last executing test programs: 8m17.552089801s ago: executing program 0 (id=1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x9, &(0x7f00000000c0)) io_setup(0x9, &(0x7f0000000240)) io_setup(0x3, &(0x7f0000000380)) io_setup(0x1, &(0x7f0000000940)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000380)=@urb_type_control={0x2, {0x1, 0x1}, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r2, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20001, 0x0) fcntl$getflags(r2, 0x401) io_setup(0xccd, &(0x7f0000001dc0)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000002060101000000000300000000000000050005000a001800050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b032200e0ff25a60200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r8, 0xf, &(0x7f0000000140)={0x2}) read(r7, &(0x7f00000000c0)=""/81, 0x51) 8m17.010090949s ago: executing program 3 (id=4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) capset(0x0, &(0x7f00000000c0)={0x200000, 0x200000, 0x8, 0x0, 0x0, 0xea2}) syz_clone3(0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xecbf164e8d3f197, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x3}, {0x1000, 0xffff1000, 0x8, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0x12, 0xff, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x7f778000, 0x1000, 0x11, 0xfc, 0x3, 0x46, 0x2, 0xcc, 0x6, 0x3, 0x8, 0x1}, {0x6000, 0x10000, 0x8, 0x1, 0x3, 0x9, 0x9, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xd000, 0x0, 0x6, 0x3, 0x6e, 0x6, 0x40, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0x9d, 0x3, 0x40, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x2, 0x3, 0xa, 0x9, 0x54, 0xc, 0x2, 0x7}, {0x8080000, 0x5}, {0x80a0000, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000e03608"]) 8m16.716029029s ago: executing program 3 (id=5): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000020205000000000000000000020000026f8bc0c66e657462696f732d6e73050091"], 0x24}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000) close(r0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x3a, &(0x7f00000000c0)=@string={0x3a, 0x3, "4921dbdcde1a146f0909c022360d1fd2af1fbbcab3577fb4f3902869d6e92b88ee8b0e0b8d5a4c468537700161f6ed05f6169f483f955976"}}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x341400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0) r4 = syz_open_dev$loop(&(0x7f00000005c0), 0x7, 0x22000) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000b80)={0x84, &(0x7f00000006c0)={0x0, 0x7, 0x2, "2692"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB="001d7d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BLKPG(r4, 0x1269, &(0x7f00000006c0)={0x3, 0x0, 0x98, &(0x7f0000000600)={0x0, 0x0, 0x4}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000480)={0x0, 0x0, 0x0, 'queue0\x00', 0x20}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="0000001978227a6e3af23e42ec2c3bcb61b299b0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r6, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000005480)={0x0, 0x8, 0x3cdb, {0x0, 0x10000}}) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f0000000040)={0x2, 0x1, @start={0x401, 0x1}}) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_int(r7, 0x1, 0x0, &(0x7f0000002480)=0xf, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) flistxattr(r7, &(0x7f00000003c0)=""/186, 0xba) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 8m16.498102288s ago: executing program 0 (id=6): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x8004500f, &(0x7f00000001c0)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1006) 8m16.369040959s ago: executing program 0 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x10000, 0x40) mkdirat(r0, &(0x7f0000000400)='./file0/../file0\x00', 0x4) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) read$dsp(r1, &(0x7f00000001c0)=""/95, 0x5f) r2 