usb 2-1: Using ep0 maxpacket: 16 [ 392.877784][ T9547] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 392.877863][ T9547] Buffer I/O error on dev nbd2, logical block 0, async page read [ 392.878904][ T9547] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 392.878973][ T9547] Buffer I/O error on dev nbd2, logical block 0, async page read [ 392.880018][ T9547] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 392.880085][ T9547] Buffer I/O error on dev nbd2, logical block 0, async page read [ 392.880798][ T9547] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 392.880867][ T9547] Buffer I/O error on dev nbd2, logical block 0, async page read [ 392.882330][ T9547] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 392.882460][ T9547] Buffer I/O error on dev nbd2, logical block 0, async page read [ 392.882504][ T5756] ldm_validate_partition_table(): Disk read failed. [ 392.882930][ T9547] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 392.882996][ T9547] Buffer I/O error on dev nbd2, logical block 0, async page read [ 392.883585][ T9547] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 392.883652][ T9547] Buffer I/O error on dev nbd2, logical block 0, async page read [ 392.884956][ T5756] Dev nbd2: unable to read RDB block 0 [ 392.886974][ T5756] nbd2: unable to read partition table [ 392.887997][ T5756] nbd2: partition table beyond EOD, truncated [ 392.893504][ T5669] usb 2-1: unable to get BOS descriptor or descriptor too short [ 392.933512][ T9] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 392.934015][ T9] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 392.994399][ T5669] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 393.005157][ T32] usb 7-1: unable to get BOS descriptor or descriptor too short [ 393.005707][ T32] usb 7-1: not running at top speed; connect to a high speed hub [ 393.110257][ T5669] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 393.110276][ T5669] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.110286][ T5669] usb 2-1: Product: syz [ 393.110294][ T5669] usb 2-1: Manufacturer: syz [ 393.110301][ T5669] usb 2-1: SerialNumber: syz [ 393.134657][ T32] usb 7-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 393.134686][ T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.134706][ T32] usb 7-1: Product: syz [ 393.134720][ T32] usb 7-1: Manufacturer: syz [ 393.134734][ T32] usb 7-1: SerialNumber: syz [ 393.285420][ T5756] ldm_validate_partition_table(): Disk read failed. [ 393.286143][ T5756] Dev nbd2: unable to read RDB block 0 [ 393.292633][ T5756] nbd2: unable to read partition table [ 393.292995][ T5756] nbd2: partition table beyond EOD, truncated [ 393.408197][ T5669] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 393.410772][ T5669] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 393.442140][ T32] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 393.656877][ T32] gp8psk: usb in 128 operation failed. [ 393.657307][ T32] gp8psk: usb in 137 operation failed. [ 393.657321][ T32] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 393.657360][ T32] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 393.703534][ T32] usb 7-1: USB disconnect, device number 29 [ 393.744293][ T5669] usb 2-1: USB disconnect, device number 26 [ 393.768027][ T5594] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 393.822372][ T5757] udevd[5757]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 393.914584][ T5594] usb 3-1: Using ep0 maxpacket: 32 [ 393.916593][ T5594] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 393.918728][ T5594] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 393.918755][ T5594] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 393.918775][ T5594] usb 3-1: Product: syz [ 393.918789][ T5594] usb 3-1: Manufacturer: syz [ 393.918802][ T5594] usb 3-1: SerialNumber: syz [ 393.922442][ T5594] usb 3-1: config 0 descriptor?? [ 393.923605][ T9589] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 393.983822][ T5594] hub 3-1:0.0: bad descriptor, ignoring hub [ 393.983859][ T5594] hub 3-1:0.0: probe with driver hub failed with error -5 [ 394.124649][ T5669] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 394.234856][ T9] usb 3-1: USB disconnect, device number 22 [ 394.290231][ T5669] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.290261][ T5669] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.290284][ T5669] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 394.290296][ T5669] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.332999][ T5669] usb 2-1: config 0 descriptor?? [ 394.484714][ T5594] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 394.539662][ T9595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.540346][ T9595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.570931][ T5669] usbhid 2-1:0.0: can't add hid device: -71 [ 394.571027][ T5669] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 394.587832][ T5669] usb 2-1: USB disconnect, device number 27 [ 394.643124][ T5594] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 394.643157][ T5594] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.643174][ T5594] usb 7-1: Product: syz [ 394.643182][ T5594] usb 7-1: Manufacturer: syz [ 394.643190][ T5594] usb 7-1: SerialNumber: syz [ 394.710412][ T5706] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 394.751782][ T49] usb 4-1: USB disconnect, device number 22 [ 394.804873][ T9599] program syz.1.1022 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 394.926481][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1024'. [ 395.350217][ T9604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.376425][ T9604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.431104][ T9618] nfs: Unknown parameter '' [ 395.496789][ T9614] loop9: detected capacity change from 0 to 7 [ 395.569695][ T5598] Bluetooth: hci2: unexpected event for opcode 0x203c [ 395.633495][ T9614] Dev loop9: unable to read RDB block 7 [ 395.633534][ T9614] loop9: unable to read partition table [ 395.633714][ T9614] loop9: partition table beyond EOD, truncated [ 395.633744][ T9614] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 395.793149][ T9613] Flush: task=syz.1.1027[9613] dev=loop9 state=2 [ 396.777045][ T5706] usb 7-1: Service connection timeout for: 256 [ 396.777070][ T5706] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 397.564622][ T5676] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 397.716816][ T5676] usb 4-1: Using ep0 maxpacket: 16 [ 397.730205][ T5676] usb 4-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 397.730235][ T5676] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.730255][ T5676] usb 4-1: Product: syz [ 397.730269][ T5676] usb 4-1: Manufacturer: syz [ 397.730283][ T5676] usb 4-1: SerialNumber: syz [ 397.784244][ T5676] usb 4-1: config 0 descriptor?? [ 397.805061][ T49] usb 7-1: USB disconnect, device number 30 [ 397.878784][ T9613] Teardown: task=syz.1.1027[9613] dev=loop9 state=2 [ 397.959620][ T5706] ath9k_htc: Failed to initialize the device [ 397.961799][ T49] usb 7-1: ath9k_htc: USB layer deinitialized [ 398.044292][ T5676] uvcvideo 4-1:0.0: Found UVC 0.00 device syz (046d:0721) [ 398.044358][ T5676] uvcvideo 4-1:0.0: No valid video chain found. [ 398.068565][ T9626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.069117][ T9626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.100103][ T5676] usb 4-1: USB disconnect, device number 23 [ 398.255107][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 398.404600][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 398.406259][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 398.408328][ T9] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 398.408355][ T9] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 398.408373][ T9] usb 2-1: Product: syz [ 398.408381][ T9] usb 2-1: Manufacturer: syz [ 398.408389][ T9] usb 2-1: SerialNumber: syz [ 398.411235][ T9] usb 2-1: config 0 descriptor?? [ 398.412760][ T9630] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 398.468495][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 398.468518][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 398.524715][ T5706] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 398.574689][ T49] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 398.685665][ T5706] usb 3-1: Using ep0 maxpacket: 32 [ 398.694385][ T5706] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 398.711474][ T5706] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 398.711494][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 398.711505][ T5706] usb 3-1: Product: syz [ 398.711513][ T5706] usb 3-1: Manufacturer: syz [ 398.711520][ T5706] usb 3-1: SerialNumber: syz [ 398.715855][ T5706] usb 3-1: config 0 descriptor?? [ 398.717109][ T9635] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 398.719387][ T5706] hub 3-1:0.0: bad descriptor, ignoring hub [ 398.719420][ T5706] hub 3-1:0.0: probe with driver hub failed with error -5 [ 398.723584][ T5706] chaoskey 3-1:0.0: Unable to register with hwrng [ 398.725223][ T49] usb 7-1: Using ep0 maxpacket: 32 [ 398.729120][ T49] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 398.733613][ T49] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 398.733639][ T49] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 398.733657][ T49] usb 7-1: Product: syz [ 398.733671][ T49] usb 7-1: Manufacturer: syz [ 398.733684][ T49] usb 7-1: SerialNumber: syz [ 398.751746][ T49] usb 7-1: config 0 descriptor?? [ 398.756850][ T9637] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 398.760942][ T49] hub 7-1:0.0: bad descriptor, ignoring hub [ 398.760977][ T49] hub 7-1:0.0: probe with driver hub failed with error -5 [ 398.766794][ T49] chaoskey 7-1:0.0: Unable to register with hwrng [ 398.789290][ T9] usb 2-1: USB disconnect, device number 28 [ 399.057925][ T5676] usb 3-1: USB disconnect, device number 23 [ 399.077547][ T49] usb 7-1: USB disconnect, device number 31 [ 399.168801][ T9637] FAULT_INJECTION: forcing a failure. [ 399.168801][ T9637] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 399.168840][ T9637] CPU: 1 UID: 0 PID: 9637 Comm: syz.6.1035 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 399.168869][ T9637] Tainted: [L]=SOFTLOCKUP [ 399.168876][ T9637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 399.168890][ T9637] Call Trace: [ 399.168898][ T9637] [ 399.168907][ T9637] dump_stack_lvl+0xe8/0x150 [ 399.168939][ T9637] should_fail_ex+0x467/0x600 [ 399.168972][ T9637] _copy_to_user+0x31/0xb0 [ 399.169081][ T9637] simple_read_from_buffer+0xe1/0x170 [ 399.169106][ T9637] proc_fail_nth_read+0x1be/0x230 [ 399.169146][ T9637] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 399.169168][ T9637] ? rw_verify_area+0x250/0x4d0 [ 399.169199][ T9637] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 399.169218][ T9637] vfs_read+0x219/0xa90 [ 399.169247][ T9637] ? __pfx_vfs_read+0x10/0x10 [ 399.169270][ T9637] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 399.169290][ T9637] ? lockdep_hardirqs_on+0x7a/0x110 [ 399.169308][ T9637] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 399.169327][ T9637] ? mutex_lock_nested+0x152/0x1d0 [ 399.169387][ T9637] ? fdget_pos+0x252/0x320 [ 399.169417][ T9637] ksys_read+0x156/0x270 [ 399.169442][ T9637] ? __pfx_ksys_read+0x10/0x10 [ 399.169475][ T9637] do_syscall_64+0x17b/0x530 [ 399.169494][ T9637] ? irqentry_exit+0x10f/0x8f0 [ 399.169512][ T9637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.169532][ T9637] ? clear_bhb_loop+0x40/0x90 [ 399.169557][ T9637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.169578][ T9637] RIP: 0033:0x7f85b223e6ce [ 399.169597][ T9637] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 399.169614][ T9637] RSP: 002b:00007f85b04d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 399.169635][ T9637] RAX: ffffffffffffffda RBX: 00007f85b04d66c0 RCX: 00007f85b223e6ce [ 399.169659][ T9637] RDX: 000000000000000f RSI: 00007f85b04d60a0 RDI: 0000000000000003 [ 399.169672][ T9637] RBP: 00007f85b04d6090 R08: 0000000000000000 R09: 0000000000000000 [ 399.169685][ T9637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.169698][ T9637] R13: 00007f85b2506038 R14: 00007f85b2505fa0 R15: 00007ffc4d78d5d8 [ 399.169730][ T9637] [ 399.260392][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 399.448143][ T9648] nbd: must specify a device to reconfigure [ 399.514590][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 399.523336][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 399.532323][ T9] usb 2-1: language id specifier not provided by device, defaulting to English [ 399.547849][ T9] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 399.547881][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.547899][ T9] usb 2-1: Product: syz [ 399.547912][ T9] usb 2-1: Manufacturer: â¦íŒ‚鵢혗çµâ…¯áŸ‘娃ᷥ鬨먽覈î¾êˆâ”…é´Žâ’’â숪贋ⰹ祓淕ﮣ䄄ãﻇ셱≱蜋嬨ሃ縬ႅ岀鼎油㮮뮜á±êŒ—㡘散宅࿧ᕩ魅뒢轂䰘쫥則ï¥à¬®ä’«í‡¨é™´î’¡å·Œç€Œê¶‡ïˆ£à¶ŽëšŒï£»î¡žê¼…㲘䊔瀪헻ଂíží†§ä¸è‚•î©‡ì•å…µä±é©†ï˜—쪃 [ 399.547937][ T9] usb 2-1: SerialNumber: syz [ 399.860003][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 399.860115][ T9] usb 2-1: MIDIStreaming interface descriptor not found [ 399.984379][ T9] usb 2-1: USB disconnect, device number 29 [ 400.075497][ T9678] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1041'. [ 400.097155][ T9671] binder: BINDER_SET_CONTEXT_MGR already set [ 400.097169][ T9671] binder: 9668:9671 ioctl 4018620d 2000000000c0 returned -16 [ 400.148615][ T9671] netlink: 'syz.6.1045': attribute type 22 has an invalid length. [ 400.148637][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1045'. [ 400.155166][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 400.204989][ T9673] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1045'. [ 400.566568][ T9685] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1047'. [ 400.744938][ T32] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 400.834639][ T49] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 400.894549][ T32] usb 2-1: Using ep0 maxpacket: 8 [ 400.896410][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 400.896442][ T32] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 400.896476][ T32] usb 2-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 400.896488][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.900223][ T32] usb 2-1: config 0 descriptor?? [ 400.995638][ T49] usb 3-1: Using ep0 maxpacket: 32 [ 400.998483][ T49] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 401.001499][ T49] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 401.001517][ T49] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 401.001528][ T49] usb 3-1: Product: syz [ 401.001539][ T49] usb 3-1: Manufacturer: syz [ 401.001546][ T49] usb 3-1: SerialNumber: syz [ 401.008854][ T49] usb 3-1: config 0 descriptor?? [ 401.020075][ T9688] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 401.023201][ T49] hub 3-1:0.0: bad descriptor, ignoring hub [ 401.023237][ T49] hub 3-1:0.0: probe with driver hub failed with error -5 [ 401.372440][ T32] lenovo 0003:17EF:60B5.0022: unknown main item tag 0x0 [ 401.372476][ T32] lenovo 0003:17EF:60B5.0022: unknown main item tag 0x0 [ 401.372502][ T32] lenovo 0003:17EF:60B5.0022: unknown main item tag 0x0 [ 401.372526][ T32] lenovo 0003:17EF:60B5.0022: unknown main item tag 0x0 [ 401.372550][ T32] lenovo 0003:17EF:60B5.0022: unknown main item tag 0x0 [ 401.372584][ T32] lenovo 0003:17EF:60B5.0022: unknown main item tag 0x0 [ 401.372607][ T32] lenovo 0003:17EF:60B5.0022: unknown main item tag 0x0 [ 401.372631][ T32] lenovo 0003:17EF:60B5.0022: unknown main item tag 0x0 [ 401.395397][ T5676] usb 3-1: USB disconnect, device number 24 [ 401.420452][ T32] lenovo 0003:17EF:60B5.0022: hidraw0: USB HID v0.00 Device [HID 17ef:60b5] on usb-dummy_hcd.1-1/input0 [ 401.658486][ T49] usb 2-1: USB disconnect, device number 30 [ 402.174590][ T49] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 402.324719][ T49] usb 7-1: Using ep0 maxpacket: 32 [ 402.328432][ T49] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 402.328466][ T49] usb 7-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 402.328493][ T49] usb 7-1: config 0 interface 0 has no altsetting 0 [ 402.328525][ T49] usb 7-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 402.328543][ T49] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.332166][ T49] usb 7-1: config 0 descriptor?? [ 402.515226][ T32] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 402.654627][ T32] usb 2-1: device descriptor read/64, error -71 [ 402.751770][ T49] kye 0003:0458:0087.0023: hidraw0: USB HID v10.01 Device [HID 0458:0087] on usb-dummy_hcd.6-1/input0 [ 402.779601][ T5676] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 402.905012][ T32] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 402.934961][ T5676] usb 4-1: Using ep0 maxpacket: 8 [ 402.937853][ T5676] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.937887][ T5676] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 402.937928][ T5676] usb 4-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 402.937951][ T5676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.944332][ T5676] usb 4-1: config 0 descriptor?? [ 402.974120][ T49] usb 7-1: USB disconnect, device number 33 [ 403.036236][ T32] usb 2-1: device descriptor read/64, error -71 [ 403.144973][ T32] usb usb2-port1: attempt power cycle [ 403.421475][ T5676] input: HID 28bd:0935 Mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0935.0024/input/input38 [ 403.484980][ T32] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 403.509967][ T32] usb 2-1: device descriptor read/8, error -71 [ 403.582677][ T5676] uclogic 0003:28BD:0935.0024: input,hidraw0: USB HID v0.81 Mouse [HID 28bd:0935] on usb-dummy_hcd.3-1/input0 [ 403.652010][ T49] usb 4-1: USB disconnect, device number 24 [ 403.718208][ T9725] fido_id[9725]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 403.752201][ T32] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 403.787347][ T32] usb 2-1: device descriptor read/8, error -71 [ 403.894915][ T32] usb usb2-port1: unable to enumerate USB device [ 404.044700][ T5594] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 404.225594][ T5676] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 404.228421][ T5594] usb 7-1: config 3 has an invalid interface number: 233 but max is 3 [ 404.228449][ T5594] usb 7-1: config 3 has an invalid interface number: 193 but max is 3 [ 404.228470][ T5594] usb 7-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 404.228489][ T5594] usb 7-1: config 3 has an invalid interface number: 199 but max is 3 [ 404.228503][ T5594] usb 7-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 404.228513][ T5594] usb 7-1: config 3 has an invalid interface number: 81 but max is 3 [ 404.228522][ T5594] usb 7-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 404.228532][ T5594] usb 7-1: config 3 has an invalid interface number: 180 but max is 3 [ 404.228542][ T5594] usb 7-1: config 3 has an invalid interface number: 249 but max is 3 [ 404.228551][ T5594] usb 7-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 404.228561][ T5594] usb 7-1: config 3 has 6 interfaces, different from the descriptor's value: 4 [ 404.228572][ T5594] usb 7-1: config 3 has no interface number 0 [ 404.228580][ T5594] usb 7-1: config 3 has no interface number 1 [ 404.228588][ T5594] usb 7-1: config 3 has no interface number 2 [ 404.228603][ T5594] usb 7-1: config 3 has no interface number 3 [ 404.228611][ T5594] usb 7-1: config 3 has no interface number 4 [ 404.228619][ T5594] usb 7-1: config 3 has no interface number 5 [ 404.228676][ T5594] usb 7-1: config 3 interface 233 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 404.228687][ T5594] usb 7-1: config 3 interface 233 altsetting 2 endpoint 0xB has invalid maxpacket 544, setting to 64 [ 404.228702][ T5594] usb 7-1: config 3 interface 233 altsetting 2 has an endpoint descriptor with address 0xC7, changing to 0x87 [ 404.228714][ T5594] usb 7-1: config 3 interface 233 altsetting 2 endpoint 0x87 has invalid maxpacket 62921, setting to 1024 [ 404.228728][ T5594] usb 7-1: config 3 interface 233 altsetting 2 bulk endpoint 0x87 has invalid maxpacket 1024 [ 404.228741][ T5594] usb 7-1: config 3 interface 233 altsetting 2 endpoint 0x6 has invalid maxpacket 576, setting to 64 [ 404.228754][ T5594] usb 7-1: config 3 interface 233 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 404.228765][ T5594] usb 7-1: config 3 interface 233 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 404.228775][ T5594] usb 7-1: config 3 interface 233 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 404.228787][ T5594] usb 7-1: config 3 interface 233 altsetting 2 bulk endpoint 0x9 has invalid maxpacket 16 [ 404.228799][ T5594] usb 7-1: config 3 