last executing test programs: 6m34.869787902s ago: executing program 0 (id=352): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) close(0x3) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r3, 0x5412, &(0x7f00000003c0)=0xffffffc0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) writev(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5bccc8dfc22d4b179f86d2bc7e0a57a3b587bf8903b93ea84a65ea64d0fc0cef14f034ffd7851db1312d20541bfef856e8f213ec4ae914dde905c93b61f27a707d3a3d559ccb8bffacf0a485bb45893b4ec5af6f87711040149b09a09bc55dfb9b409c75ca213c3ba4efbc77e3ba1daf982ae6a77f1a48524c344da36d305d1d0363c909ade95aca07ce374e8657bec98b7612d362989f66813713e66bca9196f8359cf7192b172d", 0xa8}, {&(0x7f0000000040)="6235304b958d4e66ed0b6f534818f34509fe9bee892d038198d65010c05fb1a83e1a24caac7525d991629db2d364eb9e8bafcf61f87669262c5c45ca81d6", 0x3e}], 0x2) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af12, &(0x7f0000000080)={0x2}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x18, 0xfd, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x2b, 0x0, 0x0, @in6={0xa, 0x2, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x1000200, @private1, 0xffffffff}}]}, 0x60}}, 0x0) sendmsg$alg(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x4000010) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfdc4, 0x3e8, 0x0, 0xfffffffffffffd25) 6m34.645043115s ago: executing program 0 (id=353): r0 = socket$phonet(0x23, 0x2, 0x1) setsockopt$sock_linger(r0, 0x1, 0x4a, &(0x7f0000000000)={0x0, 0x4}, 0x8) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x236) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRES8=0x0], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "a626ab8a"}]}}, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x101, 0x0) ioctl$SNDCTL_SEQ_PANIC(r4, 0x5111) write$qrtrtun(r1, &(0x7f0000000200)="99e6271e6aed5e0e19da2189b346d006", 0x10) syz_usb_control_io(r3, 0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102385, 0x18ff1}], 0x1, 0x40000000, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r1, 0x4018}, {r1, 0x4208}], 0x2, &(0x7f00000002c0)={r5, r6+60000000}, &(0x7f0000000180)={[0x10f]}, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f0000000300)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f00000001c0)=ANY=[@ANYRES64=r4], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 6m31.649237608s ago: executing program 0 (id=369): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='+rdma +cpuset'], 0xe) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) (async) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r0, 0x0, 0x0) (async) openat$cgroup_subtree(r1, &(0x7f0000000000), 0x2, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='+rdma +cpuset'], 0xe) (async) 6m31.569238584s ago: executing program 0 (id=370): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x42) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c000179090001006d617371000000000c00028008000140000000050900010073797a30000000000900020073797a32"], 0x74}}, 0x0) 6m31.554608636s ago: executing program 0 (id=371): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x800, 0x1e}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7f}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_USER_PRIO={0x5}]}, 0x3c}}, 0x80) r3 = fsmount(r2, 0x0, 0x8b) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000000)={{0x2, 0x4e20, @empty}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x68, {0x2, 0x4e24, @loopback}, 'syzkaller0\x00'}) fchdir(r3) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000000)=[@exit_looper, @release={0x40046306, 0x3}], 0xf4, 0x0, &(0x7f00000000c0)="66bcbd5ebfbebe0f2f6c1324e99fc4b37033e19c0544fadaf5b7f398e2578b4e06ecb9cb10dc7642a9e16084e9ddd3b0d26801dc89a0029e2664e4e420c75a00cb6efa99270172b4ad09109b72fa3d374634d7596d42aa340b83aef43be82c686f09cc2b800ebda71c46a435b3a5947560fc0ad46349fcb09547307f3f0d7189a831530d5c48c76798f17f42e624dfe09e2f2437ac616f57289cb5a4d0aa871da7424a4d6ad14ed6c1fb98d182a2afca48bb12d00c498fbea3a13165ca5836f514ad02a17508db3f4c47598dc5bd2a6da93a73b50b6aa91c4ea92973e944c63e70b134ae3bb99966e15126c0c0c841e3f8d9444d"}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x185082, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0xfffffffc, 0xb00, 0x0, 0x18, 0x0, 0x8000, 0xfffffffe}}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000700)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)={0x1}) fallocate(r5, 0x3, 0x0, 0x140000804000004) signalfd4(r0, &(0x7f0000000040)={[0x8]}, 0x8, 0x800) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r8, &(0x7f0000000800)=[{&(0x7f0000000280)='2', 0x1}], 0x1) close(0x3) 6m31.323608107s ago: executing program 0 (id=372): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffbffffffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x18, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000e00)={0x34, &(0x7f0000000100)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) syz_pidfd_open(r1, 0x0) (async) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x201, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x6, 0x0, {0xffffffffffffffff}, {0xee01}, 0x71fc, 0xf77}) fsetxattr$security_capability(r2, &(0x7f0000000100), &(0x7f0000000180)=@v3={0x3000000, [{0x1255, 0xffff9439}, {0x9, 0xe}], r3}, 0x18, 0x3) ioctl$TCSETSW2(0xffffffffffffffff, 0x5453, 0x0) (async) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r4, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000002dc0)={0x0, @l2tp={0x2, 0x0, @broadcast, 0x1}, @hci={0x1f, 0x0, 0x3}, @sco={0x1f, @none}, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x5}) (async) syz_usb_control_io$printer(r4, 0x0, 0x0) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4102, 0x0) 5m11.72072435s ago: executing program 3 (id=728): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0xd2, 0x6}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000042c0), 0x101041, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e", @ANYRES32], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000003100)=ANY=[@ANYRES8, @ANYRESDEC=r1, @ANYBLOB="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", @ANYRES8=r1, @ANYRESHEX=0x0, @ANYRESHEX=r0, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000003100)=ANY=[@ANYRES8, @ANYRESDEC=r1, @ANYBLOB="27aef12e91004cfa0b6e0576531098cb606c7bc110c3611838586da9d8ec3935afce889ef3fbce039766b2e6095c7791967ccf177c28d074c7fe461903b8a6b2e28412c9650aee0527eccd8ad5e0e220f1ff6ac39daea045862e7dec5726d9c1d28f534b8b6f6fe23fdecd154da121e2925b1dc2051688a004415ce22a3773afc0691b9f5f0e69cda76aa08edaa1c04e23116ecd0e19b5f559ea389b997a1a216a4195c4eb41c4287da3c1c5b618f0eff5518a4f2ae97b57d38402848f131b8abdfd5f9660b6a954e0338451c5c8ea0e3664c04a018404773a20826aa225f88a32831d9efb7c7c5ed8c23f1408f79af54ad777eb96cb5dddcee8f40814a8ba625d5ff2dd42a511d21efd060c357d800cd690ce7c169f2d645a5c2f3c9946c51752ac266b79a7b8fb12527efa4f973b575ef7c14c7ce2bcac12c59b7accfd527bb6f9cecd9128a48dfa5bebdcfff61ac6a56f02e8526244867ca41cd3afad31b6478091c4e5fc6b60b9f400d9797042c05586e2bd03087cd0e98a1387cf4458652e89b429761c04ca6062bd429b948309a6ddcacb0f8cf4f48809af7f6f8dc69263d2fc8f2146c14cc8e11afec57f87ccb9c95ad5bf1cd11caf9965b6a7134457b62c93e72191c1b67067e2420600df046f571c010a9a935f3ed9a1963fc542f8392af3b4550141527fa20adbfb4f02009f9da85d72b03b72872927472f662e733703181b7f873508ad056171e6e1c9bea0ab9288810bc1fa3403f3745eb05f7030c468da62068c21e1df0bb21dd7e6d41ef624d48c328e72073e3105f178cb0c0aaa3607f819c492a3dafdae82d3874c5a0c07d7890a9fe727ff84ee2dc2414274969e94e99e5c50f5821a70e447799122c242a1884714a4b9269dd8c5b2a5f28fde25d5b8d10c13369c701de447d5efe2fda131524690cbc9a67cc0fa4146658db9a62fd6fd921ce05693856051aeb792ce959a3ec18c477b45cd72249e405a5b0d15e5452eff10fa7daeb357c8f6d7b2d3ef99fdaa32c6f7cc4a0c7a7ab09f6d8af77b0f74683acadf687b37ff136509a7f802ce0af79b3cb83da35516706d413561949e36d9b81549efdd601f5523c4c2524304fade098daf89f084016b87bbff42f33e2a60a22eb955b93c48bf96d4f00f6a5f667dc742644aaed8156218573b9520500990663447533afd8c6d16e48196cdd255f7937b98e212563c36e4ac4dea4a7d9adcbde42e0bb96caecf17d34313b4331603b7ac25beb4b6a95ecc3e482ebc49404227f63720ed70010a04e9502ba1b8757e1fd8d2163c1a37c38ce8b0cb3259f6d48a26b5837bb71508ebd590a1f9921b840ec0fc2943329207f53723927b96a922463b7b1f47e3675f96e03eca18eec1ffe89a0e047ef7b02d246067fd66b502759229b40fe5a0fd83577c375606080468f144795ed709fe91773806371a498f57bf7d57b60222dde32a369c0a20b16f5389517bff96f0a4770b5058aa74d5c6b04f706ff290f06306dbdfd8004c8dd28a9f7ccf50947e7e41f8c1c8a5646ba0b9fd694c3f46fdda1501b5009807d08b7b18905c8f82a02cffa519fc9d1554075da498dc09c9f420fbd7903fd66c563f9511c1d8a26a6acc1fffdc3c1e75babf37e497b7d7db8b9c7e7dc2621dbbeed8b24a66283c12653c0d14ae205723ba7c0722f9d6809910a2831d99f088543cf9ddfc8aaba3b13ef9587d8273248b98ee6b7990db6d0e8aac232ab87ac51ac2ab4ddb6cd954e4fa8959ee75061382eafad536840a2be9c6cd9f102201984fad45cd3f38a5750927e762111023672d049a204847d7ffbe28b8b52445cda075dcd5d7d2054acadba163373e374c814f4fb0804d06002f575ee67b29df3ff1a71e078ca71cba7c6c0ba1027466d65410c0f60d547ee44b889491e44aa0b9ca736e633cf6b5a7ef955d6e4757371795363eaa4391627f39efa2f650c3686c3fa2103311eb5322cc8dcb60a7b7d6d2321596b6e1c3cb1691dfb22962f3f0eba67ddc38867949e166aff1edb5d6b858826dc47f3fe691b9623a9ed353f19644ee2a78b10f82bbdce8d7d547872f6a833b05ef19b6c22a96640f5f0e102bc1952858a19ba5179e4f9023b8e9786172e7360e5b05d244128dc7c5e5058d433fa0a7ccf76919ad089b474520895988c1ee34f14581d0f4f4bc212c1f2fd337a1b21cf94888a8e145711a325030aded47d849371ffe1c134e2492ad4201f9187c026470114e991a5b0b7f27078c0bdc91dca5a6aa9499b65c2ba01c698ff87facbddc5c1428e751cedcbb548625091d51d8d31403c623b94e6baa117340987ef3423746a69133950d61162a941901a01b12e01468c083815a45b3bdf1d13b8790d71ec0e721555d921cab0f5ef32223bc954f121e9635f0c58828638a07ef6bd7505f53f84098cf42213c02669d796dee345a4332d655a85ec4a5ddf7d11e176e41f09144842b789bcd00cfdb7e0eed67df0be217d9803ccf762b1bc036663bc48fa224e60d4f386c4f9f2c01f31a3b6396c36149ff8c1384893457e8a3a7f278494371ea237e5aa0986d5f2577ad55abc53db5e8b30139bdb27fa5de745a66670cf30be26dda88eda2098c369cef6f1f90854f6be6841e2586f445f4a79c2ede292b52eb77d3d25bd135c704cca008a214eae1f635702e29cd9be30c3c494eebf24dafeadb98280418464b74ab7fd0ca759287f726df3a963db875111043e1e00dbaff1cf468a03cd7b2bf5ef445a25de4e7deb6f576d341dda43fa1433ec3dc8708be755a8ceb97b51e85d1d25e27826c879efe3cd2fa4f7c11dff8b661e1d92ed66a7643c1a9cb2a52703d9f88f4e9a15686472647f78f2cacb2f83e72fed90e5ce81b9e53c91e35261c09750d1e9347fd67a426f4e1f2ce893d0054e5b08051c13c13598147ef6d600a9e6fd31276b34f328aa1e5a8f104a8cd6d36a36eebd31dde508ecb9f884dd5378e57d6cd4d9e1b4e11b5b1ec16b467ef91c3df2e0fc65c7db885948db96ccc14cf4e2f5d1d121b71d4bc6cc78e7cfe54f7d70441bbbf0e33699f17b69f44ffec13ba29912634296cae06eee64d96c5894c6ec3fbd22fe6a3d590413b451564c0011dedd4bd85b36493b6abc4ccddf31b4e5773f2603a40fc079e4645b0fc322a65aa60909bb09b0b849814da5641c691c669505269bab22d3032d2e05b66a7a6f9fa567cf4ba423e2bfac41cef7fe84342792618cb07623da89c83da133a3c0aa61b612e9329207b7e518f19524699b023f9e1e46ff39bf6a73cf636032fd1f0db79c1d3e4db94f3136801df0b944a58dbbc874253664594b7b61a8175f1d4844c7b240b4df6b635b8d0ca9b15b369966ef5939b5cefc3015b60ee1e3cb5e169e3abff43c5d327a57c44981916edc4b5b87640a8a76083069452160c60fbdc24cca52caf07f874f6e76ad8d4681fe9de616d20919d1a400cd9888edc895623fc253cdde28b577e518a5aae67c23a5b59689e4ccbfde9d89fdc6688069501a5f8e8ef6016064a1b363278cd70134be03f66aff94b82e86085e61dc119f39d8d3b3c453a1bc7fb41a9530f6d681d14dbb9b63cdb378aaeb95f33939a01f3a13f4737881c84fdb3e619321f70c5b8b779de4ee5de3eb59be896d60a3c26ce70cc6a8282206350f69299337a3646b3140fc9a63c5a9b02ba450b36d512cd0a5d0587f864b170e4a9ed8cbaffada9ae22a4cdc2be7afd19aadfd2d40c9ae9d03bd0720b7b1427e25a5667284f42e0edc6f3e1bec85c809587103bfefd8b878677f862258c88b75cf6930ea87afb071108c9495a7013188325d7c584b20a61213e567835383b6d30b86851c18b75a590f146b5bf046beda9e8d536d61fe767d48f4e2ba798fb69dd195aad5b482e178394569dcfec301bd5147d84d5492e6db41338f4f990402080ac550e8bd5040eafb926daaa00410c4aad9f1739954bb27e82d5dcd6a31199bd3d124d15de5866dee7bd8d9eaa7a7cbf3dafeeb7796420c2eae2de89ae757aee51a76c2eeae59368950192d4d3d48a1e0323c2cc055a91ac5aba08c4fdb94e5545f97006fbf2014df3a047011f7d7c7846e696293ed9c1e3ea2c4be823ed0d263a265d236325ec306aecf46cec5f831a7e50fea31e864510beb6ce5a7f9c415b2a7a23a400dd971cd1d0d31faccedb1da18a4bc4c2fb70f9e58c15c57f7c610f395b8f964f4d20158ad4c56dc9d3975df3bac4b2afa9b15b715a2961bf4831c1d08e517b6f38fe55984407a1e840a3ca611fef0072558e135fb82342fc9c38134a0a64efae1d978c9df199621a22dd3ac0b82f961ab28d65d3b54c1788e3cd64c8ff2a71e8fc0decdadc3d7b236e0f8295ddefb49ee5ee6884dfa57cffc080c6da73e26684e9776ca32a498d82faf7634fd68e8aef03d931f6d13dd80eee9c865fad77d2396d78a6871371459f3443fd0fa42c04a0fce5a38c3ad8cf1da47a305f5f19b59a0391795dc97a30c762a3a90ed0fc68608af45cfcd56f768c50af79ad188379d964395a1f885d0bb41a9efca136b0f8b6cde8f52159c838d01cb2840b2e454a726ca9929db24fd3407c960cee0b2f9b30391e5ce6fde04082f0b6f2b45ae214f49096774e5318f2bd3fddb8d10c8c4f06f7bf754dfb69932a9f9d995d6fc769fb7a6697dca9139456141f5deb0f8f17f9103ed5e31527d19d885295a3117aba0cc0427eab88755182768cb539fed64a594fd19c3b0584d5778c4c28dd433937e2b56882bf21af91ad1a9694445f492b95f19d8ba49724dacda37aa4b85e62648efeb39258d07c3e191b38492676e70c1dececfb7b64ea155639f1810f5cb90b5c07dbcd6019d982499963b7e04d169219bac67c5c3c5229a54151f4507bffe74df4f2895e8fa9424b166eb39d70e489d36b109414274c5bc40370e3f5123cabeab81bdb95695ae8b54d94f96ba1588323345094bfe89b73c14da2d0324b2f93c11c698848da69cd9f050b3443b2fd009a3aa1542d1dad988eff9b0832f4b08d2d9e139046211a156106bc3f24a83489646b734c24f16f9210b82359b97ba6df651a25c9aaa883f0a535e5455068c32a64bd1bb4d9d5ea3499b4375d438a7a458357a469e042a76c161a56ad48cc43ab8d71c9c73ae364ab2de52ee09fa94ff7482c7d3b7d3ef93efcabde3a5ce7f57d161b648747a4e70421e67f014950e8cf092ad9c6d8b8df0d8466bb875eff1157f04a7060ad0596d843c9603d2bc2b39b7c912769a6a5c9d5239da5a0cbdf05efeb2626e85b9c68b831e79cce6014421ef74c1198a8866cec8f07007f872216dda8d05ba7166d38778c2f7df3588556f287b5adad5d3a1962d564f6b1a12fb3901db579665eb751f61d4f7fb84dc72bd764d494c0dd8b2862b32dfb3c3ee3ed665b159335e90f59ea32148ac76d69f3a7f60dfe11fe73c5af0ea7c51164e916d61884760cc68ae805e05b27999f327cb8bbfa346907f1c7a873776c0969d0da803c42cdf2654ad5d10bb3b3b41d0f363e26f308a6714e77bbbf4d4319f02ec1490887016150a41097c64f41814cd7a2013d599a100fbdf56a7bae9cb8001f9b411edac714cb5c8d569ad08e99cb9737f30d58cc30815d9744f3da5ea49d74ed498c191dcc00ca8097789e415dfe2d4494ed9fb97eb9d7da81d36a31c2444721600ae3488dfd929bc325818910dc412d73e5839ebbc1eff08211efe75d416f176fad4d3109e9b063bea42658472da0160185103fd7f507fa9c0d8c031d283150ff427569a9e829e6ed652310", @ANYRES8=r1, @ANYRESHEX=0x0, @ANYRESHEX=r0, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) (async) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x13, r4, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x13, r4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x10001, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$FS_IOC_GETVERSION(r3, 0xc0045b0f, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'pim6reg1\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x6, 0x7}}) userfaultfd(0x801) (async) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x400}) ioctl$UFFDIO_CONTINUE(r8, 0xc028aa05, &(0x7f0000000140)={{&(0x7f0000032000/0x4000)=nil, 0x4000}, 0x7fffffffb000}) socket$inet_udp(0x2, 0x2, 0x0) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) write$vga_arbiter(r1, &(0x7f0000004300)=ANY=[@ANYBLOB="4b6290604250f88fa8a8"], 0xa) (async) write$vga_arbiter(r1, &(0x7f0000004300)=ANY=[@ANYBLOB="4b6290604250f88fa8a8"], 0xa) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup3(r0, r10, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r11, 0x6, 0x15, &(0x7f0000000140)=0x2, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000340)={0x0, 0x14, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES32=0x0, @ANYBLOB="ba6b6e0001000000da000200636861636861323000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be794896e945e76669d9334c17963dbd9cf822482d20058bc44a226ccf59989253749c5b29781e874d2c05e5f3a2174d927416fa83ce5ba6f00833e82970a4cd1606c59f5785b140ec13fd41dc96b15bd36614873409000000ba6c060c7b2f498b68208be70d2d186050c13623f2b57f864bbaefb796f499fa1a258da5bf4f1e2948f2c3ddefc1de0f2d35c7e6f4f603256200000000"], 0x12c}}, 0x8010) openat(r11, &(0x7f0000000000)='./file0\x00', 0x42500, 0x9) (async) openat(r11, &(0x7f0000000000)='./file0\x00', 0x42500, 0x9) syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') 5m10.310977375s ago: executing program 3 (id=732): r0 = epoll_create1(0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m9.293516896s ago: executing program 3 (id=736): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=r0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/icmp6\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40405515, &(0x7f0000000080)={0x6, 0x5, 0xad99, 0x8, '\x00', 0x9}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000009c0)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008002c0007000200060019c00364bc24eab556a705251e618218db677642109146a2378c877bddbcc1863b747ee3d5addad5eb3f3c90b561", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) (async) mount(&(0x7f0000000100)=@nullb, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f0000000280)={0xb, r4, 'id0\x00'}) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r5) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x8c, r7, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x311}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f00000000c0)=0x2) (async) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0xeeee0000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0x10, 0xfe, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x4}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x58, 0x8, 0x4}, {0x0, 0x8000000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0xe000, 0x100000, 0x4, 0x8, 0x80, 0xfb, 0x0, 0x7, 0x1a, 0x2}, {0x0, 0x3000, 0x0, 0x80, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x8, 0x7, 0x5}, {0x2000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x1, 0x120, 0xa, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) 5m9.132729825s ago: executing program 3 (id=737): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = getuid() fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@redirect_dir_nofollow}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@uuid_on}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@verity_off}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@uid_lt={'uid<', r0}}, {@fowner_lt={'fowner<', r1}}, {@permit_directio}, {@fowner_lt={'fowner<', r2}}, {@fowner_lt}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = socket(0x29, 0x5, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) socket$inet(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) getuid() (async) fstat(0xffffffffffffffff, &(0x7f00000001c0)) (async) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@redirect_dir_nofollow}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@uuid_on}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@verity_off}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@uid_lt={'uid<', r0}}, {@fowner_lt={'fowner<', r1}}, {@permit_directio}, {@fowner_lt={'fowner<', r2}}, {@fowner_lt}]}) (async) chdir(&(0x7f00000000c0)='./bus\x00') (async) socket(0x29, 0x5, 0x0) (async) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async) chdir(&(0x7f00000000c0)='./bus\x00') (async) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) (async) socket$inet(0x2, 0x3, 0x2) (async) 5m9.085194548s ago: executing program 3 (id=738): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x41b, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006"], 0x69) r3 = socket$inet(0x2, 0xa, 0x5) getpeername$inet(r3, 0x0, 0x0) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 4m53.994594721s ago: executing program 33 (id=738): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x41b, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006"], 0x69) r3 = socket$inet(0x2, 0xa, 0x5) getpeername$inet(r3, 0x0, 0x0) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 3m51.871403279s ago: executing program 4 (id=1068): r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f00000001c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000100800010001"], 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000040200800010001"], 0x1c}}, 0x0) close(0x4) 3m51.787880491s ago: executing program 4 (id=1069): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4503, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000340)={0x14, r4, 0x70d, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000ca6210866ba309bb000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000b00070066696c746572000048000000060a010400000000000000000100000008000b4000000000200004801c0001800c00010062697477697365000c00028008000340000000020900010073797a3000000000140000001100010000000000000000000700000a8b8adb075354730e0d2ca9c8ff3106a6a46bee0014b630c43ceebb64"], 0xbc}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r6) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) set_mempolicy(0x1, 0x0, 0x3ff) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r9, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r10 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3}, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x2f}, {0xbd1, 0x0, 0x40000003}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x33}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r10, &(0x7f0000000480), 0x2e9, 0xffe0) 3m51.405149427s ago: executing program 4 (id=1070): arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100)) r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f00000000c0)=0x1, 0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) sendto$netrom(r1, 0x0, 0x0, 0x40, &(0x7f0000000000)={{0x6, @rose, 0x40}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast]}, 0x48) 3m51.150979933s ago: executing program 4 (id=1071): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000053c0)='./bus\x00', 0x364) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x8001, 0x0) (async) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000200)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x1a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="a80100000001010100000000000000000100000114001980080002008000000008000200000800001400188008000340000000950800014000000b3408000840000000040c0019c008000100200000001c010d80080001000000000014000500fc01000000000000000000000000000008000100ac1e000134000380060001004e"], 0x1a8}, 0x1, 0x0, 0x0, 0x4080}, 0x4000080) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async, rerun: 32) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') (async) exit(0x6) fchdir(r5) (async) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="0f7bee6d2c9a1f74ab3317b212f0fda84500000000010000130709de59fa65d17e38c310ff4dbfc50915e53d9db273e5cb97cce8f9ce6cfeaa579d587d81be5e917180dd513167a2e85d33a01d2610c6bdaa2569f0755f1500800591ca5b0a093792d98de1db2197a1351d485e4b8710071f4e80198000", @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="24005a80200001800500040003000000140003"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r6 = accept$netrom(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @default}, [@default, @null, @netrom, @netrom, @rose, @bcast, @rose, @null]}, &(0x7f0000000280)=0x48) r7 = accept$netrom(r6, 0x0, &(0x7f0000000040)) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0) r10 = fsopen(&(0x7f00000002c0)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) (async, rerun: 32) getsockname(r7, &(0x7f0000000140)=@hci, &(0x7f00000001c0)=0x80) (rerun: 32) 3m51.052796908s ago: executing program 4 (id=1072): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3}], 0x1, 0x40800) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc0585609, &(0x7f0000000e80)={0x0, 0xa, 