last executing test programs: 7m1.221141129s ago: executing program 0 (id=39): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r0 = fanotify_init(0xf00, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r0, 0x541, 0x4000101b, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) vmsplice(r2, &(0x7f00000009c0)=[{&(0x7f0000000140)="d0", 0x1}], 0x1, 0x7) 7m1.041126484s ago: executing program 0 (id=42): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) write(r0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) read$FUSE(r1, &(0x7f0000002340)={0x2020}, 0x2032) 7m0.887960111s ago: executing program 0 (id=45): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000080)={0xa8, 0x0, 0x3}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) 7m0.585895327s ago: executing program 0 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x10401, 0x0) dup(0xffffffffffffffff) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 7m0.479002446s ago: executing program 0 (id=49): r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x4000000000002d9, 0x10022, 0x0) 7m0.184989342s ago: executing program 0 (id=52): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/fib_trie\x00') read(r0, &(0x7f00000005c0)=""/4096, 0x1000) 6m59.656495321s ago: executing program 32 (id=52): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/fib_trie\x00') read(r0, &(0x7f00000005c0)=""/4096, 0x1000) 6m51.467119175s ago: executing program 3 (id=122): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setuid(0xee01) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) 6m51.161091638s ago: executing program 3 (id=125): r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) 6m51.024595197s ago: executing program 3 (id=127): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r3 = fspick(r2, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 6m50.860621772s ago: executing program 3 (id=129): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) 6m50.620172208s ago: executing program 3 (id=132): r0 = syz_open_dev$loop(&(0x7f00000009c0), 0x7ff, 0x20000) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3, r0, 0x0, 0x0, 0x3}]) 6m50.32107229s ago: executing program 3 (id=138): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x1, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x30}, 0x0) 6m49.952752938s ago: executing program 33 (id=138): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x1, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x30}, 0x0) 4m26.529122306s ago: executing program 1 (id=892): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x0) r2 = socket(0x1e, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) accept4$nfc_llcp(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, 0x0, 0x0, 0xe0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000005f40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x2000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000004000070113ac204651c0ec5e98c9d7c07f4e95ccfc800c000180ee000600800e000010000fe2a07bfa525bc11db18bd3b3a0683726d9e8ef21b3adaab3244d838720901af84d9311", @ANYRESOCT=0x0], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f00000002c0)={r7, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="06b30ac001d903c7d4256dcb72f5ea560f165f3b685e9bf54edc5aad473e71e580e365bc462f4098ce11a50262207e946673c6640a38b27ffea072e0b01ef2bdac963a23e1f2986009914eb315fed57ab93eaff640e5aeb9352a2de9a24c5b9904014a80482907702786e62a514ef304c78dcb5d5a0f866602", @ANYRES16=r10, @ANYBLOB="831028bd7000fcdb9f251600000018000180140002006e657464657673696d300000000000000500030010000000"], 0x34}, 0x1, 0x0, 0x0, 0x2004c8d1}, 0x0) 4m26.462493571s ago: executing program 1 (id=894): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x1c, r0, 0x2140dcfffd4d4d7f, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x50) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x13c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x69d1}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xeff}, @TIPC_NLA_NODE_ID={0x82, 0x3, "945fd10379116cd38cb3fe2310ab11042ea45581cf36f35c9466083d22f06ce2705229be6aef5dafbd89e9d7ee763d96871cb78f9a24c83fb6c0dc684e6bdee5a95e312d5b69927ed0d45c131b419178abde4dcc5dcae8014b6dc51cfef457817748cf16370918db2b67060936b3724ab7e71161df26fd1cff304ddbf26c"}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x53}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x200080d1}, 0x0) 4m26.341499807s ago: executing program 1 (id=895): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x144, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xfffffbbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075b, 0x8}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) keyctl$session_to_parent(0x12) 4m25.869470316s ago: executing program 1 (id=896): clock_getres(0xa, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) clock_getres(0xa, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040), 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) (async) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) (async) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) (async) 4m25.705858609s ago: executing program 1 (id=898): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) 4m25.441848002s ago: executing program 1 (id=899): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f0000000240), 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getpeername(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2001}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0xc0884123, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)="02a4645605d0d06e886e277662695d728d77b39c11dfd2f93d71436f40821414082a0edf79f5e19b46819ca4a2572bf40853430dbf9942844c7aa49bf0a0dbfca693d0ebbebaae5ff0df8b01a36630034471a6f8ff4a8005cf399adfb40b8c70ebe9fdbe8111259541dc47449ba15255cf134110c9716d996f3ce79defe5ad5100", 0x81}], 0x1, 0x2, 0x0) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r6 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001500010025bd7020fbdbdf250b000000"], 0x14}}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_SET_STATUS(r8, 0xc01070ce, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r11, @ANYBLOB="08c68c0300000027a7878859a2b9c900"], 0x2c}}, 0x48000) 4m25.20286394s ago: executing program 34 (id=899): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f0000000240), 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getpeername(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2001}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0xc0884123, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)="02a4645605d0d06e886e277662695d728d77b39c11dfd2f93d71436f40821414082a0edf79f5e19b46819ca4a2572bf40853430dbf9942844c7aa49bf0a0dbfca693d0ebbebaae5ff0df8b01a36630034471a6f8ff4a8005cf399adfb40b8c70ebe9fdbe8111259541dc47449ba15255cf134110c9716d996f3ce79defe5ad5100", 0x81}], 0x1, 0x2, 0x0) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r6 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001500010025bd7020fbdbdf250b000000"], 0x14}}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_SET_STATUS(r8, 0xc01070ce, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r11, @ANYBLOB="08c68c0300000027a7878859a2b9c900"], 0x2c}}, 0x48000) 3m21.037566005s ago: executing program 6 (id=1221): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0x102c8000, 0x0, 0xfffffffffffffef7, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) wait4(r3, 0x0, 0x80000000, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e3d, 0x280000, @mcast1, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x4000010) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='gfs2meta\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000140)=0x3) write$tun(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xf, [0xf68f, 0x8, 0x6, 0x1ff, 0x0, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0x80000000, 0x101, 0x7, 0x202, 0x3d, 0x5e, 0x1000, 0x8, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x4, 0xffffff6b, 0xe52c, 0xab8, 0x7ffffffc, 0xd, 0xe9c4, 0xcd8, 0x6e, 0x6, 0x7, 0xd, 0x8a, 0x3, 0x6, 0x3, 0x2, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x401, 0xeffff801, 0x2d, 0xa, 0x0, 0x7, 0x8, 0x0, 0x3, 0x6, 0x8, 0x23, 0xff, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x5fffffd, 0xd1, 0xf, 0x4, 0xffff, 0x0, 0x400, 0x80000000, 0x8000, 0x3, 0x5, 0x2, 0x0, 0x2, 0x1, 0x80, 0x4, 0x2, 0xfff, 0xd, 0x2000006, 0x4, 0x8, 0x0, 0x1, 0xfffffffc, 0x12, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0x3, 0x4, 0x1, 0x5, 0x6, 0x7fff, 0x1, 0x704, 0x33e4, 0x9, 0x6, 0x7fff, 0x6, 0x1, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x8, 0x7, 0x200, 0x9, 0xf, 0x82, 0x0, 0x5, 0x5, 0x5, 0x8, 0x3, 0x1, 0xfffffffa]}}) 3m20.981146509s ago: executing program 6 (id=1222): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x244000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000040)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009216200000022050009058103"], 0x0) 3m17.893338283s ago: executing program 6 (id=1244): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, 0x0) 3m14.701366467s ago: executing program 6 (id=1266): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000200)='xino=auto', 0x102, &(0x7f0000000280)={@align=0x10, {0xfff7, 0x4, 0x7}}, 0x4, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x5}) getpeername$unix(r0, &(0x7f0000000400), &(0x7f0000000380)=0x6e) chroot(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f0000000780)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000003c40)='./file0\x00', &(0x7f0000003c80), 0x4000) 3m14.626140375s ago: executing program 6 (id=1267): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000040000100feffffffffdbdf25017c0000fdff41800c00040000000000000000000c00028008001780040001004ad58bbea6059195226c428a195c2ed54c7e67577954ee261a000000000000000808c84962fbbd14c3"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/86, 0x56}], 0x1}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'das16m1\x00', [0x5c22, 0x3, 0x2000035, 0x7f, 0xffff, 0x8007, 0xc, 0x7, 0x5, 0x800, 0x6b5e, 0x2, 0x3e, 0x403, 0x800, 0xc, 0x1, 0x1a449, 0x3, 0x40400003, 0x89, 0xffffffff, 0xa, 0x9, 0x7fff, 0x8, 0xa, 0x8, 0x8, 0x8, 0x7]}) 3m14.309052709s ago: executing program 6 (id=1271): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201410117512920570509201ec7010203010902240001020010000904"], 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f00000001c0)=""/213) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) (async) fcntl$dupfd(r0, 0x0, r0) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, 0x0) (async) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201410117512920570509201ec7010203010902240001020010000904"], 0x0) (async) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f00000001c0)=""/213) (async) 3m13.889588014s ago: executing program 35 (id=1271): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201410117512920570509201ec7010203010902240001020010000904"], 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f00000001c0)=""/213) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) (async) fcntl$dupfd(r0, 0x0, r0) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, 0x0) (async) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201410117512920570509201ec7010203010902240001020010000904"], 0x0) (async) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f00000001c0)=""/213) (async) 8.60606844s ago: executing program 5 (id=2334): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000300)='bridge_slave_0\x00', 0x10) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x4}, 0x10) (async, rerun: 32) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="a054bd88c031cfdc150eac6969cc"], 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x8008550e, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) (async) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, 0x0) 7.213424673s ago: executing program 2 (id=2347): rt_tgsigqueueinfo(0x0, 0x0, 0x5, &(0x7f00000000c0)={0x3b, 0x2, 0x30eb}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x88203, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000340)={0x1, 0x0, [{0xc001102a, 0x0, 0x1}]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="20110406"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.952894854s ago: executing program 4 (id=2348): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000000000000008, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000006c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4881}, 0x4) (async, rerun: 32) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) (async, rerun: 32) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x141040) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f00000000c0)) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) (async, rerun: 64) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8080) (rerun: 64) 6.903974432s ago: executing program 4 (id=2349): socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x7, 0x7fff0000}]}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2", @ANYRES8=r0], 0x0) r2 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000140)={0x20, 0x6, 0x1e, {0x1e, 0x11, "c010cd6472758dae0cb8a627b91e950efc93a5038b50a033587031ad"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}, &(0x7f00000001c0)={0x0, 0xf, 0x137, {0x5, 0xf, 0x137, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xfe, "f9ef8abc4046ec0ca0c6a0740be594f7"}, @generic={0x19, 0x10, 0x4, "0be679258178ed31cfc2da6fcedd7244578c9683ec79"}, @generic={0x102, 0x10, 0x1, "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"}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x2, 0xff, "0e4d35ed", "e410eb5b"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x60, 0x5c, 0x48, 0x6, 0x8, 0x9f}}}, &(0x7f0000000980)={0x84, &(0x7f00000003c0)={0x20, 0x15, 0xde, "dc6b6aed0d8a2607eceee8a2b513a53db06d96666d6b5eec5a4bb95d5ed3f37b92d7720b7c13c5ea6d7d5c0166f4601f4269ff0e7eb71c380d14abc1fdbe6d6eb34cfb6b9472921c1156b06e6da2ca3395240c3ba67974b449bd0caa7887068cbe8549897cb6b4b1be5456eafc6bdabff5284e250c57d4423548bc8fbc052e75e7ef39d41fea4301d8435be85436e6b5e0a2ba05eeee5a8d64229849df0b4e0c601a1cc41558af3596eb2a539609ad1ee448e6f7e28f410cfcf6b2369c809cda42751538eea03f3ec17a482a7218d5ac4e732f497d2290a67c8dcea15031"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xe9}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x3, 0x6}}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x8, 0x4}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000680)={0x40, 0xb, 0x2, "27a6"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0xd}, &(0x7f0000000700)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x17, 0x6, @random="86f9682a14e2"}, &(0x7f0000000780)={0x40, 0x19, 0x2, "2a11"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0xf}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x75}}) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0x0, 0x2, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) accept4(r4, &(0x7f0000000040)=@generic, &(0x7f00000000c0)=0x80, 0x40800) 5.549329708s ago: executing program 2 (id=2350): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) unshare(0x2040600) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) socketpair(0x2, 0x6, 0xd, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) 5.445059613s ago: executing program 2 (id=2351): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="150b2abd000000000008000300", @ANYRES32=0x0, @ANYBLOB="6a2867b138d0c8bf3244e9612568758f6b554d6e68d4b41d60a144e1a8682299c2cd545abadc4e4ab22b461809e7ce0e7df5b15a8f3b17354c27fe6b4aae33bcccd74f22f2825425b0d0625372c466ca84a9fd9b8dc86c305a5435acd01f299b9391b7320c55244f22bcbcfba991557e6ff4dee3259dc80791b93fc5749c1a7531673ef271a7bda45957283d04fa7481cafcb6e3bb66db"], 0x1c}, 0x1, 0x0, 0x0, 0x2600c8c0}, 0x4) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="b40002000065be", @ANYRES16=r2, @ANYBLOB="08022abd7000ffdbdf250700000008000400ffffffff08000400e00000022b00070073797374656d5f753a6f626a6563745f723a7373685f6b657967656e5f657865635f743a733000001400020000000000000000000000ffff0a010100140006006261746164765f736c6176655f300000"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x5) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r1) 5.378163863s ago: executing program 2 (id=2352): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x3014040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x80814) (async, rerun: 32) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x32315659, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) (rerun: 32) 5.248852691s ago: executing program 2 (id=2353): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x9, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305, 0x3}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0x76, 0x0, &(0x7f0000000100)="901b098d8fd75956fe394df4bf2c57fc6d1421e0ce27d3263fc68165bd5c324567cd8210d2f83908b5ffa45d8b0f6f34a689c59378fd638d5a1693e80e3822164e3151a416732628a529112e3af99d4884f92c707120fd5b1ad7a11de22db21af044679ddd9b0c30f2767e86026fb00a4d35362aea13"}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000200)=0x2) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xe0, 0x12, 0x300, 0x70bd2d, 0x25dfdbfc, {0x0, 0x5, 0xfa, 0xf8, {0x4e20, 0x4e22, [0x4, 0x9, 0x2, 0x9], [0x0, 0x8, 0x8, 0x5], r2, [0x8132, 0x9]}, 0x200, 0x5b}, [@INET_DIAG_REQ_BYTECODE={0x93, 0x1, "a1d8612b404f27ecb12ea7c4a1506eb778128571be54c8cf7d4ea182ebd1a8875a3a9a88e6fdc6963b89178ad059e001ad855644cf1ab9d3377cec6130d9605db6b63b9c960b62e7b77a050f35f6a4247332bcd368f767cedd09e303bc626b4815e062780e936ecea22c7c40409511e17b8315df2f891aed6d29217d2c256ea48d5acc2bf5e449f27549d12aaee1f6"}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r1, &(0x7f0000000480)="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", 0x1000) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000001480), &(0x7f00000014c0)=0x4) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) recvmmsg(r3, &(0x7f0000001a00)=[{{&(0x7f0000001500)=@vsock, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/66, 0x42}, {&(0x7f0000001600)=""/153, 0x99}, {&(0x7f00000016c0)=""/220, 0xdc}, {&(0x7f00000017c0)=""/246, 0xf6}], 0x4, &(0x7f0000001900)=""/216, 0xd8}, 0x8}], 0x1, 0x101, 0x0) sendmsg$sock(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001a40)}, {&(0x7f0000001a80)="21d77191cbfd0e5cfa79f181500a48a5889d6bb6bb2590bbc175bd2d200bbb7865ee77fd1ad88de2814a677c77ad1109a69a3a3753cfcef3191b97fa1ef7a4f57155c4c797f02d03046c3ac9599fbfbfa9b9c39b9eaf5460285b3e1bdc126e888996c3a9b831faabc65c85dfaa8f9874db0cb9cffacde48a0f8a238d11db7b6e90dcfb3eb75785a0f60fdc98438d881fe7aee2b63c85c77134cfe55e1516079d903796b7b972cb0928d05a43edda706498dc1a89c230edd7e707a50c", 0xbc}, {&(0x7f0000001b40)="8e94ae3fea7a49c5515bec3a3bfa680232480f5d2dcf9d0b0c4061d10eeb2b8a3f985677d499e40919e0", 0x2a}, {&(0x7f0000001b80)="ccc70187ba5cf3e71124a5bdfe6117fd987711f942e4d773d9e442b4e74de69afcb8d29e45c2783341296afef98d4bc0078bc15bfe1efc0c22533a0e951c749eafaeb8658ebe5bfc43c9da", 0x4b}, {&(0x7f0000001c00)="764b114fb8fce174c9091c5367f7d710ae630ec1961f5512a6eee574f8241d7cf3bc53161bbf4d9cb1b3ec2cba8378e0ee813ff1ad7f7bd555f3ea4acafda61a181a351366ac716882e9477d21a13a053cb9c241102184154a", 0x59}, {&(0x7f0000001c80)="967ddee2332097d9d1d7de8cedf4d2c4a74a21b308c5c7643ab9398bdf10fc5377945abb15bfefad277fc6238a3a1cdd8279bfa56dc19eac6667f257bd72da5617ca0feaa6cfb3425450c256dd6851f4b6b3779a2a9bd3acbef2fb580d61c0e3fc1ab1a43f86e1eb8e539106199d754dc370090e61b2e2ac0f82931898393f93049f54288c9d8a5d5af371c57cbb32b4171d1aaf0f01db1b58675940a14aa659f11759b8", 0xa4}, {&(0x7f0000001d40)="7487a2a19fe6f58358131cad116f4e9c1f75b7de0495039b0dfc7f13dfd62dde1a7db7f7c6a471ecf3d1f29e0ffe43c79bbba35db9536cd97ce77cf9360e0e8dfb6a126df3d270cb772d4b470e978fc7471c0d46ab9fd5b816713abcd1005bb06637827648dde27268a79be919ab8dbf56987a91a1288ba32724d0a560cfe5d836edc34ffc349741f7fe3df1e09bbf4e8721038c7ff3840701689103e2", 0x9d}, {&(0x7f0000001e00)="1a1af744ed9574c960f60ed9ec82e95d3b623cffa40d1aed1966ea825cf93fb1da4a4f299110c6d38ced25eb0be72c6152502630ac90dccd6224ab77ae1b4afc0d3aa431d302128304e4608c8e6487058d8fa202cef34c593dc0587eecbdfb2c655bf0bdd1143b2eaf73d2d5ad04dee99efb42fe9586f71a2816117ec50f08c6ae18b89bb5776ee7dec2e4ccf97ad3e5b1b9c37a6ff9e59b56f2ca80", 0x9c}, {&(0x7f0000001ec0)="ce88f6b9c159", 0x6}], 0x9, &(0x7f0000001fc0)=[@timestamping={{0x14, 0x1, 0x25, 0xc382}}, @txtime={{0x18, 0x1, 0x3d, 0x23b}}], 0x30}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002080), r1) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f00000022c0)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002280)={&(0x7f00000020c0)={0x194, r5, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x15, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0xd, 0xb8, 0x2}}, @ssid={0x0, 0x6, @default_ap_ssid}, @dsss={0x3, 0x1, 0xa1}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_IE={0x136, 0x2a, [@fast_bss_trans={0x37, 0xad, {0x0, 0x4, "b94fdce450e56fb9f663742dfbee45dd", "f44a335e17ca5add51f9e03645410ff038f2a98791a8ea585649cb32d51f2bca", "33e5ca78f28d481832fb45dd991f20df78f1b4d530acd133efb701ec7d160c59", [{0x4, 0x2, '\fy'}, {0x4, 0x27, "a46bd0b02be435aa90723244e80398b7be736f4dc3b702140df5c955372202161351ca269e2128"}, {0x4, 0x25, "8e23b6275d2bd5161f9e9a5f7e739f6aae2e919fdaa4d3bfa16f0b4199235b6b16bb960f58"}, {0x4, 0x5, "e420517463"}]}}, @chsw_timing={0x68, 0x4, {0x10}}, @ssid={0x0, 0xc, @random="c6ee9c9acc705ba9a4e2f177"}, @tim={0x5, 0x17, {0x2, 0x8f, 0x35, "1a5efb8c5e953d3feeae21e1e0c684640bd3115a"}}, @mic={0x8c, 0x10, {0x27e, "bb532d96ddf6", @short="a7f97295ece9396c"}}, @preq={0x82, 0x2b, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0x2, 0xd, 0x2d, @broadcast, 0x10, @value, 0xfffffe00, 0xffff, 0x1, [{{0x1}, @broadcast, 0x1}]}}, @rann={0x7e, 0x15, {{0x1, 0x44}, 0x7, 0x8, @device_b, 0x9, 0x401, 0xfff}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x194}, 0x1, 0x0, 0x0, 0x1}, 0x880) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r7 = getpgrp(0x0) statx(r1, &(0x7f0000004600)='./file0\x00', 0x0, 0x0, &(0x7f0000004640)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = accept4$ax25(r0, &(0x7f0000004740)={{0x3, @netrom}, [@rose, @default, @null, @remote, @rose, @rose, @default, @netrom]}, &(0x7f00000047c0)=0x48, 0x800) read$FUSE(r0, &(0x7f0000004800)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r11 = gettid() ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000007d40)=0x0) lstat(&(0x7f0000007d80)='./file0\x00', &(0x7f0000007dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = syz_init_net_socket$llc(0x1a, 0x780344d81fb06053, 0x0) r15 = accept(r3, &(0x7f0000007e40)=@ax25={{0x3, @null}, [@rose, @null, @bcast, @remote, @remote, @rose, @null, @rose]}, &(0x7f0000007ec0)=0x80) r16 = openat$cgroup_ro(r0, &(0x7f0000007f00)='net_prio.prioidx\x00', 0x0, 0x0) sendmsg$netlink(r4, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000004340)={0x290, 0x36, 0x2, 0x70bd28, 0x25dfdbfc, "", [@nested={0x146, 0x13e, 0x0, 0x1, [@typed={0x8, 0x10a, 0x0, 0x0, @u32=0x3ff}, @typed={0x8, 0x13e, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x113, 0x0, 0x0, @pid=r7}, @typed={0x4, 0x6a}, @typed={0x8, 0x40, 0x0, 0x0, @fd=r4}, @generic="fe9c80c8330269d3607954e3befee568f916c51f54f204bbcfffcb1bf5b635a57f21f403d0a8d48edf07c73186e7ada317c5b2a725bf6a0ee6701879b8dceeb56b6d00503e1517e212a471d0b11e6e01521ea21bafa39d70d323abbef09d25570212070262cd7a7eef5b9f459234df81e6ce63bdd1529460d8fd5d4364eeaaf15c29c263369d26fbe12c956597cd765774d53e", @generic="1ad155b3a02bc491483472d2b4e56683930ccd03521fcab67ab13811bcb0d61ee6c09853b86e9a3e6ae2233551b9573b930b505040cceddc1ecb19056cb3a41fd4e5f6232b6e6bc5db947caf76179317aa6ac6261d0f34cf321b145e5b48c832322d3805b3d4ef0eb635ba645ac0dbd88e4d08e28155212c8dcc29ea86ba34263cebbcbb0b5b45", @nested={0x4, 0x1a}]}, @generic="bb4b6902bf22350eb24e3bee6c33b74888a64f39e5a2110862b39de313e8e2aea2f81762bb2dc504214344ebf4a26f938ba81c2ddd2a8508f2d2845a76fc66d4142edaa644db4e5669e09a741e3f4a9c89c3e282b5af0e4e261b87bd0de087070145b18bc8b666c8460d03a8b3eae9691d529d", @generic="85bea135f08d6492462e7f6c2c28c270d798c1cb605f2a74277be1b97446b9a3aa90b8017fbb61c57e85e8d18f61de7d55f288566f68a07c3468e483b33552191c6f6550ad5e6484bcafa0fd0ae726a6a1d7c59f60268593ab3c77d88100d7e39b74c3662f430b4250eca74b39aa4246ed1698c85a0ee35c25c9e19713df359c50764622b7adc71f8150958d747963a07a05172da21cb5ac1a3db1b06d4077dc9685d464fd487a46caf54c105146a9f77e99392538313ca7e67e2f6b2c1acb8e8e3f"]}, 0x290}, {&(0x7f0000006840)={0x148c, 0x3b, 0x10, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x13a, 0x2a, 0x0, 0x1, [@nested={0x4, 0xce}, @nested={0x4, 0xb1}, @generic="0a3a16be2216b43c070c3902418c6695a86960268eb2bc94583681cff9a340603237075e953eab5af6df9e8ac7da1a7ca7eefb666d655321a7484c072c87d95f8188eeed3ddef7f10aa71e0c3a4f236fd01091143fa699f68f6386648d7a3373a52ae46a17a136cbbdf828af9fe7987cef2c32016daeed65863e61a3753e4e973e5765b6362caf762b36953c33b31b9274a2b48d7c885b9c30c7ac218b23cd67a1232661714ed0c17899fa78a073a4149b38a8530bffb0002f4f0dec2ad5f600611b8e4664bf09d0d1", @typed={0x8, 0x48, 0x0, 0x0, @uid=r8}, @generic="89d3b4da0adeb59d6ace44fecbf8320483e84b8e71efed1fb53ef468afea4d7e01b3c58648c7b02966e06b126f877beebb9c8b1990a987112714d5f197ca12d17b7cd48847e3bac2213f76e968a2c375b9744eed5a23edfad8", @typed={0x4, 0xe9}]}, @nested={0x10c4, 0xe0, 0x0, 0x1, [@nested={0x4, 0x21}, @nested={0x4, 0x2}, @generic="734e57cec282f293411f94c6cd57b361175baee9ca8e4ccf8bf8c44f13f100450b3c2ed2944732c5a52c41844de705fa0c39501bfb4f830f19d80268eb5e4d509da87a89b72f70c20d982a759c2ac1e5d2b26818c8d6efa72e916b026211ed14bb8b80532d670b1a5ea6cf1bbc3dd3951541e84173919b3c35b6d1a1a203197fcf57ef07e414c5c297041d6a36bf90320da05a1a3980cd83a809ef4fc1d210600ca173ac38987965974395432a4cb908a259c08694a2e79047b56579529d3e2a989614a3640e030b67cf4298d965379ae2627571c17b7aacf8dcbc4dafad5664d06e485f869b69927e4b712b8fd2346645fef6ca8a52675e84023cce208141e6bf924c01344983be391630571a53b654d4bb9b5ffa495b5114c90e8204ac4fa46cbe7abb241ab1bba09b8ad88fba8af7d46fc2925f0f7aa56acf10ac9cee1ed0b70562ffbae2e8fffe460a03d69a4cb3d6db091efef67e080064fde1acc9d938100848a54b7bf1821bd046f97fea6d89458338a1de503572bc82cd318c0a0e940daf3b61e1e636afd86d5f25aca1b41aae1f64dc31b90bc524b39263cff5c96103118afb6d8f3818ccf2be3a1d543d0654eb557718d8f1090710e31d69a5234940768bdb453a51cafdeb0eef4c077749094e347f71a80dcf0399d4c58125f4a989cf812ab0b6e32a96465bbe0074339e2c8097af3ff2add81af9392dc81bebc50fcc0f1ede5f44fe2997d4b84bf40a89c979546d41ab32eb61fd8be9cb68401077c2b6732fde38fef7a356a4242b74b0b4c90388bd21f093cda59ca95160a7526ccfff71b95e6146dbda5a534128b7d17e2e72d168fd741034eff2f86609c6bf022ea9cba0f189bf28952bcb385f2af193bff21233984b7c7adf1f59ea803078c67355cce91015db9ffd061a1891041bce5eca36b165f64f88dad64b84faf151c229a91c0ba17c185e4e282f8e91da9b136c2a52d15d3766aa38f4204b0a68f891d53e82de24f34fb0d62b9f5b3d3b398a28b7fe6de0778781cf8cb0f3668747a1f9551893366ba5d321040a851157014ae4eabaab7e398b3386961d9011d5403f9f2ccf47b958441caf3c637981238e1fd053a3c0c6ef8cb38f1027568a1fa21fde1cb97c44b69abba395644e03032272ed3377eeaa8a31dbb4f005517a90441efd298a2326b36ede3ed12b7b86c7ec51639a8ac420bde54917a97ad4830e7663ca2fa71bebbbae2764470c4b1c5d9b7b9d8da415fc439e8836182f77870496b00e7a162de554eb1704b8af14757704e88905b5db64b67fabafa9a2093762bc20305e84199965f49592deace5d0aec82ccc47a71289aa7d7c5c2fd4f867c9eba45b1176cec2df5236f031740ab894ad7cca761dd31497afd27e07b8aa69d249e8c68999e5a3904ff5e0f43952a780356705d586d29efc8f586685d3ff4e725b13d4df574ae496067ef1c0b371cd17292b941645a838c35f55ffcda6099dcb6304abac98de1290ed77c27e5d2fced429f0535e8e618913ba348f68168942ac8cf2f418e42ed2d420773672f0798518bcc4b6ac687cd0ffce67186c9a46674cd6b9608278ea081fe67d1dd0f46fdf0cd8f0b83871524dd71cabb24d13758b2dd55d3110bc824dfa3a41deda3c5bec38b960b49638371d782191b3ad0a10bbc8e4d4e7fbbe133caa925a0602ebcbc008e1ea9301c6818ea999e3888a44b6ab90b0f6d697e7989b49d212a727673422595dab966e450e1a3f5a32564a1cf43b315a20d296602ee9ef36add899204aaf84a0a8b2fc3bfedcf2182acb2b793444f8435e1022e0284fb65bdd80951364daea86c83d27b1b4814a413f73120cbed9c6a9fe6a17f5699c887436819f28e445d6558cbcaa1979559a11bc047272c3b6157522466cf1c5cc2ee7dc3899ee28e144f671dcafc462685d08a70e5303024ec5585bf186f422d4151b7da47ce51c69f56ba70c04433ed995d3758d45267f8f822cb60d71b4b509e892c041179c1678aea0c390a8fe660d7ed5ef31e42cb6eb3056b6893eb95eeb8b575f62df2991d7a819476e72c0dfd022f3aa0381d76ed9366cab1a3b1cb23d3cd0fe2b95d66114460b4d837aade3dc3ad1082bd79fef39b90a6b25ad9c2a6206565feb065e926b3f19e4268772c4e5689be5567ba257ad6ba5d0063716d464d088ab0978104ae20c250fa5b7346ad2cc33b70c558d7b2ec58fe1d9b3f57394d4813171e71cc5528643737587ea09004b5af23e394991b68ebf1c16558fbc0aa58ff2b13ec51944eb7c7bf7cc3f90c15c874d610c993c9a3c57cb5134f9a8f96fdcfa67c2c4d01977f1ec72372e2de6336a1b4b4b8682e7cdf91653a5e256cfc70c95f4eb74f453b8727f149bd33dc9c41c222958a1dfc305a194db74d7d03b2df60c61225db2cfa7f50d63f2bb8a5db9f370ccfc2690ddae627acae75cc8feb79f117af8f0b67bb12725e38b8e6a895ae8834b3e0a618fe9a33c5e40fdfbde177bb0e367328b27f219be015de4b9a283970a0df5161a5a4f1401e0e59baf6e77c3a1e74246625f8e5638d2cdb9a47efdb411354e2ebcda9303fba78d50d0b3a5dfdbdf748ab0d48b7026501ec20fb2ee06d87c8ddb58f6ada7150ad5b6d3f936f9338b5e84f8165636721851546baf22d05a1e2b720912874a8c9dd8f58e471d3908e374717327200595f202e87bf33aae4f0c73809d97c3765c0467a0cbb55a6aebba732fcb593d59b5c06c1e38f0e184110866ae2a0ac9dab8ec0660a06cb1a055bc17808323b9777d439fd73f2e43d5055f6424ac772703e79357158f9f793797edb118908549566e7e0d26365dd22c2d56a1788038a7683497974198521c1a2a9be85482102fac34e55da70a79b406ac95101e1dbc7ea8a3fdbbbcd045fae3faea3687edc374978373a0c56cd16221c722bfb12098cc397074ee7ff7e14ffbdfa60baf4203e5e1877654712c0a85ad0ab27e63c36adef796d3ec492416094df2dedb2046971091ce9d7d999b3c951c50af2db63263bb273ca92f25b83c38cdd9d22e7555163796f044d243c75a7bd4465d71efa038b602de48e7767d4f746c1f372938d324da37ebe4ef71a117104da8250305e55a18596f0b502928de7fd43550cd80f2168744d2852b9722fcf3ff026255531bc07a85c8b13d48d0ae0b3d3dc724353e246914751ec285fbc3099482e37434005d7e5fa9146163f5fd6a672118ca96cb38ab277dcf6ad50a5c6f3f43833dc71788b1c488a9bc2de23870c067cef3c2edc5b18b0c95b8461a89386baff710c6649c25ee616ad069c42371739bbf13762cd1bff11dfb02590951cad3471db06d3f2ca7223fc7744f4f4385369171e4098ab6849df9f4b7a6eca7ad145be8f4f67b96ab1271b4382c071200360492f68f16c0baf4f90a63d3a3b6f049032800eb4fe919333d7d94a2f76c3956b3bae822c42ba9dc52fd0bf7296b564de8ad12812f80ccef42c09ac36ad81043d907aafc1b3c908a72c05fbcd84baed9f260c3d792796014e2aa7ab9df3f35fbe276d4c87b3cc50f77ca9ab83b0b5d5a49b148c2cc019ac518dcbf8d3a562df54ff6123f8e3db7342016339a54d7817c7088c7f5a09513641384300a42bbfdc5fb5a03c0ebd1ff2f082880fc5c250e751fccf39f3a14c8991e64aa47e594c1d058610fa04cadf2946d6f9106c796509eca3c3893aed43af488b53c9aab266cf56e3072337e6ed8db089c6e7fc9034932cca18f02c6085f279ab4b088ebe68ba7fe916fe2b9ef2d2f861179a5fe6a33c759c3441628e2fa2a68e7895ab4f3b2d0ef0fd842ee35caa0a992eec1ac7c1a4308311dac8da3233faf3f472f0e32b9482bc4cd591840119a8cbf5a350000f460f207bddc5fd763cd34a1e618f8111988ac20d619edc9105058b4ee42145a147b5954667401313ea4585f401708b0777c9272ea1be6a73986a9074d60a44ba4d61a53fbf799a797263f703f5c78d3abb7cc3e08b90b27d9e6e93e1b530635bb002850ae1f816656c7e1457051aa67634b3d430231c4a3283db7e0e9a60bef2843b3cc9610fecb0d9ca8ced3860432fe72b794d303cc5afbb8c4f28a47f71b65b078acf88abb30336185c5ca51b73ac4b101bf647cc777936bbd52fbcb1124513a9e0e58d47fdfde8f99567b3dc86fddcf876d3970e8e8d318266b4093ac7fc6faeea07d176f955809671de23e0532b3acb5ec3ba86211401c3467e533d7bb4714301fba49f0c452834ec5eb62470036f8f3e897d39d1acc5cd798758acee95a1db0ac0c260206fc4eceed57e5af4db0c73642762b9faa0e91a264576a835ffd602aa5f3199bb2967b4744cab838b48e7dddc54f17332a3109e79f2d18a727ad9d1890159b336c3bbc9164f7fb923c319e77fc19295b4676ce927bfeac5c07c2adfc8605ce335f69401a766e24fc39e5783ac60c244db5ff2db2dc68275e86ae6efa7e8a7398e0bf0e3cf4fdcc03f4e1610b7c6ce35cbb603b8906c12777c5b0e47ef45e9e919010b2d0689ae05fd3f5aa9baeafa48271734bfe2a5d42d4190ea70cbf00e84422dd5ccd6305ecb91974342a60d3fc85477161a6d69cab424f657f4d44ef01b0c239dbd1e5efd119626345a6a00274381df3d895c86be9cc7bc790bc37ffc0b69844344461f22a7d81ba4a2d89effa5ccca7a6e0bcaf0462c991b9f953ee03cec3eabed0e993659c3da72925f8fe0c59ad4d233ba179cab82d1581849aa1afef97f866abcdb7262ac1af59beeea9026443bd94717fa60b55a7b88bf2dd701a5b99eacf2dd393075dd484541fe6a1ec766ce5134868d7126fa00f00cb35bda6cbe4dc3f9ef238e0fa093d7bac0338969b72c6a84c58470402bef509b2ba9bed4ab2834181fa576c8eda10ed2880262342b9cec892b90ea5d08816a87731bfad6f8f0e1c19d1b16174d28bc63cdfc3cd4340daa14f57aafc081fc9ece022ea8f2cb9a9f726702754e50601663fb2c1b779442ef62eccb001f66b9d0254fe74815316ad8d2e10053459a94a4ffdf6a8e7a88ab06a9f85f49fa9437ba8eaaaa05e90b4d50ec4c2fab437167546a535fc51150fdf1e26b61c6b20e452d848df41efd1ac319ce92703c1cbef26086a1b6e3ec9bbf3d0ff2058861084de6006ca14ab0961928b81c8645559066eeecd690910c5692b8d33843d16665b34aefa13003d9f0de82c5713200fc7fe1eecc51a4df1d1fdeec3decc0bdf08a7a7550bc29e6b02d72f570d4453da40345c6c05cbe3f634c08115bc80a7b47351870d742e4f5982abfae83e00de0bdeb500506e83560c636fbdc0f882f810e722418644c7525cae024e17954c24aef1ea80d5684d06474b8cf433fde8979e1a95ea7f5b9d5052478af6fe5fc8ad10d5eb1638b104a3f6f3c761abb88c53d94d6851560ffedeec0a85e67dcda572aeb81d78a508bea626a602157ce5616e3d039c95c38b9537ac144eebb103168836cd8429f8794b547a0cc584c7645410cf3c9380e33f69db25d60df03732f24ad507cacf0be9f5c57077b008724730cdc71feabf6742bc6dd7d3af28fc76c7e9da530e8459a7f8205aebec3023cdd1ded93ddc80a28766c93c88c964999196f235a1b7006544b4c503afbf6ba0d7b350a881f9c04f4976e63f901e8faee950870588f8a6a7f3161ac5c567bf435015134dabeeb5cb862c2921f13fae5cb33163f319259eee897c5deece74ab9b6fdd51276ce6f3338f043b50f9cece752d555426792b8312ff81c1920c155289b86d6e7d98ec948d6a70b1138601e47b", @typed={0x8, 0xcf, 0x0, 0x0, @fd=r9}, @generic="f14245197db4187ea16b867ef7edcca890b952b3d769886a7986e27dd9e75184af87788fbd2691f3188372bab68a5455254dbfcc3542e504dd9531659d3e0e82e7b3ce4eb292320abea5e7cd39e8e7f1061c891a4ad192a9c963e5eabef6a592f77c9a63bae91c03ba7f180730595fce64414aed693c09aaaef0e78eb85386aba9bcacc3332666ee60bda7a0bbf453bad2ad9316567125da4ccada7ae5d41efb1fe0028c28be106b9ac17ba9b027e860"]}, @generic="b8925bc952f9fe72fb6f117ae48bf6d50ac7780038f8414eda433e07fd918a96784d32993d0310c17d148243c2ddfd757ad5eaed5f7254882e7a247bfcbc82f92693644e5773a6cf3a9960d383f82484abd0ea2e845e73c69e933ae840a4e22ac4ed69b7a337829be4c070f2650b3f2b43d6d2caddf17cb8d45c0a960446352fd54a1190297b795db0fb583bc9a52ea47fe8a07359bcfad4eb22d1d364d1643ac8008fe89e60188d62f4b68be3ed6f5ba0cf3c494625549a1b7ca0e8b4cc5504bf24", @typed={0x8, 0x13, 0x0, 0x0, @fd=r3}, @nested={0x26, 0x110, 0x0, 0x1, [@generic="8a1d00bafce4164e99db4e3fa703d161e7344b63b7cc6d62e1af10a7c4837a94221b"]}, @nested={0x188, 0x105, 0x0, 0x1, [@typed={0x90, 0x157, 0x0, 0x0, @binary="8ea029cddb7eda92c01fa82c0e5b14a0aafd4a4ea69de4243be864c3303ae26f5331a0750e606894fa88dbe8efb276fdeed0166c9ad321937a5881e677e21f34682e49b04d78aa24fb6d4183e03459aba98d71f81251a85cd9fd440ea834ae6ac1556de2752df2f0af005813c448da014131ccdabfd7aaa3cc1be9f16fc7308f4b5277b6b2e4f8c3eda348cf"}, @generic="ece2857cb96a6b1566954de536f3ae093ebb57f8c51955", @generic="0ca61fca03197771f3e6f8d8a84043418c514aef243f3aead5033ae0bec6d2f5", @typed={0x8, 0xba, 0x0, 0x0, @pid=r10}, @generic="08235fe6347e3f1fad313ba25618be448fd96a1e07df76da1a2a72aad1eff5915b483a645cf3416c3a4f67bf64206115e64e3e14a1bfcc7830ee16634a974e3501", @nested={0x4, 0xb5}, @generic="d7123bfabb88f62f52657c5dcd5180", @generic="30af4cb9408658402325346582d2bb7798b2a61efc8f8b9fdbf5160155cf254831ae83326b58ef02ddde0e73ac9bf2c3ff7d3eee4ed4e66b0ef1238f90c0aa619063ce4a9b3a5eb5e2f27102bb96a7dabf", @nested={0x4, 0xdc}, @typed={0xc, 0x64, 0x0, 0x0, @str='nl80211\x00'}]}]}, 0x148c}], 0x2, &(0x7f0000007f40)=[@cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r4, r1, r14, r0, r15, r1]}}, @rights={{0x38, 0x1, 0x1, [r4, r4, 0xffffffffffffffff, r1, r0, r1, r1, r1, r4, r16]}}], 0x88, 0x10}, 0x8000) keyctl$describe(0x6, 0x0, &(0x7f0000008100)=""/247, 0xf7) 5.200993091s ago: executing program 2 (id=2354): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x60, 0x0, 0x39) ioctl$KVM_RUN(r7, 0xae80, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) pwrite64(r2, &(0x7f0000000880)="9256820cbda4c4942bed565c9d3270db1d154e127f660c96100e0d1de4057f3435159f875ab1f1a4559906e2b983235c35bd8c61262e4825fca849016b491236ba7e31bbd391225ab59640e1285876bc3d629cbdeb999c5514a5da47dbb30569b2fbcc81bb6f3e7a42179c71aea895608085e0b782a66e0770da8a4e6c9a372fe834e90af2762625cdda48ecfcc1d0ca2363bf9043da6709ffa1fd8b610cb653da0d3f7eac0e8127ff9c7064f5138d727f663be3a3de1f9f31d91749ae3d232b09ab4dcef18712afed6d1af44e5f8588a86faeb12b8ea0cb0706c5c8f33f0d15795717b771ac67529d6b144659383357602c20e4934c5b45014227bd779362f41201bbf8112386e7c6528dfb3bb2794b273d033e22de31688e8f09638898f19e3279aebe69b09da6bf149cc7a0137191d5ed95e35476456b6c4946a3157e46f0ac8607f06e47c65772481e03bce480c3069a370e6e8deeadfecd344830debbeefc997d64f90cd3e8978715195fb5c9eac9edfdb0b5d03624421b11059b2dcf734fe0fad7ff01b82192b6294b3b51eb4f376e4cd197e3cd9df084d2c0380421267e42bda3c9779001b27e4a16784915da52855e6457a105a736550eeca9f0d3e9f298b9e638b01b360e175d02c16d9eeee5f898a942c37e44fa88ce1533b76907ec0b3e1e39ef858484da4967a602deb5c2a036b6dfbc9fc2b554469e34cf5858c695fed9ca21c5aaa64406564f27be70d5e0fa8faf388fa2ddf78c2074998a183ca570eff8d8d48d2b4bc386ecc9a8637c38bb2d53733f61a3d1c13011ab637985099f6c05ba7ee25ec12226edb39985aa9c9b16de27b17bdb36dc06893330121988a6f5b23322199a542ad27aa0b9d9044babfdcb06a3e3f7a4a4f91edfe9ff0069755862a6748cbd49fdca88be890531db4121064727b5c9dcb895944d87a5ce68291f62b93d83343065fb18afc15f881b00a83c66cca4a78cc625c97eb3c7d51e0719d4951b48bed3c7bd943f50546fd34f3b8ca7b88c119866c99cf99d8622ce028a2069e84b1f4374cbd603818c6bab9c82f8a1f985258266aa745d55b9c3021ee3c460e39f5f25b83bb2c242d8bf0279a2b8e9c0f684bd8db4947353c71c23aeec16c1e87c10f7ebdb7ffa213387ea579b7e98a3db94f014b6c6f9df21ba94ef2cd9bbc5ddccb7171a684402c3a5a5ee33b860ff7f24867e9aba4fa8ac866695ac39640f78cd683218b9037f57501cc7c9d4e49cb0a9a3b8b26b6c3fec53b30a15ad68ad63f8936c450c9070beec954ccacfa811e1d504ec1249cfaf368b38ccb069cd9f99fde8e0757914118e3f067698ad51673c51697995d9d49ebef9067ffab40f4e642cbca526da93697cb5d3cfbcea0bba5e63d0d863ea64b2a03469ab4f3d44c84b423be3a21b8749d5f56fa0996ded07d8d0f103add0f72900cf284f66f988a3ab046f99def38937a83f21667585ca0719f46e12622c85ab347078e8b253d320ce0ee2bf4f22326138bfb4ccf0af9405e305de0c1e92e9020e3ec609908b041d28b6dd57bbb8a5afa2c2f14acee8797e7b3113564ceac19dc959a47fb8547d0ba5c42bddcec178c07d8c81f544e5c807ec6f5a88a7b1441bbbfdc10cc0a1a871c7fc6c2aa47c13cfbc240ee15e88ecca5034b9c47ef07009f6c78c0252844e8a70a2f82bd9c6e35559d2264eaad71a487bd0d9ef6aa8aa272b17e6fb29cbcf6b02917b3cf33693ada309a4034b0058f34609d1b6c405c49269e52a2b32625f9777a7619a61217469e37b758bb19765fa9227fbd078f0a22d173d1f8f0253ab713b0935ed1b5d9257b21bcfd08cccc52d4a38ca95625ca6500cc7463b3b0ba112c6ecbc2ba7a17dd91a08c0b4755a0b60316774ab5c48c0b98407c23fec5a98e025267aaae22114766ebadb480131858942ab1c88cb180e5e73a4e1d40f2fcb19dda1e94e080e2c995cccd34638a21474906352e071411540dca03a6d0c05ce4517e45a3508a1d377a3a6545d8a58458405b81123f09e5b348a50143aba194ec997084bd42cc2f333ae9bb6bfbab384ceaef72192e5296f8fdbbf68d3880fe69315e302f1a86d27017848dfafcf0d688014a54a2ea760767f005613bab0b4aebcebd97616c35576837fff32f4fbda74406d7c9373e431d1aaf41c4726f57e36fff77a08704a8d01316d1db4b73c53bae8c2a582cbc6f0fc5050b99bc9859c1b2a5a07def170f6c52305df97032647c5ff7596c51f160b541d0d84b30ff2ba2357a26d4a16c7e49195aef4a75bacda6170b0172a287bda4b1545960941418ad4318eb244fb7b5450b69e940b5759d936e50e4cb34c7a8eba610ad5b585990cc2e2827223a103a4a34d00916d2b1da10bb14af6f079c8f2a3e1b669afe4e88f756d3ae310cddc954efdf67b9ae3233497c9faaa5f98bfee60bd8d531b6e1338bf2a92dad4ef545eeaec1c5db5acb85016d3026f6ca9a3ec88e3fe39549f50777f307c81d0eeaaba3032a40e3772429d7ffef0a49df407335e6c4b0c0184784964e4e366a76d3ac8862a7d1b6bf1fd0fc6b1cfd1697218f4b52c485318dd830cbfbc793de17602599d9f59f5bde7cade8f61332bbda3f735892f08300bc96685de3da7d73126418a743898831065a657b4b57f9d3dc3076912a9d3cd83aaae584b9d79e60446850d31fe311467960e07b81f695948a75822a55c7ee5d04762fbebfdd2ca775aedf868d56acb892ae0a56cf44af71e80e9c35d2854c2d05a85b58231d8c4a1d39adc68119b92b2b1166e18b818576bdbe6ebf4c1a2d850a912ee4d756ae4f967a6ec88bd8a6099531027ac4f8de4ba4531699ec78d57cac1b287952eb75da4754b76642c895397dff895fb84e88ea4c18d06efba82b949f28b906716073c79cab7fb670d0801cbbc38fc1813db04f88d96a95762eae5eef301e4a2dc95d2c312e040f62d742802e7ebec8cd362c36b89d678d99df66daf6e9b789a7b3ba94280f86eb8082e3b2407a3dac64cba3a4b165812356954dfa905e3dd56ab30870e8850089b7fc68785c0fe69400e42fcb1cb36815d81b7cddeed3229321226484ab99d1e46aa3c15e8f68e27fa619397e98e664215755a1dda7ce503fd0f61950ee5647b580b1dfc1e7d35e626334802ec1daee6f1ada8a5d3f43bea9fa76b5d52e73036a19256ad2fa98349d45bc11e3074f6614d93923fe5335fd20a2fc1b086bde9d5b69f58fb83e863be38e025a7d66c67ef571b963938806e6e033668f85b8057db04e6351d9c6c27235961c166d438b917b8f460236fdff4f727aaedb0f44deb819674bf9f92a74418b7a54b027c66ff6923f567c9c7535f6a1c095533b2164406aa7eac2ddff10b1a778b20d99e49b456da03152fc09d5107bfa9b262a885dede3db384c0d1a715aa8f267d9afa277d0534e4d3df6508ccbd25b94b2472b325d321b77774b4a8cbc28b653ee4eb42ee264d4edb48de4e7c6d65a138c5be2b19da7aaef96a8281d399b87cad9f58154f76242bd9a0a6cdd58183a0194d49722ae0e423c2103ce2fcf40a0800b304aa0ad692207726f491a56e46a62539791e6c5e36b75e1c6ac5d9cbc75427df316f8147fe0b622955089de5f011a5c77b7049d001f3ad48ea4eee87261c8ed3d4416b4c9da6be85c7ae5b7498c445bace7b2441d44254fa778007a146b48fa8f625b68a4824cb8a61452eda466e02f078c8dc6395ad48fea8c0e95bef0497f9f43f1d33c12d37f5206b8172317ec799a455451b64e304e0ebf89a691a9badabef3e2f3640279973b3d28cb88725f840acda677332a90cd6c750f45891887db7ad482cff71172526e35020663dc60f8065e3b0a62f7b8aff50812943b91fdc83db163d4e44cf8ea36f665e2945e904bb28a81deaf6ebb35e61a436168fc69ccb197ff488629cf0a0fd6f0b2e0630504a6ca1c85080cf35601d82b99fd0da3e0fc7df6082d490d5389850c9d7da28e935c495ebd9521b0780a78befc318391491e42a573b7daa99813c26398d2e9179e0ba05780ddef354ed2f4af72fd059e2762ec4dc72d46682392ed65312d107651566e0fb6d29a11f4e72c40367ba6c16d85ddfb7347f2be6807e172eec9257fdf37a4b1b211af64ad362478fdbd4f2e59bd25d6cfd0fc40773c0e0efc113084ba2f8dabfc6aa00c72b1bf8eb435dd32775a6ab438b689a72d42927bb1162e6bb2fcef14fd67d1d450517ee6b97f15da0adca193a8ba944ab4a9da189e8ec6c818409b9f47a02c98f5f4b8411ee50c283fee2a5ad52cec9ca18662d615cd0dbea0e7e3e521540d911a448c931979345153c8d5bc8169e5b1813ae9af01e41099ffc3ae0badb30cdfb58ba6be9815387c8424b130c0f052bbcae4d7d0c736431865d040e0a3b5e40bad563391a43962e457d8bc4db0a2e561a497fd4b93dd6f6925c949b22132a3282edff07a21a66f8e79685e727f9798bca75570fa9f3785f339249a7b0b8282c73d0cf6d9e5508202ad235e698b9c8d87c1282bdbc27a01aadb317f79f414063bf7ef4c7823676a2b041c7af6408ea758a29704ad231b25fc39f3d830fd839b1991b941282aa15fadfaf6feb251004b513657199619c16b8f744030f359e6eae259742380aa3839a1770c338ef35a29b3c4332d73c9813480230d84a18e0fbda9f92695b86f2e44d939857ab3dc42d65fff4f468306f5ea3c57b203d01f892295b6895d7dda93d1d8d7a13782ffeaabe716bbe19952f6b5743f0ea69fd02fab88a1d5283939b3a00fc9fdcf8976cd74ee0b8446f672073e779b21f54155cda63b638cc3874891714055a3bf51df6a4006b1a3dc8de7d42502dab2c70c17a14810c710047d3c22d8cf118bca0e22d62c1aeb0f708facde68101e5d8aef476ac1cc6ac5c79ed8c818290dc78f46973a8c39ded5447d9533edbb81621c31d8ea909c4fced74b18d9ec837217ff4b78e041f321832c2ff150113ee5afb8b0c3f074f8975ad0074358ffb54c9a1700d44637522e57832fa1eaccf3c104b83ff99356ac7583b1d1b9a6b3bbea9dc1cd6817b6eaec8b9246ce9d8a07c618aa781bbe1726b16e25f0021ccfe5190955ac8ab3c3e73f9091ec0ca16bfa2963308f331c7391ebcefcf07e5f1ef56259598bbcccbc5d1f14bb4e06376240f7bde2f0ed745e9f328827606fb668923060de76ab4b8f27765d2bc57b593b611403af5d04dc49f582686274a32050a9278bf387fc6a6d02f5aee0cbb37f3b3e9f626c6db416d1d9712e9114b90fb2cff8caab3b822cdc666468015b7c38214df24779a0794a62ab09df5f761404b25723dfe49bc961a737e1c0b97682aecd25a81c92fade0bb78f00185d01707352ce624419444d51884610b326927144f3caf6bc041b14ea722f416adfa6870c15c1004bfb08be90fbf9337a20d4fcdf92fdbfb2cecf50f33148942db3cce82e3b850eb4dafb88571f4d7dcaf43fc17dac343549fcaf8375962d5b53114c244642d2f65cf233d96cd047c51942c671b2ef41f2e70ae79b7a66b573b4cd1a7c5b009bd66261cf33b3c45dde891b2e5659e2b0543440fdffddd145b0c3db06594d3203124b969f47a0c350a163f1b56b68a48fa7de2bd3b7a7f30ee82de82a7f538f053c6eebe33b3904ed5dc815132bf7775de1ee1bf10938683fe327ef59fcfd8886e1a199591ab941245ee66d374a49179d19eadbfc3d11826e57e63df5995b7deea1721ab5d10a26a28e8097f9dfe893612bed2350af0f1df30bd851ff5a997df18275f2ab55911450f", 0x1000, 0x4b) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) 4.251235419s ago: executing program 7 (id=2358): r0 = socket$netlink(0x10, 0x3, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000000)=0xc) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/igmp\x00') rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}, 0xfe44, 0x0, 0x0) pread64(r2, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) socket$netlink(0x10, 0x3, 0x9) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xc) (async) syz_open_procfs(r1, &(0x7f00000000c0)='net/igmp\x00') (async) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) (async) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}, 0xfe44, 0x0, 0x0) (async) pread64(r2, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) (async) 4.186779102s ago: executing program 7 (id=2359): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x800, 0x400600) ioctl$BLKOPENZONE(r0, 0x40101286, &(0x7f0000000040)={0x8, 