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x5, @raw_data="2fb04a43cb4edbb2f8c11d55fe7e39d98cc683907ce4751204e83d1785190479f3c5d378bed2c1fc92e0629a4fffd9a52b7a93d12eb198729676b0d892c9c02879d5700ed2ea2a5352518f772c3d9d2809911d42843bd3931a529ac577f811f21e91d3e16bb79748df00c9b6882ccd692b1170aa76a9de8d4bd5f8690cc3edf408d220b7d5916b3eba2d13f751cb46d2cf9034ed3d98a91172eea90e991030a3af605efb6671b50a33e46fdc5695084f7cc34d71ea422e337bf362d643c2827ae8e7f38afa894e0c"}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x24}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x4}) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x80000, 0x0) r4 = socket(0x10, 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) ppoll(&(0x7f00000004c0)=[{r5, 0x84}], 0x1, &(0x7f0000000540), 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x400008, &(0x7f0000000700)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r6, @ANYBLOB="b94a96539fe933053b11b86e3fe79e00c9d8e5e44cf26d1f4cd45e91fe9f13880cc2a1315d2573dc497ab91ee845b870a9c356e9e706000100b562bf91cb065831e76df71cf0cce999519430a21263aaa562af1cab92df383e5827bc6ec236f3e2b1b93ac46d2bbad472a0898168e66507d9852847dd7a9be7dd1990070b55c59358a0d22a6fbbaaa9bfefb698b955d0368c71ee8dce864de42d0fe5f20bf62ff0652e9af9331dd6efe155ab1548de1acb7bdd20e4bcd74ccf080a8b3b5fed8dc834b334fe1c"]) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r7, 0x10001, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r8, 0x8001af85, &(0x7f0000000080)) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, 0x0) 8m16.106905728s ago: executing program 0 (id=8): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x3, 0x0, 0x8000008c1f, 0x800000000, 0x0, 0xbc, 0x400, 0x6, 0x0, 0x0, 0x81, 0x80000000000, 0x7125, 0x1, 0x102, 0x200, 0xfffffffffffffffc, 0x1, 0x3, 0x4, 0x1, 0xffff, 0x0, 0x8, 0x0, 0x80000000000000}) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x8002}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x20000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) 8m15.716746818s ago: executing program 0 (id=11): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000000)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x9, 0x0}, 0x1) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x3, 0x93, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010102020000082505a1a44000000001010902810001010030000904005d03020600000b24060000afeb0d000000052400ff010d240f017f00000040000000060c241b1e570100080000000615c665fecea317a88b045e4f01a607c0ffcb7e392a06241a0e74270e241306d44e6d3f941d9cc7a11004240204072414050004000905820230001210fc0905030220000d0205"], 0x0) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000480)={0x1c, &(0x7f00000001c0)={0x0, 0x8, 0x1, "81"}, 0x0, 0x0}) syz_usb_control_io$hid(r2, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x424}}, 0x0, 0x0}, &(0x7f00000005c0)={0x2c, &(0x7f00000004c0)={0x40, 0x17, 0x99, "8e32a1ccad90a7fcdfcc5282953ddaa840c07255484724c1f0296bb219d5a541ee78660ee4e5b8ed5b7c0482c9ec36c299f5b830639ef5b896a92ae01a1f55600d567535403cb7cc83f2d3d346022b13a1bd166bcfb4e7aff0b7a60d7b53df2b1b7976675590d6b2afa81e2f62aed12eda729abcc53b4e146a746ee640db3178309d15dc706f5a58e746a4e8253f61e99a22bcdd85f98cb342"}, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) r5 = socket$phonet(0x23, 0x2, 0x1) sendmsg(r5, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x40000) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)={'trans=rdma,', {}, 0x2c, {[{@common=@privport}]}}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getdents64(r3, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x1, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x70, 0x8, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x8, 0xe, 0x6}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x0, 0xb, 0x2, 0x20, 0xa}, 0x1bc, &(0x7f00000006c0)={0x5, 0xf, 0x1bc, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0xf7, 0x4, 0x3}, @generic={0xb2, 0x10, 