0x0, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB='3\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="15002fbd7000fcffffff8900000008000300", @ANYRES32=r2, @ANYBLOB="18001d801400008005000600010000000500070054000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000008) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="db63944bf6c21789cb650c0394c9b769", @ANYRES16=r6, @ANYBLOB="00022abd7000fbdbdf250a0000002400098008000200020000000800020000010000080002001e05000008000100040000007c000580080001007564700008000100657468000800010065746800440002800800030008000000080003000500000008000300030000000800040009000000080002000800000008000400000000000800010014000000080003000e0000001c000280080002000180000008000200140700040800040001000000100007800c000300050000000000000004000780"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008084) r8 = add_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r8, &(0x7f0000000280)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x2}, r8) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000000)={0x6, "340b784f8e5bf42300e94b5e2ffe8e3cfd0011000000002000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r11}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/50, 0x304000, 0x800, 0x0, 0x1}, 0x20) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x4, 0xffffffff, 0x800, 0x2, 0xffffffffffff3b54, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000380)={0x8, 'hsr0\x00', {'pimreg0\x00'}, 0x6}) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000a63000/0x3000)=nil) move_pages(r12, 0x0, &(0x7f0000000140), &(0x7f0000000040)=[0x1], 0x0, 0x2) r13 = socket(0x2aadb7b7d0393406, 0x5, 0x0) getpeername$inet(r13, 0x0, 0x0) 3m51.03754566s ago: executing program 4 (id=1073): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup3(r1, r2, 0x80000) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x41720, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_FPU(r6, 0x81a0ae8c, &(0x7f0000000100)) r7 = add_key$user(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000580)="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", 0x118, 0x0) r8 = openat$kvm(0x0, 0x0, 0x101000, 0x0) setresgid(0xee00, 0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000000400)={0x2020}, 0x2020) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0x566afa30a48730) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) setresuid(0xee01, 0x0, 0x0) r11 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, &(0x7f0000000800)={0x0, 0x1000, ""/4096}) connect$can_bcm(r11, &(0x7f00000005c0), 0x10) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r12, &(0x7f00000003c0)={@void, @val={0x3, 0x3, 0x8, 0x1, 0x19, 0xc}, @ipv4=@generic={{0x8, 0x4, 0x1, 0xb, 0x27, 0x64, 0x0, 0x9, 0x84, 0x0, @private=0xa010101, @remote, {[@timestamp_prespec={0x44, 0xc, 0x7e, 0x3, 0x2, [{@loopback, 0xf}]}]}}, "8b0414fa85ba06"}}, 0x31) sendmsg$can_bcm(r11, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) keyctl$dh_compute(0x17, &(0x7f00000001c0)={0x0, r7}, &(0x7f0000000700)=""/252, 0xfc, &(0x7f0000000400)={&(0x7f0000000100)={'cryptd(streebog512-generic)\x00'}}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xa00965, 0x2}) 3m50.867431144s ago: executing program 34 (id=1073): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup3(r1, r2, 0x80000) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x41720, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_FPU(r6, 0x81a0ae8c, &(0x7f0000000100)) r7 = add_key$user(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000580)="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", 0x118, 0x0) r8 = openat$kvm(0x0, 0x0, 0x101000, 0x0) setresgid(0xee00, 0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000000400)={0x2020}, 0x2020) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0x566afa30a48730) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) setresuid(0xee01, 0x0, 0x0) r11 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, &(0x7f0000000800)={0x0, 0x1000, ""/4096}) connect$can_bcm(r11, &(0x7f00000005c0), 0x10) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r12, &(0x7f00000003c0)={@void, @val={0x3, 0x3, 0x8, 0x1, 0x19, 0xc}, @ipv4=@generic={{0x8, 0x4, 0x1, 0xb, 0x27, 0x64, 0x0, 0x9, 0x84, 0x0, @private=0xa010101, @remote, {[@timestamp_prespec={0x44, 0xc, 0x7e, 0x3, 0x2, [{@loopback, 0xf}]}]}}, "8b0414fa85ba06"}}, 0x31) sendmsg$can_bcm(r11, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) keyctl$dh_compute(0x17, &(0x7f00000001c0)={0x0, r7}, &(0x7f0000000700)=""/252, 0xfc, &(0x7f0000000400)={&(0x7f0000000100)={'cryptd(streebog512-generic)\x00'}}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xa00965, 0x2}) 13.472495517s ago: executing program 6 (id=2318): add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000002c0)="0000000000000002ff4a0000000000010010a69fd52033da0ae36e3ef90000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a4d4161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd981981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c1176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ceaf7d67999300094461f2b8fb8b8a85cd994a889b01d17420dcd2599e66190a75892103f5b51185a7660499bc25fcd9a3fbccb05fae35cf7b693ad3b7cf14e0e142bd34ca228350b7b47d0bdcd7d36aa7747c27a757df8e4cf2f24e364dccb21d68ad7d11026b5b8b7e24736ecfc8ea7052245aeca1e96535c97001e0dbf0223e40dd4a16a99e", 0x15d, 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) 13.388410296s ago: executing program 6 (id=2319): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000040)={0x1, [0x2]}) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000080)=@arm64) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f00000000c0)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x1}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000500)={0x0, 0x1e3, 0xffffffffffff0000, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000900)={0x16, 0x1, {0x6, @struct={0x2, 0x8}, 0x0, 0x0, 0x4, 0x270d, 0x9, 0x3ff, 0x10, @struct, 0x10001, 0x10, [0x7, 0xea, 0xc04, 0x1, 0x100, 0xd]}, {0x7, @struct={0x1000, 0x3}, 0x0, 0x5, 0x3, 0x6, 0x4, 0x5, 0x402, @struct={0xfb2, 0x8}, 0x2, 0x400, [0x3, 0xf, 0x1, 0x5, 0x3, 0x6]}, {0x4, @usage=0x8, 0x0, 0x9, 0xf, 0x2, 0x6e5, 0x401, 0x68, @struct={0xf3e6, 0xd2}, 0x7, 0x0, [0x927, 0x8, 0x6, 0x1000, 0x6, 0x8]}, {0x6a, 0x9, 0x10000}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000d00)={0x10, 0x6, {0xffff, @usage=0xa6e7, r1, 0x750b, 0x301, 0xa, 0x72a, 0x9, 0x1, @usage=0xaa, 0x5c4e, 0x7, [0x0, 0x10, 0x10000, 0x4, 0x9, 0x8d]}, {0x7, @struct={0x7, 0xffff8001}, r2, 0xffffffffffff8001, 0x8, 0x8, 0x7, 0xc7, 0x38, @struct={0x1, 0xe75d}, 0x1, 0x3, [0x101, 0x4, 0xff4, 0x27, 0x4, 0x4]}, {0xfffffffffffffff9, @usage=0x42bb, r3, 0x0, 0xc, 0x4, 0x5014, 0x6021, 0x0, @usage=0x5, 0x9, 0x80000001, [0x70, 0xff, 0x10, 0x3, 0x6, 0x8]}, {0x401, 0x0, 0x9}}) r4 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000001100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x8, 0x2, 0x40, 0x9, 0x5}, {0x9, 0x5, 0x8, 0x2, 0x400, 0xf7, 0x84, 0x9}, {0x9, 0x5, 0xe, 0x3, 0x20, 0x38, 0x8, 0xa5}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r4, &(0x7f0000001300)={0x14, &(0x7f0000001140)={0x20, 0x8, 0x86, {0x86, 0x9, "6ecb98ada15abc681041adfd30b9cf55973c45fa0415034caad3cbcdb8ac8fbdc45aa60d9e29de1f3472b40ecfc3a67fbe98cf9ea2b989bd4a1b0bdbb5b39e96bc2ebbb554c7c3ed5a12f4f886e26cd130508a10245c32f214806320b694b27853a1727c223f502002f3127d161d27a484b4bd6c180030f5bfda4c40ec8daf7d125326a2"}}, &(0x7f0000001200)={0x0, 0x3, 0xbb, @string={0xbb, 0x3, "2bbdce7529ce201804cf3a2da8362b5787f53ee91d47580e4f727b2a7ad952bc3e2691cd17386f8d314cfac3f9699acb2129850ff9aa690c6dc80c44f1a02bb15773d26ce5a0a4c5f8a0846954812b86de672077468381f917a49c22aa86c0e1bcaa8db3fecd63c9e639b68676d507b7b64cde11e1d5c4691831fba7fc912f69893f76853546699df12ad40aa041e34a2929885beb2f0a2d5493c9ba897bea55e609f52d49c20298ae44f60da6f5f9c9a80a02b9b8381372e2"}}}, &(0x7f0000001880)={0x1c, &(0x7f0000001340)={0x0, 0x15, 0x87, "038d92b2a035dc64dd6e19f665b6b655e6a1799167b15f1a5437868fe6337ad15929eff918762433c9a672516a26dd9ccef765c5375cad334d73e0750d0ea75c3914e7ee77f05b3147ce8527d5fdcc3877c82abba745e0b516e16c9291c58f961da034927b97cda2ffb0ac1a39c72c627d9935fc8056167e3a727541ee2dafbf03dff2895f8aea"}, &(0x7f0000001400)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000001840)}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000001a00)={0x14, &(0x7f00000018c0)={0x0, 0x23, 0xee, {0xee, 0x11, "4dd13fbfff3c8c47368599a84466ad7444309be023dd9c98812ba760ca2783c5b4e27c3a452b827d3c037310e82550a8f85fa7ade0afaaf6fa24781e94e9b489610998dfb5fafe3c890322aced7dd8873940bdf2a7dde34302e6ed6e54460bff22bc85a65ce34fdbf8cbc5da91d4a0bc2d3b7fe2e84a5823e53011224d8bdc9a1ea9ba81314058d71fc46df4bffffb85f153ba35b99529dcbbccc776a33c21be075cfe65326de23f70de85c7b8efb4e10957eddcb850ca89c3ae410d3791f3e13151714ab0d8322ff705c53032d7d5c1a27efe5cde1f779b88b498ba7986453c240cbf73fa8f7ef0b9f7ea0c"}}, &(0x7f00000019c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}}, &(0x7f0000001c00)={0x34, &(0x7f0000001a40)={0x0, 0x7, 0x27, "7c82554982114bc70763b3fe31fe7ac9ac51478d6d60f47b22e64f528247a6585afa9e6f1230a3"}, &(0x7f0000001a80)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001ac0)={0x0, 0x8, 0x1, 0x7c}, &(0x7f0000001b00)={0x20, 0x0, 0x6b, {0x69, "6b74a35ef3dd34f417b7e2a23b65b3814867a1947581d94cefbb27042ed98b4e9c08e84fde2b7cb13ac9b3d0e225ee3bccbf1f5d4bc9d1b91650b272458164670feae6dfda13a13fa1e34afbb3261a54c2141366be91c194230aa2eb34763c5d3718dc6aaebd6b776e"}}, &(0x7f0000001b80)={0x20, 0x1, 0x1, 0xf}, &(0x7f0000001bc0)={0x20, 0x0, 0x1, 0x4}}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000001c40)={0x1, 0x1, '4'}) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, &(0x7f0000001c80)) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001cc0)={0x2, [0xcc, 0x8]}, &(0x7f0000001d00)=0x8) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) set_robust_list(&(0x7f0000001e40)={&(0x7f0000001d80)={&(0x7f0000001d40)}, 0x2, &(0x7f0000001e00)={&(0x7f0000001dc0)}}, 0x18) get_robust_list(0x0, &(0x7f0000001f40)=&(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001e80)}}, &(0x7f0000001f80)=0x18) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002000), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000002100)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x54, r5, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000001}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x7f, 0x7ff, 0x6, 0x4]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000002140)=""/4096, &(0x7f0000003140)=0x1000) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f00000031c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x14, r6, 0x4, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r7 = accept$packet(0xffffffffffffffff, &(0x7f00000032c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000003300)=0x14) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x4004013, r7, 0x24a98000) syz_usb_control_io$sierra_net(r4, &(0x7f0000003440)={0x14, &(0x7f0000003340)={0x40, 0x21, 0x74, {0x74, 0x21, "216d877c774d90355fd5afa676cc0e4cbe60e68352031e14ae5b2d4e6fd110d6008690639ade7636154531600a09e7888c066eab9cdb1bbbdd061125b8f8d30ee6995e51e9d97a7c06c45e577e9a657f0fca823980bfaff0a16a150de1edac391fd35281ebcb915ede657b1acea8292abf0a"}}, &(0x7f00000033c0)={0x0, 0x3, 0x76, @string={0x76, 0x3, "72814fce49a9a3f564387f6e6bfce0b2227cc7db90ed93235e16515cbeee6438fd8ea55abf63ca294736379ede6799d1e097d7bc46adcf8aa7cd3745dfe19e178bf64bb80685135983daf126af1d14ffc36f3f71b0eb96e0ebaf3499429e073c4d781d60ee26b42bb6febbefb77196f3fc51a7d3"}}}, &(0x7f0000003a00)={0x1c, &(0x7f0000003480)={0x40, 0xd, 0xd2, "54792f879344c5363802f8e8453f518caecd85da17f46785520b37d7e4016d6cc02e6c48df67baf0eac730306dd7ec4094d976659ffcba242c5e8b56d5567b3edbcaf2c695f63ebc63bf2e203af52f4ae096037f0b3add1c89a39db2519f489634c12ef6e37bcddaf27e8e1521192e8e1900e3baf02c71b07439eb1eac59d974db413d86878d87df52dd3959ec02d35234558580765f2f942419561843aa5f7092e23bfb7a7262b2e4b2e4e6b68c2b369ef928548e69f5e6e2d5802f0912f7eef40f11efedfe42a5ca6bf42e37c8d1ca5157"}, &(0x7f0000003580)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000039c0)={0x21, 0x0, 0x4, "dcf8a2ed"}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000003a80), r0) sendmsg$DEVLINK_CMD_GET(r8, &(0x7f0000003b80)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003b40)={&(0x7f0000003ac0)={0x6c, r9, 0x200, 0x70bd28, 0x6, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000003bc0), r0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003c00), 0xffffffffffffffff) 10.322407329s ago: executing program 6 (id=2328): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x20, 0x1411, 0x1, 0x0, 0xf00, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}}, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x0, {[0x9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x80000, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c) r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r4) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)={0x64, r5, 0x201, 0xfffffffc, 0x25dfdbfd, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nicvf0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x64}, 0x8, 0x3000000000002}, 0x0) r6 = signalfd4(r2, &(0x7f0000000580)={[0x2]}, 0x8, 0x80800) ioctl$sock_netdev_private(r6, 0x89fa, &(0x7f00000005c0)="998c46589133816876f2f49fa94ef33bfec9fb94459d579458b42625f8f542dcebc244fef0a4ce19f3dc5b3d91902d90e130aa10558b4acd2b2658225942e75c0dc232f53bfc933b1eddbe80ffd8f3f9821c323b50ef4ffc224566c9fe8ef3537f6642e9b627731bc6464eb8200524fb5fb27599") r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000540), 0x200000, 0x0) close_range(r2, r7, 0x0) pwritev(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)="8833adfe80712e12421711698584073b5d417fc49f", 0x15}, {&(0x7f00000000c0)="e28aaf79a7dec4292db7755353fa2aac28e30273b16638f0d4d0cac13fb3bfbc14eb25660ada67470e04f5af4be1498a2e14f3358b755fd5f332a3349edb02733b668939100bbb79e491733ccf39ee0afc89cfcac5faaebbbda12b404e0ad7d02a618c9b14db2e963255655f7c4a359b5e4622055e2ff15e4218ecdceab1ad8375e7a9d3bc7fe43ded14a12f26b08b9ce2f40b20e55e0b2b22869faf618e416afec34d16cc2614", 0xa7}, {&(0x7f00000001c0)="ab15685e8275ebf38b9f062f3232faf5d609d977fe7b6525265100bd430f1c48e4435eac6096ad05f756ccddefde0bda619cfd8894320e9b9cce8bff92b6a6ee372444527f17f724e7fdd47a7374dcb29b1625af1e8f051647a8873641ae55dffbbd8d3978622683cd6fef3821ea", 0x6e}, {&(0x7f0000000240)="2285275aecba32a9f2b59e787a5dc7686a4060ce99d8b57182310a0fd98732cd4534d2565e3b2b4d3fa228b21ddd67edff3a05c71c7a236658e3e347e1de187a4a92e798ad0aa0abb5934ebb5b24b285a39f60797f432a2f14aed58d47b8f83c04e9c9d32ead58f6e8d8d8efad87b7b47f3a55888f2ba53ea29fa396305f0e07ad63c357c4febe1e85450fdfd55365b845a77a9ec2df1b598041d848895cfd0899bbbb6ebe53d53e7af01fa317990b9d52304fc14487d83356bd4f4f5ffb6ef4328c7732beaeccf475b42a10d5ef6e", 0xcf}, {&(0x7f0000000340)="78d25fc851c2ed619f18535b96f507aaf95f811fbe484ac6cbae6fd0e8f44cd1908216ea0ebe212106ac9abb0aa967e8fd774d75aad0f2bcaf44ffc97399ae0fe08fac6e49775a939c4f05566bc5949c33cda8c8380f797d2520970d35304db763e599764d95d3c4aa640f5e5d2c8c573cadaaa6299c0d36a70d7498546ccd45bc94c1910c145c1ccb3f8f2bee74c5575f1c8d6a68903aef", 0x98}, {&(0x7f0000000400)="4cada788e632540243a18d825e38aee3df2beb525a3dc8c4f6b5de4fae5a1d7bc1d34bd7e751ce534ecd89e380f4cb9d767fa506507f4bc9246bb76d5b6f6f7bdec15d84e4f157cc0476da9ca9e17de62f86e88803ded3362b31abefd6a18d3c749c9e1ae3171315b2baeddad4bf56325b8f1e08b7d9e3d12216678e13763902c206ac5e662c6e4b75aa5e4e7af9fea965a7f2cdc3d00ce73b115fbe", 0x9c}], 0x6, 0x6, 0x263) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c0001020301090229000100000000090400000002020100050200000005"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905"], 0x0) 7.204123198s ago: executing program 6 (id=2342): syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) r0 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2, 0x0, 0x0, 0xfffd}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) shutdown(r4, 0x1) dup(0xffffffffffffffff) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000300)) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/49, 0x2c000, 0x1000, 0x10, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000180)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x5, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.648345203s ago: executing program 5 (id=2349): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x88001, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000400)=0xf) read(r1, 0x0, 0x4f) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f01a, 0x7}) 6.506844037s ago: executing program 5 (id=2350): r0 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000040)={0x1}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0xc1105511, &(0x7f0000000040)) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000000)={0x0, 0x0, 0x4, "a7212277"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.996994064s ago: executing program 5 (id=2358): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000003011ff00000000000000000000000000000000ff02"], 0x6a) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7}}], 0x18}, 0x48d0) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x18, 0x32, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$sock(r0, &(0x7f0000000440)={&(0x7f0000000140)=@pptp={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)="9ddb4254f4c40da6d4d3a2fbc4c17f6b92359ab76c7a9f8c1e8773ff879e6eeab10484ac7bdb3532a3a3a7d4bf47010222fbbfd6a2a4eca84a5d4b11c8d0a9c04b32031336d4832f00b28f5a3716066973ab0a85e77447cba5f75dab0f51b8fb3529b382ec591102c2a038d921f5bb08c1c6dac1bf163f1abf761e531bce0a664a4baebfa1575bc789539deeb995f638136edb5a284ba07f10fa027c6f8dcfac08026213ed593aa47115bed16a9cfa6501d49893ed5429ae0b6e67572217e68f700e3ce0142a1ed5534aa928f93fb2ecaf9e50fbdd221e219ddf2ddb99b1b9e8", 0xe0}, {&(0x7f00000001c0)="a2dbf26538160dea8da46f50e2d5bb525dbf10d656164998794e295ce9cb2bd1605646f6b4c5d2459e641db8354e3611066016449c16355ce1dba446108cf87b", 0x40}], 0x2, &(0x7f0000000280)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffe}}, @txtime={{0x18, 0x1, 0x3d, 0xd90}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x78}, 0x10) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4048aecb, &(0x7f0000000080)=ANY=[]) ioctl$KVM_GET_VCPU_EVENTS(r7, 0xc048aeca, &(0x7f0000000080)) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r7, 0xc008aec1, &(0x7f0000000040)={0x5, 0x0, [{0xc0000001, 0x2, 0x6, 0x152, 0x7fff, 0x5, 0x2}, {0x80000007, 0x7f, 0x0, 0x7fff, 0xe3e, 0x400, 0x3}, {0x0, 0x37d, 0x2, 0x5, 0xc, 0x5, 0x1000}, {0xb, 0xf614, 0x2, 0x9, 0x6, 0x7}, {0xc0000001, 0x6e4, 0x6, 0x6, 0x0, 0x0, 0x5}]}) 4.500874605s ago: executing program 5 (id=2365): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="ad0041006800170d1e7178ac1e0001ffffffff11f3305280f125e6e91a9314b296b53b5d25867c0a8c27b6478984da4eb57d56be5ee0ef08157aad3b937f28d70faff36c6fbea9d6e344e658d5b3676a89da8080b420ef92c661c32c798ffb01abed4e1d53dc9d12994693f70305645eba113d757f3246871da0"], 0x4f) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0x8, 0xfffffffe, 0x40000000, 0x3}) r6 = socket$kcm(0x10, 0x400000002, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOBLANK(r7, 0x4611, 0x3) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe00ff7f000600000020000000004a073ef9195b921f3a19ff8e"], 0xfe33) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000740)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x80, 0x1c, {0x0, 0x9, 0xfffffffd, 0xfff8, 0x1000, 0x2f3, 0x7, 0x1, 0x81, 0x9, 0x6, 0x2}}, 0x0, 0x0, 0x0, 0x0}) fanotify_init(0x4000, 0x145800) r8 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r8, 0xc028564d, &(0x7f0000000140)={0x2}) r9 = getgid() r10 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r10, &(0x7f0000005e40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r10, &(0x7f0000005340)={0x78, 0x0, r11, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, r12, r13, 0xb, 0x8, 0x1000000}}}, 0x78) r14 = getgid() write$FUSE_DIRENTPLUS(r5, &(0x7f0000006880)=ANY=[@ANYBLOB="f0030000feffffff", @ANYRES64=0x0, @ANYBLOB="0200000000000000020000000000000001000000000000000500000000000000080000007000000000000000000000000200000000000000470000000000000003000000000000000100000000000000050000000000000009000000e70700001000000000c0000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2a000000faffffff0000000003000000000000000500000000000000070000001d0d00005c2f21262d5e28000200000000000000030000000000000010000000000000000c00000000000000010100000000000000000000000000008100000000000000010000000000000004010000000000000300000000000000ffffffff000000000200000009000000018000000060000000800000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="c905000002000000000000000200000000000000ffffff7f00000000010000002d8300007d000000000000000100000000000000020000000000000005000000000000000000000000000000010000000700000004000000000000000500000000000000080000000000000000000000000000000200000000000000010000000000000007000000070000000500000000100000e9d6f37e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080000000101000000000000050000000000000023000000000000000d000000040000002f6465762f6e65742f74756e00000000000000000000000002000000000000006d03000000000000ffffffffffffff7f00000000010000000600000000000000070000000000000001000000000000000400000000000000020000000000000080000000000000000500000009000000b0000000002000000d000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="06000000ff0f000000000000050000000000000000000000000000000b0000000500000073797a6b616c6c65723100000000000004000000000000000000000000000000cd04000000000000090000000000000007000000ff00000004000000000000000600000000000000040000000000000000040000000000000200000000000000050000000000000002000000050000000900000000a0000002000000", @ANYRES32=0xee01, @ANYRES32=r9, @ANYBLOB="0900000009000000000000000200000000000000100000000000000009000000010000002f6465762f6662300000000000000000030000000000000002000000000000003b02000000000000010000000000000009000000ce23000000000000000000000100000000000000ff01000000000000f19300000000000003000000000000000a00000000000000030000008b000000731c000000200000fcffffff", @ANYRES32=r12, @ANYRES32=r14, @ANYBLOB="020000000000000000000000030000000000000000040000000000000b0000000300000073797a6b616c6c657231000000000000"], 0x3f0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 4.500376295s ago: executing program 1 (id=2366): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r0, &(0x7f0000000200)={0x1f, @any, 0x9}, 0xa) bind$bt_rfcomm(r0, &(0x7f0000000000), 0xa) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) preadv2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/229, 0xe5}], 0x1, 0xffff, 0x80, 0x48) r2 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x4009013, r6, 0x0) ioctl$KVM_GET_XSAVE2(r6, 0x9000aecf, &(0x7f0000000000/0x800000)=nil) sendto$inet6(r3, &(0x7f0000000280)="32780f643983", 0x6, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) close(r3) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022150000989301000000a3c9a46a31570800000090b300000000"], 0x0}, 0x0) 4.49980184s ago: executing program 2 (id=2367): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x34d3542e, 0xfffffffe, 0x80000}) (async) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)="441f08d600270bee724ef54e91eeffbe1e68d5040d73161feeb0f24cb1", 0x1d) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="93fb26bd7000fcdb9f2505"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000040) (async) syz_usb_connect(0x2, 0x1b, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000170e8cff99041a104d4a0102030109020900000804a000fed81035c0a4cee97d712489ed7f34dba99b70a809f0662048b58f766228c57b52e812500b20d1cb5226da8c90da124d7dfa30a81257886808ac3bf905d4cbab53688542ba22dd075ba81d40e72314afa6b8b7539809fcf59937c4d15b33c24d5ad073e02dcf8e101aafc60e730908ac36680a3b305865ac78cad1e653b354a5f87cefb0793bf1e62b675880e3911313e5452958938379fe2ab2cb0b26a78e1026a950abaab05b7fdd409ce0cbb3f11f14f33f576dd893e6571b6a83bacb"], 0x0) (async) syz_usb_connect$cdc_ncm(0x4, 0x7c, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x2, 0x1, 0xd, 0xd0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffff73, 0x9, 0x1, 0x4}, {0x6, 0x24, 0x1a, 0x1, 0x18}, [@dmm={0x7, 