0x15}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap}, {@noextend}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}]}}) recvmsg(r0, &(0x7f0000000540)={&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)=""/193, 0xc1}, {&(0x7f0000000300)=""/46, 0x2e}, {&(0x7f0000000340)=""/148, 0x94}, {&(0x7f0000000400)=""/237, 0xed}], 0x4}, 0x60002122) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000580)={0x100000000, r0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs2/custom1\x00', 0x802, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000600)=0x2) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000680)={0x60, 0x2, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x2, &(0x7f0000000640)=[{0xa, 0x5, 0x6}, {0x3, 0x5, 0x80}], 0x2, 0x0, 0x0, 0x52, 0x1, 0x49}) r3 = accept4$llc(r1, &(0x7f0000000700)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000740)=0x10, 0x80000) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000780)={0x40, r3}, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f00000007c0)) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000800)={0x3, 0x0, 0x9, 0x4, 0x1, 0x0, [{0x9, 0x36dcf32d, 0x8, '\x00', 0x401}]}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x2, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x10) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) read$FUSE(r0, &(0x7f0000000980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000029c0)={0x50, 0x0, r4, {0x7, 0x2d, 0x37, 0x10060, 0xfffc, 0x9, 0x80000000, 0xfffffff8, 0x0, 0x0, 0x20, 0x653a}}, 0x50) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000002a40)={0x2, 0x1, @status={[0x1ff, 0xfffffffffffffff8, 0x80, 0x3, 0xc]}, [0x9, 0x7fff, 0x10, 0x8, 0x8, 0x4, 0x101, 0xf, 0x4, 0xbc3, 0x7ff8000000, 0x7, 0x1, 0x1, 0xfffffffffffffffd, 0xd4fa, 0x2, 0x1, 0x100000001, 0x4, 0x1, 0x4, 0x9, 0xe93f, 0x1, 0x6, 0xffffffffffff9bc8, 0x2, 0x9, 0x245, 0x5, 0xffffffff, 0xb, 0x74, 0x4000000, 0x7fffffffffffffff, 0x8, 0x3, 0x100000001, 0xca4, 0x3, 0x9, 0x4, 0x3, 0x5, 0x12, 0x4, 0x5, 0xfffffffffffffff1, 0x200, 0x7, 0x10001, 0x15, 0x247, 0x6, 0x1, 0x5, 0x7fff, 0x5, 0x4, 0xf94b, 0x6, 0x5, 0x6]}) recvmmsg$unix(r0, &(0x7f0000009c80)=[{{&(0x7f0000003480), 0x6e, &(0x7f00000036c0)=[{&(0x7f0000003500)=""/38, 0x26}, {&(0x7f0000003540)=""/71, 0x47}, {&(0x7f00000035c0)=""/93, 0x5d}, {&(0x7f0000003640)=""/117, 0x75}], 0x4, &(0x7f0000003700)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003bc0)=[{&(0x7f00000038c0)=""/193, 0xc1}, {&(0x7f00000039c0)=""/197, 0xc5}, {&(0x7f0000003ac0)=""/204, 0xcc}], 0x3, &(0x7f0000003c00)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000003cc0), 0x6e, &(0x7f0000005140)=[{&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/125, 0x7d}, {&(0x7f0000004dc0)=""/147, 0x93}, {&(0x7f0000004e80)=""/47, 0x2f}, {&(0x7f0000004ec0)=""/93, 0x5d}, {&(0x7f0000004f40)=""/103, 0x67}, {&(0x7f0000004fc0)=""/3, 0x3}, {&(0x7f0000005000)=""/60, 0x3c}, {&(0x7f0000005040)=""/215, 0xd7}], 0x9}}, {{&(0x7f0000005200), 0x6e, &(0x7f0000005300)=[{&(0x7f0000005280)=""/122, 0x7a}], 0x1, &(0x7f0000005340)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x100}}, {{&(0x7f0000005440), 0x6e, &(0x7f0000006940)=[{&(0x7f00000054c0)=""/221, 0xdd}, {&(0x7f00000055c0)=""/103, 0x67}, {&(0x7f0000005640)=""/4096, 0x1000}, {&(0x7f0000006640)=""/67, 0x43}, {&(0x7f00000066c0)=""/75, 0x4b}, {&(0x7f0000006740)}, {&(0x7f0000006780)=""/65, 0x41}, {&(0x7f0000006800)=""/229, 0xe5}, {&(0x7f0000006900)=""/63, 0x3f}], 0x9, &(0x7f0000006a00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000006a40), 0x6e, &(0x7f0000006cc0)=[{&(0x7f0000006ac0)=""/40, 0x28}, {&(0x7f0000006b00)=""/203, 0xcb}, {&(0x7f0000006c00)=""/163, 0xa3}], 0x3, &(0x7f0000006d00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000006dc0), 0x6e, &(0x7f0000008fc0)=[{&(0x7f0000006e40)=""/4096, 0x1000}, {&(0x7f0000007e40)=""/105, 0x69}, {&(0x7f0000007ec0)=""/49, 0x31}, {&(0x7f0000007f00)=""/119, 0x77}, {&(0x7f0000007f80)=""/20, 0x14}, {&(0x7f0000007fc0)=""/4096, 0x1000}], 0x6, &(0x7f0000009040)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x70}}, {{&(0x7f00000090c0)=@abs, 0x6e, &(0x7f0000009600)=[{&(0x7f0000009140)=""/179, 0xb3}, {&(0x7f0000009200)=""/221, 0xdd}, {&(0x7f0000009300)=""/173, 0xad}, {&(0x7f00000093c0)=""/148, 0x94}, {&(0x7f0000009480)=""/68, 0x44}, {&(0x7f0000009500)=""/217, 0xd9}], 0x6, &(0x7f0000009680)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f00000097c0)=@abs, 0x6e, &(0x7f0000009bc0)=[{&(0x7f0000009840)=""/51, 0x33}, {&(0x7f0000009880)=""/184, 0xb8}, {&(0x7f0000009940)=""/185, 0xb9}, {&(0x7f0000009a00)=""/55, 0x37}, {&(0x7f0000009a40)=""/200, 0xc8}, {&(0x7f0000009b40)=""/121, 0x79}], 0x6, &(0x7f0000009c40)=[@cred={{0x1c}}], 0x20}}], 0x9, 0x1, &(0x7f0000009ec0)={0x77359400}) r15 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) signalfd4(r15, &(0x7f0000009f00)={[0x5]}, 0x8, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r9, 0x40085874, &(0x7f0000009f40)={r10, 0xa50}) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000009f80)) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000009fc0)=0x2) r16 = openat$zero(0xffffffffffffff9c, &(0x7f000000a000), 0x16001, 0x0) r17 = syz_genetlink_get_family_id$mptcp(&(0x7f000000a080), r12) sendmsg$MPTCP_PM_CMD_GET_ADDR(r16, &(0x7f000000a140)={&(0x7f000000a040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f000000a100)={&(0x7f000000a0c0)={0x30, r17, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f000000a440)={0x64, 0x0, &(0x7f000000a380)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x70, 0x18, &(0x7f000000a2c0)={@ptr={0x70742a85, 0x0, &(0x7f000000a180)=""/92, 0x5c, 0x0, 0x1}, @fda={0x66646185, 0x0, 0x1, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f000000a200)=""/161, 0xa1, 0x0, 0x3c}}, &(0x7f000000a340)={0x0, 0x28, 0x48}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}, @register_looper], 0x26, 0x0, &(0x7f000000a400)="3809569e5ed38c4c6c6bb925ff82a28050810a88ed063b83c1559b0df186e32fe02bd5c7f28e"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r13, 0x4018620d, &(0x7f000000a480)={0x73622a85, 0x100, 0x2}) move_mount(r11, &(0x7f000000a4c0)='./file0\x00', r6, &(0x7f000000a500)='./file0\x00', 0x22) fcntl$lock(r8, 0x6, &(0x7f000000a540)={0x1, 0x0, 0x9, 0x7fff}) 3.992862472s ago: executing program 7 (id=2360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000fc0), 0x1, 0x2000) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000001140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r3) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000180)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0a44caa", @ANYRES16=r2, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb06001b004e230000050021"], 0x6c}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001480), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2d0028bd7000fedbdf254a00000008000300030000000e0001006e657464657673696d0000000f0002006e657464657673696d300000a5671064ae3a039ed4693db3934c5c1a77a89114544bd55789b6e1cb8d1bee2ca87d1f4a93297e6dc46ad3796c7831970ee18c8479c69ba71b8e65129c054cbc8d2dbd47781435bffaf4fe350498d2c1cf11315e2cfc113cab722237e1c87124a697e0c56dbbe34e0086950bafc0c109472431dfbecec3072136192a15d73643831ec0ede8fe5fdc4c2a91fdded3ef0bc700b0ca047673b3a2fe3e2111227b17664937ab07b3ee5c87847e0526e07fd70a"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$netlink(0x10, 0x3, 0x12) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) r6 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000140)={r5, 0x800, {0x2a00, 0x80010900, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "280991800000598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f000000155cc30cf11d0bc000", [0x4, 0x7]}}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x7d4165c9) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 3.563764519s ago: executing program 5 (id=2361): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000380)={0x1, 0x1, @start={0x775b4acb, 0x1}}) 3.362341884s ago: executing program 5 (id=2362): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000000514010029bd7000fddbdf250800010000000000080003"], 0x70}, 0x1, 0x0, 0x0, 0x20044000}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r2}, 0x0) landlock_restrict_self(r1, 0x9) mkdir(&(0x7f0000000200)='./file0\x00', 0x1eb) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x1, "69c4701e"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x1, "00000400"}]}}, 0x0}, 0x0) 3.122320483s ago: executing program 7 (id=2363): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, 0x0, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0x5) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRESOCT=r3, @ANYRESHEX=r2, @ANYRESHEX=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) write$tun(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000bbbbc0bbbbbbaaaaaaaaaa2986dd6d00200800181101fc000000000000000000000002000000ff0200000000000000000000000000014f194e1b001890"], 0x52) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000480)={0x9, &(0x7f00000000c0)=[{0x6, 0x8}, {0x6, 0xfff9}, {0x9f, 0x3}, {0x7f, 0x1000}, {0x3, 0x7}, {0x5457, 0x35a4}, {0x9, 0x6}, {0x7, 0x2}, {0x7dcd, 0x4}]}) r10 = socket(0x2d, 0x2, 0x0) setsockopt$netrom_NETROM_T1(r10, 0x11d, 0x1, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19e}, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r11 = userfaultfd(0x80801) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f00000000c0)) 1.995072623s ago: executing program 7 (id=2364): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10, 0x0, 0x0, &(0x7f0000002240)}, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x90) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r2, 0x40047452, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x2f, 0x1f, 0x6, 0x6, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x700, 0x10, 0x6, 0x3}}) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="22e301ed3b2a087d657cc80618fd448963d329e98e459b828da476002968b2722e9c29fd648f0a510a1bfdd2763a0c6b8ce09bd186b3c4508232191dd5f6d4f2d817dfd9b0ea12f9a9dde80372ce6b4190bdd069a277f4ba8b03b0766b8f9494089cfde955d728fd3f993be519ef0e9a73", 0x71}, {&(0x7f0000000280)="022e68c605d432f03943839155e71b7d70280c4a31f48c1bdc7dc476b0807a12b7c9dcae74871c67159babe07b265921a461d31baaecf8a75e17da57ed30235dc9967bcb32c35d1017884ce0a9f6c6cbf14666504011f0883cceb1c94b22df2f04d4a2e176c96ec8f07fa58b0bd1a64ea59c0fe1a2541a4a5a9fed42ee6cd392927c22a180490745c25a59d04053bc93864a837acaefed5f474990b213709c83fda5440867663f5d201a30a291b57537d1948d85b70787565496cde35e1593cd74094a1b809d15cce473d0d9f506e6355c13d4bad8215220", 0xd8}], 0x2, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @rand_addr=0x64010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc}}], 0x38}, 0x40000050) 1.197435772s ago: executing program 4 (id=2365): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400008029000bd3c6dc17233efb550000007836", 0x14}], 0x1}, 0x4000800) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setuid(0xee01) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 985.29222ms ago: executing program 5 (id=2366): r0 = syz_open_dev$video4linux(&(0x7f0000000500), 0x69, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc038563b, &(0x7f0000000000)={0x0, 0x200001, 0x2009}) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) listen(r1, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0xe00}]}, 0x10) 938.708158ms ago: executing program 4 (id=2367): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file1\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x42400) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r5, 0x4, 0x42000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe000, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x8b, 0x100000500) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="010623010020fbdbdf250600000008000100", @ANYRESDEC=r1, @ANYBLOB="08000e00b0000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000820}, 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) setsockopt(0xffffffffffffffff, 0x3, 0x6, &(0x7f0000000700)="37557bf476e57e3ff487bcca92e2688783c7ffb106450c5928c0b26a8e08fbb2e3deb24243c76131fc4f72dde26ecc0546cfbd3462c851695a0cdcf274b4a1ea364f1b1a5645d744", 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80b000000050104000000000000000003000080540201"], 0xbb8}, 0x1, 0x0, 0x0, 0x2000}, 0x4004040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r2) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYRES8=0x0, @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)) 829.330069ms ago: executing program 5 (id=2368): r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) renameat2(r1, &(0x7f00000003c0)='./bus\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x111}}}, 0xfffffdf5}}, 0x4000040) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000c28b4b0897ba8ecd38c3759b9ac5a3c40070a6a91c044691484366886798e4f2d9ffd80e04464c201e4c82e86fae2b22f7f7143d3167699c621e5a9f84c157d33e2490789a96e0ca8ba6eb9aa6c1", @ANYRES16=r4, @ANYBLOB="00032bbd7000fedbdf25010000001400040004000000c50000000200000008000000180004000000000009000000010000000020010009000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20008001) 541.294817ms ago: executing program 5 (id=2369): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181403, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x14, r2, 0x2, 0xfffffffd, 0x25dfdbfc, {0x4f}}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x200009c1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x400000c, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/address_bits', 0x40000, 0xf) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000080)="2400000058001f000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000080)={r7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000000000ffd, 0x0, 0x0, 0xd, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) r9 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="907b22", 0x3, 0xffffffffffffffff) keyctl$revoke(0x3, r9) keyctl$read(0xb, r9, &(0x7f00000018c0)=""/41, 0x29) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f00006dd000/0x400000)=nil) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4020ae46, &(0x7f00000001c0)={0x1, 0x1, [{0x4a, 0x608, 0x0, 0x0, @irqchip={0x0, 0x100fa0}}]}) 470.072562ms ago: executing program 4 (id=2370): r0 = fanotify_init(0x200, 0x0) (async) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x3, r2, 0x0) r3 = dup(r2) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000000000002003e00cd000000c9030000000000004000000000000000e702000000000000030000000500380002000600b106090003"], 0xb0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r4) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r4) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f0000000140)={0x0, 0xff548dca07ba031d, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8851}, 0x48880) 141.150824ms ago: executing program 4 (id=2371): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x58, 0xa, 0x0, "3258c546dacccfae1e008faa022c1e00f4bf40074000000200"}) r1 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/167, 0xa7}, {&(0x7f0000002180)=""/120, 0x78}], 0x4, &(0x7f0000002200)=[@cred={{0x1c}}], 0x20}, 0x40010020) 0s ago: executing program 7 (id=2372): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x48212b8952c3aff5, 0x70bd25, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x20) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000000200)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101102, 0x0) read$FUSE(r5, &(0x7f0000006200)={0x2020}, 0x2020) (async) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40106614, &(0x7f0000000040)) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000006, 0x9132, 0xffffffffffffffff, 0x9aa9b000) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x28, r7, 0x64bc7c9305072889, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x58, r8, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x5555555555540204}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xfa}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040051}, 0xd0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) brk(0x200001ff8080) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) kernel console output (not intermixed with test programs): V3 [ 416.181248][T11944] 010000E0 1 0:00000000 0 [ 416.181248][T11944] 38 veth1_to_team: 1 V3 [ 416.181248][T11944] 010000E0 1 0:00000000 0 [ 416.181248][T11944] 40 veth0_to_batadv: 1 V3 [ 416.181248][T11944] 010000E0 1 0:00000000 0 [ 416.181248][T11944] 41 batadv_slave_0: 1 V3 [ 416.181248][T11944] 01 [ 416.194001][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 416.412547][ T10] usb 5-1: USB disconnect, device number 34 [ 416.459129][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.736053][T11970] netlink: 'syz.5.1794': attribute type 10 has an invalid length. [ 416.747014][T11970] veth0_vlan: left promiscuous mode [ 416.754271][T11970] veth0_vlan: entered promiscuous mode [ 416.764640][T11970] team0: Device veth0_vlan failed to register rx_handler [ 416.786032][T11970] netlink: 'syz.5.1794': attribute type 10 has an invalid length. [ 416.797732][T11970] team0: Device ipvlan1 failed to register rx_handler [ 416.873157][T11973] netlink: 'syz.5.1795': attribute type 83 has an invalid length. [ 416.887506][T11973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.896485][T11973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.954146][ T10] usb 3-1: USB disconnect, device number 24 [ 417.284926][ T5935] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 417.435020][ T5935] usb 5-1: Using ep0 maxpacket: 16 [ 417.448117][ T5935] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 417.460522][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.471855][ T5935] usb 5-1: config 0 descriptor?? [ 417.488097][ T5935] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 417.494457][T11988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.503667][T11988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.542713][T11988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1800'. [ 418.155663][T11991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.198619][T11991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.300368][T11979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.311721][T11979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.347965][ T5935] gspca_sonixj: reg_r err -71 [ 418.354622][ T5935] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 418.373433][ T5935] usb 5-1: USB disconnect, device number 35 [ 418.454845][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 418.558328][ T5839] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 418.570904][ T5839] Bluetooth: hci3: Injecting HCI hardware error event [ 418.583701][ T5836] Bluetooth: hci3: hardware error 0x00 [ 418.625045][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 418.641058][ T24] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 418.654871][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 418.674864][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 418.689053][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 418.702217][ T24] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 418.711413][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.724010][ T24] usb 3-1: config 0 descriptor?? [ 418.750288][ T24] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input34 [ 418.938018][ T24] usb 3-1: USB disconnect, device number 25 [ 418.944057][ C1] pxrc 3-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 418.978554][ T5185] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 419.171162][T12018] wg0 speed is unknown, defaulting to 1000 [ 419.196085][T12018] lo speed is unknown, defaulting to 1000 [ 420.002085][T12029] dvmrp12: entered allmulticast mode [ 420.019219][T12030] binder: 12026:12030 ioctl c018620c 200000000080 returned -22 [ 420.416282][ T5935] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 420.588951][ T5935] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 420.613084][ T5935] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.636980][ T5836] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 420.647132][ T5935] usb 3-1: config 0 has no interface number 0 [ 420.653377][ T5935] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 420.663736][ T5935] usb 3-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 420.686279][ T5935] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 420.707570][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.753959][ T5935] usb 3-1: Product: syz [ 420.782236][ T5935] usb 3-1: Manufacturer: syz [ 420.801599][ T5935] usb 3-1: SerialNumber: syz [ 420.831596][T12042] binder: BINDER_SET_CONTEXT_MGR already set [ 420.841088][T12042] binder: 12038:12042 ioctl 4018620d 200000000100 returned -16 [ 420.859641][ T5935] usb 3-1: config 0 descriptor?? [ 420.919332][ T5836] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 420.935937][T12045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1815'. [ 421.111151][T12034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.129621][T12034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.171198][ T10] usb 3-1: USB disconnect, device number 26 [ 421.251652][T12053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.306178][T12053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.325936][T12053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.335328][T12053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.596561][ T24] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 421.736327][ T24] usb 5-1: device descriptor read/64, error -71 [ 421.986597][ T24] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 422.040861][T12067] gfs2: error -5 reading superblock [ 422.129945][T12071] tipc: Enabling of bearer rejected, failed to enable media [ 422.145228][ T24] usb 5-1: device descriptor read/64, error -71 [ 422.234026][T12074] XFS (nbd2): no-recovery mounts must be read-only. [ 422.264033][T12076] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1827'. [ 422.285226][ T24] usb usb5-port1: attempt power cycle [ 422.353093][T12079] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1828'. [ 422.635083][ T24] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 422.655359][ T24] usb 5-1: device descriptor read/8, error -71 [ 422.881518][T12082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.890812][T12082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.901956][ T24] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 422.926283][ T24] usb 5-1: device descriptor read/8, error -71 [ 423.035980][ T24] usb usb5-port1: unable to enumerate USB device [ 