interface 233 altsetting 2 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 404.228887][ T5594] usb 7-1: config 3 interface 193 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 404.228899][ T5594] usb 7-1: config 3 interface 193 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 404.228911][ T5594] usb 7-1: config 3 interface 193 altsetting 3 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 404.228924][ T5594] usb 7-1: config 3 interface 193 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 404.228935][ T5594] usb 7-1: config 3 interface 193 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 404.228946][ T5594] usb 7-1: config 3 interface 193 altsetting 3 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 404.228959][ T5594] usb 7-1: config 3 interface 193 altsetting 3 endpoint 0x3 has invalid wMaxPacketSize 0 [ 404.228971][ T5594] usb 7-1: config 3 interface 193 altsetting 3 endpoint 0x2 has invalid maxpacket 1568, setting to 64 [ 404.228992][ T5594] usb 7-1: config 3 interface 199 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 404.229003][ T5594] usb 7-1: config 3 interface 199 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 404.229015][ T5594] usb 7-1: config 3 interface 199 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 404.229026][ T5594] usb 7-1: config 3 interface 199 altsetting 9 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 404.229038][ T5594] usb 7-1: config 3 interface 199 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 404.229050][ T5594] usb 7-1: config 3 interface 199 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 404.229061][ T5594] usb 7-1: config 3 interface 199 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 404.229072][ T5594] usb 7-1: config 3 interface 199 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 404.229082][ T5594] usb 7-1: config 3 interface 199 altsetting 9 has 9 endpoint descriptors, different from the interface descriptor's value: 12 [ 404.229098][ T5594] usb 7-1: too many endpoints for config 3 interface 81 altsetting 45: 165, using maximum allowed: 30 [ 404.229127][ T5594] usb 7-1: config 3 interface 81 altsetting 45 has a duplicate endpoint with address 0xB, skipping [ 404.229139][ T5594] usb 7-1: config 3 interface 81 altsetting 45 has an invalid descriptor for endpoint zero, skipping [ 404.229150][ T5594] usb 7-1: config 3 interface 81 altsetting 45 has a duplicate endpoint with address 0xB, skipping [ 404.229160][ T5594] usb 7-1: config 3 interface 81 altsetting 45 has 3 endpoint descriptors, different from the interface descriptor's value: 165 [ 404.229174][ T5594] usb 7-1: too many endpoints for config 3 interface 180 altsetting 252: 81, using maximum allowed: 30 [ 404.229193][ T5594] usb 7-1: config 3 interface 180 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 81 [ 404.229214][ T5594] usb 7-1: config 3 interface 249 altsetting 5 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 404.229228][ T5594] usb 7-1: config 3 interface 249 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 404.229239][ T5594] usb 7-1: config 3 interface 249 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 404.229250][ T5594] usb 7-1: config 3 interface 249 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 404.229261][ T5594] usb 7-1: config 3 interface 249 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 404.229273][ T5594] usb 7-1: config 3 interface 249 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 404.229284][ T5594] usb 7-1: config 3 interface 249 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 404.229296][ T5594] usb 7-1: config 3 interface 249 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 404.229307][ T5594] usb 7-1: config 3 interface 233 has no altsetting 0 [ 404.229316][ T5594] usb 7-1: config 3 interface 193 has no altsetting 0 [ 404.229325][ T5594] usb 7-1: config 3 interface 199 has no altsetting 0 [ 404.229334][ T5594] usb 7-1: config 3 interface 81 has no altsetting 0 [ 404.229342][ T5594] usb 7-1: config 3 interface 180 has no altsetting 0 [ 404.229351][ T5594] usb 7-1: config 3 interface 249 has no altsetting 0 [ 404.231524][ T5594] usb 7-1: New USB device found, idVendor=2040, idProduct=b123, bcdDevice= 7.0f [ 404.231552][ T5594] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.231571][ T5594] usb 7-1: Product: Д [ 404.231585][ T5594] usb 7-1: Manufacturer: ꥋ맑喛批⿮羠倌í•îﳛ鴷噔尿힊傤쿽ã–᳷ࢮ櫪ⵢ⻯ê¾ä¹­Æ—觜ê‡ã¦…厳쫺⤔é¾ä³á¥·è¾ç¥©ã˜™ë‡¹ì—¢ìµ¦é¹¨ê™½ë€›ç©˜åƒ®ï¨á©Šè€«à¦ï˜Ÿã­é¿§ê±£ç‹­ã½šé™ï›â«‘ë¼•ë©¡ì˜ [ 404.231608][ T5594] usb 7-1: SerialNumber: syz [ 404.302853][ T9727] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 404.303631][ T9727] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 404.788880][ T5594] usb 7-1: USB disconnect, device number 34 [ 404.872001][ T5676] usb 3-1: Using ep0 maxpacket: 32 [ 404.898335][ T5676] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 404.995611][ T5676] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 404.995629][ T5676] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 404.995640][ T5676] usb 3-1: Product: syz [ 404.995647][ T5676] usb 3-1: Manufacturer: syz [ 404.995655][ T5676] usb 3-1: SerialNumber: syz [ 405.001978][ T5676] usb 3-1: config 0 descriptor?? [ 405.003637][ T9729] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 405.050669][ T5676] hub 3-1:0.0: bad descriptor, ignoring hub [ 405.050706][ T5676] hub 3-1:0.0: probe with driver hub failed with error -5 [ 405.324981][ T5676] usb 3-1: USB disconnect, device number 25 [ 405.714610][ T5594] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 405.854257][ T9753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1069'. [ 405.874656][ T5594] usb 2-1: Using ep0 maxpacket: 8 [ 405.880203][ T5594] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 231, changing to 7 [ 405.882343][ T5594] usb 2-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 405.882371][ T5594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.882390][ T5594] usb 2-1: Product: 鉶娆フ⎸蕥ᑟ癀⟡⚇䇢깾娾刃Û㲔㨎ᱚ攩煜ꈭ霛嚥Ⴃ䔱봄å¸æ†´á‚“㙃屈ᨊ晌äŽê”˜åº¾Ê¼å‹¬äº—⡈촥ᙻꗌ㛄뱺뭓┬呇㿷἞ë¡á¡€ë•‹à¥ƒã†°é¢µã½¥á»¾êµ®î¢¾ä˜´â¬ è’†ì‚Œã½‘ì’ⲙë á‰±ã¨æ“ƒå¬®î­Žã²žï†£ë»ë«›é¾§å¶‰á£±æ—嶣崙ꖀᥟ棯ç’嶷ïˆî¦ [ 405.882408][ T5594] usb 2-1: Manufacturer: Љ [ 405.882416][ T5594] usb 2-1: SerialNumber: syz [ 406.027285][ T9756] pim6reg1: entered promiscuous mode [ 406.027313][ T9756] pim6reg1: entered allmulticast mode [ 406.064911][ T49] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 406.156333][ T9739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.158321][ T9739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.212972][ T5594] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 406.224166][ T5594] usb 2-1: USB disconnect, device number 35 [ 406.230685][ T49] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.230711][ T49] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 406.237473][ T49] usb 7-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 406.237502][ T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.237521][ T49] usb 7-1: Product: syz [ 406.237536][ T49] usb 7-1: Manufacturer: syz [ 406.237551][ T49] usb 7-1: SerialNumber: syz [ 406.334591][ T5676] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 406.502461][ T49] usb 7-1: 0:1 : does not exist [ 406.505392][ T5676] usb 3-1: Using ep0 maxpacket: 32 [ 406.510060][ T5676] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 406.529715][ T5676] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 406.529744][ T5676] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 406.529764][ T5676] usb 3-1: Product: syz [ 406.529777][ T5676] usb 3-1: Manufacturer: syz [ 406.529791][ T5676] usb 3-1: SerialNumber: syz [ 406.571263][ T49] usb 7-1: USB disconnect, device number 35 [ 406.581446][ T5676] usb 3-1: config 0 descriptor?? [ 406.583005][ T9759] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 406.598007][ T5676] hub 3-1:0.0: bad descriptor, ignoring hub [ 406.598042][ T5676] hub 3-1:0.0: probe with driver hub failed with error -5 [ 406.649550][ T5757] udevd[5757]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 406.685561][ T5594] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 406.845478][ T5594] usb 4-1: Using ep0 maxpacket: 32 [ 406.848920][ T5594] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 406.848952][ T5594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 406.848977][ T5594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 406.848999][ T5594] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 406.849023][ T5594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 406.849048][ T5594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 406.866634][ T5594] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 406.866664][ T5594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.866685][ T5594] usb 4-1: Product: syz [ 406.866698][ T5594] usb 4-1: Manufacturer: syz [ 406.866712][ T5594] usb 4-1: SerialNumber: syz [ 406.880243][ T5594] usb 4-1: config 0 descriptor?? [ 406.907176][ T49] usb 3-1: USB disconnect, device number 26 [ 407.003591][ T9759] overlayfs: unescaped trailing colons in lowerdir mount option. [ 407.085302][ T49] usb 4-1: USB disconnect, device number 25 [ 408.104708][ T49] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 408.284821][ T49] usb 3-1: Invalid ep0 maxpacket: 64 [ 408.414646][ T49] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 408.578411][ T49] usb 3-1: Invalid ep0 maxpacket: 64 [ 408.578713][ T49] usb usb3-port1: attempt power cycle [ 408.914667][ T49] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 408.939884][ T49] usb 3-1: Invalid ep0 maxpacket: 64 [ 408.948222][ T5594] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 409.064761][ T49] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 409.084613][ T5669] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 409.086090][ T49] usb 3-1: Invalid ep0 maxpacket: 64 [ 409.086403][ T49] usb usb3-port1: unable to enumerate USB device [ 409.094625][ T5594] usb 4-1: Using ep0 maxpacket: 16 [ 409.120806][ T5594] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 409.120837][ T5594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.123705][ T5594] usb 4-1: config 0 descriptor?? [ 409.149657][ T5594] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 409.236816][ T5669] usb 2-1: Using ep0 maxpacket: 8 [ 409.294188][ T5669] usb 2-1: unable to get BOS descriptor or