0x24, 0x14, 0x28, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x6, 0x0, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x3, 0xe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x3, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x7, 0x0, 0xfc}}}}}}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x11, 0x4, 0xe, 0xff, 0x4}, 0x8, &(0x7f00000000c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x95, &(0x7f00000001c0)=@string={0x95, 0x3, "a42ff84663ae73cdb67aa9f5e9cc72d81573ce7eec83d2d67f438358538a296999d59b78a41d42ef6627b8ebde2837b96ef074e7e6efb6a00a966a95f44b73370d91d9c945d43604fc1ef8b92efa988f329abb07af2b9ea2685e57ba95cb08d387e76c0c7e276808131231041004425e99c6c379fe510da05f6c0a404a768e89b1320bf0c87310f8b6efd54ab6ca4bd073be83"}}]}) 4.196974133s ago: executing program 6 (id=2368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x8044) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1", @ANYRES32], 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100194deaa404c05c1063e67010203010902240001000000070904"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c11fffc000000000000000000000000000000ff0200000000000000000000000000014e224e21009c90"], 0xd2) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x501a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000400)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="200f07"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.873476748s ago: executing program 1 (id=2369): r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000040), 0x54300) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64=r0, @ANYRES64=r2, @ANYBLOB="000000000100000000000000840004"], 0x48}, 0x1, 0x0, 0x0, 0x2400c084}, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) 3.789042454s ago: executing program 1 (id=2370): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x1800, &(0x7f0000000280)={0x100004, 0x8a, 0x100000, {r1}}, 0x20) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x1800, &(0x7f0000000280)={0x100004, 0x8a, 0x100000, {r1}}, 0x20) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000480)={{@my=0x0}, 0x1, 0x2, 0x100}) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0) 3.78253216s ago: executing program 1 (id=2371): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) (async) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) (async) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) fsmount(r4, 0x0, 0x0) (async, rerun: 64) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f0000000040)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x219a, 0x4) (async) sendto$inet6(r6, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) (async) recvmmsg(r6, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x12000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) r8 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000ce30e5401d0687c159e500010902120001080000000904c40900f6ae21400000eed1c5ebba999e9e2cf65bac585bc127b1e6399afe2dc01e45179306d965efa1"], 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x4, 0x0, 0xfffff030}, {0x6, 0x0, 0x0, 0x10}]}, 0x10) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES8=r8], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000008060a0904000000000000000002000000040004800900010073797a30000000000900020073797a3100000000140000001100010000000000000000000000000a"], 0x58}}, 0x0) write(r6, &(0x7f0000000340)="f223ae2f16b7ced2e1c3a24b4bbffecee7de0d957290ee724df33ccff8b067fe75f06ee4091ed539b60fa4adf3ec4a3bc3fbecade79cf3bd42278871dcd19f99d5c9f3f1d7d53ca15aaa66c3d7decb9313cb143fd5bf007e157b6a0328eef0cabd26a324739f2a6af3b448c55550900edc4f6864f4f648f9991e16eee7d44db7b05bb811cb011a2a7934864f1e8bc30b5c3528f9949bfc7675cb4df9981b5338a8a91df15beab79a6a80b2d38c859806222d486dc71663cd7f9cfb3c6333b010bc9cc9ac0487735daf707c73f868e7a85379da3bbb074a660cb185091e1f200b57ded8b1cbddb48bcd4837dbb2ac9ca86ab5c8b1311b", 0xf6) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xd) r11 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r11, 0x65, 0x6, 0x0, &(0x7f00000016c0)) write$binfmt_aout(r7, &(0x7f0000002200)=ANY=[], 0xff2e) setpgid(0x0, r5) (async) socket$inet_sctp(0x2, 0x5fcc6cdf1b9be778, 0x84) 3.633645505s ago: executing program 1 (id=2372): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='comm\x00') ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000000)=0x8) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2.777014293s ago: executing program 1 (id=2373): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x77, 0x60, 0xdd, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x3, 0x4a, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x40, 0x0, 0x81}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x8, 0xf1}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x6, 0x0, 0x6f, 0x40, 0x73}, 0x19, &(0x7f00000000c0)={0x5, 0xf, 0x19, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x28, 0x8, 0x6, 0x7fff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xf0, 0x3, 0x9}]}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x40c}}]}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 32) r3 = eventfd(0x1) (rerun: 32) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x4, r3, 0xb}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a201"], 0x0}, 0x0) 1.449322103s ago: executing program 5 (id=2374): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) close(0x3) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x9, 0x8, 0x7, 0x4}, {0x2, 0x0, 0x0, 0x8}, {0x80, 0x0, 0x4, 0x1}, {0x8, 0xe, 0x4, 0x7fff}, {0x4c, 0x6, 0x0, 0x7}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}]}, 0x24}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000001c0)={r2, 0x8, 0x3}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xb0e, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2a, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x7f, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x20d}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc0, 0x23, 0x2}}}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}}) 1.378413404s ago: executing program 2 (id=2375): syz_usb_connect(0x3, 0x9a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc4, 0xd5, 0xd7, 0x40, 0x12d1, 0x140a, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0xee, 0xfc, 0xfb, 0x0, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "290de1ae5b"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x0, 0x262, 0x4}, [@ncm={0x6, 0x24, 0x1a, 0x9ff, 0x2}, @ncm={0x6, 0x24, 0x1a, 0x9, 0x24}, @ncm={0x6, 0x24, 0x1a, 0x0, 0x10}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '\"'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffff271d, 0x3, 0x0, 0xcb}, [@mbim_extended={0x8, 0x24, 0x1c, 0xfc1, 0x9d, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x989f, 0x1, 0xff01}, @mdlm={0x15, 0x24, 0x12, 0x80}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x8}, @country_functional={0x6, 0x24, 0x7, 0xf3, 0x5}]}]}}]}}]}}, 0x0) (async) r0 = syz_usb_connect(0x3, 0x9a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc4, 0xd5, 0xd7, 0x40, 0x12d1, 0x140a, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0xee, 0xfc, 0xfb, 0x0, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "290de1ae5b"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x0, 0x262, 0x4}, [@ncm={0x6, 0x24, 0x1a, 0x9ff, 0x2}, @ncm={0x6, 0x24, 0x1a, 0x9, 0x24}, @ncm={0x6, 0x24, 0x1a, 0x0, 0x10}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '\"'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffff271d, 0x3, 0x0, 0xcb}, [@mbim_extended={0x8, 0x24, 0x1c, 0xfc1, 0x9d, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x989f, 0x1, 0xff01}, @mdlm={0x15, 0x24, 0x12, 0x80}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x8}, @country_functional={0x6, 0x24, 0x7, 0xf3, 0x5}]}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x9}}) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x0, 0x20}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x0, 0x20}, 0x10) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 1.109290862s ago: executing program 6 (id=2376): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) syz_usb_connect(0x1, 0x4d, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYBLOB="bd5b3d39da699ed072f707a79254ed08b1807606799d28da966528b3229ff7f25df8123c30922636a9f7ce7b9ea767bd31b7cfab978f2be4f8bcad90c34e0e88ac738a8b5e27d5b862abdd5e34055387da1a1daa7eba94578fb398538bfbd85f3ba5aa4d60796e4b7656854f45bf8218ee9df510cedf0461f4c0ad4a3b3710a19ecbfb13c482f335acf8cf709fff58fd177b55380f64a9757f5336c5f47b515adb"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x1401}}, {0xe0, &(0x7f0000000100)=@string={0xe0, 0x3, "01e7f4bcdddef790e8c3856b0bace429957d884c271032e41222e8e5fadb878b0f59fabf4c7dfd506af1693f88ee77642625cc9057970fb78254e668872714c58b7973af4a2dc539414aed0b928d67f35ca0734b0ccbfff24a22e0841e82820c679eb93343ab1d80f46e9aa32ae6fb594abefb4d0e6e41c608db1cf560b31564b7e126b468da93e88261f96298b3c97f09bc6795828582a9afe991ad2cd265bf0284cd4aca825cb41ddafa2c72c638e8b008111dd1d90345e8a350d1717d2680c3052421b9f6685715f66db47ab19bdd11d7df1c97b9e1dd3ffab884e619"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x40d}}]}) 763.416339ms ago: executing program 2 (id=2377): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (fail_nth: 1) 419.834253ms ago: executing program 2 (id=2378): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 328.818305ms ago: executing program 2 (id=2379): syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mount$nfs(&(0x7f0000000040)='{.', 0x0, 0x0, 0x28803, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f00000000c0)) write$UHID_INPUT(r1, &(0x7f0000001340)={0xf, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r1, &(0x7f0000001340)={0xf, {"a2e3ad21e08eeb661b5d380987f70e06d038e7ff7fc6e5539b0d650e8b089b3f373b68090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bd4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000b8fd84e9463889dae599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {0x0}], 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000080)=@x86={0x3, 0xe, 0x7, 0x0, 0xb7, 0x2d, 0xe, 0x4, 0x8, 0x5, 0x5, 0x4, 0x0, 0x3ff, 0x6, 0xb, 0x89, 0x9, 0xa, '\x00', 0x2, 0x5}) (async) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000080)=@x86={0x3, 0xe, 0x7, 0x0, 0xb7, 0x2d, 0xe, 0x4, 0x8, 0x5, 0x5, 0x4, 0x0, 0x3ff, 0x6, 0xb, 0x89, 0x9, 0xa, '\x00', 0x2, 0x5}) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000010002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x40140, 0x0) (async) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x40140, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r9, 0x40086602, &(0x7f0000000000)) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020300021100000100008000000000000200080008000000a30000000000000005000600000000000a00000000000000fc02000000000000000000000000000000000000000000000200010000000000000009000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000100220c00000000"], 0x88}, 0x1, 0x7}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, 0x0) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, 0x0) 189.025354ms ago: executing program 2 (id=2380): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f7", 0x1d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da", 0x33}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000000000000000e41b07c0900ac00060311000000040005000a0012060048035c3b61c102000000007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c220175730d16a4683f5ae24e25ccac9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000348cc5614f7da773c20c6a6c8bd414c8da", 0xd8}], 0x1}, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc058560f, &(0x7f0000000140)={0x0, 0x1, 0x0, "18e889d54b38429faa8ff62438efed752e685d72d09382b392b049e339589830"}) ioctl$AUTOFS_IOC_FAIL(r6, 0x40087543, 0x200000000000) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x84, &(0x7f0000000180)={r11, @in={{0x2, 0x4e20, @empty}}, 0x7, 0x4002}, 0x90) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000500)={0x0, 0x9, 0x8, 0x1}) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f0000000100)={{r9}, {@val={r12}, @actul_num={@val=0x2b, 0x7fffffffffffffff, 0x4d}}}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) r14 = socket$packet(0x11, 0x3, 0x300) r15 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x181440) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$MON_IOCX_MFETCH(r15, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000a00)={'wlan0\x00'}) 0s ago: executing program 5 (id=2381): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) close(0x3) syz_usb_connect$uac1(0x5, 0x99, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x3, 0x1, 0x7, 0x0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x3, 0xc, 0x5, "19", "b6e746"}, @as_header={0x7, 0x24, 0x1, 0x1, 0xe9, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x10, 0x1, 0x18, {0x7, 0x25, 0x1, 0x82, 0x3, 0xf800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xb4, 0x3, 0x0, 0x8}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x5, 0x1, 0x6, 0x3, "a7afec", "afc4"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x30, 0xe9, 0x7, {0x7, 0x25, 0x1, 0x1, 0x3, 0x7f}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x10, 0x0, 0x7, 0x3, 0x10, 0x7f}, 0x6b, &(0x7f0000000140)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0xb, 0x5, 0xff01, 0x7}]}, 0x2, [{0x8, &(0x7f00000001c0)=@string={0x8, 0x3, "550af9d68436"}}, {0xd1, &(0x7f0000000200)=ANY=[@ANYBLOB="d103f1e415bacf7d3c297488eabb5281d24683a96d2543277d899116021237d738eedc49c5951a66b631246a422e463f4aef9e79bd1895baf77437a80d25e146dee6e9499f03e91da8a393d80834d11fd7952a0d4e05b69e4f9eec5274a7d95f4e27455092e02e40856c632f4b95384396529e113bb5d9d06b7f856eeef83a07000000a266a2c88be97ccf8764e365ac8f06ebb2cf780965039f0f905547fcd233e2c2d3209388098b3f15b63c414df26420b47400ad97521b890d96ffb63068696acf93e323b046968023ada5fd91"]}]}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f031c00dce0140006001e0089e9aaa911d7c2290f0089061327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0xa3, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000380)={0x28, 0x4, r1, r6, 0xa68b, 0xfffffffffffffff6, 0x1, 0x97afd}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x2, r5, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0x3) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3, 0x91, 0xea, 0x40, 0x547, 0x2720, 0xde7f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5a, 0x0, 0x0, 0x28, 0xfc, 0x89}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): ait 00 [ 455.354029][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.359448][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.364876][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.370233][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.376183][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.381615][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.386900][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.401201][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.406568][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.417141][ T5966] usb 2-1: USB disconnect, device number 120 [ 455.430732][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.447560][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.463765][ T5860] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 455.465514][ T5861] gspca_vc032x: Unknown sensor... [ 455.482124][ T5861] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 455.489361][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.509026][ T5860] usb 6-1: config 0 descriptor?? [ 455.717222][ T5860] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 455.919115][ T5860] [drm:udl_init] *ERROR* Selecting channel failed [ 455.946463][ T5860] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 455.958453][ T5860] [drm] Initialized udl on minor 2 [ 455.967276][ T5860] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 455.982338][ T5860] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 455.996432][ T5911] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 456.006097][ T5860] usb 6-1: USB disconnect, device number 109 [ 456.013993][ T5911] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 456.320829][ T5861] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 456.493295][ T5861] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 456.515052][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.525487][ T5861] usb 2-1: Product: syz [ 456.529934][ T5861] usb 2-1: Manufacturer: syz [ 456.536282][ T5861] usb 2-1: SerialNumber: syz [ 456.554830][ T5861] usb 2-1: config 0 descriptor?? [ 456.571544][ T5861] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 456.593506][ T5966] usb 3-1: USB disconnect, device number 76 [ 456.716519][T12980] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 456.728077][T12980] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 456.745669][T12980] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 456.761656][T12980] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 457.170594][ T5911] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 457.194367][ T5966] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 457.347801][T13005] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2003'. [ 457.359157][T13005] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2003'. [ 457.379121][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.390427][ T5966] usb 6-1: Using ep0 maxpacket: 8 [ 457.397829][ T5911] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 457.408708][ T5966] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 457.424475][ T5911] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 457.426857][ T5966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.436681][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.460237][ T5966] usb 6-1: Product: syz [ 457.464136][ T5911] usb 3-1: config 0 descriptor?? [ 457.470759][ T5966] usb 6-1: Manufacturer: syz [ 457.475406][ T5966] usb 6-1: SerialNumber: syz [ 457.500938][ T5966] usb 6-1: config 0 descriptor?? [ 457.517933][ T5966] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 457.997728][ T5911] Bluetooth: Can't get version to change to load ram patch err [ 458.005470][ T5911] Bluetooth: Loading patch file failed [ 458.012255][ T5911] ath3k 3-1:0.0: probe with driver ath3k failed with error -121 [ 458.385098][T12990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.394601][T12990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.709835][ T5861] gspca_sunplus: reg_r err -110 [ 458.715519][ T5861] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 458.805811][ T5966] gspca_sonixj: reg_w1 err -71 [ 458.901403][ T5966] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 458.911853][ T5966] usb 6-1: USB disconnect, device number 110 [ 459.424771][ T5966] usb 2-1: USB disconnect, device number 121 [ 459.493368][T13026] netlink: 'syz.1.2006': attribute type 10 has an invalid length. [ 459.507771][T13026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.517717][T13026] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 459.586481][T13030] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 459.899028][ T5966] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 459.930953][ T5861] usb 3-1: USB disconnect, device number 77 [ 459.971259][ T5968] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 460.053010][T13036] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2010'. [ 460.060532][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 460.073567][ T5966] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 460.085390][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 460.099504][ T5966] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 460.108777][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.117988][ T5966] usb 2-1: Product: syz [ 460.122416][ T5966] usb 2-1: Manufacturer: syz [ 460.127029][ T5966] usb 2-1: SerialNumber: syz [ 460.135281][ T5968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.148023][ T5966] usb 2-1: config 0 descriptor?? [ 460.155939][T13030] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 460.168248][ T5968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.175695][T13030] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 460.206214][ T5968] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 460.220112][ T5966] usb 2-1: ucan: probing device on interface #0 [ 460.228265][ T5968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.252318][ T5968] usb 6-1: config 0 descriptor?? [ 460.474003][ T5968] logitech 0003:046D:C29C.0024: unknown main item tag 0x0 [ 460.485525][ T5968] logitech 0003:046D:C29C.0024: unknown main item tag 0x0 [ 460.494293][ T5968] logitech 0003:046D:C29C.0024: unknown main item tag 0x0 [ 460.514469][ T5968] logitech 0003:046D:C29C.0024: unknown main item tag 0x0 [ 460.522723][ T5968] logitech 0003:046D:C29C.0024: unknown main item tag 0x0 [ 460.536263][ T5968] logitech 0003:046D:C29C.0024: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0 [ 460.637705][T13030] netlink: 'syz.1.2006': attribute type 10 has an invalid length. [ 460.651716][T13030] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2006'. [ 460.693133][ T43] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 460.729498][T13030] batadv0: entered promiscuous mode [ 460.734877][T13030] batadv0: entered allmulticast mode [ 460.749159][ T5968] logitech 0003:046D:C29C.0024: no inputs found [ 460.758591][T13030] bond0: (slave batadv0): Releasing backup interface [ 460.783364][T13030] bridge0: port 3(batadv0) entered blocking state [ 460.800251][ T5968] usb 6-1: USB disconnect, device number 111 [ 460.810830][T13030] bridge0: port 3(batadv0) entered disabled state [ 460.864553][T13061] comedi comedi3: pcl724: a I/O base address must be specified [ 460.881600][ T43] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 460.898567][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.920685][ T43] usb 3-1: config 0 descriptor?? [ 461.109927][ T50] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 461.119472][ T50] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 461.176034][ T43] kaweth 3-1:0.0: Firmware present in device. [ 461.188188][ T43] kaweth 3-1:0.0: Error reading configuration (-32), no net device created [ 461.197924][ T43] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 461.448541][ T5966] usb 2-1: ucan: failed to retrieve device info [ 461.454942][ T5966] usb 2-1: ucan: probe failed; try to update the device firmware [ 461.512765][ T5966] usb 3-1: USB disconnect, device number 78 [ 461.538362][ T43] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 461.717762][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 461.733541][ T43] usb 6-1: config 251 has no interfaces? [ 461.737517][T13081] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 461.744920][ T43] usb 6-1: New USB device found, idVendor=0499, idProduct=101e, bcdDevice=9f.69 [ 461.751939][T13081] netlink: 'syz.2.2022': attribute type 3 has an invalid length. [ 461.758449][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.768950][T13081] netlink: 'syz.2.2022': attribute type 4 has an invalid length. [ 461.773051][ T43] usb 6-1: Product: syz [ 461.785292][ T43] usb 6-1: Manufacturer: syz [ 461.786801][T13081] netlink: 'syz.2.2022': attribute type 5 has an invalid length. [ 461.790005][ T43] usb 6-1: SerialNumber: syz [ 461.807299][T13081] netlink: 'syz.2.2022': attribute type 6 has an invalid length. [ 461.815260][T13081] netlink: 'syz.2.2022': attribute type 7 has an invalid length. [ 461.824141][T13081] netlink: 'syz.2.2022': attribute type 7 has an invalid length. [ 461.832294][T13081] netlink: 13014 bytes leftover after parsing attributes in process `syz.2.2022'. [ 462.011875][ T5966] usb 6-1: USB disconnect, device number 112 [ 462.114513][T13095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2026'. [ 462.358002][ T5911] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 