423.554090][T12102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.570389][T12103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.582638][T12102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.594151][T12103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.606771][T12104] openvswitch: netlink: IP tunnel TTL not specified. [ 424.085016][ T5896] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 424.245949][T12127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.256065][T12127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.265198][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.288914][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.328349][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 424.341695][ T5896] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 424.351140][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.378521][ T5896] usb 3-1: config 0 descriptor?? [ 424.533412][T12131] overlayfs: invalid origin (000000ca387fe0fb3738702bed8ab4416592a5356da96db48150eae0040000006fe65c239a40022f0000000000000000) [ 424.821942][ T5896] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 424.871257][T12142] netlink: 'syz.5.1848': attribute type 1 has an invalid length. [ 424.893831][T12142] QAT: failed to copy from user cfg_data. [ 424.901202][T12142] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1848'. [ 425.007883][T12115] xt_NFQUEUE: number of total queues is 0 [ 425.015600][T12115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.030170][T12115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.038426][ T24] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 425.078242][T12144] 9p: Bad value for 'rfdno' [ 425.157992][T12150] netlink: 348 bytes leftover after parsing attributes in process `syz.5.1850'. [ 425.178466][T12152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.187956][T12152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.197559][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 425.205599][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 66, changing to 7 [ 425.220209][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0121, bcdDevice= 0.40 [ 425.230018][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.238593][ T24] usb 5-1: Product: syz [ 425.243168][ T24] usb 5-1: Manufacturer: syz [ 425.248378][ T24] usb 5-1: SerialNumber: syz [ 425.464366][T12139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.473613][T12139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.489150][ T24] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 425.497116][ T24] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 425.548421][ T24] usb 5-1: USB disconnect, device number 40 [ 425.593845][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 426.000680][T12164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.025752][T12164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.138088][T12168] netlink: 'syz.4.1855': attribute type 25 has an invalid length. [ 426.150487][T12168] netlink: 'syz.4.1855': attribute type 28 has an invalid length. [ 426.606961][ T24] usb 3-1: reset high-speed USB device number 27 using dummy_hcd [ 426.763834][T12189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.772868][T12189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.784551][ T24] usb 3-1: device firmware changed [ 426.801184][ T5936] usb 3-1: USB disconnect, device number 27 [ 426.944887][ T5936] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 427.097107][ T5936] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 427.106509][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.117982][ T5936] usb 3-1: config 0 descriptor?? [ 427.126206][ T5936] cp210x 3-1:0.0: cp210x converter detected [ 427.325534][ T5936] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 427.333209][ T5936] cp210x 3-1:0.0: querying part number failed [ 427.344515][ T5936] usb 3-1: cp210x converter now attached to ttyUSB0 [ 427.419787][T12194] comedi comedi3: comedi_config --init_data is deprecated [ 427.435703][T12194] syzkaller1: entered promiscuous mode [ 427.441297][T12194] syzkaller1: entered allmulticast mode [ 427.463730][T12194] XFS (loop5): SB validate failed with error -5. [ 427.513051][T12200] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1864'. [ 427.536310][T12200] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 427.571522][ T1719] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 427.862033][T12210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.871022][T12210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.344924][ T5831] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 428.473873][T12232] binder_alloc: 12231: binder_alloc_buf, no vma [ 428.485112][ T5831] usb 5-1: device descriptor read/64, error -71 [ 428.548151][T12234] wg0 speed is unknown, defaulting to 1000 [ 428.559773][T12234] lo speed is unknown, defaulting to 1000 [ 428.735019][ T5831] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 428.816269][ T29] audit: type=1800 audit(1773599899.006:10): pid=12239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1877" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 428.907150][ T5831] usb 5-1: device descriptor read/64, error -71 [ 428.916954][ T29] audit: type=1326 audit(1773599899.116:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12241 comm="syz.5.1878" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde19b9c799 code=0x0 [ 429.061748][ T5831] usb usb5-port1: attempt power cycle [ 429.268762][ T5935] usb 3-1: USB disconnect, device number 28 [ 429.290381][ T5935] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 429.302216][ T5935] cp210x 3-1:0.0: device disconnected [ 429.353307][T12245] fuse: Bad value for 'user_id' [ 429.359032][T12245] fuse: Bad value for 'user_id' [ 429.404866][ T5831] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 429.425598][ T5831] usb 5-1: device descriptor read/8, error -71 [ 429.665135][ T5831] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 429.685471][ T5831] usb 5-1: device descriptor read/8, error -71 [ 429.795353][ T5831] usb usb5-port1: unable to enumerate USB device [ 429.814531][T12248] program syz.5.1880 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 429.871276][ T5831] wg0 speed is unknown, defaulting to 1000 [ 429.890728][ T5831] syz2: Port: 1 Link DOWN [ 429.958407][ T1315] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.061563][ T1315] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.161900][ T1315] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.265631][ T1315] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 430.281019][ T1315] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.463397][ T1315] bridge_slave_1: left allmulticast mode [ 430.477160][ T1315] bridge_slave_1: left promiscuous mode [ 430.484212][ T1315] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.498171][ T1315] bridge_slave_0: left allmulticast mode [ 430.504289][ T1315] bridge_slave_0: left promiscuous mode [ 430.510736][ T1315] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.537595][ T1315] dvmrp4: left allmulticast mode [ 430.546860][ T5896] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 430.573462][T12264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.586939][T12264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.599298][T12266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.612026][T12266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.716817][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.728169][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.739594][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 430.753231][ T5896] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 430.762654][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.774294][ T5896] usb 3-1: config 0 descriptor?? [ 430.872395][ T1315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.887458][ T1315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.908373][ T1315] bond0 (unregistering): Released all slaves [ 431.036651][T12260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.055602][T12260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.271710][T12281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.675117][ T24] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 431.724268][ T5896] usbhid 3-1:0.0: can't add hid device: -71 [ 431.743036][ T5896] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 431.777463][ T5896] usb 3-1: USB disconnect, device number 29 [ 431.815048][ T24] usb 5-1: device descriptor read/64, error -71 [ 432.088100][ T24] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 432.138939][ T1315] hsr_slave_0: left promiscuous mode [ 432.147075][ T1315] hsr_slave_1: left promiscuous mode [ 432.160991][ T1315] veth1_macvtap: left promiscuous mode [ 432.167499][ T1315] veth0_macvtap: left promiscuous mode [ 432.173155][ T1315] veth1_vlan: left promiscuous mode [ 432.179487][ T1315] veth0_vlan: left promiscuous mode [ 432.236047][ T24] usb 5-1: device descriptor read/64, error -71 [ 432.346647][ T5936] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 432.366325][ T24] usb usb5-port1: attempt power cycle [ 432.477307][ T1315] team0 (unregistering): Port device team_slave_1 removed [ 432.501475][ T1315] team0 (unregistering): Port device team_slave_0 removed [ 432.509104][ T5936] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 432.521206][ T5936] usb 3-1: config 0 has no interface number 0 [ 432.527873][ T5936] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 432.543099][ T5936] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 432.561878][ T5936] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 432.572755][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.581456][ T5936] usb 3-1: Product: syz [ 432.586386][ T5936] usb 3-1: Manufacturer: syz [ 432.591114][ T5936] usb 3-1: SerialNumber: syz [ 432.611980][ T5936] usb 3-1: config 0 descriptor?? [ 432.624410][ T5936] cypress_m8 3-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 432.698290][ T35] smbdirect: ib_dev[syz2] removed [ 432.705282][ T24] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 432.743948][ T24] usb 5-1: device descriptor read/8, error -71 [ 432.774270][ T49] smc: removing ib device syz0 [ 432.805696][ T5935] lo speed is unknown, defaulting to 1000 [ 432.837570][ T5935] syz0: Port: 1 Link DOWN [ 432.854175][ T5936] usb 3-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 432.901875][ T5936] usb 3-1: USB disconnect, device number 30 [ 432.948022][ T49] smbdirect: ib_dev[syz0] removed [ 432.956506][ T5936] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 432.986879][ T5936] cypress_m8 3-1:0.35: device disconnected [ 432.994848][ T24] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 433.027370][ T24] usb 5-1: device descriptor read/8, error -71 [ 433.150576][ T24] usb usb5-port1: unable to enumerate USB device [ 433.469814][T12328] x_tables: duplicate underflow at hook 4 [ 434.639635][T12359] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1900'. [ 435.691604][T12409] program syz.2.1908 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 435.781660][T12411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1908'. [ 435.909051][ T5937] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 436.064995][ T5937] usb 5-1: Using ep0 maxpacket: 16 [ 436.075040][ T5831] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 436.084432][ T5937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.112679][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 436.134850][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 436.155672][ T5937] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 436.165568][ T5937] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 436.184128][ T5937] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 436.193662][ T5937] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 436.202197][ T5937] usb 5-1: Manufacturer: syz [ 436.210384][ T5937] usb 5-1: config 0 descriptor?? [ 436.258805][ T5831] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 436.293696][ T5831] usb 3-1: New USB device found, idVendor=04b4, idProduct=9320, bcdDevice= 0.40 [ 436.319167][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.335844][ T5831] usb 3-1: Product: 미ﱟ毘⻕榎쫞刱뜠⾆髢讵慹枢覊齫辖黺嗾ෑ඿ࡨﾋ闏蓮쁪䭳縀헑鰭潀깗আ㣑㒛矩恵᳏ᶧ䆏峔ꚾ⮷ﶅ㤳껝ꩌ尹퀿㉋壭砸၊唙靎뱅胝꽚╎翊㫄ᐁࢶ䄵恰䳪붑苷 [ 436.384890][ T5831] usb 3-1: Manufacturer: 쪅授张卨涋朌ﻧ跂﮲㏪᠇㥅豫ꯘ꩕ꢆ￥贃텣 [ 436.399862][ T5831] usb 3-1: SerialNumber: ᢲ搓㛤진ຄ內貕䫙変發䟇鉥㌢礑ⵛ偯羓⺓鍈쬺섞謤Ɪ摊Ŷ钂ᔦ牂鯩΅碉﨡ﳨ폰嫇孞䎴꜎臽焐뚶諒ྴ╛峻庾펌坒㙮㘔勫♆蛽馍衳㨨芼봡ň窩侦愠兽ᙙਇⶅҚﲪ揄㱱㬲ﱈ黧뤒揳ꌯ܈匐枭ᥡ瞳㭇呭톿邟ᶏ㦆뵲 [ 436.434512][T12405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.449665][T12405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.461496][T12405] cgroup: Bad value for 'name' [ 436.604835][ T5937] rc_core: IR keymap rc-hauppauge not found [ 436.611351][ T5937] Registered IR keymap rc-empty [ 436.617191][ T5937] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 436.645028][ T5937] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 436.687473][ T5937] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 436.709337][ T5937] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input36 [ 436.742225][ T5937] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 436.785102][ T5937] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 436.815121][ T5937] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 436.837925][ T5937] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 436.864917][ T5937] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 436.906276][ T5937] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 436.927133][ T5937] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 436.955185][ T5937] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 436.975653][ T5937] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 436.994918][ T5937] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 437.002753][T12405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.011777][T12405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.027690][ T5937] mceusb 5-1:0.0: Registered 〰 with mce emulator interface version 1 [ 437.037155][ T5937] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 437.060333][ T5937] usb 5-1: USB disconnect, device number 49 [ 437.328392][T12442] No buffer was provided with the request [ 437.342173][T12442] overlayfs: missing 'lowerdir' [ 437.433344][T12444] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1914'. [ 437.612710][T12449] Bluetooth: hci4: Frame reassembly failed (-84) [ 437.629001][ T507] Bluetooth: hci4: Frame reassembly failed (-84) [ 437.639465][ T507] Bluetooth: hci4: Frame reassembly failed (-84) [ 437.688922][T12450] netlink: 'syz.7.1916': attribute type 10 has an invalid length. [ 437.707327][T12451] delete_channel: no stack [ 437.721678][T12450] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.735674][T12450] bond0: (slave team0): Enslaving as an active interface with an up link [ 437.754451][T12454] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1918'. [ 437.771574][T12454] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1918'. [ 437.781094][T12454] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1918'. [ 438.168155][T12477] 9p: Bad value for 'rfdno' [ 438.186415][T12477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.225695][T12477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.692792][ T5831] usb 3-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 438.708623][ T5831] usb 3-1: 1:1 : sample bitwidth 8 in over sample bytes 0 [ 438.726668][ T5831] usb 3-1: 1:1 : unsupported sample bitwidth 8 in 0 bytes [ 438.744106][ T5831] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 438.751764][ T5831] usb 3-1: unit 5 not found! [ 438.799868][ T5831] usb 3-1: USB disconnect, device number 31 [ 438.837982][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.969418][T12495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1928'. [ 438.993063][T12497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.014308][T12497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.355955][ T5937] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 439.515408][ T5936] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 439.525023][ T5937] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 439.535392][ T5937] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 439.544498][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.560682][ T5937] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 439.676332][ T5836] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 439.683020][ T5839] Bluetooth: hci4: command 0x1003 tx timeout [ 439.696888][ T5936] usb 5-1: Using ep0 maxpacket: 8 [ 439.705508][ T5936] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.731566][ T5936] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 439.749324][ T5936] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 439.780399][ T5936] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 439.794791][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.821683][ T5936] hub 5-1:1.0: bad descriptor, ignoring hub [ 439.836041][ T5936] hub 5-1:1.0: probe with driver hub failed with error -5 [ 439.847013][ T5936] cdc_wdm 5-1:1.0: skipping garbage [ 439.852319][ T5936] cdc_wdm 5-1:1.0: skipping garbage [ 439.859449][ T5936] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 440.082905][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.204108][T12512] block nbd5: shutting down sockets [ 440.216935][ T5936] usb 5-1: USB disconnect, device number 50 [ 440.282513][T12518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.297305][T12518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.636146][ T5937] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 440.654939][T10178] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 440.817487][T10178] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 440.826063][T10178] usb 5-1: config 0 has no interface number 0 [ 440.832253][T10178] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 440.844931][ T5937] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 440.848107][T10178] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 440.867768][ T5937] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 440.877450][T10178] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.892782][ T5937] usb 3-1: USB disconnect, device number 32 [ 440.897479][T10178] usb 5-1: Product: syz [ 440.915273][T10178] usb 5-1: Manufacturer: syz [ 440.920392][T10178] usb 5-1: SerialNumber: syz [ 440.933923][T10178] usb 5-1: config 0 descriptor?? [ 440.946154][T12520] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 440.971636][T10178] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 1e:87:cf:84:45:6d [ 441.052984][T12526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.077255][T12526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.859020][ T5937] usb 5-1: USB disconnect, device number 51 [ 441.872371][ T5937] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 442.021603][T12558] netlink: 'syz.5.1944': attribute type 29 has an invalid length. [ 442.089015][T12562] netlink: 'syz.5.1944': attribute type 29 has an invalid length. [ 442.277647][T12571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.293497][T12571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.374251][T12575] netlink: 'syz.2.1947': attribute type 8 has an invalid length. [ 442.396777][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1947'. [ 442.730703][T12596] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 442.739660][T12596] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 442.757648][ T5937] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 442.766077][T12597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1951'. [ 442.925025][ T5937] usb 3-1: Using ep0 maxpacket: 32 [ 442.938995][ T5937] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 442.948005][T12606] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1953'. [ 442.965278][ T5937] usb 3-1: config 0 has no interface number 0 [ 442.982636][ T5937] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 443.007854][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.030431][ T5937] usb 3-1: Product: syz [ 443.045565][ T5937] usb 3-1: Manufacturer: syz [ 443.050361][ T5937] usb 3-1: SerialNumber: syz [ 443.066559][ T5937] usb 3-1: config 0 descriptor?? [ 443.078016][ T5937] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 443.291903][ T5937] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 443.346592][ T5937] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 443.748329][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 443.756997][ T5937] usb 3-1: USB disconnect, device number 33 [ 443.780137][ T5937] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 443.810103][ T5937] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 443.824628][ T5937] quatech2 3-1:0.51: device disconnected [ 444.141991][T12656] netlink: 'syz.4.1961': attribute type 25 has an invalid length. [ 444.151725][T12656] netlink: 'syz.4.1961': attribute type 28 has an invalid length. [ 444.213443][T12658] comedi comedi0: Minor 48 is invalid! [ 444.342020][T12665] netlink: 'syz.2.1964': attribute type 7 has an invalid length. [ 444.367511][T12665] : entered promiscuous mode [ 444.452458][T12667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.462966][ T5831] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 444.466627][T12667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.604912][ T5831] usb 5-1: device descriptor read/64, error -71 [ 444.724926][ T5889] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 444.844825][ T5831] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 444.854894][ T5889] usb 3-1: device descriptor read/64, error -71 [ 444.974888][ T5831] usb 5-1: device descriptor read/64, error -71 [ 445.023098][T12672] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1967'. [ 445.032624][T12672] unsupported nla_type 224 [ 445.085141][ T5831] usb usb5-port1: attempt power cycle [ 445.095224][ T5889] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 445.146479][T12682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.156174][T12682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.245737][ T5889] usb 3-1: device descriptor read/64, error -71 [ 445.362746][T12689] netlink: 'syz.7.1971': attribute type 5 has an invalid length. [ 445.371008][T12689] netlink: 176 bytes leftover after parsing attributes in process `syz.7.1971'. [ 445.382163][ T5889] usb usb3-port1: attempt power cycle [ 445.444982][ T5831] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 445.465939][ T5831] usb 5-1: device descriptor read/8, error -71 [ 445.704936][ T5831] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 445.724879][ T5889] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 445.743083][ T5831] usb 5-1: device descriptor read/8, error -71 [ 445.751874][ T5889] usb 3-1: device descriptor read/8, error -71 [ 445.793213][T12691] netlink: 'syz.5.1972': attribute type 4 has an invalid length. [ 445.859425][ T5831] usb usb5-port1: unable to enumerate USB device [ 446.005071][ T5889] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 446.035866][ T5889] usb 3-1: device descriptor read/8, error -71 [ 446.156415][ T5889] usb usb3-port1: unable to enumerate USB device [ 447.467594][T12720] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1981'. [ 447.654949][ T5937] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 447.814861][ T5937] usb 5-1: Invalid ep0 maxpacket: 64 [ 447.936824][T10178] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 447.944894][ T5937] usb 5-1: new low-speed USB device number 57 using dummy_hcd [ 448.094871][ T5937] usb 5-1: Invalid ep0 maxpacket: 64 [ 448.100901][ T5937] usb usb5-port1: attempt power cycle [ 448.120311][T10178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.134847][T10178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.144680][T10178] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 448.168889][T10178] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 448.179118][T10178] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.192476][T10178] usb 3-1: config 0 descriptor?? [ 448.466392][ T5937] usb 5-1: new low-speed USB device number 58 using dummy_hcd [ 448.495815][ T5937] usb 5-1: Invalid ep0 maxpacket: 64 [ 448.627815][T10178] plantronics 0003:047F:FFFF.0016: reserved main item tag 0xd [ 448.635698][ T5937] usb 5-1: new low-speed USB device number 59 using dummy_hcd [ 448.653604][T10178] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 448.661463][ T5937] usb 5-1: Invalid ep0 maxpacket: 64 [ 448.662352][T10178] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 448.674841][T10178] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 448.676139][ T5937] usb usb5-port1: unable to enumerate USB device [ 448.682295][T10178] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 448.682329][T10178] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 448.729015][T10178] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 448.887844][T10178] usb 3-1: USB disconnect, device number 38 [ 450.709857][T12735] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 451.033706][T12823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.058861][T12823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.205150][ T5896] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 451.304241][T12834] tmpfs: Unknown parameter 'grpqukta_block_hardlimk.