descriptor too short [ 409.302935][ T5669] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 114, changing to 10 [ 409.302956][ T5669] usb 2-1: config 1 interface 0 has no altsetting 0 [ 409.327331][ T5669] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.40 [ 409.327351][ T5669] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.327361][ T5669] usb 2-1: Product: syz [ 409.327409][ T5669] usb 2-1: Manufacturer: syz [ 409.327417][ T5669] usb 2-1: SerialNumber: syz [ 409.731344][ T5797] hid-generic 0006:0008:0001.0025: unknown main item tag 0x0 [ 409.731464][ T5797] hid-generic 0006:0008:0001.0025: unknown main item tag 0x0 [ 409.731493][ T5797] hid-generic 0006:0008:0001.0025: unknown main item tag 0x0 [ 409.731518][ T5797] hid-generic 0006:0008:0001.0025: unknown main item tag 0x0 [ 409.731544][ T5797] hid-generic 0006:0008:0001.0025: unknown main item tag 0x0 [ 409.731568][ T5797] hid-generic 0006:0008:0001.0025: unknown main item tag 0x0 [ 409.731592][ T5797] hid-generic 0006:0008:0001.0025: unknown main item tag 0x0 [ 409.731618][ T5797] hid-generic 0006:0008:0001.0025: unknown main item tag 0x0 [ 409.731644][ T5797] hid-generic 0006:0008:0001.0025: unknown main item tag 0x0 [ 409.731670][ T5797] hid-generic 0006:0008:0001.0025: unknown main item tag 0x0 [ 409.811644][ T5797] hid-generic 0006:0008:0001.0025: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 409.944592][ T5676] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 410.104680][ T5676] usb 7-1: Using ep0 maxpacket: 8 [ 410.150061][ T5676] usb 7-1: unable to get BOS descriptor or descriptor too short [ 410.151105][ T5676] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 410.151138][ T5676] usb 7-1: can't read configurations, error -71 [ 410.191682][ T5594] gspca_sonixj: reg_w1 err -71 [ 410.207241][ T5594] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 410.231159][ T5594] usb 4-1: USB disconnect, device number 26 [ 411.214646][ T5797] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 411.280826][ T9827] /dev/nullb0: Can't open blockdev [ 411.364953][ T5797] usb 3-1: Using ep0 maxpacket: 32 [ 411.366593][ T5797] usb 3-1: no configurations [ 411.366611][ T5797] usb 3-1: can't read configurations, error -22 [ 411.453539][ T9832] tipc: Started in network mode [ 411.453553][ T9832] tipc: Node identity _, cluster identity 4711 [ 411.453594][ T9832] tipc: Enabling of bearer rejected, failed to enable media [ 411.494691][ T5797] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 411.644588][ T5797] usb 3-1: Using ep0 maxpacket: 32 [ 411.645416][ T5797] usb 3-1: no configurations [ 411.645431][ T5797] usb 3-1: can't read configurations, error -22 [ 411.645760][ T5797] usb usb3-port1: attempt power cycle [ 411.895012][ T5669] usbhid 2-1:1.0: can't add hid device: -71 [ 411.895125][ T5669] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 411.902743][ T5669] usb 2-1: USB disconnect, device number 36 [ 411.934342][ T5676] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 412.016343][ T5797] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 412.037083][ T5797] usb 3-1: Using ep0 maxpacket: 32 [ 412.039819][ T5797] usb 3-1: no configurations [ 412.039837][ T5797] usb 3-1: can't read configurations, error -22 [ 412.096755][ T5676] usb 7-1: config 248 has an invalid descriptor of length 60, skipping remainder of the config [ 412.096783][ T5676] usb 7-1: config 248 has 0 interfaces, different from the descriptor's value: 1 [ 412.099193][ T5676] usb 7-1: New USB device found, idVendor=1608, idProduct=0309, bcdDevice=a9.06 [ 412.099222][ T5676] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.099243][ T5676] usb 7-1: Product: syz [ 412.099257][ T5676] usb 7-1: Manufacturer: syz [ 412.099271][ T5676] usb 7-1: SerialNumber: syz [ 412.224708][ T5797] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 412.247152][ T5797] usb 3-1: Using ep0 maxpacket: 32 [ 412.247927][ T5797] usb 3-1: no configurations [ 412.247944][ T5797] usb 3-1: can't read configurations, error -22 [ 412.248551][ T5797] usb usb3-port1: unable to enumerate USB device [ 412.323848][ T9851] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 412.343116][ T9853] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1097'. [ 412.382867][ T5676] usb 7-1: USB disconnect, device number 38 [ 412.405393][ T9854] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1096'. [ 412.693019][ T9861] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1100'. [ 412.904665][ T5669] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 413.067516][ T5669] usb 2-1: Using ep0 maxpacket: 32 [ 413.074920][ T5669] usb 2-1: unable to get BOS descriptor or descriptor too short [ 413.076025][ T5669] usb 2-1: config 3 has an invalid interface number: 253 but max is 0 [ 413.076049][ T5669] usb 2-1: config 3 has no interface number 0 [ 413.076081][ T5669] usb 2-1: config 3 interface 253 has no altsetting 0 [ 413.079372][ T5669] usb 2-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=b7.fb [ 413.079398][ T5669] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.079409][ T5669] usb 2-1: Product: syz [ 413.079416][ T5669] usb 2-1: Manufacturer: syz [ 413.079424][ T5669] usb 2-1: SerialNumber: syz [ 413.349508][ T9878] overlayfs: statfs failed on './file0' [ 413.538825][ T5669] gspca_main: kinect-2.14.0 probing 045e:02bf [ 413.551630][ T5669] usb 2-1: USB disconnect, device number 37 [ 413.565958][ T49] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 413.610649][ T5757] udevd[5757]: setting mode of /dev/bus/usb/002/037 to 020664 failed: No such file or directory [ 413.610876][ T5757] udevd[5757]: setting owner of /dev/bus/usb/002/037 to uid=0, gid=0 failed: No such file or directory [ 413.726658][ T49] usb 4-1: config 0 has an invalid descriptor of length 171, skipping remainder of the config [ 413.726702][ T49] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 413.726735][ T49] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 413.726758][ T49] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 413.726771][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.730553][ T49] usb 4-1: config 0 descriptor?? [ 413.746607][ T49] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 413.948020][ T9877] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 413.951183][ T9877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.954951][ T9877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.195711][ T49] usb 4-1: USB disconnect, device number 27 [ 414.350087][ T5669] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 414.370508][ T5698] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 414.497075][ T5669] usb 3-1: Using ep0 maxpacket: 16 [ 414.498863][ T5669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 414.500949][ T5669] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 414.500976][ T5669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.500995][ T5669] usb 3-1: Product: syz [ 414.501003][ T5669] usb 3-1: Manufacturer: syz [ 414.501011][ T5669] usb 3-1: SerialNumber: syz [ 414.508577][ T5669] usb 3-1: config 0 descriptor?? [ 414.544570][ T5698] usb 2-1: Using ep0 maxpacket: 16 [ 414.544620][ T49] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 414.547434][ T5698] usb 2-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 414.547474][ T5698] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 414.547500][ T5698] usb 2-1: config 0 interface 0 has no altsetting 0 [ 414.547532][ T5698] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a30, bcdDevice= 0.00 [ 414.547554][ T5698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.564776][ T5669] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 414.564811][ T5669] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 414.638795][ T5698] usb 2-1: config 0 descriptor?? [ 414.734606][ T49] usb 4-1: Using ep0 maxpacket: 16 [ 414.737469][ T49] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.737759][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 414.737786][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 414.737798][ T49] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 414.737810][ T49] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 414.739471][ T49] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 414.739498][ T49] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 414.739730][ T49] usb 4-1: Manufacturer: syz [ 414.813485][ T49] usb 4-1: config 0 descriptor?? [ 414.986125][ T5669] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 415.063639][ T5698] hid-corsair-void 0003:1B1C:0A30.0026: ignoring exceeding usage max [ 415.097509][ T5698] hid-corsair-void 0003:1B1C:0A30.0026: hidraw0: USB HID v0.01 Device [HID 1b1c:0a30] on usb-dummy_hcd.1-1/input0 [ 415.189767][ T5669] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 415.189911][ T5669] em28xx 3-1:0.0: board has no eeprom [ 415.215370][ T49] rc_core: IR keymap rc-hauppauge not found [ 415.215391][ T49] Registered IR keymap rc-empty [ 415.215541][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.237692][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.254666][ T5594] usb 7-1: new low-speed USB device number 39 using dummy_hcd [ 415.259283][ T5669] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 415.259309][ T5669] em28xx 3-1:0.0: dvb set to bulk mode. [ 415.286270][ T5669] usb 3-1: USB disconnect, device number 35 [ 415.293607][ T5669] em28xx 3-1:0.0: Disconnecting em28xx [ 415.366393][ T5706] em28xx 3-1:0.0: Binding DVB extension [ 415.406966][ T9890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.422963][ T9890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.426302][ T5594] usb 7-1: Invalid ep0 maxpacket: 16 [ 415.438861][ T9906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.452850][ T9906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.482105][ T49] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 415.505665][ T49] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input39 [ 415.518692][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.548005][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.552007][ T9887] veth0_to_team: entered promiscuous mode [ 415.560280][ T5594] usb 7-1: new low-speed USB device number 40 using dummy_hcd [ 