462.492982][ T5966] usb 2-1: USB disconnect, device number 122 [ 462.511550][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short [ 462.533183][ T5911] usb 3-1: not running at top speed; connect to a high speed hub [ 462.557332][ T5911] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.585578][ T5911] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 462.586864][T13097] netdevsim netdevsim1: Direct firmware load for . [ 462.586864][T13097] failed with error -2 [ 462.607306][ T5911] usb 3-1: string descriptor 0 read error: -22 [ 462.611140][T13097] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 462.611140][T13097] [ 462.615276][ T5911] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 462.637902][T13099] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 462.638068][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.681355][ T5911] usb 3-1: 0:2 : does not exist [ 462.713452][T13103] netlink: 'syz.5.2029': attribute type 21 has an invalid length. [ 462.727422][T13103] IPv6: NLM_F_CREATE should be specified when creating new route [ 462.738863][T13103] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 462.746946][T13103] IPv6: NLM_F_CREATE should be set when creating new route [ 462.754231][T13103] IPv6: NLM_F_CREATE should be set when creating new route [ 462.761486][T13103] IPv6: NLM_F_CREATE should be set when creating new route [ 462.947558][ T5966] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 463.076631][ T5911] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 463.087896][ T5911] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 463.098018][ T5966] usb 6-1: Using ep0 maxpacket: 16 [ 463.100591][ T5911] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 463.105517][ T5966] usb 6-1: config 8 has an invalid interface number: 57 but max is 0 [ 463.122961][ T5966] usb 6-1: config 8 has an invalid descriptor of length 252, skipping remainder of the config [ 463.136151][ T5966] usb 6-1: config 8 has no interface number 0 [ 463.142814][ T5966] usb 6-1: config 8 interface 57 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 463.152080][ T5911] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 463.156333][ T5966] usb 6-1: config 8 interface 57 has no altsetting 0 [ 463.173617][ T5966] usb 6-1: New USB device found, idVendor=39c6, idProduct=8f68, bcdDevice=dd.44 [ 463.182858][ T5911] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 463.184340][ T5966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.199117][ T5966] usb 6-1: Product: syz [ 463.203364][ T5966] usb 6-1: Manufacturer: syz [ 463.209251][ T5966] usb 6-1: SerialNumber: syz [ 463.218221][ T5911] usb 3-1: USB disconnect, device number 79 [ 463.436172][ T5966] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 463.452930][ T5966] usb 6-1: MIDIStreaming interface descriptor not found [ 463.504367][ T5966] usb 6-1: USB disconnect, device number 113 [ 463.571181][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.57/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 463.804205][T13122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.407053][ T24] usb 6-1: new full-speed USB device number 114 using dummy_hcd [ 464.547050][ T24] usb 6-1: device descriptor read/64, error -71 [ 464.786944][ T24] usb 6-1: new full-speed USB device number 115 using dummy_hcd [ 464.926691][ T24] usb 6-1: device descriptor read/64, error -71 [ 465.057363][ T24] usb usb6-port1: attempt power cycle [ 465.316546][ T11] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 465.406244][ T24] usb 6-1: new full-speed USB device number 116 using dummy_hcd [ 465.427288][ T24] usb 6-1: device descriptor read/8, error -71 [ 465.478012][ T11] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.490180][ T11] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 465.499391][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.507539][ T11] usb 3-1: Product: syz [ 465.511725][ T11] usb 3-1: Manufacturer: syz [ 465.516724][ T11] usb 3-1: SerialNumber: syz [ 465.523187][ T11] usb 3-1: config 0 descriptor?? [ 465.531463][ T11] powermate 3-1:0.0: probe with driver powermate failed with error -22 [ 465.666147][ T24] usb 6-1: new full-speed USB device number 117 using dummy_hcd [ 465.687438][ T24] usb 6-1: device descriptor read/8, error -71 [ 465.734654][ T5966] usb 3-1: USB disconnect, device number 80 [ 465.796291][ T24] usb usb6-port1: unable to enumerate USB device [ 466.346858][ T9] usb 2-1: new low-speed USB device number 123 using dummy_hcd [ 466.508633][ T9] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 466.519978][ T9] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 466.530866][ T9] usb 2-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 466.544160][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 466.550945][ T9] usb 2-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 466.560110][ T5911] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 466.567790][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.582298][ T9] usb 2-1: config 0 descriptor?? [ 466.588149][T13166] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 466.730030][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short [ 466.738977][ T5911] usb 3-1: config 5 has an invalid interface number: 126 but max is 1 [ 466.748030][ T5911] usb 3-1: config 5 has no interface number 1 [ 466.754169][ T5911] usb 3-1: config 5 interface 126 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 466.765132][ T5911] usb 3-1: config 5 interface 126 altsetting 2 endpoint 0x83 has an invalid bInterval 88, changing to 7 [ 466.776444][ T5911] usb 3-1: config 5 interface 126 altsetting 2 endpoint 0x83 has invalid maxpacket 16812, setting to 1024 [ 466.787900][ T5911] usb 3-1: config 5 interface 126 altsetting 2 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 466.802632][ T5911] usb 3-1: config 5 interface 0 altsetting 129 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 466.813774][ T5911] usb 3-1: config 5 interface 0 altsetting 129 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 466.824759][ T5911] usb 3-1: config 5 interface 126 has no altsetting 0 [ 466.831690][ T5911] usb 3-1: config 5 interface 0 has no altsetting 0 [ 466.841173][ T5911] usb 3-1: Dual-Role OTG device on HNP port [ 466.849851][ T5911] usb 3-1: New USB device found, idVendor=187f, idProduct=0201, bcdDevice=ee.22 [ 466.858962][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.867172][ T5911] usb 3-1: Product: Ы [ 466.871263][ T5911] usb 3-1: Manufacturer: я [ 466.875818][ T5911] usb 3-1: SerialNumber: Ტ敐奵怒呩ﰩ䍢硴婪䝜궘腈岲ⱊ慊牉ᄤ䘡﭅变펤㷨주ꯨ헗硦퓄䊳麏䳀ݥ뜕砻䬲㉂ꟽ巹泼ꍎ薍䏑䑂ꮢড়˙ﶰ嫯ᶨ餿떐卨㢁嘗滿荵뭯週탗ᙟ禮話쨌ट笹鉱棘钭꒟옫쥎㟽쳰䕟䲴♽ഥ澌䵌퓭ꗷⴥ롥 [ 467.008732][ T9] hid (null): invalid report_size 39528 [ 467.014422][ T9] hid (null): global environment stack underflow [ 467.026793][ T9] nintendo 0003:057E:2009.0025: invalid report_size 39528 [ 467.033962][ T9] nintendo 0003:057E:2009.0025: item 0 2 1 7 parsing failed [ 467.044105][ T9] nintendo 0003:057E:2009.0025: HID parse failed [ 467.051750][ T9] nintendo 0003:057E:2009.0025: probe - fail = -22 [ 467.058589][ T9] nintendo 0003:057E:2009.0025: probe with driver nintendo failed with error -22 [ 467.232725][T13177] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2053'. [ 467.265900][T13177] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2053'. [ 467.684226][ T5911] smsusb:smsusb_probe: board id=3, interface number 126 [ 467.700521][ T5911] smsusb:smsusb_probe: board id=3, interface number 0 [ 467.711433][ T5911] usb 3-1: USB disconnect, device number 81 [ 468.942327][T13210] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 469.054517][ T43] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 469.147210][ T5860] usb 2-1: USB disconnect, device number 123 [ 469.216549][ T43] usb 3-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 469.237078][ T43] usb 3-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 469.264332][ T43] usb 3-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0 [ 469.264591][ T9] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 469.274182][ T43] usb 3-1: config 48 interface 0 altsetting 98 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 469.298622][ T43] usb 3-1: config 48 interface 0 has no altsetting 0 [ 469.309852][ T43] usb 3-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 469.321350][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.330126][ T43] usb 3-1: Product: syz [ 469.338150][ T43] usb 3-1: Manufacturer: syz [ 469.342760][ T43] usb 3-1: SerialNumber: syz [ 469.461660][ T9] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 469.480490][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.501986][ T9] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 469.521561][ T9] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 469.544193][ T9] usb 6-1: Manufacturer: syz [ 469.559620][ T9] usb 6-1: config 0 descriptor?? [ 469.603923][ T43] usb 3-1: USB disconnect, device number 82 [ 469.684293][ T9] rc_core: IR keymap rc-hauppauge not found [ 469.690350][ T9] Registered IR keymap rc-empty [ 469.696412][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 469.708106][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input41 [ 469.807504][ T9] usb 6-1: USB disconnect, device number 118 [ 469.924277][ T5860] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 470.076845][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 470.088773][ T5860] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 470.098268][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.106592][ T5860] usb 2-1: Product: syz [ 470.114020][ T5860] usb 2-1: Manufacturer: syz [ 470.125032][ T5860] usb 2-1: SerialNumber: syz [ 470.138179][ T5860] usb 2-1: config 0 descriptor?? [ 470.194540][ T9] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 470.348043][T13246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.363898][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 470.392378][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.399616][T13246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.414731][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.432278][ T9] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 470.447116][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.456660][T13250] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2073'. [ 470.471951][T13250] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2073'. [ 470.472390][ T9] usb 6-1: config 0 descriptor?? [ 470.483502][T13245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2073'. [ 470.495322][ T5860] usb 2-1: USB disconnect, device number 124 [ 470.508644][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2073'. [ 470.521998][T13245] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.569765][ T5870] udevd[5870]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.712072][T13234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.721753][T13234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.855633][ T5968] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 470.942978][ T9] ft260 0003:0403:6030.0026: unknown main item tag 0x7 [ 470.972762][T13254] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 470.997320][ T5968] usb 3-1: device descriptor read/64, error -71 [ 471.051345][T13256] wireguard: wg1: Could not create IPv4 socket [ 471.132811][ T9] ft260 0003:0403:6030.0026: chip code: 6424 8183 [ 471.172696][T13258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2078'. [ 471.182863][T13258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2078'. [ 471.254774][ T5968] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 471.340337][ T9] ft260 0003:0403:6030.0026: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 471.393560][ T5968] usb 3-1: device descriptor read/64, error -71 [ 471.442741][T13269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2080'. [ 471.516915][ T5968] usb usb3-port1: attempt power cycle [ 471.519445][T13271] loop6: detected capacity change from 0 to 524288000 [ 471.542506][ T9] ft260 0003:0403:6030.0026: failed to retrieve status: -71, no wakeup [ 471.554408][ T9] ft260 0003:0403:6030.0026: failed to retrieve status: -71 [ 471.562411][ T9] ft260 0003:0403:6030.0026: failed to reset I2C controller: -71 [ 471.585209][T13271] loop6: detected capacity change from 524288000 to 1 [ 471.585828][ T9] usb 6-1: USB disconnect, device number 119 [ 471.704808][ T5231] Dev loop6: unable to read RDB block 1 [ 471.710533][ T5231] loop6: unable to read partition table [ 471.719454][ T5231] loop6: partition table beyond EOD, truncated [ 471.863060][ T5968] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 471.907202][ T5968] usb 3-1: device descriptor read/8, error -71 [ 472.148660][T13282] overlay: filesystem on ./file1 not supported [ 472.155018][ T5968] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 472.184733][ T5968] usb 3-1: device descriptor read/8, error -71 [ 472.293404][ T5968] usb usb3-port1: unable to enumerate USB device [ 472.580566][T13286] netlink: 'syz.1.2086': attribute type 40 has an invalid length. [ 472.822555][ T5968] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 472.972973][ T5968] usb 2-1: Using ep0 maxpacket: 8 [ 472.983067][ T5968] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 472.995007][ T5968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 473.015417][ T5968] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 473.025098][ T5968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.042640][ T5968] usb 2-1: Product: syz [ 473.046841][ T5968] usb 2-1: Manufacturer: syz [ 473.051441][ T5968] usb 2-1: SerialNumber: syz [ 473.079907][ T5968] usb 2-1: config 0 descriptor?? [ 473.095621][ T5968] streamzap 2-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 473.108144][T13292] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2089'. [ 473.296228][T13286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.305956][T13286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.365385][ T43] usb 2-1: USB disconnect, device number 125 [ 473.522697][ T5968] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 473.684502][ T5968] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 473.700506][ T5968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 473.713032][ T5968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 473.729542][ T5968] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 473.744549][ T5968] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 473.753893][ T5968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.765138][ T5968] usb 6-1: config 0 descriptor?? [ 474.032013][T12501] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 474.151894][ T9] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 474.188022][T12501] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.190036][ T5968] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 474.220873][T12501] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 474.236176][T12501] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 474.247328][T12501] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 474.259641][T12501] usb 3-1: SerialNumber: syz [ 474.323949][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 474.330599][ T9] usb 2-1: config 1 has an invalid descriptor of length 253, skipping remainder of the config [ 474.341393][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.356573][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 474.365817][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 474.375273][ T9] usb 2-1: SerialNumber: syz [ 474.513935][ T5968] usb 6-1: USB disconnect, device number 120 [ 474.550912][T13304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.567218][T13304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.595134][T13306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.608172][T13306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.800704][T12501] usb 3-1: 0:2 : does not exist [ 474.818466][T12501] usb 3-1: USB disconnect, device number 87 [ 474.849098][ T8488] udevd[8488]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 475.177889][ T9] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 475.186522][ T9] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 475.208069][ T9] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 475.237061][ T9] usb 2-1: USB disconnect, device number 126 [ 475.297453][T13318] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 475.306672][T13318] tipc: Enabled bearer , priority 10 [ 475.370175][T13320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2098'. [ 475.418896][T13322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2099'. [ 475.464172][T13326] loop8: detected capacity change from 0 to 8 [ 475.475935][T13326] Dev loop8: unable to read RDB block 8 [ 475.481613][T13326] loop8: unable to read partition table [ 475.487386][T13326] loop8: partition table beyond EOD, truncated [ 475.494710][T13326] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 475.504343][ T43] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 475.631753][ T9] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 475.695389][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 475.703909][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 475.713046][ T43] usb 6-1: config 248 has an invalid interface number: 3 but max is 2 [ 475.721579][ T43] usb 6-1: config 248 has an invalid interface number: 190 but max is 2 [ 475.730002][ T43] usb 6-1: config 248 has an invalid interface number: 111 but max is 2 [ 475.738414][ T43] usb 6-1: config 248 has no interface number 0 [ 475.744791][ T43] usb 6-1: config 248 has no interface number 1 [ 475.751132][ T43] usb 6-1: config 248 has no interface number 2 [ 475.757433][ T43] usb 6-1: config 248 interface 3 has no altsetting 0 [ 475.764414][ T43] usb 6-1: config 248 interface 190 has no altsetting 0 [ 475.771629][ T43] usb 6-1: config 248 interface 111 has no altsetting 0 [ 475.780442][ T43] usb 6-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=91.28 [ 475.781230][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 475.789571][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.802785][ T43] usb 6-1: Product: syz [ 475.807251][ T43] usb 6-1: Manufacturer: syz [ 475.814310][ T9] usb 2-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=11.bf [ 475.815232][ T43] usb 6-1: SerialNumber: syz [ 475.824127][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.836518][ T9] usb 2-1: Product: syz [ 475.840695][ T9] usb 2-1: Manufacturer: syz [ 475.848500][ T9] usb 2-1: SerialNumber: syz [ 475.856438][ T9] usb 2-1: config 0 descriptor?? [ 475.865799][ T9] usb 2-1: MBOX3: Invalid descriptor size=18. [ 475.933449][ T52] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 475.942922][ T52] Bluetooth: hci3: Injecting HCI hardware error event [ 475.951253][ T5865] Bluetooth: hci3: hardware error 0x00 [ 476.070784][ T9] usb 2-1: USB disconnect, device number 127 [ 476.073780][ T43] usb 6-1: USB disconnect, device number 121 [ 476.613062][T13340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.810513][ T9] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 476.811485][T13348] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2109'. [ 476.970646][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 476.978275][ T9] usb 3-1: config index 0 descriptor too short (expected 21220, got 36) [ 476.986886][ T9] usb 3-1: config 158 has too many interfaces: 249, using maximum allowed: 32 [ 476.995825][ T9] usb 3-1: config 158 has an invalid descriptor of length 109, skipping remainder of the config [ 477.006428][ T9] usb 3-1: config 158 has 0 interfaces, different from the descriptor's value: 249 [ 477.015822][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 477.025032][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.251812][T13339] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 477.477233][ T9] usb 3-1: string descriptor 0 read error: -71 [ 477.498765][ T9] usb 3-1: USB disconnect, device number 88 [ 477.529048][T13355] comedi comedi4: bad chanlist[0]=0x00080002 chan=2 range length=2 [ 477.752657][T13370] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2118'. [ 477.990051][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 478.000030][ T5865] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 478.050981][ T43] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 478.150065][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 478.156599][ T9] usb 2-1: config 6 has an invalid descriptor of length 142, skipping remainder of the config [ 478.168622][ T9] usb 2-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 478.179737][ T9] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=20.3d [ 478.188913][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.197022][ T9] usb 2-1: Product: syz [ 478.201250][ T9] usb 2-1: Manufacturer: syz [ 478.206212][ T9] usb 2-1: SerialNumber: syz [ 478.221533][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.233760][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.246120][ T43] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 478.255309][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.266177][ T43] usb 6-1: config 0 descriptor?? [ 478.423469][ T9] usb 2-1: USB disconnect, device number 2 [ 478.924335][T13382] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2122'. [ 479.249545][ T5968] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 479.257259][ T5966] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 479.389438][ T5968] usb 3-1: device descriptor read/64, error -71 [ 479.395857][ T5966] usb 2-1: device descriptor read/64, error -71 [ 479.483340][T13374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.495316][T13374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.506470][ T43] uclogic 0003:256C:006D.0028: v1 frame probing failed: -71 [ 479.516148][ T43] uclogic 0003:256C:006D.0028: failed probing parameters: -71 [ 479.524116][ T43] uclogic 0003:256C:006D.0028: probe with driver uclogic failed with error -71 [ 479.537049][ T43] usb 6-1: USB disconnect, device number 122 [ 479.629441][ T5968] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 479.639138][ T5966] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 479.769208][ T5966] usb 2-1: device descriptor read/64, error -71 [ 479.775581][ T5968] usb 3-1: device descriptor read/64, error -71 [ 479.899300][ T5966] usb usb2-port1: attempt power cycle [ 479.905088][ T5968] usb usb3-port1: attempt power cycle [ 480.193501][T13399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.203453][T13399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.249776][ T5966] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 480.257415][ T5968] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 480.304350][ T5966] usb 2-1: device descriptor read/8, error -71 [ 480.311058][ T5968] usb 3-1: device descriptor read/8, error -71 [ 480.390057][T13402] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2128'. [ 480.422688][T12501] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 480.568718][T12501] usb 6-1: device descriptor read/64, error -71 [ 480.568716][ T5966] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 480.568876][ T5968] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 480.619479][ T5966] usb 2-1: device descriptor read/8, error -71 [ 480.629300][ T5968] usb 3-1: device descriptor read/8, error -71 [ 480.729689][ T5966] usb usb2-port1: unable to enumerate USB device [ 480.738907][ T5968] usb usb3-port1: unable to enumerate USB device [ 480.818847][T12501] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 481.028666][T13413] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2131'. [ 481.448371][T12501] usb 6-1: device descriptor read/64, error -71 [ 481.558644][T12501] usb usb6-port1: attempt power cycle [ 481.673959][T13431] block nbd6: Attempted send on invalid socket [ 481.683391][T13431] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 481.693832][T13431] SQUASHFS error: Failed to read block 0x0: -5 [ 481.701369][T13431] unable to read squashfs_super_block [ 481.918190][T12501] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 481.938427][T12501] usb 6-1: device descriptor read/8, error -71 [ 482.036860][T13433] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2137'. [ 482.106348][T13440] fuse: Bad value for 'fd' [ 482.177921][T12501] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 482.198269][T12501] usb 6-1: device descriptor read/8, error -71 [ 482.311798][T12501] usb usb6-port1: unable to enumerate USB device [ 482.349757][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 482.507710][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 482.514180][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 482.525452][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 482.535576][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 482.545626][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.561197][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 482.570382][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.597650][ T5966] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 482.727629][ T5966] usb 3-1: device descriptor read/64, error -71 [ 482.783003][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 482.788676][ T9] usbtmc 2-1:16.0: can't read capabilities [ 482.977939][ T5966] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 483.107510][ T5966] usb 3-1: device descriptor read/64, error -71 [ 483.218111][ T5966] usb usb3-port1: attempt power cycle [ 483.335749][T13453] fuse: Bad value for 'fd' [ 483.351388][ T5968] usb 2-1: USB disconnect, device number 7 [ 483.454983][T13466] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 483.513638][T13470] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2147'. [ 483.533167][T13472] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2148'. [ 483.549547][T13472] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2148'. [ 483.558662][ T5966] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 483.572326][T13472] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2148'. [ 483.584929][ T5966] usb 3-1: device descriptor read/8, error -71 [ 483.596333][T13472] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2148'. [ 483.612552][T13472] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2148'. [ 483.777169][T12501] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 483.858154][ T5966] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 483.898567][ T5966] usb 3-1: device descriptor read/8, error -71 [ 483.940340][T12501] usb 2-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 483.949261][T12501] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 483.961840][T12501] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.973217][T12501] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.983370][T12501] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 483.999374][T12501] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 484.009869][T12501] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.021028][T12501] usb 2-1: config 0 descriptor?? [ 484.033677][ T5966] usb usb3-port1: unable to enumerate USB device [ 484.043311][T13489] __nla_validate_parse: 28 callbacks suppressed [ 484.043327][T13489] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2153'. [ 484.163687][T13495] sctp: [Deprecated]: syz.5.2155 (pid 13495) Use of int in maxseg socket option. [ 484.163687][T13495] Use struct sctp_assoc_value instead [ 484.182834][ T5865] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 484.232253][T13473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.251335][T13473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.264848][T13473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.274713][T13473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.285551][T13473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.294452][T13473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.305648][T13473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.314730][T13473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.324275][T13473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.333081][T13473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.356583][T12501] input: HID 28bd:0909 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0909.0029/input/input43 [ 484.442333][T12501] uclogic 0003:28BD:0909.0029: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.1-1/input0 [ 484.520574][ T5911] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 484.548314][T12501] usb 2-1: USB disconnect, device number 8 [ 484.655249][ T5865] Bluetooth: hci0: unexpected event for opcode 0x203d [ 484.676812][ T5911] usb 6-1: Using ep0 maxpacket: 8 [ 484.684016][ T5911] usb 6-1: unable to get BOS descriptor or descriptor too short [ 484.693014][ T5911] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 484.702258][ T5911] usb 6-1: config 1 has no interface number 1 [ 484.711166][ T5911] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 484.729193][ T5911] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 484.738423][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.746413][ T5911] usb 6-1: Product: syz [ 484.751259][ T5911] usb 6-1: Manufacturer: syz [ 484.756124][ T5911] usb 6-1: SerialNumber: syz [ 484.973432][ T5911] usb 6-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 484.982025][ T5911] usb 6-1: 2:1 : sample bitwidth 128 in over sample bytes 8 [ 484.989403][ T5911] usb 6-1: 2:1 : unsupported sample bitwidth 128 in 8 bytes [ 485.011210][ T5911] usb 6-1: USB disconnect, device number 127 [ 485.041897][ T8488] udevd[8488]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.105228][T13505] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2158'. [ 485.152407][T13507] netlink: 5688 bytes leftover after parsing attributes in process `syz.1.2159'. [ 485.708012][T12501] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 485.766518][ T5865] Bluetooth: hci4: unexpected event for opcode 0x080f [ 485.776294][ T5911] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 485.902187][T12501] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.933379][T12501] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 485.961206][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.974754][T12501] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.987641][ T5911] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 486.004192][T12501] usb 2-1: config 0 descriptor?? [ 486.011954][ T5911] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 486.028853][T12501] pwc: Askey VC010 type 2 USB webcam detected. [ 486.041543][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.060984][ T5911] usb 3-1: config 0 descriptor?? [ 486.239002][T13525] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.2163'. [ 486.340756][T13525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.350418][T13525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.366242][T13562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.382599][T13562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.575659][ T5966] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 486.640242][T12501] pwc: recv_control_msg error -32 req 02 val 2b00 [ 486.647465][T12501] pwc: recv_control_msg error -32 req 02 val 2700 [ 486.738309][ T5966] usb 6-1: not running at top speed; connect to a high speed hub [ 486.747190][ T5966] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 486.757309][ T5966] usb 6-1: config 1 has no interface number 1 [ 486.763427][ T5966] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 486.780540][ T5966] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 486.789913][ T5966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.801286][ T5966] usb 6-1: Product: syz [ 486.805519][ T5966] usb 6-1: Manufacturer: syz [ 486.810123][ T5966] usb 6-1: SerialNumber: syz [ 487.038831][ T5966] usb 6-1: 2:1: cannot set freq 8534074 to ep 0x82 [ 487.072261][ T5966] usb 6-1: USB disconnect, device number 2 [ 487.124572][ T5870] udevd[5870]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 487.825037][ T43] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 487.977346][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 487.987906][ T43] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.999533][ T43] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 488.008914][ T43] usb 6-1: config 1 has no interface number 1 [ 488.015279][ T43] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 488.028337][ T43] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 488.041766][ T43] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 488.051146][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.059187][ T43] usb 6-1: Product: 㵝ە貛驭彥毥陁ⷁ஥伲㩙菘듫寓鯒芧駱錦竇툶㒎ꛅ㇔愡똜鍇얨쪒톜ꯩꭑ隣觮庡哎蝻꠬鹐海凷찳뙁㍋쏀億ꖺﯧỘ郷掎喋ᜆ昌髣㙾蒺ᰮफ़歂䍾晤点럁䗰㭉妕圏︁㥒䇫悤䐇몃 [ 488.084017][ T43] usb 6-1: Manufacturer: 崴앢ઠ㲝谐葯绤诐狐ណ繥ꚲㅪ啲퇯呷ꇗ떾증즒ꢐ඙숔ꕪ릅℠單ࡺ뢰娵ᇽ쒾ꉜ疼﫧扐黁瑔ज़⽚ᬞ஭爎ᔙ㻦薪䬉䆪㔐鮣交㭹ዎꬪꬉ낳ꥴҚ鍼뀦﻾伪딓㝡ق鈯䂉驉包Ꮋ퍀뱺霒놹麥荿赧疾赂◗袍꠴捖䝄驍超혪馝䚂螇烫棅⌾峵鉼┱㽺ﺓ柯㭳ͺ怂讏 [ 488.118385][ T43] usb 6-1: SerialNumber: syz [ 488.344385][T13578] dlm: no locking on control device [ 488.344547][T13579] tipc: Enabling of bearer rejected, media not registered [ 488.460690][ T5911] usb 3-1: USB disconnect, device number 97 [ 488.523180][ T43] hub 6-1:1.0: Invalid hub with more than one config or interface [ 488.578135][ T43] hub 6-1:1.0: probe with driver hub failed with error -22 [ 488.600203][T12501] pwc: recv_control_msg error -71 req 02 val 2c00 [ 488.620761][ T43] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 488.628739][T12501] pwc: recv_control_msg error -71 req 04 val 1000 [ 488.629158][T12501] pwc: recv_control_msg error -71 req 04 val 1300 [ 488.629563][T12501] pwc: recv_control_msg error -71 req 04 val 1400 [ 488.679291][T12501] pwc: recv_control_msg error -71 req 02 val 2000 [ 488.692315][T12501] pwc: recv_control_msg error -71 req 02 val 2100 [ 488.729739][T12501] pwc: recv_control_msg error -71 req 04 val 1500 [ 488.752262][T12501] pwc: recv_control_msg error -71 req 02 val 2500 [ 488.759284][ T43] usb 6-1: USB disconnect, device number 3 [ 488.760989][T12501] pwc: recv_control_msg error -71 req 02 val 2400 [ 488.775654][T13595] : renamed from bridge_slave_0 (while UP) [ 488.792927][T12501] pwc: recv_control_msg error -71 req 02 val 2600 [ 488.819018][T12501] pwc: recv_control_msg error -71 req 02 val 2900 [ 488.856857][T12501] pwc: recv_control_msg error -71 req 02 val 2800 [ 488.868893][T12501] pwc: recv_control_msg error -71 req 04 val 1100 [ 488.884329][T12501] pwc: recv_control_msg error -71 req 04 val 1200 [ 488.900980][T12501] pwc: Registered as video103. [ 488.931516][T12501] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input44 [ 488.981869][T12501] usb 2-1: USB disconnect, device number 9 [ 489.404416][ T43] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 489.451655][T13610] sp0: Synchronizing with TNC [ 489.467551][T13610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2184'. [ 489.554931][T13613] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2185'. [ 489.586403][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 489.592415][ T43] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 489.602413][ T43] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 489.610567][ T43] usb 6-1: config 0 has no interface number 0 [ 489.621502][ T43] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 489.634184][ T43] usb 6-1: config 0 has no interface number 0 [ 489.642104][ T43] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 489.650508][ T43] usb 6-1: config 0 has no interface number 0 [ 489.656930][ T5966] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 489.669434][ T43] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 489.681139][ T43] usb 6-1: config 0 has no interface number 0 [ 489.692200][ T43] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 489.700485][ T43] usb 6-1: config 0 has no interface number 0 [ 489.709424][ T43] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 489.717578][ T43] usb 6-1: config 0 has no interface number 0 [ 489.725276][ T43] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 489.733944][ T43] usb 6-1: config 0 has no interface number 0 [ 489.742237][ T43] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 489.752702][ T43] usb 6-1: config 0 has no interface number 0 [ 489.761823][ T43] usb 6-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 489.772506][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.781318][ T43] usb 6-1: Product: syz [ 489.787277][ T43] usb 6-1: Manufacturer: syz [ 489.791862][ T43] usb 6-1: SerialNumber: syz [ 489.799576][ T43] usb 6-1: config 0 descriptor?? [ 489.808730][ T43] etas_es58x 6-1:0.2: Starting syz syz (Serial Number syz) [ 489.834066][ T5966] usb 2-1: Using ep0 maxpacket: 8 [ 489.841187][ T5966] usb 2-1: config 6 has an invalid interface number: 244 but max is 2 [ 489.849570][ T5966] usb 2-1: config 6 has an invalid interface number: 218 but max is 2 [ 489.857812][ T5966] usb 2-1: config 6 has an invalid interface number: 40 but max is 2 [ 489.865946][ T5966] usb 2-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 489.874701][ T5966] usb 2-1: config 6 has no interface number 0 [ 489.880788][ T5966] usb 2-1: config 6 has no interface number 1 [ 489.886926][ T5966] usb 2-1: config 6 has no interface number 2 [ 489.893085][ T5966] usb 2-1: config 6 interface 244 altsetting 6 has an endpoint descriptor with address 0x95, changing to 0x85 [ 489.904785][ T5966] usb 2-1: config 6 interface 244 altsetting 6 endpoint 0x85 has invalid maxpacket 38500, setting to 64 [ 489.918308][ T5966] usb 2-1: config 6 interface 244 altsetting 6 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 489.932686][ T5966] usb 2-1: config 6 interface 218 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 489.943552][ T5966] usb 2-1: config 6 interface 40 altsetting 121 has an invalid descriptor for endpoint zero, skipping [ 489.954741][ T5966] usb 2-1: config 6 interface 40 altsetting 121 bulk endpoint 0x1 has invalid maxpacket 1024 [ 489.965040][ T5966] usb 2-1: config 6 interface 40 altsetting 121 has an invalid descriptor for endpoint zero, skipping [ 489.976102][ T5966] usb 2-1: config 6 interface 40 altsetting 121 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 489.987168][ T5966] usb 2-1: config 6 interface 40 altsetting 121 has a duplicate endpoint with address 0x2, skipping [ 489.998447][ T5966] usb 2-1: config 6 interface 40 altsetting 121 has a duplicate endpoint with address 0xF, skipping [ 490.009371][ T5966] usb 2-1: config 6 interface 40 altsetting 121 has a duplicate endpoint with address 0x6, skipping [ 490.020274][ T5966] usb 2-1: config 6 interface 40 altsetting 121 has a duplicate endpoint with address 0xC, skipping [ 490.031527][ T43] etas_es58x 6-1:0.2: could not parse product info: '424242424242' [ 490.043858][ T5966] usb 2-1: config 6 interface 40 altsetting 121 has a duplicate endpoint with address 0x6, skipping [ 490.067266][ T5966] usb 2-1: config 6 interface 40 altsetting 121 has a duplicate endpoint with address 0xF, skipping [ 490.081226][ T5966] usb 2-1: config 6 interface 40 altsetting 121 has a duplicate endpoint with address 0xF, skipping [ 490.092114][ T5966] usb 2-1: config 6 interface 40 altsetting 121 has a duplicate endpoint with address 0xF, skipping [ 490.103036][ T5966] usb 2-1: config 6 interface 244 has no altsetting 0 [ 490.109860][ T5966] usb 2-1: config 6 interface 40 has no altsetting 0 [ 490.119184][ T5966] usb 2-1: New USB device found, idVendor=046d, idProduct=08ad, bcdDevice=21.d9 [ 490.128472][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.140907][ T5966] usb 2-1: Product: 㰁 [ 490.146076][ T5966] usb 2-1: Manufacturer: Ⰱ [ 490.150879][ T5966] usb 2-1: SerialNumber: 䨣ᇖ聆鿩緃ᇏẦ➑ᦝ惘쭪㟡ℸ쭗狏✴❘诰㳑ﺌ러ᤆ㤿賰秛೮鳊嚭ᅁ푠贼䑡뾄废䍜ᐕKퟚ웞絾⇬刟緲蠨﫛⿞⇼ꟕẙ巪弣אּ肟뷚痥㱈竵惞耙镍馤㏆㔸䯟䋲 [ 490.419862][ T5966] usb-storage 2-1:6.218: USB Mass Storage device detected [ 490.470256][ T5966] usbhid 2-1:6.40: couldn't find an input interrupt endpoint [ 490.505015][ T5966] usb 2-1: USB disconnect, device number 10 [ 490.582296][T13637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.591997][T13637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.633826][ T5968] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 490.692044][ C1] etas_es58x 6-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 490.703169][ C1] etas_es58x 6-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 490.711143][ C1] etas_es58x 6-1:0.2: es58x_split_urb() returned error -EBADMSG [ 490.719743][ C1] etas_es58x 6-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 490.730720][ C1] etas_es58x 6-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 490.738695][ C1] etas_es58x 6-1:0.2: es58x_split_urb() returned error -EBADMSG [ 490.748585][ T5526] etas_es58x 6-1:0.2 can0: bit-timing not yet defined [ 490.843538][ T5968] usb 3-1: Using ep0 maxpacket: 16 [ 490.850928][ T5968] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 490.860450][ T5968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.872136][ T5968] usb 3-1: config 0 descriptor?? [ 490.881563][ T5968] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 491.605585][ T5968] gspca_sonixj: reg_r err -110 [ 491.610520][ T5968] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 491.833488][ T5526] etas_es58x 6-1:0.2: es58x_free_urbs: Timeout, some TX urbs still remain [ 491.843010][ C1] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 491.850932][ C1] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 491.858809][ C1] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 491.872097][ C1] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 491.881438][ T5526] etas_es58x 6-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL [ 491.894618][ C1] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 491.896838][ T5911] usb 6-1: USB disconnect, device number 4 [ 491.944464][ T5911] etas_es58x 6-1:0.2: Disconnecting syz syz [ 491.946327][ T30] audit: type=1326 audit(2000000783.932:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13652 comm="syz.6.2193" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb8eba9 code=0x0 [ 492.341040][T13679] random: crng reseeded on system resumption [ 492.365410][T13679] xt_l2tp: v2 sid > 0xffff: 1114112 [ 492.622712][ T11] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 492.802536][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 492.812019][ T11] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 492.829192][ T11] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 492.844547][ T11] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 492.856765][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.866178][ T11] usb 2-1: Product: 〛䛦냰嘰뺿㡧嶻︁⪁¹鶯㱶ꀭἌ찳놥쵐ﻲ칙᧛늍亚࿣齹뇕䱍캫踁喵땦ᙋ㔗㩳칹蹊醬蜫뒐Ḍ⃅ἤ皬ꟺ薫騮䲁᧲Ｙꩄ娩瞽떕뷳Ⱟ칷Ǻ䙨릱踕ជ젼䯹鶄뙶饞辝執䂝沼탠뒨雮曓༆켃ᑑ瑸㻾秌ौ燎錦ᎃ뙙繰뻌቗湛᪊袲洳蘑丫▸듘픪瓿뉰淰ឌ槹 [ 492.908045][ T11] usb 2-1: Manufacturer: ⱝ䝂ꋝ뤙鲄∮ੂ꥘콚ὓꏩ騢噆톬猯ꑖ㪣豈뵲꽈Ἔ變깼ⴄ鬾踀쁘䇋镍⋳堡㷷蛟陬根丰妖적҅ᅘﮟ閂ꐹ﬏䡀퀄 [ 492.930424][ T11] usb 2-1: SerialNumber: ␊ [ 493.200960][ T11] usb 2-1: 0:2 : does not exist [ 493.241675][ T11] usb 2-1: USB disconnect, device number 11 [ 493.351466][T13686] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 493.378643][T13686] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 493.380880][ T5911] usb 3-1: USB disconnect, device number 98 [ 493.395122][T13686] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 493.423819][T13686] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 493.792246][ T11] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 493.862768][ T5911] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 493.902005][ T5966] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 493.962113][ T11] usb 2-1: Using ep0 maxpacket: 32 [ 493.969734][ T11] usb 2-1: unable to get BOS descriptor or descriptor too short [ 493.978571][ T11] usb 2-1: config 14 has an invalid interface number: 120 but max is 0 [ 493.986875][ T11] usb 2-1: config 14 has no interface number 0 [ 493.993173][ T11] usb 2-1: config 14 interface 120 has no altsetting 0 [ 494.002216][ T11] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=22.cd [ 494.011283][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.019670][ T11] usb 2-1: Product: syz [ 494.025281][ T11] usb 2-1: Manufacturer: syz [ 494.029894][ T11] usb 2-1: SerialNumber: syz [ 494.051957][ T5966] usb 6-1: Using ep0 maxpacket: 32 [ 494.051967][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 494.054744][ T5911] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.059132][ T5966] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 494.067481][ T5911] usb 3-1: config 0 interface 0 has no altsetting 0 [ 494.076910][ T5966] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 494.091014][ T5911] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 494.093892][ T5966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.102673][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.118033][ T5966] usb 6-1: config 0 descriptor?? [ 494.133341][ T5911] usb 3-1: config 0 descriptor?? [ 494.319329][ T11] ftdi_sio 2-1:14.120: FTDI USB Serial Device converter detected [ 494.329473][ T11] ftdi_sio ttyUSB0: unknown device type: 0x22cd [ 494.344289][ T11] usb 2-1: USB disconnect, device number 12 [ 494.354644][ T11] ftdi_sio 2-1:14.120: device disconnected [ 494.557432][ T5911] nzxt-smart2 0003:1E71:2009.002A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 494.631677][ T5865] Bluetooth: hci2: command 0x0401 tx timeout [ 494.745519][ T5966] usbhid 6-1:0.0: can't add hid device: -71 [ 494.752911][ T5966] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 494.765200][ T5966] usb 6-1: USB disconnect, device number 5 [ 494.966752][ T5911] usb 3-1: USB disconnect, device number 99 [ 495.091541][ T5968] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 495.244460][ T5968] usb 2-1: config 160 has an invalid interface number: 200 but max is 0 [ 495.253250][ T5968] usb 2-1: config 160 has no interface number 0 [ 495.259597][ T5968] usb 2-1: config 160 interface 200 has no altsetting 0 [ 495.271315][ T5968] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 495.280379][ T5968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.288736][ T5968] usb 2-1: Product: syz [ 495.293348][ T5968] usb 2-1: Manufacturer: syz [ 495.301480][ T5968] usb 2-1: SerialNumber: syz [ 495.441493][ T5865] Bluetooth: hci4: command 0x040f tx timeout [ 495.554282][ T5968] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 495.579985][ T5968] usb 2-1: MIDIStreaming interface descriptor not found [ 495.637615][T13763] binder: 13756:13763 ioctl c018620b 0 returned -14 [ 495.699438][ T5968] usb 2-1: USB disconnect, device number 13 [ 496.180919][ T11] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 496.200498][T13784] syz.1.2221: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 496.220199][T13784] CPU: 0 UID: 0 PID: 13784 Comm: syz.1.2221 Not tainted syzkaller #0 PREEMPT(full) [ 496.220224][T13784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 496.220235][T13784] Call Trace: [ 496.220243][T13784] [ 496.220251][T13784] dump_stack_lvl+0x189/0x250 [ 496.220277][T13784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.220298][T13784] ? __pfx__printk+0x10/0x10 [ 496.220322][T13784] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 496.220355][T13784] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 496.220382][T13784] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 496.220410][T13784] warn_alloc+0x214/0x310 [ 496.220439][T13784] ? __pfx_warn_alloc+0x10/0x10 [ 496.220472][T13784] ? __get_vm_area_node+0x28f/0x300 [ 496.220493][T13784] ? vb2_vmalloc_alloc+0xef/0x340 [ 496.220517][T13784] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 496.220569][T13784] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 