&' [ 451.376765][ T5896] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.397346][ T5896] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 451.422085][ T5896] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 451.440297][ T5896] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 451.453861][ T5896] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 451.472967][ T5896] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 451.483178][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.491662][ T5896] usb 3-1: Product: syz [ 451.498329][ T5896] usb 3-1: Manufacturer: syz [ 451.503005][ T5896] usb 3-1: SerialNumber: syz [ 451.524855][T12821] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 451.542018][ T5896] cdc_mbim 3-1:1.0: skipping garbage [ 451.771558][T12853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.787486][T12854] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2003'. [ 451.799011][T12853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.076057][T12864] input: syz1 as /devices/virtual/input/input39 [ 452.344931][ T5936] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 452.478130][ T507] tipc: Subscription rejected, illegal request [ 452.504970][ T5936] usb 5-1: Using ep0 maxpacket: 16 [ 452.527552][ T5936] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 452.541736][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.559275][ T5936] usb 5-1: Product: syz [ 452.563492][ T5936] usb 5-1: Manufacturer: syz [ 452.569167][ T5936] usb 5-1: SerialNumber: syz [ 452.577419][ T5936] usb 5-1: config 0 descriptor?? [ 452.598813][ T5936] as10x_usb: device has been detected [ 452.605335][ T5936] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 452.610314][ T5896] cdc_mbim 3-1:1.0: bind() failure [ 452.628869][ T5896] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 452.638432][ T5896] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 452.648037][ T5936] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 452.658873][ T5896] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 452.678393][ T5896] usb 3-1: USB disconnect, device number 39 [ 452.759524][ T5936] as10x_usb: error during firmware upload part1 [ 452.766422][ T5936] Registered device Sky IT Digital Key (green led) [ 452.794521][ T5936] usb 5-1: USB disconnect, device number 60 [ 452.858703][ T5936] Unregistered device Sky IT Digital Key (green led) [ 452.860806][ T5936] as10x_usb: device has been disconnected [ 454.714967][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 454.721119][T12878] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 455.560995][T12878] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 455.741482][T12903] mmap: syz.5.2020 (12903): VmData 37580800 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 455.811396][T12907] binder: 12906:12907 ioctl c018620b 0 returned -14 [ 455.815066][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 455.881739][T12910] random: crng reseeded on system resumption [ 455.954840][ T5936] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 455.974932][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 455.982535][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.999807][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.016512][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 456.029889][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 456.039571][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.055420][ T10] usb 3-1: config 0 descriptor?? [ 456.115844][ T5936] usb 5-1: device descriptor read/64, error -71 [ 456.190631][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 456.198200][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 456.211235][ T10] usb 3-1: USB disconnect, device number 40 [ 456.374828][ T5936] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 456.397126][T12924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.418008][T12924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.491940][T12931] netlink: 10 bytes leftover after parsing attributes in process `syz.7.2030'. [ 456.514956][ T5936] usb 5-1: device descriptor read/64, error -71 [ 456.552736][T12933] i2c i2c-0: Invalid block write size 34 [ 456.621150][T12935] vlan0: entered promiscuous mode [ 456.630247][T12935] vlan0: left promiscuous mode [ 456.639235][ T5936] usb usb5-port1: attempt power cycle [ 456.695630][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 456.794822][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 456.854944][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 456.862236][ T10] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 456.870373][ T10] usb 3-1: config 0 has no interface number 0 [ 456.876663][ T10] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 456.889533][ T10] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 456.898989][ T10] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 456.907291][ T10] usb 3-1: Product: syz [ 456.911513][ T10] usb 3-1: SerialNumber: syz [ 456.919106][ T10] usb 3-1: config 0 descriptor?? [ 456.930546][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input40 [ 456.985903][ T5936] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 457.013959][T12938] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2033'. [ 457.025166][T12938] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2033'. [ 457.035074][T12938] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2033'. [ 457.039584][ T5936] usb 5-1: device descriptor read/8, error -71 [ 457.047678][T12938] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2033'. [ 457.060691][T12938] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2033'. [ 457.070941][T12938] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2033'. [ 457.083237][T12938] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2033'. [ 457.094694][T12938] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2033'. [ 457.106850][T12938] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2033'. [ 457.129356][T12940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.145370][T12940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.164977][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 457.174776][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 457.182242][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 457.190003][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 457.197392][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 457.204629][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 457.211809][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 457.219002][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 457.226244][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 457.233485][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 457.246899][ T10] usb 3-1: USB disconnect, device number 41 [ 457.252932][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 457.268631][ T10] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 457.306512][ T5936] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 457.335790][ T5936] usb 5-1: device descriptor read/8, error -71 [ 457.351508][T12942] raw_sendmsg: syz.5.2034 forgot to set AF_INET. Fix it! [ 457.448048][ T5936] usb usb5-port1: unable to enumerate USB device [ 457.618310][T12949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.627524][T12949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.860858][T12954] netlink: 'syz.2.2039': attribute type 10 has an invalid length. [ 458.084263][T12963] afs: Unknown parameter 'seclabel' [ 458.346783][ T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 458.494923][ T10] usb 3-1: device descriptor read/64, error -71 [ 458.734905][ T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 458.865227][ T10] usb 3-1: device descriptor read/64, error -71 [ 458.975648][ T10] usb usb3-port1: attempt power cycle [ 459.315468][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 459.348882][ T10] usb 3-1: device descriptor read/8, error -71 [ 459.594936][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 459.625540][ T10] usb 3-1: device descriptor read/8, error -71 [ 459.746202][ T10] usb usb3-port1: unable to enumerate USB device [ 459.828673][T13004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.839075][T13004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.878709][T13004] 9p: Bad value for 'rfdno' [ 460.535311][ T5936] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 460.661384][T13017] netlink: 'syz.5.2058': attribute type 1 has an invalid length. [ 460.670032][T13017] netlink: 'syz.5.2058': attribute type 4 has an invalid length. [ 460.706938][ T5936] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 460.717536][T13020] sg_write: data in/out 295085/136 bytes for SCSI command 0x0-- guessing data in; [ 460.717536][T13020] program syz.7.2059 not setting count and/or reply_len properly [ 460.726495][ T5936] usb 5-1: config 0 has no interface number 0 [ 460.741306][ T5936] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 460.758541][ T5936] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 460.768230][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.776992][ T5936] usb 5-1: Product: syz [ 460.781762][ T5936] usb 5-1: Manufacturer: syz [ 460.790202][ T5936] usb 5-1: SerialNumber: syz [ 460.808487][ T5936] usb 5-1: config 0 descriptor?? [ 460.869646][T13025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.878781][T13025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.233637][ T5936] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 461.242581][ T5936] keyspan 5-1:0.133: unsupported endpoint type 0 [ 461.253139][ T5936] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 461.262157][ T5936] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 461.271563][ T5936] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 461.293425][ T5936] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 461.321158][ T5936] usb 5-1: USB disconnect, device number 65 [ 461.330461][T13039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.347324][ T5936] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 461.359018][T13039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.369810][ T5936] keyspan 5-1:0.133: device disconnected [ 461.524866][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 461.678961][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 461.697232][ T10] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 461.713303][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 461.734604][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 461.757697][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 461.776361][ T10] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 461.789886][ T5831] usb 6-1: USB disconnect, device number 106 [ 461.800736][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.830911][ T10] usb 3-1: config 0 descriptor?? [ 461.864632][ T10] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input41 [ 461.887569][T10178] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 462.005674][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 462.023569][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 462.032663][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 462.046917][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 462.056795][T10178] usb 5-1: Using ep0 maxpacket: 32 [ 462.062076][ T42] usb 3-1: USB disconnect, device number 46 [ 462.068218][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 462.076322][T10178] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 462.112515][T10178] usb 5-1: config 0 has no interface number 0 [ 462.160714][T10178] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 462.201725][T10178] usb 5-1: config 0 interface 85 has no altsetting 0 [ 462.227048][T10178] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 462.256127][T10178] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.274543][T10178] usb 5-1: Product: syz [ 462.279191][T10178] usb 5-1: Manufacturer: syz [ 462.289334][T10178] usb 5-1: SerialNumber: syz [ 462.308083][T10178] usb 5-1: config 0 descriptor?? [ 462.504000][T13049] chnl_net:caif_netlink_parms(): no params data found [ 462.674429][T13049] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.713923][T13049] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.728056][T13049] bridge_slave_0: entered allmulticast mode [ 462.738658][T13049] bridge_slave_0: entered promiscuous mode [ 462.752632][T13049] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.760458][T13049] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.767923][T13049] bridge_slave_1: entered allmulticast mode [ 462.776694][T13049] bridge_slave_1: entered promiscuous mode [ 462.870549][T10887] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.912810][T13049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.931003][T13049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.004158][T10887] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.055165][T13049] team0: Port device team_slave_0 added [ 463.067793][T13049] team0: Port device team_slave_1 added [ 463.082733][T10178] appletouch 5-1:0.85: Geyser mode initialized. [ 463.097794][T10178] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input42 [ 463.145868][T10887] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.203738][T13049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.212291][T13049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.243553][T13049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.295108][T10887] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.322832][T13049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.330334][T13049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.363158][T13049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.432869][T13047] __nla_validate_parse: 62 callbacks suppressed [ 463.432888][T13047] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2068'. [ 463.453147][T13059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2068'. [ 463.468530][T13049] hsr_slave_0: entered promiscuous mode [ 463.476678][T13049] hsr_slave_1: entered promiscuous mode [ 463.484184][T13049] debugfs: 'hsr0' already exists in 'hsr' [ 463.490527][T13049] Cannot create hsr debugfs directory [ 463.502361][T13047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.514554][T13047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.088260][T10887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.099710][T10887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.110232][T10887] bond0 (unregistering): Released all slaves [ 464.154998][ T5836] Bluetooth: hci4: command tx timeout [ 464.260109][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 464.435887][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 464.456108][ T10] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 464.477354][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.493207][ T10] usb 3-1: Product: syz [ 464.528599][ T10] usb 3-1: Manufacturer: syz [ 464.550162][ T10] usb 3-1: SerialNumber: syz [ 464.605960][ T10] usb 3-1: config 0 descriptor?? [ 464.667643][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 464.696299][ T5889] usb 5-1: USB disconnect, device number 66 [ 464.756112][ T5889] appletouch 5-1:0.85: input: appletouch disconnected [ 464.998877][T10887] hsr_slave_1: left promiscuous mode [ 465.016654][T10887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.030356][T10887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.048484][T10887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.056564][T10887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.098069][T10887] veth1_macvtap: left promiscuous mode [ 465.103828][T10887] veth0_macvtap: left promiscuous mode [ 465.110105][T10887] veth1_vlan: left promiscuous mode [ 465.464842][ T42] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 465.494501][T10887] team0 (unregistering): Port device team_slave_1 removed [ 465.524601][T10887] team0 (unregistering): Port device team_slave_0 removed [ 465.629354][ T42] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 465.638721][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.651488][ T42] usb 5-1: Product: syz [ 465.660028][ T42] usb 5-1: Manufacturer: syz [ 465.668056][ T42] usb 5-1: SerialNumber: syz [ 465.684867][ T42] usb 5-1: config 0 descriptor?? [ 465.703532][ T42] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 067 [ 465.782061][ T10] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input43 [ 465.880192][ T10] usb 3-1: USB disconnect, device number 47 [ 465.911929][T13105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.956090][T13105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.086313][ T42] (null): failure reading functionality [ 466.130546][ T42] i2c i2c-1: failure reading functionality [ 466.187356][ T42] i2c i2c-1: connected i2c-tiny-usb device [ 466.230432][ T42] usb 5-1: USB disconnect, device number 67 [ 466.246378][ T5836] Bluetooth: hci4: command tx timeout [ 466.679397][T13049] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 466.701728][T13049] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 466.718984][T13049] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 466.738248][T13049] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 466.908586][T13049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.925023][ T42] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 466.944957][T13049] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.960478][T10887] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.967802][T10887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.987554][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.994841][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.084877][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 467.093761][ T42] usb 3-1: unable to get BOS descriptor or descriptor too short [ 467.111959][ T42] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 467.122345][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.133018][ T42] usb 3-1: Product: syz [ 467.137918][ T42] usb 3-1: Manufacturer: syz [ 467.142678][ T42] usb 3-1: SerialNumber: syz [ 467.310484][T13049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.370360][ T42] usb 3-1: BAAD MICROPHONE c_chmask mismatch [ 467.433321][ T42] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 467.462531][ T42] usb 3-1: USB disconnect, device number 48 [ 467.524454][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 467.710109][T13049] veth0_vlan: entered promiscuous mode [ 467.725619][T13049] veth1_vlan: entered promiscuous mode [ 467.772599][T13049] veth0_macvtap: entered promiscuous mode [ 467.787406][T13049] veth1_macvtap: entered promiscuous mode [ 467.816329][T13049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.833558][T13049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.851695][ T1315] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.862503][ T1315] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.872974][ T1315] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.885572][ T1315] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.101825][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.144005][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.172396][T13150] autofs: Bad value for 'fd' [ 468.182571][T13150] autofs: Bad value for 'fd' [ 468.190950][T13150] autofs: Bad value for 'fd' [ 468.196956][T13150] autofs: Bad value for 'fd' [ 468.202479][T13150] autofs: Bad value for 'fd' [ 468.208516][T13150] autofs: Bad value for 'fd' [ 468.271758][ T1315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.297057][ T1315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.316617][ T5836] Bluetooth: hci4: command tx timeout [ 468.574816][ T5936] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 468.745594][ T5936] usb 5-1: Using ep0 maxpacket: 16 [ 468.754865][ T5936] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 468.764312][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.773010][ T5936] usb 5-1: Product: syz [ 468.777346][ T5936] usb 5-1: Manufacturer: syz [ 468.782015][ T5936] usb 5-1: SerialNumber: syz [ 468.844909][ T42] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 469.010187][ T5936] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 469.019009][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 469.025243][ T5936] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 469.033956][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.052375][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.076444][ T42] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 469.095422][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.105991][ T5936] usb 5-1: USB disconnect, device number 68 [ 469.160360][ T42] usb 3-1: config 0 descriptor?? [ 469.183008][ T42] hub 3-1:0.0: USB hub found [ 469.375408][ T42] hub 3-1:0.0: 1 port detected [ 469.586784][T13171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.640571][T13171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.690349][T13176] program syz.4.2092 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 469.709210][ T42] usb 3-1: USB disconnect, device number 49 [ 469.973042][T13196] 9pnet_fd: Insufficient options for proto=fd [ 470.374898][T13211] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2101'. [ 470.395318][ T5836] Bluetooth: hci4: command tx timeout [ 470.561253][T13220] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 470.699743][T13227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.718159][T13227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.754918][ T5831] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 470.821327][T13231] netlink: 'syz.2.2107': attribute type 15 has an invalid length. [ 470.834233][T13231] netlink: 'syz.2.2107': attribute type 1 has an invalid length. [ 470.843134][T13231] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2107'. [ 470.925596][T13233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.928376][ T5831] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 470.942993][ T5831] usb 6-1: config 0 has no interface number 0 [ 470.949603][ T5831] usb 6-1: config 0 interface 11 altsetting 245 endpoint 0x7 has an invalid bInterval 129, changing to 11 [ 470.961333][ T5831] usb 6-1: config 0 interface 11 altsetting 245 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 470.972712][ T5831] usb 6-1: config 0 interface 11 altsetting 245 endpoint 0x87 has invalid wMaxPacketSize 0 [ 470.982868][ T5831] usb 6-1: config 0 interface 11 has no altsetting 0 [ 470.989839][ T5831] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 471.001019][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.012510][ T5831] usb 6-1: config 0 descriptor?? [ 471.028583][ T5831] keyspan 6-1:0.11: Keyspan 2 port adapter converter detected [ 471.046879][ T5831] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 81 [ 471.055459][ T5831] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 82 [ 471.063488][ T5831] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 1 [ 471.071866][ T5831] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 2 [ 471.080795][ T5831] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 85 [ 471.089013][ T5831] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 5 [ 471.125761][ T5831] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 471.149169][ T5831] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 83 [ 471.164957][ T5831] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 84 [ 471.184902][ T5831] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 3 [ 471.193545][ T5831] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 4 [ 471.206871][ T5831] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 86 [ 471.216101][ T5831] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 6 [ 471.236497][ T5831] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 471.252709][ T5831] usb 6-1: USB disconnect, device number 107 [ 471.276865][ T5831] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 471.297564][ T5831] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 471.310250][ T5831] keyspan 6-1:0.11: device disconnected [ 471.319041][T13237] input: syz0 as /devices/virtual/input/input44 [ 471.662290][T13247] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2113'. [ 471.695125][ T5936] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 471.856610][ T5936] usb 5-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 471.895814][ T5936] usb 5-1: config 1 interface 0 has no altsetting 0 [ 471.921241][ T5936] usb 5-1: string descriptor 0 read error: -22 [ 471.932777][ T5936] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.40 [ 471.950651][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.282699][T13280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2124'. [ 472.707755][T13296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2128'. [ 472.856612][T13298] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 472.873927][T13298] QAT: Invalid ioctl 1074041889 [ 472.989569][T13300] netlink: 'syz.5.2130': attribute type 2 has an invalid length. [ 473.157901][ T5936] usbhid 5-1:1.0: can't add hid device: -71 [ 473.177366][ T5936] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 473.192312][ T5936] usb 5-1: USB disconnect, device number 69 [ 473.304903][ T5935] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 473.349770][T13314] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2135'. [ 473.444850][ T5935] usb 3-1: device descriptor read/64, error -71 [ 473.510345][T13318] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2136'. [ 473.684859][ T5935] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 473.814911][ T5935] usb 3-1: device descriptor read/64, error -71 [ 473.864908][ T5896] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 473.925076][ T5935] usb usb3-port1: attempt power cycle [ 473.995419][ T5896] usb 6-1: device descriptor read/64, error -71 [ 474.235015][ T5896] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 474.264833][ T5935] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 474.285350][ T5935] usb 3-1: device descriptor read/8, error -71 [ 474.364894][ T5896] usb 6-1: device descriptor read/64, error -71 [ 474.475133][ T5896] usb usb6-port1: attempt power cycle [ 474.524926][ T5935] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 474.545556][ T5935] usb 3-1: device descriptor read/8, error -71 [ 474.658180][ T5935] usb usb3-port1: unable to enumerate USB device [ 474.814917][ T5896] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 474.835420][ T5896] usb 6-1: device descriptor read/8, error -71 [ 475.074867][ T5896] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 475.095547][ T5896] usb 6-1: device descriptor read/8, error -71 [ 475.205859][ T5896] usb usb6-port1: unable to enumerate USB device [ 475.787090][T13338] netlink: 'syz.7.2143': attribute type 1 has an invalid length. [ 475.796741][T13338] netlink: 'syz.7.2143': attribute type 4 has an invalid length. [ 475.804554][T13338] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2143'. [ 477.008360][T13371] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2152'. [ 477.065229][ T5896] usb 6-1: new full-speed USB device number 112 using dummy_hcd [ 477.100466][T13375] openvswitch: netlink: Key type 243 is out of range max 32 [ 477.100489][T13374] openvswitch: netlink: Key type 243 is out of range max 32 [ 477.113644][T13375] libceph: resolve '4' (ret=-3): failed [ 477.123946][T13376] libceph: resolve '4' (ret=-3): failed [ 477.214855][ T5896] usb 6-1: device descriptor read/64, error -71 [ 477.274863][ T5935] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 477.364824][ T5936] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 477.424842][ T5935] usb 5-1: Using ep0 maxpacket: 16 [ 477.431454][ T5935] usb 5-1: config 251 has an invalid interface number: 202 but max is 0 [ 477.440834][ T5935] usb 5-1: config 251 has no interface number 0 [ 477.447279][ T5935] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 477.457642][ T5935] usb 5-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 477.465029][ T5896] usb 6-1: new full-speed USB device number 113 using dummy_hcd [ 477.469787][ T5935] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 477.488877][ T5935] usb 5-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 477.502046][ T5935] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.512444][ T5935] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 0 [ 477.523316][ T5936] usb 3-1: Using ep0 maxpacket: 8 [ 477.530418][ T5935] usb 5-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 477.544053][ T5935] usb 5-1: config 251 interface 202 has no altsetting 0 [ 477.552956][ T5936] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 477.563359][ T5935] usb 5-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 477.573143][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.581289][ T5935] usb 5-1: Product: syz [ 477.586019][ T5935] usb 5-1: Manufacturer: syz [ 477.590842][ T5936] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 477.600061][ T5935] usb 5-1: SerialNumber: syz [ 477.605003][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.615096][ T5896] usb 6-1: device descriptor read/64, error -71 [ 477.619962][ T5936] usb 3-1: Product: syz [ 477.628151][T13372] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 477.635250][ T5936] usb 3-1: Manufacturer: syz [ 477.642523][ T5936] usb 3-1: SerialNumber: syz [ 477.651480][ T5936] usb 3-1: config 0 descriptor?? [ 477.661358][ T5936] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 477.725675][ T5896] usb usb6-port1: attempt power cycle [ 477.868137][T13375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.882353][ T5935] cxacru 5-1:251.202: submit of read urb for cm 0x90 failed (-90) [ 477.896548][T13374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.898586][ T5935] cxacru 5-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 477.913845][ T5935] cxacru 5-1:251.202: probe with driver cxacru failed with error -22 [ 477.915517][T13375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.957237][T13374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.959237][T13375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.983159][ T5935] usb 5-1: USB disconnect, device number 70 [ 478.005112][T13375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.077502][ T5896] usb 6-1: new full-speed USB device number 114 using dummy_hcd [ 478.105531][ T5896] usb 6-1: device descriptor read/8, error -71 [ 478.344834][ T5896] usb 6-1: new full-speed USB device number 115 using dummy_hcd [ 478.367741][ T5896] usb 6-1: device descriptor read/8, error -71 [ 478.475241][ T5896] usb usb6-port1: unable to enumerate USB device [ 478.974895][ T5896] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 479.124851][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 479.134653][ T5896] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 479.144005][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.152228][ T5896] usb 5-1: Product: syz [ 479.156675][ T5896] usb 5-1: Manufacturer: syz [ 479.161566][ T5896] usb 5-1: SerialNumber: syz [ 479.171312][ T5896] usb 5-1: config 0 descriptor?? [ 479.222373][ T5936] gspca_zc3xx: reg_w_i err -71 [ 479.580446][ T5896] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 479.590476][ T5896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 479.601191][ T5896] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 479.609311][ T5896] usb 5-1: media controller created [ 479.624377][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 479.813665][ T5896] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 479.824688][ T5896] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 479.835429][ T5936] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 479.852294][T13410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2167'. [ 479.861468][ T5936] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 479.891774][ T5936] usb 3-1: USB disconnect, device number 54 [ 480.014448][ T42] usb 5-1: USB disconnect, device number 71 [ 480.068833][ T42] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 480.284855][ T5896] usb 6-1: new full-speed USB device number 116 using dummy_hcd [ 480.344825][ T5936] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 480.446946][ T5896] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 480.455313][ T5896] usb 6-1: config 0 has no interface number 0 [ 480.463535][ T5896] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 480.472932][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.481025][ T5896] usb 6-1: Product: syz [ 480.485340][ T5896] usb 6-1: Manufacturer: syz [ 480.490018][ T5896] usb 6-1: SerialNumber: syz [ 480.498961][ T5896] usb 6-1: config 0 descriptor?? [ 480.508139][ T5896] hub 6-1:0.132: bad descriptor, ignoring hub [ 480.514319][ T5896] hub 6-1:0.132: probe with driver hub failed with error -5 [ 480.515306][ T5936] usb 3-1: Using ep0 maxpacket: 32 [ 480.530427][ T5936] usb 3-1: unable to get BOS descriptor or descriptor too short [ 480.539654][ T5896] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input46 [ 480.544462][ T5936] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2031, setting to 1024 [ 480.563761][ T5936] usb 3-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 480.573340][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.581481][ T5936] usb 3-1: Product: syz [ 480.585925][ T5936] usb 3-1: Manufacturer: syz [ 480.590624][ T5936] usb 3-1: SerialNumber: syz [ 480.809353][T13421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.818491][T13421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.831815][ T5936] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 480.839228][ T5936] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 480.898188][ T5936] usb 3-1: USB disconnect, device number 55 [ 481.258709][T13424] netlink: zone id is out of range [ 481.263866][T13424] netlink: zone id is out of range [ 481.270302][T13424] netlink: zone id is out of range [ 481.275875][T13424] netlink: zone id is out of range [ 481.281068][T13424] netlink: zone id is out of range [ 481.289057][T13424] netlink: zone id is out of range [ 481.294341][T13424] netlink: zone id is out of range [ 481.299861][T13424] netlink: zone id is out of range [ 481.540984][T13437] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2177'. [ 481.722258][ T42] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 481.826271][ T5889] hid (null): global environment stack underflow [ 481.836663][ T5889] hid (null): unknown global tag 0xc [ 481.877823][ T5889] hid-generic B99E:0007:0009.0017: global environment stack underflow [ 481.886284][ T5889] hid-generic B99E:0007:0009.0017: item 0 4 1 11 parsing failed [ 481.902805][ T5889] hid-generic B99E:0007:0009.0017: probe with driver hid-generic failed with error -22 [ 481.915487][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 481.930528][ T42] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 481.952705][ T42] usb 5-1: config 179 has no interface number 0 [ 481.976318][ T42] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 482.014445][ T42] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 482.038472][ T42] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 482.063141][ T42] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 482.095586][ T42] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 482.127286][ T42] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 482.152143][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.180771][T13435] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 482.506729][ T5896] usb 6-1: USB disconnect, device number 116 [ 482.652492][ T42] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input47 [ 482.675072][ T5896] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 482.834808][ T5896] usb 6-1: device descriptor read/64, error -71 [ 483.080846][T13460] sctp: [Deprecated]: syz.7.2184 (pid 13460) Use of int in max_burst socket option deprecated. [ 483.080846][T13460] Use struct sctp_assoc_value instead [ 483.102457][ T5896] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 483.156831][T10178] usb 5-1: USB disconnect, device number 72 [ 483.156993][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 483.171147][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 483.244794][ T5896] usb 6-1: device descriptor read/64, error -71 [ 483.375366][ T5896] usb usb6-port1: attempt power cycle [ 483.715464][ T5896] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 483.748064][ T5896] usb 6-1: device descriptor read/8, error -71 [ 483.994905][ T5896] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 484.025644][ T5896] usb 6-1: device descriptor read/8, error -71 [ 484.115890][ T5889] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 484.138544][ T5896] usb usb6-port1: unable to enumerate USB device [ 484.147716][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2190'. [ 484.297641][ T5889] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.308424][ T5889] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 484.319962][ T5889] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 484.337568][ T5889] usb 5-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 484.347131][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.355691][ T5889] usb 5-1: Product: syz [ 484.360278][ T5889] usb 5-1: Manufacturer: Э [ 484.365286][ T5889] usb 5-1: SerialNumber: syz [ 484.640474][T13485] netlink: 'syz.4.2188': attribute type 22 has an invalid length. [ 484.651994][T13485] netlink: 14380 bytes leftover after parsing attributes in process `syz.4.2188'. [ 484.914867][ T24] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 485.064789][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 485.072217][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 485.081723][ T24] usb 3-1: config 33 has an invalid interface number: 92 but max is 0 [ 485.090216][ T24] usb 3-1: config 33 has no interface number 0 [ 485.099163][ T24] usb 3-1: New USB device found, idVendor=0403, idProduct=6015, bcdDevice=b7.6e [ 485.108366][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.116496][ T24] usb 3-1: Product: syz [ 485.121591][ T24] usb 3-1: Manufacturer: syz [ 485.126358][ T24] usb 3-1: SerialNumber: syz [ 485.344366][ T24] ftdi_sio 3-1:33.92: FTDI USB Serial Device converter detected [ 485.364000][ T24] ftdi_sio ttyUSB0: unknown device type: 0xb76e [ 485.378801][ T24] usb 3-1: USB disconnect, device number 56 [ 485.393477][ T24] ftdi_sio 3-1:33.92: device disconnected [ 485.655083][ T5831] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 485.814895][ T5831] usb 6-1: Using ep0 maxpacket: 32 [ 485.822099][ T5831] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.833322][ T5831] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 485.849106][ T5831] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 485.858624][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.866811][ T5831] usb 6-1: Product: syz [ 485.871066][ T5831] usb 6-1: Manufacturer: syz [ 485.876206][ T5831] usb 6-1: SerialNumber: syz [ 485.884194][ T5831] usb 6-1: config 0 descriptor?? [ 485.980533][T13491] 9p: Bad value for 'rfdno' [ 486.095118][ T5831] usb 6-1: USB disconnect, device number 121 [ 486.374909][T10178] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 486.492257][T13504] netlink: 'syz.7.2198': attribute type 2 has an invalid length. [ 486.500680][T13504] netlink: 244 bytes leftover after parsing attributes in process `syz.7.2198'. [ 486.516051][T10178] usb 3-1: device descriptor read/64, error -71 [ 486.754906][T10178] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 486.894980][T10178] usb 3-1: device descriptor read/64, error -71 [ 486.930807][ T5889] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 487.019248][T10178] usb usb3-port1: attempt power cycle [ 487.036805][ T5889] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 487.057766][ T5889] usb 5-1: USB disconnect, device number 73 [ 487.087248][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 487.374876][ T5889] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 487.382652][T10178] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 487.405540][T10178] usb 3-1: device descriptor read/8, error -71 [ 487.536034][ T5889] usb 5-1: not running at top speed; connect to a high speed hub [ 487.546006][ T5889] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 487.557324][ T5889] usb 5-1: config 1 interface 0 has no altsetting 0 [ 487.567480][ T5889] usb 5-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.40 [ 487.576801][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.585547][ T5889] usb 5-1: Product: 풪寡櫶䢻測亇鑊។磺忴괏羄䴲ꬡ騣鬵Ṍ婛 [ 487.595439][ T5889] usb 5-1: Manufacturer: 鵉⃅䢀熷⫕䆍ⶉ夁睍萔䦵摚뻅箛훖仱먐ሜ론猣뼦싊咰ⶰݥ䪿఺⋈訩䘦㼰⚄越逅䯆泑ꃘࠐ鈳臵貑ᣡ呤ᶠ徇舰钒໤㾼䅶΋틶ᣦಚ퓑ꢛ❫縂ꄄ箌᢫ [ 487.616842][ T5889] usb 5-1: SerialNumber: Т [ 487.626477][T13516] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 487.654900][T10178] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 487.678273][T10178] usb 3-1: device descriptor read/8, error -71 [ 487.800900][T13521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.810255][T13521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.815783][T10178] usb usb3-port1: unable to enumerate USB device [ 488.034823][ T42] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 488.053627][ T5889] usbhid 5-1:1.0: can't add hid device: -71 [ 488.060142][ T5889] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 488.073462][ T5889] usb 5-1: USB disconnect, device number 74 [ 488.207174][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.218909][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.229144][ T42] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 488.242643][ T42] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 488.252768][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.263313][ T42] usb 6-1: config 0 descriptor?? [ 488.480278][ T42] usbhid 6-1:0.0: can't add hid device: -71 [ 488.486421][ T42] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 488.497112][ T42] usb 6-1: USB disconnect, device number 122 [ 