0x4, "a5152ddf02adcf0be5d6dc708de707d0d961bec298094421b5227b85cad84d09c07f99c79ba7c5feab50b78f75528a65785a265472a2e4026064cca6d60682a53f3b723415e05caff252db2ebaa29d0690981e0dfa1df4d6c1e8d502be340f9df621faea7839441ea59de4576527cc4e53c83d5f93a5fdda71973731ffaf7af8e760fbd71b24ce23bb34affe1f7e1538b3caccf091eec8e24e0341862692701b49284a6e87d72f47ab35106363e421"}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x8, 0x1e, 0xe917}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "15da7805cb277be3b1770deaa5cc1363"}, @generic={0xd8, 0x10, 0xa, "9328fcd3271cf83475848783d285a4a7a3a3c27feb09c0b0c75491820b4b81105900c8f1f43c570070b24bfc98e4782631ef7c5b9dde55cab446654d87d3405f041faf87d1e1efa642a4a8997a953d874a507dffc83577e559e709ff167eeca757cf314d9fa07962b5fd57e37da23f2d67fbb8189113f37430c3f02137b822a3d7744024fa077e2900547d201e7cf8a733164b39763a8ee7e5d92735b6c46a3d97a8cfad0eb7508c1f298490c45893b8ac0738ed13d5b955121aa37cc4fe29b8edbc6556296f1575a00aa37b1e3bc5c3a95bbd6648"}]}, 0x5, [{0x6c, &(0x7f0000000300)=@string={0x6c, 0x3, "813de239b92ea0192502d0daeb578c1fc1eabf12fb5bc85cfc883834e7beffabfbe26722c50a288360bdaea2de01001ef0ddf88ada992cd87c37d7c9e77a4b9169a35ab33309cdd8109a9870750c8d5265019a253759bd729f6fe1835d9b30e5acf553e1658e55a0530f"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xfcff}}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) 8m15.428958172s ago: executing program 32 (id=11): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000000)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x9, 0x0}, 0x1) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x3, 0x93, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010102020000082505a1a44000000001010902810001010030000904005d03020600000b24060000afeb0d000000052400ff010d240f017f00000040000000060c241b1e570100080000000615c665fecea317a88b045e4f01a607c0ffcb7e392a06241a0e74270e241306d44e6d3f941d9cc7a11004240204072414050004000905820230001210fc0905030220000d0205"], 0x0) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000480)={0x1c, &(0x7f00000001c0)={0x0, 0x8, 0x1, "81"}, 0x0, 0x0}) syz_usb_control_io$hid(r2, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x424}}, 0x0, 0x0}, &(0x7f00000005c0)={0x2c, &(0x7f00000004c0)={0x40, 0x17, 0x99, "8e32a1ccad90a7fcdfcc5282953ddaa840c07255484724c1f0296bb219d5a541ee78660ee4e5b8ed5b7c0482c9ec36c299f5b830639ef5b896a92ae01a1f55600d567535403cb7cc83f2d3d346022b13a1bd166bcfb4e7aff0b7a60d7b53df2b1b7976675590d6b2afa81e2f62aed12eda729abcc53b4e146a746ee640db3178309d15dc706f5a58e746a4e8253f61e99a22bcdd85f98cb342"}, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) r5 = socket$phonet(0x23, 0x2, 0x1) sendmsg(r5, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x40000) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)={'trans=rdma,', {}, 0x2c, {[{@common=@privport}]}}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getdents64(r3, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x1, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x70, 0x8, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x8, 0xe, 0x6}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x0, 0xb, 0x2, 0x20, 0xa}, 0x1bc, &(0x7f00000006c0)={0x5, 0xf, 0x1bc, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0xf7, 0x4, 0x3}, @generic={0xb2, 0x10, 0x4, "a5152ddf02adcf0be5d6dc708de707d0d961bec298094421b5227b85cad84d09c07f99c79ba7c5feab50b78f75528a65785a265472a2e4026064cca6d60682a53f3b723415e05caff252db2ebaa29d0690981e0dfa1df4d6c1e8d502be340f9df621faea7839441ea59de4576527cc4e53c83d5f93a5fdda71973731ffaf7af8e760fbd71b24ce23bb34affe1f7e1538b3caccf091eec8e24e0341862692701b49284a6e87d72f47ab35106363e421"}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x8, 0x1e, 0xe917}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "15da7805cb277be3b1770deaa5cc1363"}, @generic={0xd8, 0x10, 