496.220594][T13784] ? __kasan_kmalloc+0x93/0xb0 [ 496.220622][T13784] vmalloc_user_noprof+0xad/0xf0 [ 496.220643][T13784] ? vb2_vmalloc_alloc+0xef/0x340 [ 496.220662][T13784] vb2_vmalloc_alloc+0xef/0x340 [ 496.220681][T13784] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 496.220700][T13784] __vb2_queue_alloc+0x9c2/0x15a0 [ 496.220748][T13784] vb2_core_reqbufs+0xc31/0x1420 [ 496.220789][T13784] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 496.220812][T13784] ? vb2_verify_memory_type+0x1fc/0x570 [ 496.220840][T13784] ? vb2_reqbufs+0x3a9/0x630 [ 496.220873][T13784] v4l2_m2m_ioctl_reqbufs+0x10d/0x200 [ 496.220897][T13784] __video_do_ioctl+0xa59/0xc10 [ 496.220925][T13784] ? __pfx___video_do_ioctl+0x10/0x10 [ 496.220956][T13784] video_usercopy+0x82d/0x1450 [ 496.220982][T13784] ? __pfx___video_do_ioctl+0x10/0x10 [ 496.220999][T13784] ? __pfx_video_usercopy+0x10/0x10 [ 496.221035][T13784] ? __fget_files+0x3a0/0x420 [ 496.221064][T13784] v4l2_ioctl+0x18d/0x1e0 [ 496.221083][T13784] ? __pfx_v4l2_ioctl+0x10/0x10 [ 496.221099][T13784] __se_sys_ioctl+0xfc/0x170 [ 496.221124][T13784] do_syscall_64+0xfa/0xfa0 [ 496.221144][T13784] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.221165][T13784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.221183][T13784] ? clear_bhb_loop+0x60/0xb0 [ 496.221205][T13784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.221223][T13784] RIP: 0033:0x7f08c198eba9 [ 496.221239][T13784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.221255][T13784] RSP: 002b:00007f08c2869038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 496.221274][T13784] RAX: ffffffffffffffda RBX: 00007f08c1bd6090 RCX: 00007f08c198eba9 [ 496.221288][T13784] RDX: 0000200000000000 RSI: 00000000c0145608 RDI: 0000000000000005 [ 496.221301][T13784] RBP: 00007f08c1a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 496.221312][T13784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.221324][T13784] R13: 00007f08c1bd6128 R14: 00007f08c1bd6090 R15: 00007ffc1cc7a248 [ 496.221362][T13784] [ 496.518275][T13784] Mem-Info: [ 496.521487][T13784] active_anon:22726 inactive_anon:0 isolated_anon:0 [ 496.521487][T13784] active_file:17277 inactive_file:40366 isolated_file:0 [ 496.521487][T13784] unevictable:768 dirty:69 writeback:0 [ 496.521487][T13784] slab_reclaimable:11710 slab_unreclaimable:99519 [ 496.521487][T13784] mapped:25226 shmem:16819 pagetables:1736 [ 496.521487][T13784] sec_pagetables:0 bounce:0 [ 496.521487][T13784] kernel_misc_reclaimable:0 [ 496.521487][T13784] free:1290781 free_pcp:21608 free_cma:0 [ 496.567223][T13784] Node 0 active_anon:90904kB inactive_anon:0kB active_file:69056kB inactive_file:161256kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100864kB dirty:276kB writeback:0kB shmem:65740kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12808kB pagetables:6824kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 496.609219][T13784] Node 1 active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 496.640941][T13784] Node 0 DMA free:15296kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:32kB free_cma:0kB [ 496.674010][T13784] lowmem_reserve[]: 0 2495 2496 2496 2496 [ 496.679809][T13784] Node 0 DMA32 free:1285540kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:90956kB inactive_anon:0kB active_file:69056kB inactive_file:160184kB unevictable:1536kB writepending:276kB zspages:0kB present:3129332kB managed:2555276kB mlocked:0kB bounce:0kB free_pcp:40716kB local_pcp:18544kB free_cma:0kB [ 496.685468][T13793] IPVS: set_ctl: invalid protocol: 6368 50.255.157.48:53567 [ 496.722513][T13784] lowmem_reserve[]: 0 0 1 1 1 [ 496.727270][T13784] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1072kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 496.757927][T13784] lowmem_reserve[]: 0 0 0 0 0 [ 496.763020][T13784] Node 1 Normal free:3862284kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:45600kB local_pcp:30208kB free_cma:0kB [ 496.763700][ T11] usb 6-1: not running at top speed; connect to a high speed hub [ 496.805366][T13784] lowmem_reserve[]: 0 0 0 0 0 [ 496.811915][ T11] usb 6-1: config index 0 descriptor too short (expected 2322, got 18) [ 496.812311][T13784] Node 0 DMA: [ 496.820172][ T11] usb 6-1: config 95 has an invalid interface number: 1 but max is 0 [ 496.832080][ T11] usb 6-1: config 95 has no interface number 0 [ 496.838267][ T11] usb 6-1: config 95 interface 1 has no altsetting 0 [ 496.847558][T13784] 0*4kB 0*8kB 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15296kB [ 496.882465][ T11] usb 6-1: string descriptor 0 read error: -22 [ 496.890118][ T11] usb 6-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 496.897234][T13784] Node 0 DMA32: 840*4kB (ME) 542*8kB (UME) 112*16kB (UME) 454*32kB (UME) 282*64kB (UME) 181*128kB (UME) 133*256kB (UME) 55*512kB (UME) 32*1024kB (UME) 6*2048kB (UME) 272*4096kB (UM) = 1286608kB [ 496.918795][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.978817][T13784] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 496.997458][T13784] Node 1 Normal: 227*4kB (UME) 66*8kB (UME) 61*16kB (UME) 203*32kB (UE) 55*64kB (UE) 7*128kB (UME) 9*256kB (UME) 5*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 937*4096kB (M) = 3862284kB [ 497.019663][T13784] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 497.030802][T13784] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 497.040184][T13784] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 497.041082][T13802] sctp: [Deprecated]: syz.6.2226 (pid 13802) Use of int in maxseg socket option. [ 497.041082][T13802] Use struct sctp_assoc_value instead [ 497.050145][T13784] Node 1 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 497.073653][T13784] 74456 total pagecache pages [ 497.078360][T13784] 0 pages in swap cache [ 497.082705][T13784] Free swap = 124996kB [ 497.087004][T13784] Total swap = 124996kB [ 497.103299][T13802] mkiss: ax0: crc mode is auto. [ 497.115112][T13784] 2097051 pages RAM [ 497.124907][T13784] 0 pages HighMem/MovableOnly [ 497.129657][T13784] 426334 pages reserved [ 497.134886][T13784] 0 pages cma reserved [ 497.346036][ T11] usb 6-1: USB disconnect, device number 6 [ 497.406757][T13817] netlink: zone id is out of range [ 497.428086][T13817] netlink: zone id is out of range [ 497.510357][ T5865] Bluetooth: hci4: command 0x040f tx timeout [ 497.990175][ T5968] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 498.152367][ T5968] usb 3-1: unable to get BOS descriptor or descriptor too short [ 498.160572][ T5968] usb 3-1: not running at top speed; connect to a high speed hub [ 498.169274][ T5968] usb 3-1: config 1 interface 0 altsetting 208 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 498.182355][ T5968] usb 3-1: config 1 interface 0 has no altsetting 0 [ 498.193024][ T5968] usb 3-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 [ 498.203224][ T5968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.214187][ T5968] usb 3-1: Product: syz [ 498.218357][ T5968] usb 3-1: Manufacturer: syz [ 498.223937][ T5968] usb 3-1: SerialNumber: syz [ 498.249843][ T11] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 498.401281][ T11] usb 6-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 498.411690][ T11] usb 6-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 498.426177][ T11] usb 6-1: config 0 interface 0 has no altsetting 0 [ 498.433127][ T11] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c23, bcdDevice=20.00 [ 498.445976][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.454191][ T5968] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input45 [ 498.460044][ T11] usb 6-1: config 0 descriptor?? [ 498.472084][ T5216] bcm5974 3-1:1.0: could not read from device [ 498.484462][ T5216] bcm5974 3-1:1.0: could not read from device [ 498.491753][ T5968] usb 3-1: USB disconnect, device number 100 [ 498.499170][ T5216] bcm5974 3-1:1.0: could not read from device [ 498.569973][ T5966] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 498.719663][ T5966] usb 2-1: Using ep0 maxpacket: 32 [ 498.725531][ T5966] usb 2-1: too many configurations: 224, using maximum allowed: 8 [ 498.735144][ T5966] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 498.742842][ T5966] usb 2-1: can't read configurations, error -61 [ 498.879779][ T5966] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 499.039407][ T5966] usb 2-1: Using ep0 maxpacket: 32 [ 499.045270][ T5966] usb 2-1: too many configurations: 224, using maximum allowed: 8 [ 499.054638][ T5966] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 499.062557][ T5966] usb 2-1: can't read configurations, error -61 [ 499.069166][ T5966] usb usb2-port1: attempt power cycle [ 499.261601][ T9] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 499.411534][ T5966] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 499.435041][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 499.443158][ T5966] usb 2-1: Using ep0 maxpacket: 32 [ 499.450172][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.452104][ T5966] usb 2-1: too many configurations: 224, using maximum allowed: 8 [ 499.458216][ T9] usb 3-1: Product: syz [ 499.458234][ T9] usb 3-1: Manufacturer: syz [ 499.458256][ T9] usb 3-1: SerialNumber: syz [ 499.471852][ T5966] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 499.481329][ T9] usb 3-1: config 0 descriptor?? [ 499.488851][ T5966] usb 2-1: can't read configurations, error -61 [ 499.631002][ T5966] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 499.659840][ T5966] usb 2-1: Using ep0 maxpacket: 32 [ 499.665564][ T5966] usb 2-1: too many configurations: 224, using maximum allowed: 8 [ 499.678743][ T5966] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 499.686696][ T5966] usb 2-1: can't read configurations, error -61 [ 499.696402][ T5966] usb usb2-port1: unable to enumerate USB device [ 499.704285][T13845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.713313][T13845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.722193][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 499.732720][ T9] asix 3-1:0.0: probe with driver asix failed with error -61 [ 499.923936][T13845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.932830][T13845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.956523][ T5966] usb 3-1: USB disconnect, device number 101 [ 500.313070][ T5966] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 500.375949][T13854] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2243'. [ 500.386212][T13854] openvswitch: netlink: Flow key attr not present in new flow. [ 500.404550][T13854] binder: 13853:13854 ioctl 400c620e 2000000014c0 returned -22 [ 500.448913][ T5966] usb 3-1: device descriptor read/64, error -71 [ 500.688605][ T5966] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 500.818538][ T5966] usb 3-1: device descriptor read/64, error -71 [ 500.929165][ T5966] usb usb3-port1: attempt power cycle [ 500.966135][ T11] usb 6-1: string descriptor 0 read error: -71 [ 500.988725][ T11] usb 6-1: USB disconnect, device number 7 [ 501.265177][T13867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.277227][ T5966] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 501.296334][T13868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.319388][ T5966] usb 3-1: device descriptor read/8, error -71 [ 501.414364][T13874] block nbd6: Unsupported socket: should be TCP or UNIX. [ 501.425454][T13874] block nbd6: NBD_DISCONNECT [ 501.435415][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.435510][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.457289][T13874] block nbd6: Attempted send on invalid socket [ 501.463785][T13874] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.557464][T13885] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 501.564770][ T5966] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 501.572367][T13885] overlayfs: failed to set xattr on upper [ 501.582514][T13885] overlayfs: ...falling back to redirect_dir=nofollow. [ 501.590086][T13885] overlayfs: ...falling back to index=off. [ 501.596083][T13885] overlayfs: ...falling back to uuid=null. [ 501.597852][ T5966] usb 3-1: device descriptor read/8, error -71 [ 501.697688][T13891] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2255'. [ 501.722867][ T5966] usb usb3-port1: unable to enumerate USB device [ 501.988047][ T5860] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 502.140732][ T5860] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 244, changing to 11 [ 502.152110][ T11] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 502.159847][ T5860] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 502.170706][ T5860] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 502.183150][ T5860] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 502.192311][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.200397][ T5860] usb 2-1: Product: 묊ˊ摑엝഑ꍎڄ亥⿴༼㛈痓젃婫∿↔氆䙝攰ﾃꬂⳍ嵋଑蟵灼ჿ鎊ꀣ抶㰷Ꜳ᪉悚屬ീꂻ⮋噋ꒃ迆෉캀ᯋ㴦᠆㲔㹦쭣⼈듆㙗斂맺徼臄髉猣켗䅦茻ⷸ檤㧵洿阒Ⱬꌍꭡ⹥˶焃ῃﮥ藝 [ 502.227236][ T5860] usb 2-1: Manufacturer: ᐌ [ 502.232391][ T5860] usb 2-1: SerialNumber: щ [ 502.307893][ T11] usb 6-1: device descriptor read/64, error -71 [ 502.547709][ T11] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 502.645110][T13894] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 502.653437][T13894] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 502.677682][ T11] usb 6-1: device descriptor read/64, error -71 [ 502.797910][ T11] usb usb6-port1: attempt power cycle [ 502.926458][T13916] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2264'. [ 503.137378][ T11] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 503.157872][ T11] usb 6-1: device descriptor read/8, error -71 [ 503.276569][T13894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.286437][T13894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.296113][T13894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.306562][T13894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.397277][ T11] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 503.417915][ T11] usb 6-1: device descriptor read/8, error -71 [ 503.511186][T13924] (syz.6.2266,13924,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 503.521643][T13924] (syz.6.2266,13924,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 503.529782][ T11] usb usb6-port1: unable to enumerate USB device [ 503.581387][ T5860] cdc_ncm 2-1:1.0: bind() failure [ 503.586476][T13925] netlink: 'syz.6.2266': attribute type 4 has an invalid length. [ 503.586498][T13925] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.2266'. [ 503.605940][ T5860] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 503.605988][ T5860] cdc_ncm 2-1:1.1: bind() failure [ 503.629570][ T5860] usb 2-1: USB disconnect, device number 18 [ 503.791109][T13927] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2267'. [ 504.500746][T13939] netlink: 'syz.1.2272': attribute type 27 has an invalid length. [ 504.588975][T13941] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2273'. [ 504.689218][T13944] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2275'. [ 504.926500][T12501] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 505.106870][T12501] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 505.122614][T12501] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 505.139456][T12501] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 505.149237][T12501] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.158310][T12501] usb 2-1: Product: syz [ 505.162555][T12501] usb 2-1: Manufacturer: syz [ 505.167337][T12501] usb 2-1: SerialNumber: syz [ 505.184183][T12501] usb 2-1: config 0 descriptor?? [ 505.401986][T12501] powermate: unknown product id 0240 [ 505.414357][T12501] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input46 [ 505.439543][ C0] powermate: config urb returned -71 [ 505.445043][ C0] powermate: config urb returned -71 [ 505.456394][ C0] powermate: config urb returned -71 [ 505.466284][ C0] powermate: config urb returned -71 [ 505.476308][T12501] usb 2-1: USB disconnect, device number 19 [ 505.482278][ C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 505.828458][ T52] Bluetooth: hci1: command 0x1003 tx timeout [ 505.844787][ T5865] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 506.305920][ T5968] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 506.335770][ T5861] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 506.455702][ T5968] usb 2-1: Using ep0 maxpacket: 8 [ 506.462559][ T5968] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 506.472202][ T5968] usb 2-1: config 0 has no interface number 0 [ 506.480338][ T5968] usb 2-1: New USB device found, idVendor=04e8, idProduct=a100, bcdDevice=81.e4 [ 506.489688][ T24] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 506.497471][ T5968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.505480][ T5861] usb 6-1: Using ep0 maxpacket: 16 [ 506.512428][ T5968] usb 2-1: Product: syz [ 506.517012][ T5968] usb 2-1: Manufacturer: syz [ 506.521644][ T5968] usb 2-1: SerialNumber: syz [ 506.526425][ T5861] usb 6-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 506.538151][ T5861] usb 6-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 506.554304][ T5968] usb 2-1: config 0 descriptor?? [ 506.561324][ T5861] usb 6-1: config 0 interface 0 has no altsetting 0 [ 506.570348][ T5861] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 506.579546][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.588150][ T5861] usb 6-1: Product: syz [ 506.592338][ T5861] usb 6-1: Manufacturer: syz [ 506.597568][ T5861] usb 6-1: SerialNumber: syz [ 506.604396][ T5861] usb 6-1: config 0 descriptor?? [ 506.645663][ T24] usb 3-1: device descriptor read/64, error -71 [ 506.828859][ T5968] ax88179_178a 2-1:0.84: probe with driver ax88179_178a failed with error -22 [ 506.845625][ T5861] usb 6-1: Can not set alternate setting to 1, error: -71 [ 506.854073][ T5861] synaptics_usb 6-1:0.0: probe with driver synaptics_usb failed with error -71 [ 506.870832][ T5861] usb 6-1: USB disconnect, device number 12 [ 506.906119][ T24] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 507.045587][ T24] usb 3-1: device descriptor read/64, error -71 [ 507.155944][ T24] usb usb3-port1: attempt power cycle [ 507.495349][ T24] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 507.521009][ T24] usb 3-1: device descriptor read/8, error -71 [ 507.775054][ T24] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 507.796252][ T24] usb 3-1: device descriptor read/8, error -71 [ 507.915655][ T24] usb usb3-port1: unable to enumerate USB device [ 507.935118][ T5861] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 508.096301][ T5861] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 508.105478][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.121544][ T5861] usb 6-1: config 0 descriptor?? [ 509.084854][ T5860] usb 2-1: USB disconnect, device number 20 [ 509.181275][T14004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.193058][T14004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.196780][ T5861] ath6kl: Failed to submit usb control message: -110 [ 509.209785][ T5861] ath6kl: unable to send the bmi data to the device: -110 [ 509.217027][ T5861] ath6kl: Unable to send get target info: -110 [ 509.238779][ T5861] ath6kl: Failed to init ath6kl core: -110 [ 509.246663][ T5861] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 509.484283][ T5860] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 509.647663][ T5860] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 509.658163][ T5860] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 509.666613][T13992] Bluetooth: hci3: Opcode 0x080f failed: -110 [ 509.668360][ T5860] usb 2-1: config 220 interface 0 has no altsetting 0 [ 509.675588][ T5861] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 509.685534][ T5860] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 509.696486][ T5966] usb 6-1: USB disconnect, device number 13 [ 509.698164][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.714588][ T5860] usb 2-1: Product: syz [ 509.722765][ T5860] usb 2-1: Manufacturer: syz [ 509.729908][ T5860] usb 2-1: SerialNumber: syz [ 509.844297][ T5861] usb 3-1: Using ep0 maxpacket: 16 [ 509.851099][ T5861] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.861363][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 509.872455][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 509.882516][ T5861] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 509.893105][ T5861] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 509.907987][ T5861] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 509.917153][ T5861] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 509.925317][ T5861] usb 3-1: Manufacturer: syz [ 509.932594][ T5861] usb 3-1: config 0 descriptor?? [ 509.950063][ T5860] usb 2-1: Found UVC 0.00 device syz (8086:0b07) [ 509.956767][ T5860] usb 2-1: No valid video chain found. [ 509.965711][ T5860] usb 2-1: USB disconnect, device number 21 [ 510.183837][ T5861] rc_core: IR keymap rc-hauppauge not found [ 510.189798][ T5861] Registered IR keymap rc-empty [ 510.195689][ T5861] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 510.214084][ T5861] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 510.236552][ T5861] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 510.250545][ T5861] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input47 [ 510.284539][ T5861] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 510.324516][ T5861] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 510.353838][ T5861] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 510.373846][ T5861] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 510.393982][ T5861] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 510.413949][ T5861] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 510.444109][ T5861] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 510.473996][ T5861] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 510.493864][ T5861] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 510.514113][ T5861] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 510.536690][ T5861] mceusb 3-1:0.0: Registered  with mce emulator interface version 1 [ 510.544228][ T5860] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 510.545369][ T5861] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 510.591900][ T5861] usb 3-1: USB disconnect, device number 110 [ 510.703694][ T5860] usb 6-1: Using ep0 maxpacket: 16 [ 510.713852][ T5860] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.724326][T12501] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 510.734455][ T5860] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 510.743798][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.752045][ T5860] usb 6-1: Product: syz [ 510.756463][ T5860] usb 6-1: Manufacturer: syz [ 510.761068][ T5860] usb 6-1: SerialNumber: syz [ 510.768401][ T5860] usb 6-1: config 0 descriptor?? [ 510.779567][ T5860] hub 6-1:0.0: bad descriptor, ignoring hub [ 510.785541][ T5860] hub 6-1:0.0: probe with driver hub failed with error -5 [ 510.794819][ T5860] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 510.814223][ T5860] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 510.846540][ T8488] udevd[8488]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.893853][T12501] usb 2-1: Invalid ep0 maxpacket: 32 [ 511.024125][T12501] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 511.094347][ T11] usb 6-1: USB disconnect, device number 14 [ 511.173593][T12501] usb 2-1: Invalid ep0 maxpacket: 32 [ 511.179349][T12501] usb usb2-port1: attempt power cycle [ 511.289490][T14025] input: syz1 as /devices/virtual/input/input48 [ 511.525254][T12501] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 511.559428][T12501] usb 2-1: Invalid ep0 maxpacket: 32 [ 511.593234][ T11] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 