488.844817][ T42] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 488.994824][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 489.019574][ T42] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 489.035063][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.043273][ T42] usb 5-1: Product: syz [ 489.048028][ T42] usb 5-1: Manufacturer: syz [ 489.052958][ T42] usb 5-1: SerialNumber: syz [ 489.061405][ T42] usb 5-1: config 0 descriptor?? [ 489.187511][T13531] syz.2.2207 (13531) used obsolete PPPIOCDETACH ioctl [ 489.236038][T13533] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2208'. [ 489.291121][T13525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.302822][T13525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.376266][ T42] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 489.385912][ T42] peak_usb 5-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 489.456171][ T42] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 489.468139][ T42] usb 5-1: USB disconnect, device number 75 [ 489.504826][ T5889] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 489.634919][ T5889] usb 3-1: device descriptor read/64, error -71 [ 489.884904][ T5889] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 489.962226][T13542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2211'. [ 489.976791][T13542] loop8: detected capacity change from 0 to 8 [ 489.996772][T13542] Dev loop8: unable to read RDB block 8 [ 490.002422][T13542] loop8: unable to read partition table [ 490.009413][T13542] loop8: partition table beyond EOD, truncated [ 490.016884][T13542] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 490.026339][ T5889] usb 3-1: device descriptor read/64, error -71 [ 490.156356][ T5889] usb usb3-port1: attempt power cycle [ 490.444871][T10178] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 490.513772][ T5889] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 490.548919][ T5889] usb 3-1: device descriptor read/8, error -71 [ 490.604831][T10178] usb 6-1: Using ep0 maxpacket: 32 [ 490.611632][T10178] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 490.622962][T10178] usb 6-1: config 0 interface 0 has no altsetting 0 [ 490.629747][T10178] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 490.643683][T10178] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.655506][T10178] usb 6-1: config 0 descriptor?? [ 490.710950][T13565] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20000 [ 490.804982][ T5889] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 490.825525][ T5889] usb 3-1: device descriptor read/8, error -71 [ 490.882703][T13571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.901315][T13571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.934932][T10178] usbhid 6-1:0.0: can't add hid device: -71 [ 490.943597][ T5889] usb usb3-port1: unable to enumerate USB device [ 490.950862][T10178] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 490.965809][T10178] usb 6-1: USB disconnect, device number 123 [ 491.007745][ T24] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 491.164812][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 491.171558][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 491.179800][ T24] usb 5-1: config 0 has no interface number 0 [ 491.188939][ T24] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 491.198081][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.206253][ T24] usb 5-1: Product: syz [ 491.210457][ T24] usb 5-1: Manufacturer: syz [ 491.215133][ T24] usb 5-1: SerialNumber: syz [ 491.222014][ T24] usb 5-1: config 0 descriptor?? [ 491.232325][ T24] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 491.241461][ T24] usb 5-1: selecting invalid altsetting 1 [ 491.248207][ T24] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 491.258443][ T24] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 491.269495][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 491.280750][ T24] usb 5-1: media controller created [ 491.297953][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 491.316486][T10178] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 491.474847][T10178] usb 6-1: Using ep0 maxpacket: 8 [ 491.486329][T10178] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 491.496099][T10178] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.504175][T10178] usb 6-1: Product: syz [ 491.508618][T10178] usb 6-1: Manufacturer: syz [ 491.513295][T10178] usb 6-1: SerialNumber: syz [ 491.521232][T10178] usb 6-1: config 0 descriptor?? [ 491.729972][T10178] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 492.150442][T10178] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 492.177373][T10178] usb 6-1: USB disconnect, device number 124 [ 492.380446][T13584] dvmrp0: entered allmulticast mode [ 492.397344][ T24] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 492.409473][ T24] zl10353_read_register: readreg error (reg=127, ret==-110) [ 492.427705][ T24] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 492.497431][ T24] usb 5-1: USB disconnect, device number 76 [ 492.692026][T13589] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2224'. [ 492.774846][ T5935] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 492.928822][ T5935] usb 3-1: no configurations [ 492.948878][ T5935] usb 3-1: can't read configurations, error -22 [ 492.949264][T13596] program syz.7.2226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 493.095844][ T5935] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 493.118773][T13604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.205180][T10178] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 493.268035][ T5935] usb 3-1: no configurations [ 493.274293][ T5935] usb 3-1: can't read configurations, error -22 [ 493.289986][ T5935] usb usb3-port1: attempt power cycle [ 493.354926][T10178] usb 6-1: Using ep0 maxpacket: 32 [ 493.368299][T10178] usb 6-1: config index 0 descriptor too short (expected 164, got 36) [ 493.383991][T10178] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.395547][T10178] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.411222][T10178] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 493.422255][T10178] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.442836][T10178] usb 6-1: config 0 descriptor?? [ 493.534827][ T42] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 493.636431][ T5935] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 493.667515][ T5935] usb 3-1: no configurations [ 493.676673][ T5935] usb 3-1: can't read configurations, error -22 [ 493.697260][ T42] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 493.714832][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.728881][ T42] usb 5-1: config 0 descriptor?? [ 493.748915][ T42] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 493.824879][ T5935] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 493.848673][ T5935] usb 3-1: no configurations [ 493.864765][ T5935] usb 3-1: can't read configurations, error -22 [ 493.867318][T10178] logitech 0003:046D:C29C.0018: unknown main item tag 0x0 [ 493.873979][ T5935] usb usb3-port1: unable to enumerate USB device [ 493.890481][T10178] logitech 0003:046D:C29C.0018: unknown main item tag 0x0 [ 493.898494][T10178] logitech 0003:046D:C29C.0018: unknown main item tag 0x0 [ 493.906179][T10178] logitech 0003:046D:C29C.0018: unknown main item tag 0x0 [ 493.913622][T10178] logitech 0003:046D:C29C.0018: unknown main item tag 0x0 [ 493.935957][T10178] logitech 0003:046D:C29C.0018: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0 [ 494.186707][T10178] logitech 0003:046D:C29C.0018: no inputs found [ 494.213322][T10178] usb 6-1: USB disconnect, device number 125 [ 494.363239][T13607] tmpfs: Unknown parameter 'grpquota_blocc_hardlimit' [ 494.373924][T13607] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2230'. [ 494.386653][ T42] gspca_sunplus: reg_w_riv err -71 [ 494.399141][ T42] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 494.412308][ T42] usb 5-1: USB disconnect, device number 77 [ 494.754837][T13616] 9p: Bad value for 'rfdno' [ 494.885003][T13621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2235'. [ 495.250896][T13635] overlay: Unknown parameter 'uid' [ 495.504883][ T5935] usb 5-1: new low-speed USB device number 78 using dummy_hcd [ 495.645481][ T5935] usb 5-1: device descriptor read/64, error -71 [ 495.841558][T13655] netlink: 'syz.5.2244': attribute type 4 has an invalid length. [ 495.884980][ T5935] usb 5-1: new low-speed USB device number 79 using dummy_hcd [ 495.933375][T13658] 9pnet_fd: p9_fd_create_unix (13658): problem connecting socket: ./file0: -111 [ 496.017392][ T5935] usb 5-1: device descriptor read/64, error -71 [ 496.091369][T13661] kvm: kvm [13659]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x6 [ 496.126758][ T5935] usb usb5-port1: attempt power cycle [ 496.464825][ T5935] usb 5-1: new low-speed USB device number 80 using dummy_hcd [ 496.485463][ T5935] usb 5-1: device descriptor read/8, error -71 [ 496.725770][ T5935] usb 5-1: new low-speed USB device number 81 using dummy_hcd [ 496.745571][ T5935] usb 5-1: device descriptor read/8, error -71 [ 496.855278][ T5935] usb usb5-port1: unable to enumerate USB device [ 496.989422][T13669] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2250'. [ 497.010278][T13669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2250'. [ 497.038542][T10178] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 497.198280][T10178] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 497.208077][T10178] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.216959][T10178] usb 6-1: Product: syz [ 497.221183][T10178] usb 6-1: Manufacturer: syz [ 497.225922][T10178] usb 6-1: SerialNumber: syz [ 497.264936][ T5896] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 497.414898][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 497.422674][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.436994][ T5896] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 497.446876][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.458026][ T5896] usb 3-1: Product: syz [ 497.462289][ T5896] usb 3-1: Manufacturer: syz [ 497.467161][ T5896] usb 3-1: SerialNumber: syz [ 497.479031][ T5896] usb 3-1: config 0 descriptor?? [ 497.488996][ T5896] usb 3-1: selecting invalid altsetting 1 [ 497.494909][ T5896] usb 3-1: Can not set alternate setting to 1, error: -22 [ 497.502200][ T5896] synaptics_usb 3-1:0.0: probe with driver synaptics_usb failed with error -22 [ 497.677633][T10178] net_ratelimit: 335 callbacks suppressed [ 497.677660][T10178] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 497.697555][T10178] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 497.717729][ T5935] usb 3-1: USB disconnect, device number 69 [ 498.496151][T13688] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 498.503796][T13688] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 498.510045][T13688] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 498.520179][T13688] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 498.713905][T13697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2259'. [ 498.761029][ T5836] block nbd1: Receive control failed (result -107) [ 499.091930][T13713] syzkaller1: entered promiscuous mode [ 499.109105][T13713] syzkaller1: entered allmulticast mode [ 499.514901][ T5896] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 499.540978][T10178] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO [ 499.554052][T10178] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 499.567519][T10178] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 499.579414][T10178] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 499.592933][T10178] usb 6-1: USB disconnect, device number 126 [ 499.664808][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 499.673847][ T5896] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 499.683764][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.694513][ T5896] usb 5-1: Product: syz [ 499.698990][ T5896] usb 5-1: Manufacturer: syz [ 499.703745][ T5896] usb 5-1: SerialNumber: syz [ 499.710694][ T5896] usb 5-1: config 0 descriptor?? [ 499.917987][ T5896] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 500.023759][ T29] audit: type=1326 audit(1773655084.224:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.2.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623919c799 code=0x7ffc0000 [ 500.047317][ T29] audit: type=1326 audit(1773655084.224:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.2.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623919c799 code=0x7ffc0000 [ 500.072685][ T29] audit: type=1326 audit(1773655084.254:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.2.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623919c799 code=0x7ffc0000 [ 500.096731][ T29] audit: type=1326 audit(1773655084.254:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.2.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623919c799 code=0x7ffc0000 [ 500.127596][ T29] audit: type=1326 audit(1773655084.254:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.2.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f623919c799 code=0x7ffc0000 [ 500.150836][T13733] netlink: 'syz.2.2268': attribute type 3 has an invalid length. [ 500.191219][ T29] audit: type=1326 audit(1773655084.254:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.2.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623919c799 code=0x7ffc0000 [ 500.215994][ T5896] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 500.218763][ T29] audit: type=1326 audit(1773655084.254:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.2.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623919c799 code=0x7ffc0000 [ 500.256913][ T29] audit: type=1326 audit(1773655084.254:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.2.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623919c799 code=0x7ffc0000 [ 500.283975][ T29] audit: type=1326 audit(1773655084.254:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.2.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623919c799 code=0x7ffc0000 [ 500.306804][ T29] audit: type=1326 audit(1773655084.274:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.2.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f623919c799 code=0x7ffc0000 [ 500.343130][ T5896] usb 5-1: USB disconnect, device number 82 [ 500.402509][T13736] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2269'. [ 500.418398][T13742] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 500.426104][T13737] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2269'. [ 500.437847][T13736] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2269'. [ 500.557974][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 500.564149][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 500.904978][ T5896] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 500.925315][ T5831] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 501.058586][T13771] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 501.078873][ T5896] usb 3-1: unable to get BOS descriptor or descriptor too short [ 501.088671][ T5896] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 501.101008][ T5831] usb 6-1: Using ep0 maxpacket: 32 [ 501.106228][ T5896] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 501.119227][ T5831] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 501.129865][ T5896] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 501.142800][ T5831] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 501.158216][ T5831] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 501.170633][ T5896] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 501.182203][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.190587][ T5831] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 501.207270][ T5896] usb 3-1: Product: syz [ 501.211538][ T5896] usb 3-1: Manufacturer: syz [ 501.216567][ T5896] usb 3-1: SerialNumber: syz [ 501.223661][ T5831] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 501.237910][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.248794][T13774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2278'. [ 501.257973][ T5831] usb 6-1: Product: syz [ 501.264315][ T5831] usb 6-1: Manufacturer: syz [ 501.274429][ T5896] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 501.281390][ T5831] usb 6-1: SerialNumber: syz [ 501.299526][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 501.320460][ T5831] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input48 [ 501.448561][ T5896] usb 3-1: unit 13 not found! [ 501.515313][ T5831] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 501.529388][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.558396][ T5831] (id 0x00) [ 501.566530][ T5896] usb 3-1: USB disconnect, device number 70 [ 501.658146][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 501.706183][ T5831] rc_core: IR keymap rc-imon-pad not found [ 501.718209][ T5831] Registered IR keymap rc-empty [ 501.723246][ T5831] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 501.734423][ T5831] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 501.784490][ T5831] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 501.796642][T13787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.811018][ T5831] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input49 [ 501.814319][T13787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.840003][T13787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.868130][T13787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.887302][ T5831] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:127> initialized [ 501.915896][ T5831] usb 6-1: USB disconnect, device number 127 [ 502.024930][ T5935] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 502.638488][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 502.645015][ T24] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 502.800147][ T24] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 502.829023][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 502.847050][ T24] usb 3-1: string descriptor 0 read error: -22 [ 502.853713][ T24] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 502.878430][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.883586][T13814] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2289'. [ 503.234824][ T5896] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 503.317290][T13803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.326294][T13803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.341380][ T24] lenovo 0003:17EF:6047.0019: unknown main item tag 0x0 [ 503.348991][ T24] lenovo 0003:17EF:6047.0019: unknown main item tag 0x0 [ 503.356924][ T5935] usb 5-1: device descriptor read/64, error -71 [ 503.363278][ T24] lenovo 0003:17EF:6047.0019: unknown main item tag 0x0 [ 503.371039][ T24] lenovo 0003:17EF:6047.0019: unknown main item tag 0x0 [ 503.379343][ T24] lenovo 0003:17EF:6047.0019: unknown main item tag 0x0 [ 503.386714][ T24] lenovo 0003:17EF:6047.0019: unknown main item tag 0x0 [ 503.393775][ T24] lenovo 0003:17EF:6047.0019: unknown main item tag 0x0 [ 503.401253][ T24] lenovo 0003:17EF:6047.0019: unknown main item tag 0x0 [ 503.408504][ T24] lenovo 0003:17EF:6047.0019: unknown main item tag 0x0 [ 503.414898][ T5896] usb 6-1: Using ep0 maxpacket: 8 [ 503.416133][ T24] lenovo 0003:17EF:6047.0019: unknown main item tag 0x0 [ 503.429104][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 503.440788][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 503.451482][ T5896] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 503.461748][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 503.473403][ T5896] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 503.484169][ T5896] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 503.494254][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.507088][ T5896] usb 6-1: config 0 descriptor?? [ 503.522849][T13819] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 503.547752][ T24] lenovo 0003:17EF:6047.0019: hidraw0: USB HID v0.01 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 503.587122][ T24] lenovo 0003:17EF:6047.0019: Failed to switch F7/9/11 mode: -71 [ 503.599437][ T24] lenovo 0003:17EF:6047.0019: Failed to switch middle button: -71 [ 503.608285][ T5935] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 503.621095][ T24] lenovo 0003:17EF:6047.0019: Fn-lock setting failed: -71 [ 503.630323][ T24] lenovo 0003:17EF:6047.0019: Sensitivity setting failed: -71 [ 503.646671][ T24] usb 3-1: USB disconnect, device number 71 [ 503.682399][T13824] fido_id[13824]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 503.775058][ T5935] usb 5-1: Using ep0 maxpacket: 32 [ 503.789032][ T5935] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 503.800039][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.808989][ T5935] usb 5-1: Product: syz [ 503.813216][ T5935] usb 5-1: Manufacturer: syz [ 503.819338][ T5935] usb 5-1: SerialNumber: syz [ 503.831618][ T5935] usb 5-1: config 0 descriptor?? [ 503.859212][ T5935] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 503.883956][ T5935] dvb-usb: bulk message failed: -22 (4/0) [ 503.894854][ T5935] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 503.906160][ T5935] dvb-usb: bulk message failed: -22 (5/0) [ 503.911932][ T5935] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 503.927553][ T5935] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 503.938656][ T5935] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 503.947067][ T5935] usb 5-1: media controller created [ 503.971266][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 504.010165][ T5935] usb 5-1: selecting invalid altsetting 3 [ 504.016615][ T5935] ttusb2: set interface to alts=3 failed [ 504.041982][ T5831] usb 6-1: USB disconnect, device number 2 [ 504.055153][ T5839] Bluetooth: hci3: Opcode 0x0c03 failed: -19 [ 504.080069][ T5935] DVB: Unable to find symbol tda10086_attach() [ 504.088084][ T5935] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 504.098619][ T5935] dvb-usb: bulk message failed: -22 (4/0) [ 504.114763][ T5935] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 504.135753][ T5935] dvb-usb: bulk message failed: -22 (5/0) [ 504.146542][ T5935] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 504.159568][ T5935] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 504.172867][T13832] CIFS: VFS: Malformed UNC in devname [ 504.192216][ T5935] usb 5-1: USB disconnect, device number 84 [ 504.335165][ T5935] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 504.411750][ T24] IPVS: starting estimator thread 0... [ 504.488732][T13842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2298'. [ 504.505019][T13840] IPVS: using max 27 ests per chain, 64800 per kthread [ 504.719513][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 504.735093][ T5831] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 504.902732][T13860] netlink: 'syz.5.2304': attribute type 33 has an invalid length. [ 504.911176][T13860] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2304'. [ 504.922348][ T5831] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 504.939387][ T5831] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 504.965517][ T5831] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 504.985748][ T5831] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 505.013205][ T5831] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 505.026178][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.052249][ T5831] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 505.066054][ T5831] usb 3-1: invalid MIDI out EP 0 [ 505.251736][ T5831] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 505.270450][ T5831] usb 3-1: USB disconnect, device number 72 [ 506.092561][T13890] vivid-004: disconnect [ 506.097417][T13890] vivid-004: reconnect [ 507.124875][ T5831] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 507.254850][ T5831] usb 3-1: device descriptor read/64, error -71 [ 507.494910][ T5831] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 507.624845][ T5831] usb 3-1: device descriptor read/64, error -71 [ 507.745336][ T5831] usb usb3-port1: attempt power cycle [ 507.804367][T13923] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2321'. [ 508.084985][ T5831] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 508.107680][ T5831] usb 3-1: device descriptor read/8, error -71 [ 508.344950][ T5831] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 508.365460][ T5831] usb 3-1: device descriptor read/8, error -71 [ 508.487686][ T5831] usb usb3-port1: unable to enumerate USB device [ 509.174551][T13959] trusted_key: encrypted_key: keylen parameter is missing [ 509.183456][T13959] trusted_key: encrypted_key: keylen parameter is missing [ 509.194943][ T5831] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 509.273865][T13963] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2332'. [ 509.364996][ T5831] usb 5-1: Using ep0 maxpacket: 8 [ 509.373376][ T5831] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.383992][ T5831] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 509.393568][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.408113][ T5831] usb 5-1: config 0 descriptor?? [ 509.414591][T13965] binder: 13964:13965 ioctl 4018620d 0 returned -22 [ 509.428844][ T5831] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 509.656647][ T5889] usb 5-1: USB disconnect, device number 85 [ 509.714858][ T5831] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 509.844840][ T5831] usb 6-1: device descriptor read/64, error -71 [ 510.084887][ T5831] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 510.218244][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 510.218265][ T29] audit: type=1326 audit(1773655094.424:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13982 comm="syz.7.