0xa, "9328fcd3271cf83475848783d285a4a7a3a3c27feb09c0b0c75491820b4b81105900c8f1f43c570070b24bfc98e4782631ef7c5b9dde55cab446654d87d3405f041faf87d1e1efa642a4a8997a953d874a507dffc83577e559e709ff167eeca757cf314d9fa07962b5fd57e37da23f2d67fbb8189113f37430c3f02137b822a3d7744024fa077e2900547d201e7cf8a733164b39763a8ee7e5d92735b6c46a3d97a8cfad0eb7508c1f298490c45893b8ac0738ed13d5b955121aa37cc4fe29b8edbc6556296f1575a00aa37b1e3bc5c3a95bbd6648"}]}, 0x5, [{0x6c, &(0x7f0000000300)=@string={0x6c, 0x3, "813de239b92ea0192502d0daeb578c1fc1eabf12fb5bc85cfc883834e7beffabfbe26722c50a288360bdaea2de01001ef0ddf88ada992cd87c37d7c9e77a4b9169a35ab33309cdd8109a9870750c8d5265019a253759bd729f6fe1835d9b30e5acf553e1658e55a0530f"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xfcff}}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) 8m12.909106933s ago: executing program 3 (id=18): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000000280)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x22c, 0x0, 0x100000001}]}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r4, &(0x7f0000002a40)=[{{}, 0x9}], 0x1, 0x40002000, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0xc6, 0x1e, 0x40, 0x7c9, 0x12, 0xc2f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcb, 0x8e, 0x2f}}]}}]}}, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000000c0)={[{0x6349, 0x0, 0x3, 0x7, 0x8, 0x8, 0x6, 0x6, 0x1, 0x1, 0x3, 0x2, 0x400000000}, {0x6, 0x6949, 0x2, 0x8, 0xb5, 0xc, 0x94, 0x1, 0xc, 0x6, 0x5, 0x0, 0x10001}, {0x9, 0xb247, 0xf9, 0x9, 0x3, 0x8, 0x3, 0xe, 0xb4, 0x3, 0x1, 0x5, 0x7}], 0x3}) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r4, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x60, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000001280)={{0xfc, 0xc0}, {0x0, 0x2}, 0x4, 0x7, 0xf4}) 8m10.997685923s ago: executing program 3 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x10000, 0x40) mkdirat(r0, &(0x7f0000000400)='./file0/../file0\x00', 0x4) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) read$dsp(r1, &(0x7f00000001c0)=""/95, 0x5f) r2 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x5, @raw_data="2fb04a43cb4edbb2f8c11d55fe7e39d98cc683907ce4751204e83d1785190479f3c5d378bed2c1fc92e0629a4fffd9a52b7a93d12eb198729676b0d892c9c02879d5700ed2ea2a5352518f772c3d9d2809911d42843bd3931a529ac577f811f21e91d3e16bb79748df00c9b6882ccd692b1170aa76a9de8d4bd5f8690cc3edf408d220b7d5916b3eba2d13f751cb46d2cf9034ed3d98a91172eea90e991030a3af605efb6671b50a33e46fdc5695084f7cc34d71ea422e337bf362d643c2827ae8e7f38afa894e0c"}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x24}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x4}) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x80000, 0x0) r4 = socket(0x10, 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) ppoll(&(0x7f00000004c0)=[{r5, 0x84}], 0x1, &(0x7f0000000540), 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x400008, &(0x7f0000000700)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r6, @ANYBLOB="b94a96539fe933053b11b86e3fe79e00c9d8e5e44cf26d1f4cd45e91fe9f13880cc2a1315d2573dc497ab91ee845b870a9c356e9e706000100b562bf91cb065831e76df71cf0cce999519430a21263aaa562af1cab92df383e5827bc6ec236f3e2b1b93ac46d2bbad472a0898168e66507d9852847dd7a9be7dd1990070b55c59358a0d22a6fbbaaa9bfefb698b955d0368c71ee8dce864de42d0fe5f20bf62ff0652e9af9331dd6efe155ab1548de1acb7bdd20e4bcd74ccf080a8b3b5fed8dc834b334fe1c"]) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r7, 0x10001, 0x0) 8m10.754791606s ago: executing program 3 (id=21): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x8004500f, &(0x7f00000001c0)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1006) 8m10.457228122s ago: executing program 3 (id=29): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 8m10.149017826s ago: executing program 33 (id=29): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 3m17.401696576s ago: executing program 5 (id=931): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x464}, 0x1, 0x0, 0x0, 0x24011}, 