511.694290][T12501] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 511.728415][T12501] usb 2-1: Invalid ep0 maxpacket: 32 [ 511.737520][ T11] usb 3-1: device descriptor read/64, error -71 [ 511.748377][T12501] usb usb2-port1: unable to enumerate USB device [ 511.870855][T14039] syzkaller1: entered promiscuous mode [ 511.880073][T14039] syzkaller1: entered allmulticast mode [ 511.993066][ T11] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 512.122943][ T11] usb 3-1: device descriptor read/64, error -71 [ 512.235503][ T11] usb usb3-port1: attempt power cycle [ 512.485242][T12501] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 512.592773][ T11] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 512.613414][ T11] usb 3-1: device descriptor read/8, error -71 [ 512.657160][T12501] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 512.666406][T12501] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.674499][T12501] usb 6-1: Product: syz [ 512.678665][T12501] usb 6-1: Manufacturer: syz [ 512.683311][T12501] usb 6-1: SerialNumber: syz [ 512.852718][ T11] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 512.874116][ T11] usb 3-1: device descriptor read/8, error -71 [ 512.992838][ T11] usb usb3-port1: unable to enumerate USB device [ 513.509538][T14042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.526648][T14042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.739894][T12501] cdc_ncm 6-1:1.0: failed to get mac address [ 513.749908][T12501] cdc_ncm 6-1:1.0: bind() failure [ 513.760013][T12501] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 513.768887][T12501] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 513.779341][T12501] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 513.793549][T12501] usb 6-1: USB disconnect, device number 15 [ 513.882077][ T5968] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 514.051940][ T5968] usb 2-1: Using ep0 maxpacket: 32 [ 514.060076][ T5968] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 514.068678][ T5968] usb 2-1: config 0 has no interface number 0 [ 514.074933][ T5968] usb 2-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 514.086313][ T5968] usb 2-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 514.098089][ T5968] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 514.109440][ T5968] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 514.120383][ T5968] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 514.130269][ T5968] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 514.140147][ T5968] usb 2-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 514.155518][ T5968] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 514.164695][ T5968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.172730][ T5968] usb 2-1: Product: syz [ 514.176927][ T5968] usb 2-1: Manufacturer: syz [ 514.181522][ T5968] usb 2-1: SerialNumber: syz [ 514.191119][ T5968] usb 2-1: config 0 descriptor?? [ 514.197912][T14047] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 514.408945][ T5968] etas_es58x 2-1:0.219: Starting syz syz (Serial Number syz) [ 514.432935][ T5968] etas_es58x 2-1:0.219: could not retrieve the product info string [ 514.433758][T14055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.477534][T14058] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2314'. [ 514.483375][T14055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.492917][ T5968] usb 2-1: USB disconnect, device number 26 [ 514.501030][T14058] D`: renamed from hsr_slave_1 (while UP) [ 514.520914][ T5968] etas_es58x 2-1:0.219: Disconnecting syz syz [ 514.771985][T12501] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 514.779747][ T11] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 514.933080][T12501] usb 3-1: Using ep0 maxpacket: 16 [ 514.947957][T12501] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.971742][ T11] usb 6-1: config 0 has an invalid interface number: 3 but max is 0 [ 514.991451][T12501] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 515.011473][ T11] usb 6-1: config 0 has no interface number 0 [ 515.027873][T12501] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 515.038064][ T11] usb 6-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 515.055193][T12501] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 515.065780][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.074337][ T11] usb 6-1: Product: syz [ 515.078648][T12501] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 515.103226][ T11] usb 6-1: Manufacturer: syz [ 515.108943][ T11] usb 6-1: SerialNumber: syz [ 515.125201][ T11] usb 6-1: config 0 descriptor?? [ 515.134574][T12501] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 515.148867][T12501] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 515.162094][T12501] usb 3-1: Manufacturer: syz [ 515.170755][T12501] usb 3-1: config 0 descriptor?? [ 515.335349][ T11] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in warm state. [ 515.363557][ T11] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 515.582358][ T11] dvbdev: DVB: registering new adapter (Medion CTX1921 DVB-T USB) [ 515.600735][ T11] usb 6-1: media controller created [ 515.648762][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 515.691081][T12501] rc_core: IR keymap rc-hauppauge not found [ 515.697375][T12501] Registered IR keymap rc-empty [ 515.711146][T12501] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 515.731110][T12501] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 515.755697][T12501] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 515.785966][ T11] DVB: Unable to find symbol dib7000p_attach() [ 515.795631][T12501] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input49 [ 515.808674][ T11] dvb-usb: no frontend was attached by 'Medion CTX1921 DVB-T USB' [ 515.826488][T12501] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 515.851219][T12501] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 515.871153][T12501] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 515.912302][ T11] rc_core: IR keymap rc-dib0700-rc5 not found [ 515.918447][ T11] Registered IR keymap rc-empty [ 515.923532][T12501] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 515.932631][ T11] dvb-usb: could not initialize remote control. [ 515.938919][ T11] dvb-usb: Medion CTX1921 DVB-T USB successfully initialized and connected. [ 515.971416][T12501] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 515.995928][T12501] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 516.040974][T12501] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 516.061399][T12501] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 516.080953][T12501] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 516.104204][T12501] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 516.133547][T12501] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 516.143335][T12501] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 516.153310][ T5966] usb 6-1: USB disconnect, device number 16 [ 516.197196][ T5966] dvb-usb: Medion CTX1921 DVB-T USB successfully deinitialized and disconnected. [ 516.801372][T12501] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 516.950453][T12501] usb 2-1: device descriptor read/64, error -71 [ 517.040394][ T5966] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 517.190305][ T5966] usb 6-1: Using ep0 maxpacket: 32 [ 517.194297][T12501] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 517.197572][ T5966] usb 6-1: unable to get BOS descriptor or descriptor too short [ 517.215325][ T5966] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 517.223845][ T5966] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 517.234180][ T5966] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 517.243317][ T5966] usb 6-1: config 128 has no interface number 0 [ 517.249604][ T5966] usb 6-1: config 128 interface 127 altsetting 14 has an endpoint descriptor with address 0x37, changing to 0x7 [ 517.262066][ T5966] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 517.273394][ T5966] usb 6-1: config 128 interface 127 has no altsetting 0 [ 517.282867][ T5966] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 517.292293][ T5966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.300353][ T5966] usb 6-1: Product: syz [ 517.304527][ T5966] usb 6-1: Manufacturer: syz [ 517.309142][ T5966] usb 6-1: SerialNumber: syz [ 517.330339][T12501] usb 2-1: device descriptor read/64, error -71 [ 517.407195][ T5861] usb 3-1: USB disconnect, device number 115 [ 517.440640][T12501] usb usb2-port1: attempt power cycle [ 517.537887][T14116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 517.558577][ T5966] usb 6-1: USB disconnect, device number 17 [ 517.581057][ T8488] udevd[8488]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 517.782156][T12501] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 517.810849][T12501] usb 2-1: device descriptor read/8, error -71 [ 518.059897][T12501] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 518.080875][T12501] usb 2-1: device descriptor read/8, error -71 [ 518.190337][T12501] usb usb2-port1: unable to enumerate USB device [ 518.399296][T14125] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 518.439770][ T11] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 518.589673][ T11] usb 6-1: Using ep0 maxpacket: 8 [ 518.596333][ T11] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 518.599614][ T5966] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 518.604996][ T11] usb 6-1: config 179 has no interface number 0 [ 518.618559][ T11] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 518.629999][ T11] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 518.641761][ T11] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 518.653015][ T11] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 518.664518][ T11] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 518.678019][ T11] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 518.687130][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.698807][T14121] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 518.779825][ T5966] usb 3-1: Using ep0 maxpacket: 8 [ 518.793458][ T5966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.805630][ T5966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.815605][ T5966] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 518.824993][ T5966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.835524][ T5966] usb 3-1: config 0 descriptor?? [ 518.915051][ T5861] usb 6-1: USB disconnect, device number 18 [ 518.915059][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 518.915213][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 519.495522][ T5966] usbhid 3-1:0.0: can't add hid device: -71 [ 519.504236][T14128] virt_wifi0 speed is unknown, defaulting to 1000 [ 519.512674][T14128] virt_wifi0 speed is unknown, defaulting to 1000 [ 519.520560][T14128] virt_wifi0 speed is unknown, defaulting to 1000 [ 519.531480][T14128] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 519.546303][T14128] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 519.570198][ T5966] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 519.583068][T14128] virt_wifi0 speed is unknown, defaulting to 1000 [ 519.591904][T14128] virt_wifi0 speed is unknown, defaulting to 1000 [ 519.600238][T14128] virt_wifi0 speed is unknown, defaulting to 1000 [ 519.608544][T14128] virt_wifi0 speed is unknown, defaulting to 1000 [ 519.617681][T14128] virt_wifi0 speed is unknown, defaulting to 1000 [ 519.656859][ T5966] usb 3-1: USB disconnect, device number 116 [ 520.398791][ T11] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 520.448912][ T5860] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 520.486750][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.495441][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.503615][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.511721][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.519671][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.527379][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.535945][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.544193][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.552314][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.560061][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.567673][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.575537][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.583843][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.591896][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.592133][ T11] usb 2-1: config 2 has an invalid interface number: 2 but max is 0 [ 520.601043][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.611134][ T11] usb 2-1: config 2 has no interface number 0 [ 520.615739][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.625529][ T11] usb 2-1: config 2 interface 2 has no altsetting 0 [ 520.632003][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.641080][ T11] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=7f.a4 [ 520.643901][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.660689][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.663228][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.668353][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.683541][ T11] usb 2-1: Product: syz [ 520.690771][ T11] usb 2-1: Manufacturer: syz [ 520.691959][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.696382][ T11] usb 2-1: SerialNumber: syz [ 520.706629][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.708450][ T5860] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 520.716873][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.734408][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.737855][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.743907][ T5860] usb 6-1: Product: syz [ 520.754017][ T5861] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 520.754559][ T5860] usb 6-1: Manufacturer: syz [ 520.762664][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.767135][ T5860] usb 6-1: SerialNumber: syz [ 520.778740][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.794066][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.794326][ T5860] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 520.805176][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.821185][T12501] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 520.821888][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.839199][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.847319][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.859528][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.867401][T14168] binder: 14167:14168 ioctl c0306201 200000000300 returned -22 [ 520.931894][ T5861] usb 3-1: config 0 has an invalid descriptor of length 149, skipping remainder of the config [ 520.950667][ T5861] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 520.967866][ T5861] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 520.969021][ T11] usb 2-1: USB disconnect, device number 31 [ 520.979596][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.010644][ T5861] usb 3-1: config 0 descriptor?? [ 521.223872][T14169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.234185][T14169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.243141][T14169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.253362][T14169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.265429][T14169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.275166][ T5966] usb 6-1: USB disconnect, device number 19 [ 521.286589][T14169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.300601][T14169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.311040][T14169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.320557][T14169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.331000][T14169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.901053][T12501] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 521.930684][T12501] ath9k_htc: Failed to initialize the device [ 521.939395][T14184] fuse: Bad value for 'user_id' [ 521.951445][ T5966] usb 6-1: ath9k_htc: USB layer deinitialized [ 521.957005][T14184] fuse: Bad value for 'user_id' [ 521.987522][T14184] Invalid source name [ 522.031056][T14187] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 522.063708][T14188] input: syz0 as /devices/virtual/input/input52 [ 522.253016][ T5861] usb 3-1: string descriptor 0 read error: -71 [ 522.271871][ T5861] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 522.305509][ T5861] usb 3-1: USB disconnect, device number 117 [ 522.448820][T12501] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 522.547889][ T5860] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 522.617778][T12501] usb 6-1: Using ep0 maxpacket: 16 [ 522.631196][T12501] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 522.644271][T12501] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.652533][T12501] usb 6-1: Product: syz [ 522.656764][T12501] usb 6-1: Manufacturer: syz [ 522.661777][T12501] usb 6-1: SerialNumber: syz [ 522.679551][T12501] r8152-cfgselector 6-1: Unknown version 0x0000 [ 522.687422][T12501] r8152-cfgselector 6-1: config 0 descriptor?? [ 522.709525][ T5860] usb 2-1: config 1 interface 0 has no altsetting 0 [ 522.719524][ T5860] usb 2-1: New USB device found, idVendor=056a, idProduct=00c7, bcdDevice= 0.40 [ 522.737917][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.749001][ T5860] usb 2-1: Product: syz [ 522.753210][ T5860] usb 2-1: Manufacturer: 쵺죻㣋䥾뒽릆쟨诸猟肆荳Иᒔ뿣ꇏ촼꫋큒򝦄 [ 522.762934][ T5860] usb 2-1: SerialNumber: syz [ 522.777415][T14209] block nbd2: Attempted send on invalid socket [ 522.785095][T14209] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 522.795448][T14209] block nbd2: Attempted send on invalid socket [ 522.801791][T14209] I/O error, dev nbd2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 522.822483][T14209] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 522.834385][T14209] block nbd2: Attempted send on invalid socket [ 522.840980][T14209] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 522.850550][T14209] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 522.882900][T14209] block nbd2: Send control failed (result -32) [ 522.891875][T14209] block nbd2: Request send failed, requeueing [ 522.902424][ T95] block nbd2: Dead connection, failed to find a fallback [ 522.909591][ T95] block nbd2: shutting down sockets [ 522.914939][ T95] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 522.926174][T14209] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 522.935721][T14209] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 522.946574][T14209] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 522.956385][T14209] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 522.967112][T14209] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 522.976956][T14209] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 522.988190][T14209] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 522.998669][T14209] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 523.008501][T14209] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 523.020605][T14209] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 523.030474][T14209] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 523.040642][T14209] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 523.041590][ T5860] usbhid 2-1:1.0: can't add hid device: -71 [ 523.050678][T14209] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 523.056575][ T5860] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 523.091600][ T5860] usb 2-1: USB disconnect, device number 32 [ 523.142128][T12501] r8152-cfgselector 6-1: USB disconnect, device number 20 [ 523.626237][T14212] program syz.1.2357 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 523.784945][T14217] veth1_macvtap: left promiscuous mode [ 523.792519][T14217] macsec0: entered promiscuous mode [ 523.809147][T14217] macsec0: entered allmulticast mode [ 523.818663][T14217] veth1_macvtap: entered promiscuous mode [ 523.834650][T14217] veth1_macvtap: entered allmulticast mode [ 523.847590][T14217] macsec0: left promiscuous mode [ 523.862862][T14217] macsec0: left allmulticast mode [ 523.872810][T14217] veth1_macvtap: left allmulticast mode [ 523.932087][T14230] ptrace attach of "./syz-executor exec"[12302] was attempted by ""[14230] [ 524.456719][T12501] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 524.516804][ T5860] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 524.586840][T12501] usb 6-1: device descriptor read/64, error -71 [ 524.656701][ T5860] usb 3-1: device descriptor read/64, error -71 [ 524.826562][T12501] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 524.897760][ T5860] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 524.966485][T12501] usb 6-1: device descriptor read/64, error -71 [ 525.036649][ T5860] usb 3-1: device descriptor read/64, error -71 [ 525.086836][T12501] usb usb6-port1: attempt power cycle [ 525.157693][ T5860] usb usb3-port1: attempt power cycle [ 525.436230][T12501] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 525.466807][T12501] usb 6-1: device descriptor read/8, error -71 [ 525.506255][ T5860] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 525.536924][ T5860] usb 3-1: device descriptor read/8, error -71 [ 525.706320][T12501] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 525.737082][T12501] usb 6-1: device descriptor read/8, error -71 [ 525.776051][ T5860] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 525.822280][ T5860] usb 3-1: device descriptor read/8, error -71 [ 525.846446][T12501] usb usb6-port1: unable to enumerate USB device [ 525.936353][ T5860] usb usb3-port1: unable to enumerate USB device [ 526.196057][ T5966] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 526.386206][ T5966] usb 2-1: Using ep0 maxpacket: 32 [ 526.401207][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.419108][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.433599][ T5966] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 526.448236][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.463690][ T5966] usb 2-1: config 0 descriptor?? [ 526.887856][T14267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.892274][ T5966] savu 0003:1E7D:2D5A.002B: unknown main item tag 0x0 [ 526.905042][T14267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.925694][ T5966] savu 0003:1E7D:2D5A.002B: unknown main item tag 0x0 [ 526.933472][ T5966] savu 0003:1E7D:2D5A.002B: unknown main item tag 0x0 [ 526.947192][ T5966] savu 0003:1E7D:2D5A.002B: unknown main item tag 0x0 [ 526.954017][ T5966] savu 0003:1E7D:2D5A.002B: unknown main item tag 0x0 [ 526.965153][ T5966] savu 0003:1E7D:2D5A.002B: unbalanced collection at end of report description [ 526.983020][ T5966] savu 0003:1E7D:2D5A.002B: parse failed [ 526.988859][ T5966] savu 0003:1E7D:2D5A.002B: probe with driver savu failed with error -22 [ 527.039222][ T50] batadv0: left allmulticast mode [ 527.044526][ T50] batadv0: left promiscuous mode [ 527.053111][ T50] bridge0: port 2(batadv0) entered disabled state [ 527.066464][ T50] bridge_slave_0: left allmulticast mode [ 527.073255][ T50] bridge_slave_0: left promiscuous mode [ 527.091733][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.279113][ T11] usb 2-1: USB disconnect, device number 33 [ 527.381475][T14274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.397600][T14274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.564579][ T50] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 527.595122][ T5860] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 527.729579][ T5861] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 527.741206][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.749018][ T5860] usb 6-1: not