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05bf59c799 code=0x7fc00000 [ 510.232023][ T5831] usb 6-1: device descriptor read/64, error -71 [ 510.386334][ T5831] usb usb6-port1: attempt power cycle [ 510.734942][ T5831] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 510.755307][ T5831] usb 6-1: device descriptor read/8, error -71 [ 510.994848][ T5831] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 511.016509][ T5831] usb 6-1: device descriptor read/8, error -71 [ 511.104863][ T24] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 511.126116][ T5831] usb usb6-port1: unable to enumerate USB device [ 511.256573][ T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 511.265822][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.281990][ T24] usb 3-1: config 0 descriptor?? [ 511.291134][ T24] cp210x 3-1:0.0: cp210x converter detected [ 511.454920][ T5831] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 511.604829][ T5831] usb 5-1: Using ep0 maxpacket: 16 [ 511.615901][ T5831] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 511.625291][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.633341][ T5831] usb 5-1: Product: syz [ 511.637640][ T5831] usb 5-1: Manufacturer: syz [ 511.642271][ T5831] usb 5-1: SerialNumber: syz [ 511.650211][ T5831] usb 5-1: config 0 descriptor?? [ 511.658691][ T5831] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 511.702181][ T24] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 511.711577][ T24] cp210x 3-1:0.0: GPIO initialisation failed: -524 [ 511.740208][ T24] usb 3-1: cp210x converter now attached to ttyUSB0 [ 511.859575][T14017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.869851][T14017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.976191][ T24] usb 3-1: USB disconnect, device number 77 [ 511.989315][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 511.997724][ T24] cp210x 3-1:0.0: device disconnected [ 512.355043][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 512.484808][ T24] usb 6-1: device descriptor read/64, error -71 [ 512.735028][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 513.406961][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 513.422482][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 513.438425][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 513.452620][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 513.464364][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 513.751053][T14044] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2357'. [ 514.081546][T14038] chnl_net:caif_netlink_parms(): no params data found [ 514.154450][ T8822] bridge0: port 3(syz_tun) entered disabled state [ 514.210074][ T8822] syz_tun (unregistering): left allmulticast mode [ 514.221463][ T8822] syz_tun (unregistering): left promiscuous mode [ 514.236903][ T8822] bridge0: port 3(syz_tun) entered disabled state [ 514.504934][T14038] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.515755][T14038] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.523450][T14038] bridge_slave_0: entered allmulticast mode [ 514.547171][T14038] bridge_slave_0: entered promiscuous mode [ 514.557493][T14038] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.566486][T14038] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.579542][T14038] bridge_slave_1: entered allmulticast mode [ 514.601233][T14038] bridge_slave_1: entered promiscuous mode [ 514.717921][T14038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.746799][T14038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.804996][T14038] team0: Port device team_slave_0 added [ 514.819561][T14038] team0: Port device team_slave_1 added [ 514.835194][T14064] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2362'. [ 514.875990][T14038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.886149][T14038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.915367][T14038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.933389][T14038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.940484][T14038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.967314][T14038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.064912][T14038] hsr_slave_0: entered promiscuous mode [ 515.072079][T14038] hsr_slave_1: entered promiscuous mode [ 515.198509][ T24] usb 6-1: device descriptor read/64, error -71 [ 515.315339][ T24] usb usb6-port1: attempt power cycle [ 515.393367][T14038] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.525231][ T5836] Bluetooth: hci3: command tx timeout [ 515.559231][T14038] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.660278][T14038] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.694968][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 515.735456][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 515.746778][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.764746][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.784735][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 515.791760][T14038] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.812227][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 515.834860][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.863654][ T24] usb 6-1: config 0 descriptor?? [ 516.109671][T14038] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 516.122726][T14038] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 516.137312][T14038] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 516.170951][T14038] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 516.280915][ T24] microsoft 0003:045E:07DA.001A: ignoring exceeding usage max [ 516.320425][ T24] HID 045e:07da: Invalid code 50536 type 1 [ 516.333895][ T24] HID 045e:07da: Invalid code 50537 type 1 [ 516.354863][ T24] HID 045e:07da: Invalid code 50538 type 1 [ 516.361336][ T24] HID 045e:07da: Invalid code 50539 type 1 [ 516.374759][ T24] HID 045e:07da: Invalid code 50540 type 1 [ 516.383644][T14038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.387735][ T24] HID 045e:07da: Invalid code 50541 type 1 [ 516.405060][ T24] HID 045e:07da: Invalid code 50542 type 1 [ 516.410926][ T24] HID 045e:07da: Invalid code 50543 type 1 [ 516.434760][ T24] HID 045e:07da: Invalid code 50544 type 1 [ 516.439337][T14038] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.440727][ T24] HID 045e:07da: Invalid code 50545 type 1 [ 516.468318][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.475608][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.519019][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.526314][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.549567][ T24] microsoft 0003:045E:07DA.001A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 516.586609][ T24] microsoft 0003:045E:07DA.001A: no inputs found [ 516.602307][ T24] microsoft 0003:045E:07DA.001A: could not initialize ff, continuing anyway [ 516.642448][ T24] usb 6-1: USB disconnect, device number 9 [ 516.724072][T14077] fido_id[14077]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 516.890128][ T24] usb 5-1: USB disconnect, device number 86 [ 517.051178][T14038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.277052][T14038] veth0_vlan: entered promiscuous mode [ 517.326532][T14038] veth1_vlan: entered promiscuous mode [ 517.383606][T14091] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.2367'. [ 517.504227][T14038] veth0_macvtap: entered promiscuous mode [ 517.560788][T14038] veth1_macvtap: entered promiscuous mode [ 517.594950][ T5836] Bluetooth: hci3: command tx timeout [ 517.659180][T14038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.688099][T14097] loop6: detected capacity change from 0 to 8 [ 517.727446][T14038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.820262][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.850133][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.884494][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.917368][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.195127][T14097] Dev loop6: unable to read RDB block 8 [ 518.215999][T14101] [ 518.218384][T14101] ====================================================== [ 518.225430][T14101] WARNING: possible circular locking dependency detected [ 518.232493][T14101] syzkaller #0 Tainted: G L [ 518.238503][T14101] ------------------------------------------------------ [ 518.245550][T14101] syz.5.2369/14101 is trying to acquire lock: [ 518.251640][T14101] ffff88801bed5210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 518.261968][T14101] [ 518.261968][T14101] but task is already holding lock: [ 518.269367][T14101] ffff8880272f8060 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 518.279201][T14101] [ 518.279201][T14101] which lock already depends on the new lock. [ 518.279201][T14101] [ 518.283885][T14038] ieee80211 phy35: Selected rate control algorithm 'minstrel_ht' [ 518.289631][T14101] [ 518.289631][T14101] the existing dependency chain (in reverse order) is: [ 518.289643][T14101] [ 518.289643][T14101] -> #2 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 518.315039][T14101] blk_alloc_queue+0x546/0x680 [ 518.320374][T14101] __blk_mq_alloc_disk+0x197/0x390 [ 518.326065][T14101] loop_add+0x482/0xb40 [ 518.330789][T14101] loop_init+0xd9/0x170 [ 518.335629][T14101] do_one_initcall+0x250/0x8d0 [ 518.340965][T14101] do_initcall_level+0x104/0x190 [ 518.346503][T14101] do_initcalls+0x59/0xa0 [ 518.351396][T14101] kernel_init_freeable+0x2a6/0x3e0 [ 518.357154][T14101] kernel_init+0x1d/0x1d0 [ 518.362112][T14101] ret_from_fork+0x51e/0xb90 [ 518.367273][T14101] ret_from_fork_asm+0x1a/0x30 [ 518.372596][T14101] [ 518.372596][T14101] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 518.379859][T14101] fs_reclaim_acquire+0x71/0x100 [ 518.385359][T14101] kmem_cache_alloc_noprof+0x40/0x650 [ 518.388918][T14097] loop6: unable to read partition table [ 518.391284][T14101] __kernfs_iattrs+0xdf/0x320 [ 518.402162][T14101] kernfs_iop_setattr+0xea/0x3f0 [ 518.407656][T14101] notify_change+0xc1a/0xf40 [ 518.412815][T14101] do_truncate+0x1c2/0x250 [ 518.417788][T14101] path_openat+0x2f89/0x3860 [ 518.422923][T14101] do_file_open+0x23e/0x4a0 [ 518.427975][T14101] do_sys_openat2+0x113/0x200 [ 518.433210][T14101] __x64_sys_openat+0x138/0x170 [ 518.438611][T14101] do_syscall_64+0x14d/0xf80 [ 518.443748][T14101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.450182][T14101] [ 518.450182][T14101] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 518.458733][T14101] __lock_acquire+0x15a5/0x2cf0 [ 518.464160][T14101] lock_acquire+0xf0/0x2e0 [ 518.469133][T14101] down_read+0x47/0x2e0 [ 518.473832][T14101] kernfs_iop_getattr+0x9e/0x450 [ 518.479318][T14101] vfs_getattr_nosec+0x2e1/0x430 [ 518.484808][T14101] loop_assign_backing_file+0x27a/0x4b0 [ 518.490892][T14101] lo_ioctl+0x1acb/0x1fb0 [ 518.495770][T14101] blkdev_ioctl+0x5e3/0x740 [ 518.500826][T14101] __se_sys_ioctl+0xfc/0x170 [ 518.505956][T14101] do_syscall_64+0x14d/0xf80 [ 518.511088][T14101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.517561][T14101] [ 518.517561][T14101] other info that might help us debug this: [ 518.517561][T14101] [ 518.527807][T14101] Chain exists of: [ 518.527807][T14101] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#23 [ 518.527807][T14101] [ 518.542268][T14101] Possible unsafe locking scenario: [ 518.542268][T14101] [ 518.549732][T14101] CPU0 CPU1 [ 518.555111][T14101] ---- ---- [ 518.560486][T14101] lock(&q->q_usage_counter(io)#23); [ 518.565886][T14101] lock(fs_reclaim); [ 518.572401][T14101] lock(&q->q_usage_counter(io)#23); [ 518.580342][T14101] rlock(&root->kernfs_iattr_rwsem); [ 518.585731][T14101] [ 518.585731][T14101] *** DEADLOCK *** [ 518.585731][T14101] [ 518.593888][T14101] 3 locks held by syz.5.2369/14101: [ 518.599095][T14101] #0: ffff8880274bb430 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x14c7/0x1fb0 [ 518.608196][T14101] #1: ffff8880272f8060 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 518.618412][T14101] #2: ffff8880272f8098 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 518.628804][T14101] [ 518.628804][T14101] stack backtrace: [ 518.634728][T14101] CPU: 0 UID: 0 PID: 14101 Comm: syz.5.2369 Tainted: G L syzkaller #0 PREEMPT(full) [ 518.634759][T14101] Tainted: [L]=SOFTLOCKUP [ 518.634769][T14101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 518.634792][T14101] Call Trace: [ 518.634801][T14101] [ 518.634809][T14101] dump_stack_lvl+0xe8/0x150 [ 518.634842][T14101] print_circular_bug+0x2e1/0x300 [ 518.634865][T14101] check_noncircular+0x12e/0x150 [ 518.634887][T14101] __lock_acquire+0x15a5/0x2cf0 [ 518.634923][T14101] lock_acquire+0xf0/0x2e0 [ 518.634949][T14101] ? kernfs_iop_getattr+0x9e/0x450 [ 518.634976][T14101] down_read+0x47/0x2e0 [ 518.635001][T14101] ? kernfs_iop_getattr+0x9e/0x450 [ 518.635025][T14101] kernfs_iop_getattr+0x9e/0x450 [ 518.635049][T14101] vfs_getattr_nosec+0x2e1/0x430 [ 518.635073][T14101] loop_assign_backing_file+0x27a/0x4b0 [ 518.635092][T14101] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 518.635122][T14101] lo_ioctl+0x1acb/0x1fb0 [ 518.635153][T14101] ? __pfx_lo_ioctl+0x10/0x10 [ 518.635179][T14101] ? __lock_acquire+0x6b5/0x2cf0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 518.635208][T14101] ? css_rstat_updated+0x23a/0x530 [ 518.635234][T14101] ? __lock_acquire+0x6b5/0x2cf0 [ 518.635262][T14101] ? __lock_acquire+0x6b5/0x2cf0 [ 518.635290][T14101] ? __lock_acquire+0x6b5/0x2cf0 [ 518.635317][T14101] ? __lock_acquire+0x6b5/0x2cf0 [ 518.635345][T14101] ? __lock_acquire+0x6b5/0x2cf0 [ 518.635372][T14101] ? __lock_acquire+0x6b5/0x2cf0 [ 518.635401][T14101] ? unwind_next_frame+0xa5/0x23c0 [ 518.635425][T14101] ? is_bpf_text_address+0x26/0x2b0 [ 518.635452][T14101] ? is_bpf_text_address+0x292/0x2b0 [ 518.635475][T14101] ? is_bpf_text_address+0x26/0x2b0 [ 518.635501][T14101] ? kernel_text_address+0xa5/0xe0 [ 518.635524][T14101] ? __kernel_text_address+0xd/0x30 [ 518.635545][T14101] ? unwind_get_return_address+0x4d/0x90 [ 518.635562][T14101] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 518.635585][T14101] ? arch_stack_walk+0xfb/0x150 [ 518.635606][T14101] ? stack_trace_save+0xa9/0x100 [ 518.635627][T14101] ? __pfx_stack_trace_save+0x10/0x10 [ 518.635647][T14101] ? kasan_save_free_info+0x46/0x50 [ 518.635671][T14101] ? stack_depot_save_flags+0x33/0x810 [ 518.635690][T14101] ? format_decode+0x90/0xe10 [ 518.635774][T14101] ? kasan_save_track+0x4f/0x80 [ 518.635800][T14101] ? kasan_save_track+0x3e/0x80 [ 518.635825][T14101] ? kasan_save_free_info+0x46/0x50 [ 518.635846][T14101] ? __kasan_slab_free+0x5c/0x80 [ 518.635861][T14101] ? kfree+0x1c5/0x650 [ 518.635884][T14101] ? tomoyo_path_number_perm+0x501/0x630 [ 518.635906][T14101] ? security_file_ioctl+0xc3/0x2a0 [ 518.635925][T14101] ? __se_sys_ioctl+0x47/0x170 [ 518.635941][T14101] ? do_syscall_64+0x14d/0xf80 [ 518.635956][T14101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.635977][T14101] ? __asan_memset+0x22/0x50 [ 518.636008][T14101] ? blk_get_meta_cap+0x16d/0x7a0 [ 518.636036][T14101] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 518.636064][T14101] ? blkdev_common_ioctl+0x14b7/0x3250 [ 518.636095][T14101] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 518.636123][T14101] ? kasan_quarantine_put+0xbb/0x1f0 [ 518.636153][T14101] ? tomoyo_path_number_perm+0x219/0x630 [ 518.636176][T14101] ? tomoyo_path_number_perm+0x219/0x630 [ 518.636199][T14101] ? do_vfs_ioctl+0x1166/0x1530 [ 518.636217][T14101] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 518.636239][T14101] ? do_futex+0x333/0x420 [ 518.636261][T14101] ? __pfx_lo_ioctl+0x10/0x10 [ 518.636288][T14101] blkdev_ioctl+0x5e3/0x740 [ 518.636316][T14101] ? __pfx_blkdev_ioctl+0x10/0x10 [ 518.636343][T14101] ? __fget_files+0x2a/0x420 [ 518.636367][T14101] ? bpf_lsm_file_ioctl+0x9/0x20 [ 518.636385][T14101] ? __pfx_blkdev_ioctl+0x10/0x10 [ 518.636411][T14101] __se_sys_ioctl+0xfc/0x170 [ 518.636429][T14101] do_syscall_64+0x14d/0xf80 [ 518.636444][T14101] ? trace_irq_disable+0x3b/0x150 [ 518.636466][T14101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.636484][T14101] ? clear_bhb_loop+0x40/0x90 [ 518.636506][T14101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.636528][T14101] RIP: 0033:0x7fe31ef9c799 [ 518.636547][T14101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.636564][T14101] RSP: 002b:00007fe31fef7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 518.636583][T14101] RAX: ffffffffffffffda RBX: 00007fe31f216090 RCX: 00007fe31ef9c799 [ 518.636597][T14101] RDX: 0000000000000009 RSI: 0000000000004c06 RDI: 0000000000000008 [ 518.636609][T14101] RBP: 00007fe31f032c99 R08: 0000000000000000 R09: 0000000000000000 [ 518.636621][T14101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.636632][T14101] R13: 00007fe31f216128 R14: 00007fe31f216090 R15: 00007fff1a166188 [ 518.636653][T14101] [ 518.650727][T14097] loop6: partition table beyond EOD, [ 518.718404][T10885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.738933][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.791225][T10885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.841503][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.901413][T14097] truncated [ 519.192650][T14097] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 519.407647][ T5850] Dev loop6: unable to read RDB block 8 [ 519.425181][ T5850] loop6: unable to read partition table [ 519.431046][ T5850] loop6: partition table beyond EOD, truncated [ 519.609161][T14101] Dev loop6: unable to read RDB block 8 [ 519.642398][T14101] loop6: unable to read partition table [ 519.658579][T14101] loop6: partition table beyond EOD, truncated [ 519.676929][T14101] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 520.740942][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.800783][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.860597][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.910118][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.990040][ T35] bridge_slave_1: left allmulticast mode [ 520.997843][ T35] bridge_slave_1: left promiscuous mode [ 521.003574][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.012322][ T35] bridge_slave_0: left allmulticast mode [ 521.019612][ T35] bridge_slave_0: left promiscuous mode [ 521.025414][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.131634][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.142073][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.151877][ T35] bond0 (unregistering): Released all slaves [ 521.383376][ T35] hsr_slave_0: left promiscuous mode [ 521.389628][ T35] hsr_slave_1: left promiscuous mode [ 521.396227][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.403662][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.412589][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.423766][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.435431][ T35] veth1_macvtap: left promiscuous mode [ 521.440967][ T35] veth0_macvtap: left promiscuous mode [ 521.447415][ T35] veth1_vlan: left promiscuous mode [ 521.452720][ T35] veth0_vlan: left promiscuous mode [ 521.601525][ T35] team0 (unregistering): Port device team_slave_1 removed [ 521.612867][ T35] team0 (unregistering): Port device team_slave_0 removed