415.564798][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.596303][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.614813][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.635322][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.654715][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.679099][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.696086][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.705662][ T5594] usb 7-1: Invalid ep0 maxpacket: 16 [ 415.706371][ T5594] usb usb7-port1: attempt power cycle [ 415.715680][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.840802][ T5797] hid-corsair-void 0003:1B1C:0A30.0026: failed to request battery (reason: -71) [ 415.841109][ T5698] hid-corsair-void 0003:1B1C:0A30.0026: failed to request firmware (reason: -71) [ 415.850663][ T32] usb 2-1: USB disconnect, device number 38 [ 415.912744][ T49] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 415.912760][ T49] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 416.058816][ T5594] usb 7-1: new low-speed USB device number 41 using dummy_hcd [ 416.086241][ T5594] usb 7-1: Invalid ep0 maxpacket: 16 [ 416.303881][ T5594] usb 7-1: new low-speed USB device number 42 using dummy_hcd [ 416.325346][ T5594] usb 7-1: Invalid ep0 maxpacket: 16 [ 416.325775][ T5594] usb usb7-port1: unable to enumerate USB device [ 416.412538][ T5706] em28xx 3-1:0.0: Registering input extension [ 416.416803][ T5669] em28xx 3-1:0.0: Closing input extension [ 416.801812][ T5669] em28xx: Freeing device [ 416.914772][ T5797] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 417.066620][ T5797] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 417.066677][ T5797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 417.066702][ T5797] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 417.066727][ T5797] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 417.066739][ T5797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.072356][ T5797] usb 2-1: config 0 descriptor?? [ 417.073901][ T9912] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 417.104905][ T5669] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 417.261996][ T5669] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.262809][ T5669] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 417.262837][ T5669] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.288563][ T5669] usb 3-1: config 0 descriptor?? [ 417.310927][ T5669] pxrc 3-1:0.0: Could not find endpoint [ 417.313911][ T32] usb 4-1: USB disconnect, device number 28 [ 417.388348][ T9914] netlink: 'syz.3.1115': attribute type 21 has an invalid length. [ 417.510164][ T5669] usb 3-1: USB disconnect, device number 36 [ 417.523530][ T5797] hid-multitouch 0003:1FD2:6007.0027: reserved main item tag 0xe [ 417.523562][ T5797] hid_parser_main: 7 callbacks suppressed [ 417.523575][ T5797] hid-multitouch 0003:1FD2:6007.0027: unknown main item tag 0x3 [ 417.523602][ T5797] hid-multitouch 0003:1FD2:6007.0027: unknown main item tag 0x5 [ 417.523628][ T5797] hid-multitouch 0003:1FD2:6007.0027: item fetching failed at offset 22/40 [ 417.565124][ T5797] hid-multitouch 0003:1FD2:6007.0027: probe with driver hid-multitouch failed with error -22 [ 417.870652][ T32] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 418.014728][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 418.027629][ T32] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 418.032461][ T32] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 418.032492][ T32] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 418.032513][ T32] usb 4-1: Product: syz [ 418.032527][ T32] usb 4-1: Manufacturer: syz [ 418.032541][ T32] usb 4-1: SerialNumber: syz [ 418.094944][ T32] usb 4-1: config 0 descriptor?? [ 418.099092][ T9916] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 418.103865][ T32] hub 4-1:0.0: bad descriptor, ignoring hub [ 418.103902][ T32] hub 4-1:0.0: probe with driver hub failed with error -5 [ 418.270590][ T9918] sit0: entered promiscuous mode [ 418.281939][ T9918] netlink: 'syz.6.1117': attribute type 1 has an invalid length. [ 418.281954][ T9918] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1117'. [ 418.307281][ T9916] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 418.308551][ T9916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.309098][ T9916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.400219][ T9916] netlink: 'syz.3.1116': attribute type 11 has an invalid length. [ 418.494992][ T5797] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 418.555114][ T5706] usb 4-1: USB disconnect, device number 29 [ 418.624838][ T32] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 418.644556][ T5797] usb 3-1: Using ep0 maxpacket: 16 [ 418.647296][ T5797] usb 3-1: config 9 has an invalid interface number: 5 but max is 0 [ 418.647323][ T5797] usb 3-1: config 9 has no interface number 0 [ 418.647365][ T5797] usb 3-1: config 9 interface 5 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 418.647382][ T5797] usb 3-1: config 9 interface 5 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 418.647393][ T5797] usb 3-1: config 9 interface 5 altsetting 4 has an endpoint descriptor with address 0x3A, changing to 0xA [ 418.647405][ T5797] usb 3-1: config 9 interface 5 altsetting 4 endpoint 0xA has invalid maxpacket 19705, setting to 64 [ 418.647419][ T5797] usb 3-1: config 9 interface 5 altsetting 4 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 418.647432][ T5797] usb 3-1: config 9 interface 5 has no altsetting 0 [ 418.650031][ T5797] usb 3-1: New USB device found, idVendor=05c6, idProduct=9048, bcdDevice=4f.9b [ 418.650059][ T5797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.650079][ T5797] usb 3-1: Product: 锥㭛æʻ놌쒃ꯨ䛷é‰çŸ ì°œ [ 418.650093][ T5797] usb 3-1: Manufacturer: 沗摟꺋 [ 418.650107][ T5797] usb 3-1: SerialNumber: ࡃ [ 418.774557][ T32] usb 7-1: Using ep0 maxpacket: 8 [ 418.777338][ T32] usb 7-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 418.777365][ T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.800288][ T32] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 418.818449][ T32] input: xirlink-cit as /devices/platform/dummy_hcd.6/usb7/7-1/input/input41 [ 418.907409][ T9922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.912860][ T9922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.941285][ T32] hid-generic 0006:0008:0001.0028: unknown main item tag 0x0 [ 418.948047][ T32] hid-generic 0006:0008:0001.0028: unknown main item tag 0x0 [ 418.948081][ T32] hid-generic 0006:0008:0001.0028: unknown main item tag 0x0 [ 418.948186][ T32] hid-generic 0006:0008:0001.0028: unknown main item tag 0x0 [ 418.948212][ T32] hid-generic 0006:0008:0001.0028: unknown main item tag 0x0 [ 418.948239][ T32] hid-generic 0006:0008:0001.0028: unknown main item tag 0x0 [ 418.948263][ T32] hid-generic 0006:0008:0001.0028: unknown main item tag 0x0 [ 418.948286][ T32] hid-generic 0006:0008:0001.0028: unknown main item tag 0x0 [ 418.995498][ T5676] usb 7-1: USB disconnect, device number 43 [ 419.006851][ T32] hid-generic 0006:0008:0001.0028: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 419.163200][ T5797] usb 3-1: USB disconnect, device number 37 [ 419.347601][ T9930] fido_id[9930]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 419.689418][ T5797] usb 2-1: USB disconnect, device number 39 [ 419.852718][ T9939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'. [ 419.852759][ T9939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'. [ 420.154891][ T5706] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 420.285023][ T32] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 420.306196][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 420.306217][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.306241][ T5706] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 420.306253][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.311190][ T5706] usb 2-1: config 0 descriptor?? [ 420.435165][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 420.442053][ T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.442080][ T32] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 420.444335][ T32] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 420.444362][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.444381][ T32] usb 3-1: Product: syz [ 420.444806][ T32] usb 3-1: Manufacturer: syz [ 420.444823][ T32] usb 3-1: SerialNumber: syz [ 420.458397][ T32] usb 3-1: config 0 descriptor?? [ 420.720106][ T5706] elan 0003:04F3:0755.0029: failed to start in urb: -90 [ 420.723555][ T5706] elan 0003:04F3:0755.0029: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 420.939841][ T32] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 421.030831][ T9939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.031465][ T9939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.064653][ T32] usb 7-1: device descriptor read/64, error -71 [ 421.204639][ T5706] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 421.306218][ T32] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 421.360400][ T5706] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 421.360430][ T5706] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 421.360451][ T5706] usb 4-1: Product: syz [ 421.360464][ T5706] usb 4-1: Manufacturer: syz [ 421.360478][ T5706] usb 4-1: SerialNumber: syz [ 421.365779][ T5706] usb 4-1: config 0 descriptor?? [ 421.438530][ T32] usb 7-1: device descriptor read/64, error -71 [ 421.545938][ T32] usb usb7-port1: attempt power cycle [ 421.604711][ T5706] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 421.807166][ T5706] peak_usb 4-1:0.0 can0: sending command failure: -8 [ 421.807283][ T5706] peak_usb 4-1:0.0 can0: sending command failure: -8 [ 421.807367][ T5706] peak_usb 4-1:0.0 can0: sending command failure: -8 [ 421.884621][ T32] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 421.897320][ T5706] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -8 [ 421.906797][ T32] usb 7-1: device descriptor read/8, error -71 [ 422.012936][ T5676] usb 4-1: USB disconnect, device number 30 [ 422.144829][ T32] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 422.165112][ T32] usb 7-1: device descriptor read/8, error -71 [ 422.274855][ T32] usb usb7-port1: unable to enumerate USB device [ 422.555948][ T9965] ubi31: attaching mtd0 [ 422.580754][ T9965] ubi31: scanning is finished [ 422.580768][ T9965] ubi31: empty MTD device detected [ 422.626315][ T9966] kvm: user requested TSC rate below hardware speed [ 422.858827][ T5706] usb 2-1: USB disconnect, device number 40 [ 423.028219][ T9965] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 423.028246][ T9965] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 423.028265][ T9965] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 423.028281][ T9965] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 423.028297][ T9965] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 423.028385][ T9965] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 423.028404][ T9965] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 733345788 [ 423.028425][ T9965] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 423.044338][ T9967] ubi31: background thread "ubi_bgt31d" started, PID 9967 [ 423.310567][ T5706] usb 3-1: USB disconnect, device number 38 [ 423.594646][ T32] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 423.725855][ T32] usb 2-1: device descriptor read/64, error -71 [ 423.805530][ T5706] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 423.806683][ T9983] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 423.814688][ T9909] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 423.938460][ T9987] binder: 9986:9987 ioctl c0306201 0 returned -14 [ 423.938956][ T9987] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1139'. [ 423.965336][ T32] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 423.965634][ T9909] usb 4-1: device descriptor read/64, error -71 [ 423.966785][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.966815][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.966905][ T5706] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 423.967073][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.978307][ T5706] usb 3-1: config 0 descriptor?? [ 424.106462][ T32] usb 2-1: device descriptor read/64, error -71 [ 424.204598][ T9909] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 424.215514][ T32] usb usb2-port1: attempt power cycle [ 424.324545][ T5797] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 424.337657][ T9909] usb 4-1: device descriptor read/64, error -71 [ 424.399207][ T5706] hid_parser_main: 14 callbacks suppressed [ 424.399230][ T5706] pyra 0003:1E7D:2CF6.002A: unknown main item tag 0x0 [ 424.399261][ T5706] pyra 0003:1E7D:2CF6.002A: unknown main item tag 0x0 [ 424.399304][ T5706] pyra 0003:1E7D:2CF6.002A: unknown main item tag 0x0 [ 424.399331][ T5706] pyra 0003:1E7D:2CF6.002A: unknown main item tag 0x0 [ 424.399358][ T5706] pyra 0003:1E7D:2CF6.002A: unknown main item tag 0x0 [ 424.399383][ T5706] pyra 0003:1E7D:2CF6.002A: unknown main item tag 0x0 [ 424.399409][ T5706] pyra 0003:1E7D:2CF6.002A: unknown main item tag 0x0 [ 424.404277][ T5706] pyra 0003:1E7D:2CF6.002A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 424.445540][ T9909] usb usb4-port1: attempt power cycle [ 424.554550][ T5797] usb 7-1: Using ep0 maxpacket: 8 [ 424.562275][ T5797] usb 7-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 32 [ 424.562308][ T5797] usb 7-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 8 [ 424.562331][ T5797] usb 7-1: config 1 interface 0 has no altsetting 0 [ 424.565570][ T32] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 424.589769][ T32] usb 2-1: device descriptor read/8, error -71 [ 424.594091][ T5797] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 424.594127][ T5797] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.594147][ T5797] usb 7-1: Product: syz [ 424.594161][ T5797] usb 7-1: Manufacturer: syz [ 424.594175][ T5797] usb 7-1: SerialNumber: syz [ 424.643379][ T9989] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 424.643692][ T9989] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 424.804633][ T9909] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 424.826366][ T32] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 424.828530][ T9909] usb 4-1: device descriptor read/8, error -71 [ 424.846095][ T32] usb 2-1: device descriptor read/8, error -71 [ 424.865997][ T5797] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 424.873384][ T5797] usb 7-1: USB disconnect, device number 48 [ 424.955419][ T32] usb usb2-port1: unable to enumerate USB device [ 425.064656][ T9909] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 425.085088][ T9909] usb 4-1: device descriptor read/8, error -71 [ 425.196686][ T9909] usb usb4-port1: unable to enumerate USB device [ 425.827129][ T9974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.827806][ T9974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.832367][ T5706] pyra 0003:1E7D:2CF6.002A: couldn't init struct pyra_device [ 425.832418][ T5706] pyra 0003:1E7D:2CF6.002A: couldn't install mouse [ 425.847777][ T5706] pyra 0003:1E7D:2CF6.002A: probe with driver pyra failed with error -71 [ 425.852349][ T5706] usb 3-1: USB disconnect, device number 39 [ 425.950486][ T37] audit: type=1107 audit(1784519824.045:11): pid=9998 uid=0 auid=4294967295 ses=4294967295 msg='eSÒÂÖÜÐë£Î(Ã1_g½ßÕ¼! UAe€UìÉ[Tm'pÛ_2ñU׵頷ùÆ‘"™¦=„' [ 426.254601][ T32] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 426.333288][T10003] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1146'. [ 426.404610][ T32] usb 7-1: Using ep0 maxpacket: 16 [ 426.406580][ T32] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 426.406608][ T32] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 426.406624][ T32] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 426.406635][ T32] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 426.406645][ T32] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 426.406656][ T32] usb 7-1: config 0 has no interface number 0 [ 426.406682][ T32] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 426.406696][ T32] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 426.406707][ T32] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 426.406725][ T32] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 426.406739][ T32] usb 7-1: config 0 interface 125 has no altsetting 0 [ 426.406749][ T32] usb 7-1: config 0 interface 125 has no altsetting 2 [ 426.409547][ T32] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 426.409574][ T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.409589][ T32] usb 7-1: Product: syz [ 426.409598][ T32] usb 7-1: Manufacturer: syz [ 426.409607][ T32] usb 7-1: SerialNumber: syz [ 426.413144][ T32] usb 7-1: config 0 descriptor?? [ 426.442102][ T32] usb 7-1: selecting invalid altsetting 2 [ 426.706060][ T5706] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 426.739660][ C1] usb 7-1: async_complete: urb error -71 [ 426.742286][ T32] get_1284_register: usb error -71 [ 426.758734][ T9] libceph: connect (1)[c::]:6789 error -101 [ 426.758926][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 426.813168][ T9] libceph: connect (1)[c::]:6789 error -101 [ 426.813365][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 426.813746][ T32] usb 7-1: USB disconnect, device number 49 [ 426.821018][T10008] ceph: No mds server is up or the cluster is laggy [ 426.869692][ T5706] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 426.869745][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.869770][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.869789][ T5706] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 426.869828][ T5706] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 426.869849][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.909089][ T5797] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 426.928335][ T5706] usb 2-1: config 0 descriptor?? [ 427.080482][ T5797] usb 3-1: device descriptor read/64, error -71 [ 427.340779][ T5706] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 427.340803][ T5706] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 427.340819][ T5706] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 427.368427][ T5797] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 427.454922][ T5706] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 427.508454][ T5797] usb 3-1: device descriptor read/64, error -71 [ 427.560505][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 427.619150][ T5797] usb usb3-port1: attempt power cycle [ 427.698690][ T5676] hid-generic 0001:0000:0000.002C: hidraw1: HID va0000.00 Device [syz1] on syz0 [ 427.714556][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 427.715389][ T9] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 427.716518][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 427.716539][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.716557][ T9] usb 4-1: config 0 has no interface number 0 [ 427.717593][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 427.717614][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.717631][ T9] usb 4-1: config 0 has no interface number 0 [ 427.718659][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 427.718679][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.718697][ T9] usb 4-1: config 0 has no interface number 0 [ 427.720249][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 427.720270][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.720289][ T9] usb 4-1: config 0 has no interface number 0 [ 427.730396][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 427.730422][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.730441][ T9] usb 4-1: config 0 has no interface number 0 [ 427.737600][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 427.737627][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.737645][ T9] usb 4-1: config 0 has no interface number 0 [ 427.740561][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 427.740586][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.740605][ T9] usb 4-1: config 0 has no interface number 0 [ 427.769032][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 427.769060][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.769079][ T9] usb 4-1: config 0 has no interface number 0 [ 427.771448][ T9] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 427.771474][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.771494][ T9] usb 4-1: Product: syz [ 427.771507][ T9] usb 4-1: Manufacturer: syz [ 427.771521][ T9] usb 4-1: SerialNumber: syz [ 427.848067][ T9] usb 4-1: config 0 descriptor?? [ 427.861361][ T9] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 427.964727][ T5797] usb 3-1: new low-speed USB device number 42 using dummy_hcd [ 427.996883][ T5797] usb 3-1: device descriptor read/8, error -71 [ 428.057108][ T5698] usb 4-1: USB disconnect, device number 35 [ 428.074748][ T5676] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 428.214679][ T5676] usb 7-1: device descriptor read/64, error -71 [ 428.244676][ T5797] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 428.270373][ T5797] usb 3-1: device descriptor read/8, error -71 [ 428.387625][ T5797] usb usb3-port1: unable to enumerate USB device [ 428.466149][ T5676] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 428.647466][ T5676] usb 7-1: device descriptor read/64, error -71 [ 428.764137][ T5676] usb usb7-port1: attempt power cycle [ 429.015143][ T5797] usb 2-1: reset high-speed USB device number 45 using dummy_hcd [ 429.015207][ T5706] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 429.145328][ T5676] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 429.166008][ T5676] usb 7-1: device descriptor read/8, error -71 [ 429.184615][ T5706] usb 4-1: Using ep0 maxpacket: 32 [ 429.186661][ T5706] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 429.188806][ T5706] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 429.188833][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 429.188852][ T5706] usb 4-1: Product: syz [ 429.188867][ T5706] usb 4-1: Manufacturer: syz [ 429.188879][ T5706] usb 4-1: SerialNumber: syz [ 429.191879][ T5706] usb 4-1: config 0 descriptor?? [ 429.192620][T10032] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 429.254951][ T5706] hub 4-1:0.0: bad descriptor, ignoring hub [ 429.254989][ T5706] hub 4-1:0.0: probe with driver hub failed with error -5 [ 429.414577][ T5676] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 429.446776][ T5676] usb 7-1: device descriptor read/8, error -71 [ 429.556786][ T5676] usb usb7-port1: unable to enumerate USB device [ 429.560861][ T5796] usb 4-1: USB disconnect, device number 36 [ 429.923971][ T5698] usb 2-1: USB disconnect, device number 45 [ 430.084583][ T5676] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 430.254579][ T5676] usb 3-1: Using ep0 maxpacket: 8 [ 430.267449][ T5676] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 430.267477][ T5676] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.267496][ T5676] usb 3-1: config 0 has no interface number 0 [ 430.267701][ T5676] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 430.267726][ T5676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.314588][ T5676] usb 3-1: config 0 descriptor?? [ 430.328399][ T5676] usb 3-1: selecting invalid altsetting 1 [ 430.328431][ T5676] usb 3-1: Can not set alternate setting to 1, error: -22 [ 430.328592][ T5676] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -22 [ 430.525637][ T5706] usb 3-1: USB disconnect, device number 44 [ 431.324622][ T6816] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 431.454580][ T6816] usb 2-1: device descriptor read/64, error -71 [ 431.474562][ T5698] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 431.504598][ T5676] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 431.651142][ T5698] usb 7-1: unable to get BOS descriptor or descriptor too short [ 431.652325][ T5698] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.652415][ T5698] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 431.654624][ T5676] usb 3-1: Using ep0 maxpacket: 32 [ 431.689556][ T5698] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 431.689574][ T5698] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.689585][ T5698] usb 7-1: Product: syz [ 431.689592][ T5698] usb 7-1: Manufacturer: syz [ 431.689600][ T5698] usb 7-1: SerialNumber: syz [ 431.691180][ T5676] usb 3-1: config 1 has an invalid interface number: 1 but max is 0 [ 431.691196][ T5676] usb 3-1: config 1 has no interface number 0 [ 431.694122][ T5676] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 431.694146][ T5676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.694157][ T5676] usb 3-1: Product: syz [ 431.694164][ T5676] usb 3-1: Manufacturer: syz [ 431.694171][ T5676] usb 3-1: SerialNumber: syz [ 431.704990][ T6816] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 431.854677][ T6816] usb 2-1: device descriptor read/64, error -71 [ 431.966293][ T6816] usb usb2-port1: attempt power cycle [ 432.009473][ T5698] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 432.010093][ T5698] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 432.010162][ T5698] usb 7-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 432.087989][ T5676] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 432.105717][ T5698] usb 7-1: USB disconnect, device number 54 [ 432.152562][ T5676] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 432.168479][ T5676] usb 3-1: USB disconnect, device number 45 [ 432.174601][ T9909] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 432.219714][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 432.305838][ T6816] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 432.332115][ T9909] usb 4-1: Using ep0 maxpacket: 32 [ 432.332225][ T6816] usb 2-1: device descriptor read/8, error -71 [ 432.334706][ T9909] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 432.353021][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 432.369082][ T9909] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 432.369112][ T9909] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 432.369133][ T9909] usb 4-1: Product: syz [ 432.369147][ T9909] usb 4-1: Manufacturer: syz [ 432.369161][ T9909] usb 4-1: SerialNumber: syz [ 432.382393][ T9909] usb 4-1: config 0 descriptor?? [ 432.383273][T10068] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 432.400577][ T9909] hub 4-1:0.0: bad descriptor, ignoring hub [ 432.400615][ T9909] hub 4-1:0.0: probe with driver hub failed with error -5 [ 432.551909][T10070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1167'. [ 432.552798][T10071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1167'. [ 432.569344][ T6816] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 432.586283][ T6816] usb 2-1: device descriptor read/8, error -71 [ 432.613018][T10068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.613610][T10068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.701440][ T6816] usb usb2-port1: unable to enumerate USB device [ 432.772027][ T9909] usb 4-1: USB disconnect, device number 37 [ 432.988959][ T5698] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 433.204607][ T5698] usb 7-1: Using ep0 maxpacket: 32 [ 433.206926][ T5698] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 433.206961][ T5698] usb 7-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 433.206987][ T5698] usb 7-1: config 0 interface 0 has no altsetting 0 [ 433.207019][ T5698] usb 7-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 433.207043][ T5698] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.271004][ T5698] usb 7-1: config 0 descriptor?? [ 433.717846][ T5698] redragon 0003:0C45:760B.002D: hidraw0: USB HID v10.01 Device [HID 0c45:760b] on usb-dummy_hcd.6-1/input0 [ 433.834334][T10092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1171'. [ 433.916032][ T5797] usb 7-1: USB disconnect, device number 55 [ 434.374578][ T9909] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 434.384646][ T5669] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 434.444620][ T6816] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 434.525008][ T9909] usb 3-1: Using ep0 maxpacket: 16 [ 434.528675][ T9909] usb 3-1: unable to get BOS descriptor or descriptor too short [ 434.529762][ T9909] usb 3-1: config 3 has an invalid interface number: 71 but max is 0 [ 434.529787][ T9909] usb 3-1: config 3 has no interface number 0 [ 434.529832][ T9909] usb 3-1: config 3 interface 71 has no altsetting 0 [ 434.531947][ T9909] usb 3-1: New USB device found, idVendor=1546, idProduct=1104, bcdDevice=b6.0d [ 434.531973][ T9909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.531992][ T9909] usb 3-1: Product: syz [ 434.532002][ T9909] usb 3-1: Manufacturer: syz [ 434.532009][ T9909] usb 3-1: SerialNumber: syz [ 434.601717][ T5669] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 434.601747][ T5669] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.601767][ T5669] usb 4-1: Product: syz [ 434.601782][ T5669] usb 4-1: Manufacturer: syz [ 434.601796][ T5669] usb 4-1: SerialNumber: syz [ 434.620125][ T6816] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 434.620229][ T6816] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 434.620251][ T6816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.651268][ T5669] usb 4-1: config 0 descriptor?? [ 434.685189][ T5669] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 434.691752][ T6816] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 434.752940][T10105] overlayfs: failed to resolve '/G+5ƒÉwdÒâ /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 461.717056][ T38] task:syz.5.761 state:D stack:28312 pid:8640 tgid:8639 ppid:7758 task_flags:0x400140 flags:0x00080002 [ 461.717137][ T38] Call Trace: [ 461.717145][ T38] [ 461.717160][ T38] __schedule+0x1709/0x5530 [ 461.717196][ T38] ? __lock_acquire+0x6df/0x2e40 [ 461.717241][ T38] ? __pfx___schedule+0x10/0x10 [ 461.717268][ T38] ? lock_acquire+0x115/0x350 [ 461.717308][ T38] ? schedule+0x90/0x2b0 [ 461.717339][ T38] schedule+0x164/0x2b0 [ 461.717371][ T38] cgroup_lock_and_drain_offline+0x51a/0x650 [ 461.717456][ T38] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 461.717487][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 461.717522][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 461.717552][ T38] ? bpf_lsm_capable+0x9/0x20 [ 461.717587][ T38] ? security_capable+0x74/0x280 [ 461.717620][ T38] cgroup1_get_tree+0x9d/0x890 [ 461.717645][ T38] ? __pfx_cgroup1_get_tree+0x10/0x10 [ 461.717678][ T38] vfs_get_tree+0x92/0x2a0 [ 461.717707][ T38] do_new_mount+0x319/0xdc0 [ 461.717726][ T38] ? cap_capable+0x123/0x460 [ 461.717760][ T38] ? __pfx_do_new_mount+0x10/0x10 [ 461.717782][ T38] ? ns_capable+0x89/0xe0 [ 461.717805][ T38] ? path_mount+0x647/0x1050 [ 461.717828][ T38] ? user_path_at+0xd4/0x160 [ 461.717853][ T38] __se_sys_mount+0x31d/0x420 [ 461.717880][ T38] ? __pfx___se_sys_mount+0x10/0x10 [ 461.717906][ T38] ? __x64_sys_mount+0x20/0xc0 [ 461.717929][ T38] do_syscall_64+0x17b/0x530 [ 461.717950][ T38] ? irqentry_exit+0x10f/0x8f0 [ 461.717969][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.717990][ T38] ? clear_bhb_loop+0x40/0x90 [ 461.718015][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.718041][ T38] RIP: 0033:0x7fa71019de99 [ 461.718073][ T38] RSP: 002b:00007fa70e3f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 461.718095][ T38] RAX: ffffffffffffffda RBX: 00007fa710425fa0 RCX: 00007fa71019de99 [ 461.718110][ T38] RDX: 0000200000000440 RSI: 0000200000000400 RDI: 0000000000000000 [ 461.718124][ T38] RBP: 00007fa710233eaf R08: 0000200000000080 R09: 0000000000000000 [ 461.718138][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.718150][ T38] R13: 00007fa710426038 R14: 00007fa710425fa0 R15: 00007ffc8e712128 [ 461.718183][ T38] [ 461.718216][ T38] [ 461.718216][ T38] Showing all locks held in the system: [ 461.718225][ T38] locks held by kworker/u8:0/12: 7, last CPU#1: [ 461.718239][ T38] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 461.718288][ T38] #1: ffffc90000117c60 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 461.721762][ T38] #2: ffff8880b87261d8 (&base->lock){-...