running at top speed; connect to a high speed hub [ 527.759651][ T5860] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 527.770765][ T5860] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 527.771462][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.792498][ T5860] usb 6-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 527.792528][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.792547][ T5860] usb 6-1: Product: syz [ 527.819863][ T50] bond0 (unregistering): (slave team0): Releasing backup interface [ 527.832454][ T50] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 527.837983][ T5860] usb 6-1: Manufacturer: syz [ 527.849940][ T50] bond0 (unregistering): Released all slaves [ 527.854306][ T5860] usb 6-1: SerialNumber: syz [ 527.885307][T14271] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 527.981006][T14280] FAULT_INJECTION: forcing a failure. [ 527.981006][T14280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.994666][T14280] CPU: 0 UID: 0 PID: 14280 Comm: syz.2.2377 Not tainted syzkaller #0 PREEMPT(full) [ 527.994690][T14280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 527.994700][T14280] Call Trace: [ 527.994707][T14280] [ 527.994714][T14280] dump_stack_lvl+0x189/0x250 [ 527.994735][T14280] ? __pfx____ratelimit+0x10/0x10 [ 527.994756][T14280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.994777][T14280] ? __pfx__printk+0x10/0x10 [ 527.994802][T14280] ? __might_fault+0xb0/0x130 [ 527.994831][T14280] should_fail_ex+0x414/0x560 [ 527.994860][T14280] _copy_from_user+0x2d/0xb0 [ 527.994882][T14280] __sys_sendto+0x25c/0x520 [ 527.994907][T14280] ? __pfx___sys_sendto+0x10/0x10 [ 527.994926][T14280] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 527.994962][T14280] ? __fget_files+0x3a0/0x420 [ 527.994996][T14280] ? ksys_write+0x22a/0x250 [ 527.995021][T14280] ? __pfx_ksys_write+0x10/0x10 [ 527.995044][T14280] __x64_sys_sendto+0xde/0x100 [ 527.995067][T14280] do_syscall_64+0xfa/0xfa0 [ 527.995085][T14280] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.995103][T14280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.995119][T14280] ? clear_bhb_loop+0x60/0xb0 [ 527.995138][T14280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.995155][T14280] RIP: 0033:0x7f808118eba9 [ 527.995170][T14280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.995185][T14280] RSP: 002b:00007f8081fa2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 527.995203][T14280] RAX: ffffffffffffffda RBX: 00007f80813d5fa0 RCX: 00007f808118eba9 [ 527.995216][T14280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 527.995226][T14280] RBP: 00007f8081fa2090 R08: 0000200000000140 R09: 0000000000000014 [ 527.995238][T14280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.995256][T14280] R13: 00007f80813d6038 R14: 00007f80813d5fa0 R15: 00007fff47a3ef88 [ 527.995286][T14280] [ 528.204964][ T5860] usbhid 6-1:1.0: can't add hid device: -71 [ 528.212405][ T5860] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 528.224611][ T5860] usb 6-1: USB disconnect, device number 25 [ 528.501943][T14287] netlink: 'syz.2.2380': attribute type 5 has an invalid length. [ 528.509887][T14287] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2380'. [ 529.004939][ T5966] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 529.017507][ T50] hsr_slave_0: left promiscuous mode [ 529.042393][ T50] hsr_slave_1: left promiscuous mode [ 529.057866][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.074409][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.093170][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.112769][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.163306][ T50] veth1_macvtap: left promiscuous mode [ 529.174511][ T5966] usb 6-1: Using ep0 maxpacket: 32 [ 529.186094][ T5966] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 529.203364][ T50] veth0_macvtap: left promiscuous mode [ 529.216872][ T5966] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 529.234381][ T50] veth0_vlan: left promiscuous mode [ 529.240342][ T5966] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 529.264937][ T5966] usb 6-1: Product: syz [ 529.269145][ T5966] usb 6-1: Manufacturer: syz [ 529.273750][ T5966] usb 6-1: SerialNumber: syz [ 529.315892][ T5966] usb 6-1: config 0 descriptor?? [ 529.321692][T14292] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 529.335843][ T5966] hub 6-1:0.0: bad descriptor, ignoring hub [ 529.341781][ T5966] hub 6-1:0.0: probe with driver hub failed with error -5 [ 529.403504][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 529.421642][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 529.434641][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 529.446476][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 529.454291][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 529.479040][ T52] [ 529.481455][ T52] ====================================================== [ 529.488467][ T52] WARNING: possible circular locking dependency detected [ 529.495481][ T52] syzkaller #0 Not tainted [ 529.499877][ T52] ------------------------------------------------------ [ 529.506876][ T52] kworker/u9:0/52 is trying to acquire lock: [ 529.512835][ T52] ffff88801b6ffa20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x2fb/0x3e0 [ 529.523270][ T52] [ 529.523270][ T52] but task is already holding lock: [ 529.530613][ T52] ffff88801b6ff988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x520 [ 529.539996][ T52] [ 529.539996][ T52] which lock already depends on the new lock. [ 529.539996][ T52] [ 529.550384][ T52] [ 529.550384][ T52] the existing dependency chain (in reverse order) is: [ 529.559388][ T52] [ 529.559388][ T52] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 529.567460][ T52] lock_acquire+0x120/0x360 [ 529.572477][ T52] down_write+0x96/0x1f0 [ 529.577228][ T52] kernfs_add_one+0x41/0x520 [ 529.582346][ T52] kernfs_create_dir_ns+0xde/0x130 [ 529.587963][ T52] internal_create_group+0x419/0x1110 [ 529.593841][ T52] cpuhp_invoke_callback+0x445/0x860 [ 529.599635][ T52] cpuhp_issue_call+0x430/0x7a0 [ 529.605026][ T52] __cpuhp_setup_state_cpuslocked+0x3df/0x6c0 [ 529.611601][ T52] __cpuhp_setup_state+0x3f/0x60 [ 529.617048][ T52] do_one_initcall+0x236/0x820 [ 529.622317][ T52] do_initcall_level+0x104/0x190 [ 529.627763][ T52] do_initcalls+0x59/0xa0 [ 529.632602][ T52] kernel_init_freeable+0x334/0x4b0 [ 529.638311][ T52] kernel_init+0x1d/0x1d0 [ 529.643150][ T52] ret_from_fork+0x4bc/0x870 [ 529.648247][ T52] ret_from_fork_asm+0x1a/0x30 [ 529.653519][ T52] [ 529.653519][ T52] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 529.661322][ T52] [ 529.661322][ T52] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 529.669041][ T52] lock_acquire+0x120/0x360 [ 529.674059][ T52] cpus_read_lock+0x42/0x160 [ 529.679156][ T52] static_key_slow_inc+0x12/0x30 [ 529.684597][ T52] tcp_md5_do_add+0x21f/0x3a0 [ 529.689780][ T52] tcp_v4_parse_md5_keys+0x412/0x600 [ 529.695574][ T52] do_tcp_setsockopt+0x11dc/0x1f20 [ 529.701194][ T52] do_sock_setsockopt+0x17c/0x1b0 [ 529.706725][ T52] __x64_sys_setsockopt+0x13f/0x1b0 [ 529.712430][ T52] do_syscall_64+0xfa/0xfa0 [ 529.717439][ T52] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.723840][ T52] [ 529.723840][ T52] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 529.731474][ T52] lock_acquire+0x120/0x360 [ 529.736485][ T52] lock_sock_nested+0x48/0x100 [ 529.741765][ T52] tcp_sendmsg+0x21/0x50 [ 529.746513][ T52] __sock_sendmsg+0x19c/0x270 [ 529.751700][ T52] sock_sendmsg+0x158/0x230 [ 529.756705][ T52] __sock_xmit+0x1c1/0x470 [ 529.761629][ T52] nbd_send_cmd+0x863/0x1ba0 [ 529.766737][ T52] nbd_queue_rq+0xcdb/0xf10 [ 529.771770][ T52] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 529.777836][ T52] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 529.784680][ T52] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 529.791170][ T52] blk_mq_run_hw_queue+0x348/0x4f0 [ 529.796795][ T52] blk_mq_dispatch_list+0xd0c/0xe00 [ 529.802508][ T52] blk_mq_flush_plug_list+0x469/0x550 [ 529.808400][ T52] __blk_flush_plug+0x3d3/0x4b0 [ 529.813767][ T52] __submit_bio+0x2d3/0x5a0 [ 529.818782][ T52] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 529.824927][ T52] __bread_gfp+0x216/0x3c0 [ 529.829852][ T52] udf_load_vrs+0x365/0xf20 [ 529.834870][ T52] udf_fill_super+0x5ad/0x17a0 [ 529.840148][ T52] get_tree_bdev_flags+0x40e/0x4d0 [ 529.845772][ T52] vfs_get_tree+0x92/0x2b0 [ 529.850706][ T52] do_new_mount+0x302/0xa10 [ 529.855717][ T52] __se_sys_mount+0x313/0x410 [ 529.860909][ T52] do_syscall_64+0xfa/0xfa0 [ 529.865930][ T52] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.872331][ T52] [ 529.872331][ T52] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 529.879964][ T52] lock_acquire+0x120/0x360 [ 529.884976][ T52] __mutex_lock+0x187/0x1350 [ 529.890075][ T52] nbd_queue_rq+0x257/0xf10 [ 529.895089][ T52] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 529.901146][ T52] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 529.907982][ T52] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 529.914469][ T52] blk_mq_run_hw_queue+0x348/0x4f0 [ 529.920095][ T52] blk_mq_dispatch_list+0xd0c/0xe00 [ 529.925805][ T52] blk_mq_flush_plug_list+0x469/0x550 [ 529.931681][ T52] __blk_flush_plug+0x3d3/0x4b0 [ 529.937038][ T52] __submit_bio+0x2d3/0x5a0 [ 529.942063][ T52] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 529.948200][ T52] block_read_full_folio+0x599/0x830 [ 529.953999][ T52] filemap_read_folio+0x117/0x380 [ 529.959545][ T52] do_read_cache_folio+0x350/0x590 [ 529.965163][ T52] read_part_sector+0xb6/0x2b0 [ 529.970429][ T52] adfspart_check_ICS+0xa4/0xa50 [ 529.975874][ T52] bdev_disk_changed+0x75f/0x14b0 [ 529.981400][ T52] blkdev_get_whole+0x380/0x510 [ 529.986762][ T52] bdev_open+0x31e/0xd30 [ 529.991506][ T52] blkdev_open+0x457/0x600 [ 529.996425][ T52] do_dentry_open+0x953/0x13f0 [ 530.001695][ T52] vfs_open+0x3b/0x340 [ 530.006268][ T52] path_openat+0x2ee5/0x3830 [ 530.011367][ T52] do_filp_open+0x1fa/0x410 [ 530.016374][ T52] do_sys_openat2+0x121/0x1c0 [ 530.021557][ T52] __x64_sys_openat+0x138/0x170 [ 530.026912][ T52] do_syscall_64+0xfa/0xfa0 [ 530.031921][ T52] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.038316][ T52] [ 530.038316][ T52] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 530.045513][ T52] lock_acquire+0x120/0x360 [ 530.050525][ T52] __mutex_lock+0x187/0x1350 [ 530.055625][ T52] nbd_queue_rq+0xc8/0xf10 [ 530.060548][ T52] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 530.066598][ T52] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 530.073431][ T52] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 530.079915][ T52] blk_mq_run_hw_queue+0x348/0x4f0 [ 530.085535][ T52] blk_mq_dispatch_list+0xd0c/0xe00 [ 530.091238][ T52] blk_mq_flush_plug_list+0x469/0x550 [ 530.097116][ T52] __blk_flush_plug+0x3d3/0x4b0 [ 530.102470][ T52] __submit_bio+0x2d3/0x5a0 [ 530.107485][ T52] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 530.113622][ T52] __bread_gfp+0x216/0x3c0 [ 530.118544][ T52] udf_load_vrs+0x365/0xf20 [ 530.123557][ T52] udf_fill_super+0x5ad/0x17a0 [ 530.128830][ T52] get_tree_bdev_flags+0x40e/0x4d0 [ 530.134452][ T52] vfs_get_tree+0x92/0x2b0 [ 530.139376][ T52] do_new_mount+0x302/0xa10 [ 530.144387][ T52] __se_sys_mount+0x313/0x410 [ 530.149573][ T52] do_syscall_64+0xfa/0xfa0 [ 530.154587][ T52] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.160989][ T52] [ 530.160989][ T52] -> #4 (set->srcu){.+.+}-{0:0}: [ 530.168104][ T52] lock_sync+0xba/0x160 [ 530.172790][ T52] __synchronize_srcu+0x96/0x3a0 [ 530.178235][ T52] elevator_switch+0x12b/0x640 [ 530.183503][ T52] elevator_change+0x315/0x4c0 [ 530.188770][ T52] elevator_set_default+0x186/0x260 [ 530.194470][ T52] blk_register_queue+0x34e/0x3f0 [ 530.200002][ T52] __add_disk+0x677/0xd50 [ 530.204837][ T52] add_disk_fwnode+0xfc/0x480 [ 530.210020][ T52] nbd_dev_add+0x717/0xae0 [ 530.214945][ T52] nbd_init+0x168/0x1f0 [ 530.219607][ T52] do_one_initcall+0x236/0x820 [ 530.224874][ T52] do_initcall_level+0x104/0x190 [ 530.230323][ T52] do_initcalls+0x59/0xa0 [ 530.235158][ T52] kernel_init_freeable+0x334/0x4b0 [ 530.240867][ T52] kernel_init+0x1d/0x1d0 [ 530.245707][ T52] ret_from_fork+0x4bc/0x870 [ 530.250804][ T52] ret_from_fork_asm+0x1a/0x30 [ 530.256073][ T52] [ 530.256073][ T52] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 530.263885][ T52] lock_acquire+0x120/0x360 [ 530.268898][ T52] __mutex_lock+0x187/0x1350 [ 530.273998][ T52] elevator_change+0x1e5/0x4c0 [ 530.279276][ T52] elevator_set_none+0x42/0xb0 [ 530.284549][ T52] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 530.290865][ T52] nbd_start_device+0x17f/0xb10 [ 530.296226][ T52] nbd_genl_connect+0x135b/0x18f0 [ 530.301764][ T52] genl_family_rcv_msg_doit+0x215/0x300 [ 530.307822][ T52] genl_rcv_msg+0x60e/0x790 [ 530.312840][ T52] netlink_rcv_skb+0x208/0x470 [ 530.318110][ T52] genl_rcv+0x28/0x40 [ 530.322600][ T52] netlink_unicast+0x82f/0x9e0 [ 530.327867][ T52] netlink_sendmsg+0x805/0xb30 [ 530.333135][ T52] __sock_sendmsg+0x21c/0x270 [ 530.338316][ T52] ____sys_sendmsg+0x505/0x830 [ 530.343590][ T52] ___sys_sendmsg+0x21f/0x2a0 [ 530.348774][ T52] __x64_sys_sendmsg+0x19b/0x260 [ 530.354223][ T52] do_syscall_64+0xfa/0xfa0 [ 530.359234][ T52] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.365632][ T52] [ 530.365632][ T52] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 530.374226][ T52] lock_acquire+0x120/0x360 [ 530.379236][ T52] blk_alloc_queue+0x538/0x620 [ 530.384502][ T52] __blk_mq_alloc_disk+0x15c/0x340 [ 530.390116][ T52] nbd_dev_add+0x46c/0xae0 [ 530.395040][ T52] nbd_init+0x168/0x1f0 [ 530.399706][ T52] do_one_initcall+0x236/0x820 [ 530.404979][ T52] do_initcall_level+0x104/0x190 [ 530.410425][ T52] do_initcalls+0x59/0xa0 [ 530.415259][ T52] kernel_init_freeable+0x334/0x4b0 [ 530.420965][ T52] kernel_init+0x1d/0x1d0 [ 530.425807][ T52] ret_from_fork+0x4bc/0x870 [ 530.430908][ T52] ret_from_fork_asm+0x1a/0x30 [ 530.436176][ T52] [ 530.436176][ T52] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 530.443372][ T52] lock_acquire+0x120/0x360 [ 530.448378][ T52] fs_reclaim_acquire+0x72/0x100 [ 530.453828][ T52] kmem_cache_alloc_noprof+0x45/0x6e0 [ 530.459703][ T52] __kernfs_iattrs+0xd9/0x320 [ 530.464888][ T52] kernfs_iop_setattr+0xea/0x3f0 [ 530.470330][ T52] notify_change+0xc1a/0xf40 [ 530.475430][ T52] do_truncate+0x1a4/0x220 [ 530.480356][ T52] path_openat+0x306c/0x3830 [ 530.485452][ T52] do_filp_open+0x1fa/0x410 [ 530.490461][ T52] do_sys_openat2+0x121/0x1c0 [ 530.495639][ T52] __x64_sys_openat+0x138/0x170 [ 530.500994][ T52] do_syscall_64+0xfa/0xfa0 [ 530.506010][ T52] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.512411][ T52] [ 530.512411][ T52] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 530.520914][ T52] validate_chain+0xb9b/0x2140 [ 530.526187][ T52] __lock_acquire+0xab9/0xd20 [ 530.531367][ T52] lock_acquire+0x120/0x360 [ 530.536379][ T52] down_write+0x96/0x1f0 [ 530.541130][ T52] kernfs_link_sibling+0x2fb/0x3e0 [ 530.546748][ T52] kernfs_add_one+0x1e0/0x520 [ 530.551931][ T52] kernfs_create_dir_ns+0xde/0x130 [ 530.557546][ T52] sysfs_create_dir_ns+0x123/0x280 [ 530.563163][ T52] kobject_add_internal+0x59f/0xb40 [ 530.568928][ T52] kobject_add+0x155/0x220 [ 530.573861][ T52] device_add+0x408/0xb50 [ 530.578707][ T52] hci_conn_add_sysfs+0xd5/0x1e0 [ 530.584156][ T52] hci_conn_complete_evt+0x6ba/0x1040 [ 530.590033][ T52] hci_event_packet+0x7e3/0x1200 [ 530.595477][ T52] hci_rx_work+0x46a/0xe80 [ 530.600399][ T52] process_scheduled_works+0xae1/0x17b0 [ 530.606471][ T52] worker_thread+0x8a0/0xda0 [ 530.611577][ T52] kthread+0x711/0x8a0 [ 530.616154][ T52] ret_from_fork+0x4bc/0x870 [ 530.621252][ T52] ret_from_fork_asm+0x1a/0x30 [ 530.626522][ T52] [ 530.626522][ T52] other info that might help us debug this: [ 530.626522][ T52] [ 530.636746][ T52] Chain exists of: [ 530.636746][ T52] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 530.636746][ T52] [ 530.651173][ T52] Possible unsafe locking scenario: [ 530.651173][ T52] [ 530.658612][ T52] CPU0 CPU1 [ 530.663964][ T52] ---- ---- [ 530.669313][ T52] lock(&root->kernfs_rwsem); [ 530.674066][ T52] lock(cpuhp_state_mutex); [ 530.681162][ T52] lock(&root->kernfs_rwsem); [ 530.688430][ T52] lock(&root->kernfs_iattr_rwsem); [ 530.693699][ T52] [ 530.693699][ T52] *** DEADLOCK *** [ 530.693699][ T52] [ 530.701828][ T52] 4 locks held by kworker/u9:0/52: [ 530.706918][ T52] #0: ffff888032964148 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 530.717880][ T52] #1: ffffc90000bc7ba0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 530.729876][ T52] #2: ffff888034fc80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xc3/0x1040 [ 530.739694][ T52] #3: ffff88801b6ff988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x520 [ 530.749528][ T52] [ 530.749528][ T52] stack backtrace: [ 530.755411][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 530.755430][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 530.755441][ T52] Workqueue: hci1 hci_rx_work [ 530.755462][ T52] Call Trace: [ 530.755470][ T52] [ 530.755478][ T52] dump_stack_lvl+0x189/0x250 [ 530.755496][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.755510][ T52] ? __pfx__printk+0x10/0x10 [ 530.755531][ T52] ? print_lock_name+0xde/0x100 [ 530.755552][ T52] print_circular_bug+0x2ee/0x310 [ 530.755573][ T52] check_noncircular+0x134/0x160 [ 530.755594][ T52] validate_chain+0xb9b/0x2140 [ 530.755614][ T52] ? lockdep_unlock+0x89/0x120 [ 530.755627][ T52] ? validate_chain+0x897/0x2140 [ 530.755648][ T52] __lock_acquire+0xab9/0xd20 [ 530.755667][ T52] ? kernfs_link_sibling+0x2fb/0x3e0 [ 530.755683][ T52] lock_acquire+0x120/0x360 [ 530.755698][ T52] ? kernfs_link_sibling+0x2fb/0x3e0 [ 530.755719][ T52] down_write+0x96/0x1f0 [ 530.755740][ T52] ? kernfs_link_sibling+0x2fb/0x3e0 [ 530.755757][ T52] ? __pfx_down_write+0x10/0x10 [ 530.755775][ T52] ? kernfs_root+0x1c/0x230 [ 530.755790][ T52] ? kernfs_root+0x1c/0x230 [ 530.755804][ T52] ? kernfs_root+0x1c/0x230 [ 530.755819][ T52] ? kernfs_root+0x1ea/0x230 [ 530.755835][ T52] kernfs_link_sibling+0x2fb/0x3e0 [ 530.755854][ T52] kernfs_add_one+0x1e0/0x520 [ 530.755872][ T52] kernfs_create_dir_ns+0xde/0x130 [ 530.755890][ T52] sysfs_create_dir_ns+0x123/0x280 [ 530.755907][ T52] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 530.755922][ T52] ? do_raw_spin_unlock+0x122/0x240 [ 530.755944][ T52] kobject_add_internal+0x59f/0xb40 [ 530.755966][ T52] kobject_add+0x155/0x220 [ 530.755990][ T52] ? __pfx_kobject_add+0x10/0x10 [ 530.756007][ T52] ? _raw_spin_unlock+0x28/0x50 [ 530.756023][ T52] ? get_device_parent+0x366/0x3a0 [ 530.756045][ T52] device_add+0x408/0xb50 [ 530.756065][ T52] hci_conn_add_sysfs+0xd5/0x1e0 [ 530.756087][ T52] hci_conn_complete_evt+0x6ba/0x1040 [ 530.756101][ T52] ? __asan_memcpy+0x40/0x70 [ 530.756120][ T52] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 530.756137][ T52] hci_event_packet+0x7e3/0x1200 [ 530.756152][ T52] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 530.756167][ T52] ? __pfx_hci_event_packet+0x10/0x10 [ 530.756182][ T52] ? kcov_remote_start+0x4d3/0x7f0 [ 530.756197][ T52] ? lockdep_hardirqs_on+0x90/0x150 [ 530.756214][ T52] ? hci_send_to_monitor+0xe2/0x570 [ 530.756233][ T52] hci_rx_work+0x46a/0xe80 [ 530.756250][ T52] ? process_scheduled_works+0x9ef/0x17b0 [ 530.756267][ T52] process_scheduled_works+0xae1/0x17b0 [ 530.756293][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 530.756314][ T52] worker_thread+0x8a0/0xda0 [ 530.756339][ T52] kthread+0x711/0x8a0 [ 530.756360][ T52] ? __pfx_worker_thread+0x10/0x10 [ 530.756377][ T52] ? __pfx_kthread+0x10/0x10 [ 530.756397][ T52] ? _raw_spin_unlock_irq+0x23/0x50 [ 530.756413][ T52] ? lockdep_hardirqs_on+0x9c/0x150 [ 530.756429][ T52] ? __pfx_kthread+0x10/0x10 [ 530.756449][ T52] ret_from_fork+0x4bc/0x870 [ 530.756466][ T52] ? __pfx_ret_from_fork+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 530.756484][ T52] ? __switch_to_asm+0x39/0x70 [ 530.756499][ T52] ? __switch_to_asm+0x33/0x70 [ 530.756514][ T52] ? __pfx_kthread+0x10/0x10 [ 530.756533][ T52] ret_from_fork_asm+0x1a/0x30 [ 530.756554][ T52] [ 531.393186][ T5966] usb 6-1: reset high-speed USB device number 26 using dummy_hcd [ 532.037915][ T50] team0 (unregistering): Port device team_slave_1 removed [ 532.076351][ T50] team0 (unregistering): Port device team_slave_0 removed [ 532.836404][ T50] IPVS: stop unused estimator thread 0... [ 532.877293][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.926611][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.976842][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.026557][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.101746][ T50] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.145886][ T50] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.186543][ T50] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.227901][ T50] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.331898][ T50] bridge0: port 3(batadv0) entered disabled state [ 533.345984][ T50] bridge_slave_1: left allmulticast mode [ 533.351882][ T50] bridge_slave_1: left promiscuous mode [ 533.358043][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.366879][ T50] : left allmulticast mode [ 533.371400][ T50] : left promiscuous mode [ 533.377761][ T50] bridge0: port 1() entered disabled state [ 533.388984][ T50] bridge_slave_1: left allmulticast mode [ 533.394773][ T50] bridge_slave_1: left promiscuous mode [ 533.395318][ T5966] usb 6-1: USB disconnect, device number 26 [ 533.400433][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.415976][ T50] bridge_slave_0: left allmulticast mode [ 533.421650][ T50] bridge_slave_0: left promiscuous mode [ 533.429267][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.489414][ T50] bridge0 (unregistering): left allmulticast mode [ 533.536766][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.547070][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.556639][ T50] bond0 (unregistering): Released all slaves [ 533.650349][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.660891][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.670641][ T50] bond0 (unregistering): Released all slaves [ 533.744508][ T50] tipc: Disabling bearer [ 533.760863][ T50] tipc: Left network mode [ 534.218186][ T50] hsr_slave_0: left promiscuous mode [ 534.224073][ T50] hsr_slave_1: left promiscuous mode [ 534.229845][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.242220][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.270239][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.277823][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.288609][ T50] hsr_slave_0: left promiscuous mode [ 534.295296][ T50] D`: left promiscuous mode [ 534.300821][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.309760][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.318741][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.326356][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.338210][ T50] veth1_macvtap: left promiscuous mode [ 534.343997][ T50] veth0_macvtap: left promiscuous mode [ 534.349678][ T50] veth1_vlan: left promiscuous mode [ 534.354979][ T50] veth0_vlan: left promiscuous mode [ 534.360756][ T50] veth1_macvtap: left promiscuous mode [ 534.366532][ T50] veth0_macvtap: left promiscuous mode [ 534.372145][ T50] veth1_vlan: left promiscuous mode [ 534.377352][ T50] veth0_vlan: left promiscuous mode [ 534.518406][ T50] team0 (unregistering): Port device team_slave_1 removed [ 534.544084][ T50] team0 (unregistering): Port device team_slave_0 removed [ 534.651741][ T12] smc: removing ib device syz1 [ 534.744188][ T50] team0 (unregistering): Port device team_slave_1 removed [ 534.768424][ T50] team0 (unregistering): Port device team_slave_0 removed [ 535.342455][ T50] IPVS: stop unused estimator thread 0...