}-{2:2}, at: __mod_timer+0x922/0xf10 [ 461.721817][ T38] #3: ffffffff99f56f78 (&obj_hash[i].lock){-...}-{2:2}, at: debug_object_activate+0xa8/0x3b0 [ 461.721940][ T38] #4: ffffffff8e268558 (text_mutex.rtmutex.wait_lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbe/0x460 [ 461.721991][ T38] #5: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 461.722050][ T38] #6: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 461.722103][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 461.722117][ T38] #0: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 461.722185][ T38] locks held by kworker/1:2/822: 3, on CPU#1: [ 461.722200][ T38] #0: ffff88813fe62938 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 461.722244][ T38] #1: ffffc90005167c60 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 461.722286][ T38] #2: ffff88802aaa2210 (&dev->mutex){....}-{4:4}, at: usb_remote_wakeup+0x23/0x120 [ 461.722403][ T38] locks held by getty/5348: 2, on CPU#1: [ 461.722417][ T38] #0: ffff88803678d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 461.722474][ T38] #1: ffffc900044ce2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 461.722533][ T38] locks held by kworker/1:7/6816: 4, last CPU#1: [ 461.722546][ T38] #0: ffff888032832138 ((wq_completion)mld){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 461.722588][ T38] #1: ffffc9000e6afc60 ((work_completion)(&(&idev->mc_dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 461.722632][ T38] #2: ffff888057d10628 (&idev->mc_lock){+.+.}-{4:4}, at: mld_dad_work+0x35/0x480 [ 461.722683][ T38] #3: ffffffff8e50af90 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 461.722742][ T38] locks held by kworker/1:8/9909: 6, on CPU#1: [ 461.722756][ T38] #0: ffff88801af49138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 461.722802][ T38] #1: ffffc9000ecd7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 461.722847][ T38] #2: ffff88802ace2210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 461.722894][ T38] #3: ffff88802ac5e658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20ad/0x4cf0 [ 461.722942][ T38] #4: ffff888026e50d58 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20e1/0x4cf0 [ 461.722991][ T38] #5: ffffffff8f06a920 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14d/0x1800 [ 461.723039][ T38] locks held by syz.6.1260/10432: 1, on CPU#1: [ 461.723053][ T38] #0: ffff88807794a098 (&ctx->uring_lock){+.+.}-{4:4}, at: tctx_task_work_run+0x2d3/0xa80 [ 461.723138][ T38] locks held by iou-wrk-10432/10437: 1, on CPU#0: [ 461.723154][ T38] #0: ffff88807794a098 (&ctx->uring_lock){+.+.}-{4:4}, at: io_wq_free_work+0x163/0x220 [ 461.723506][ T38] locks held by iou-wrk-10432/10442: 1, last CPU#1: [ 461.723521][ T38] #0: ffff88807794a098 (&ctx->uring_lock){+.+.}-{4:4}, at: io_wq_free_work+0x163/0x220 [ 461.723576][ T38] locks held by iou-wrk-10432/10445: 1, on CPU#1: [ 461.723589][ T38] #0: ffff88807794a098 (&ctx->uring_lock){+.+.}-{4:4}, at: io_wq_free_work+0x163/0x220 [ 461.723640][ T38] locks held by iou-wrk-10432/10447: 1, on CPU#1: [ 461.723654][ T38] #0: ffff88807794a098 (&ctx->uring_lock){+.+.}-{4:4}, at: io_wq_free_work+0x163/0x220 [ 461.723706][ T38] locks held by syz.3.1261/10438: 1, last CPU#1: [ 461.723720][ T38] #0: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 461.723801][ T38] locks held by syz.2.1262/10440: 1, last CPU#1: [ 461.723815][ T38] #0: ffff88801ae8e2b0 (&mm->mmap_lock){++++}-{4:4}, at: do_mprotect_pkey+0x260/0xcd0 [ 461.723863][ T38] locks held by syz.2.1262/10443: 3, last CPU#0: [ 461.723875][ T38] #0: ffff88803bb780e0 (&type->s_umount_key#74/1){+.+.}-{4:4}, at: sget_fc+0x97c/0x1a60 [ 461.723928][ T38] #1: ffffffff8fb6d938 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x281/0x560 [ 461.723979][ T38] #2: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 461.724027][ T38] locks held by syz.1.1263/10446: 1, on CPU#1: [ 461.724040][ T38] #0: ffffffff8fb6d938 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x281/0x560 [ 461.724090][ T38] [ 461.724096][ T38] ============================================= [ 461.724096][ T38] [ 461.724113][ T38] NMI backtrace for cpu 0 [ 461.724132][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 461.724158][ T38] Tainted: [L]=SOFTLOCKUP [ 461.724165][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 461.724176][ T38] Call Trace: [ 461.724184][ T38] [ 461.724192][ T38] dump_stack_lvl+0xe8/0x150 [ 461.724219][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 461.724296][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 461.724336][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 461.724364][ T38] sys_info+0x135/0x170 [ 461.724385][ T38] watchdog+0xfd7/0x1030 [ 461.724420][ T38] ? watchdog+0x1c7/0x1030 [ 461.724450][ T38] kthread+0x388/0x470 [ 461.724474][ T38] ? __pfx_watchdog+0x10/0x10 [ 461.724498][ T38] ? __pfx_kthread+0x10/0x10 [ 461.724522][ T38] ret_from_fork+0x514/0xb70 [ 461.724550][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 461.724576][ T38] ? __switch_to+0xc89/0x1420 [ 461.724601][ T38] ? __pfx_kthread+0x10/0x10 [ 461.724628][ T38] ret_from_fork_asm+0x1a/0x30 [ 461.724669][ T38] [ 461.724713][ T38] Sending NMI from CPU 0 to CPUs 1: [ 461.724749][ C1] NMI backtrace for cpu 1 [ 461.724773][ C1] CPU: 1 UID: 0 PID: 10440 Comm: syz.2.1262 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 461.724798][ C1] Tainted: [L]=SOFTLOCKUP [ 461.724804][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 461.724815][ C1] RIP: 0010:freezer_fork+0x0/0x480 [ 461.724840][ C1] Code: 5f 5d e9 13 fb 94 09 cc e8 7d 2d 91 09 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 89 fb 49 bd 00 00 00 [ 461.724856][ C1] RSP: 0018:ffffc9001134f878 EFLAGS: 00000206 [ 461.724871][ C1] RAX: 1ffffffff1c8210b RBX: 0000000100000000 RCX: dffffc0000000000 [ 461.724885][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888035c40000 [ 461.724897][ C1] RBP: ffffc9001134f970 R08: 0000000000000000 R09: 0000000000000000 [ 461.724909][ C1] R10: 0000000000000000 R11: ffffffff81bef5b0 R12: ffff888035c40000 [ 461.724922][ C1] R13: ffffffff8e410858 R14: 0000000700000000 R15: 0000000000000051 [ 461.724935][ C1] FS: 00005555709b1500(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 461.724952][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 461.724964][ C1] CR2: 00007f63991e5d58 CR3: 0000000077d58000 CR4: 00000000003526f0 [ 461.724980][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000086 [ 461.724992][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 461.725005][ C1] Call Trace: [ 461.725011][ C1] [ 461.725018][ C1] cgroup_post_fork+0x3af/0x980 [ 461.725042][ C1] ? __pfx_proc_fork_connector+0x10/0x10 [ 461.725158][ C1] ? __pfx_cgroup_post_fork+0x10/0x10 [ 461.725177][ C1] ? rt_write_unlock+0x19c/0x360 [ 461.725203][ C1] ? rt_write_unlock+0x1a8/0x360 [ 461.725234][ C1] copy_process+0x406d/0x43f0 [ 461.725257][ C1] ? copy_process+0xd3c/0x43f0 [ 461.725285][ C1] ? __pfx_copy_process+0x10/0x10 [ 461.725309][ C1] kernel_clone+0x2d7/0x940 [ 461.725332][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 461.725356][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 461.725378][ C1] __se_sys_clone3+0x33c/0x360 [ 461.725400][ C1] ? __pfx___se_sys_clone3+0x10/0x10 [ 461.725429][ C1] ? _copy_to_user+0x8a/0xb0 [ 461.725453][ C1] ? do_user_addr_fault+0xc4a/0x1340 [ 461.725482][ C1] do_syscall_64+0x17b/0x530 [ 461.725500][ C1] ? irqentry_exit+0x10f/0x8f0 [ 461.725516][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.725534][ C1] ? clear_bhb_loop+0x40/0x90 [ 461.725555][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.725572][ C1] RIP: 0033:0x7f639afaec89 [ 461.725587][ C1] Code: 90 b8 01 00 00 00 b9 01 00 00 00 eb ec 0f 1f 40 00 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 ff d2 48 89 c7 b8 3c 00 00 [ 461.725602][ C1] RSP: 002b:00007ffcccfba158 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 461.725620][ C1] RAX: ffffffffffffffda RBX: 00007f639af6a220 RCX: 00007f639afaec89 [ 461.725633][ C1] RDX: 00007f639af6a220 RSI: 0000000000000058 RDI: 00007ffcccfba1b0 [ 461.725646][ C1] RBP: 00007f63991e56c0 R08: 00007f63991e56c0 R09: 00007ffcccfba297 [ 461.725659][ C1] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 461.725671][ C1] R13: 000000000000006e R14: 00007ffcccfba1b0 R15: 00007ffcccfba298 [ 461.725693][ C1] [ 461.728521][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 461.728544][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 461.728571][ T38] Tainted: [L]=SOFTLOCKUP [ 461.728578][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 461.728589][ T38] Call Trace: [ 461.728598][ T38] [ 461.728606][ T38] vpanic+0x56c/0xa60 [ 461.728632][ T38] ? __pfx_vpanic+0x10/0x10 [ 461.728652][ T38] ? irqentry_exit+0x218/0x8f0 [ 461.728677][ T38] panic+0xc5/0xd0 [ 461.728695][ T38] ? __pfx_panic+0x10/0x10 [ 461.728734][ T38] watchdog+0x1030/0x1030 [ 461.728769][ T38] ? watchdog+0x1c7/0x1030 [ 461.728802][ T38] kthread+0x388/0x470 [ 461.728826][ T38] ? __pfx_watchdog+0x10/0x10 [ 461.728850][ T38] ? __pfx_kthread+0x10/0x10 [ 461.728874][ T38] ret_from_fork+0x514/0xb70 [ 461.728902][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 461.728924][ T38] ? __switch_to+0xc89/0x1420 [ 461.728948][ T38] ? __pfx_kthread+0x10/0x10 [ 461.728972][ T38] ret_from_fork_asm+0x1a/0x30 [ 461.729006][ T38] [ 461.729188][ T38] Kernel Offset: disabled