0x404c000) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=@canfd={{0x1, 0x1}, 0x39, 0x0, 0x0, 0x0, "3992ca995e968b0b065f7922b761528f0199602d1e09faf0c0f1c2db040f957a34b2aa413157e3ec06fdcf6128269e6763e9c19b00d4eb026a6375a22b930a64"}, 0x48}, 0x1, 0x0, 0x0, 0x8490}, 0x1) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0adff010000000000000dd6e4edef3d93452a09004b43370e9703890723f97e46bb5c0754", 0xd6}], 0x1}, 0x20004804) (async) syz_usb_connect(0x0, 0x51, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0xc0, 0xe7, 0x9f, 0x10, 0x1199, 0x6859, 0xfd7d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0xf, 0x8, 0x60, 0x5, [{{0x9, 0x4, 0xae, 0x1, 0x5, 0xf7, 0x34, 0x51, 0x0, [], [{{0x9, 0x5, 0x8, 0xa, 0x20, 0x2, 0x2}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x7, 0x1, 0x8}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0x1, 0xb, 0x2}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x24, 0xac, 0x2}}, {{0x9, 0x5, 0x794fab014817e5b7, 0x8, 0x20, 0x32, 0xb, 0x4}}]}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x9, 0x52, 0x7fffffff}) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000040)=0x2, 0x4) (async) ioctl$sock_netrom_SIOCDELRT(r1, 0x541b, &(0x7f0000000080)={0x1, @bcast, @bpq0, 0x2, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x3, 0x4) (async) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 3m17.390762562s ago: executing program 5 (id=935): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x4) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) write$UHID_INPUT(r3, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000005c0)={0x14, r5, 0x1, 0x70bd27, 0x25dfdffc}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x5, @local, 0x1}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r6, 0x1) setsockopt(r6, 0x84, 0x82, &(0x7f0000000280)="1a00000002000000", 0x8) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000003c0), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r9, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r10}) r12 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) write$P9_RSTATu(r12, &(0x7f0000002340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x233) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r10], &(0x7f0000000480)=[0x16], &(0x7f0000000300)=[r11], &(0x7f0000000340)}) r13 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a0091000b00b80000fc005f02"], 0xfe33) 3m17.189408418s ago: executing program 5 (id=936): pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0), 0x8}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000400)={0x5, 0x10, 0xc7, {0x0}}, 0x18) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000400)={0x5, 0x10, 0xc7, {0x0}}, 0x18) 3m17.059750708s ago: executing program 5 (id=939): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f00000006c0)={0x0, 0x7, 0x2, "2692"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB="001d7d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m16.338522974s ago: executing program 5 (id=941): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x40}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0xfffffff6}, 0xc) syz_usb_connect(0x0, 0x756, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x4f, 0xed, 0x61, 0x20, 0x12d1, 0x35ee, 0x7c3d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x744, 0x1, 0x0, 0x0, 0x0, 0x6, [{{0x9, 0x4, 0x6a, 0x0, 0xf, 0x2, 0xe, 0x0, 0xff, [], [{{0x9, 0x5, 0x80, 0x2, 0x10, 0x1, 0x15, 0x8}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x9, 0x5, 0xa}}, {{0x9, 0x5, 0x2, 0x8, 0x3f7, 0xa1, 0x5, 0x2}}, {{0x9, 0x5, 0x7, 0x1c, 0x200, 0x4, 0x4}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0xcb, 0x1, 0x3, [@generic={0xd, 0x2, "e2d415cadf49d3b885073d"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x3}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x6, 0x81, 0x7, [@generic={0x48, 0x9, "f4f2d49889abf9d8a60624b2c6d31858e1012ae30c11eb62ada501589890bd0b29845c67132612a7ce1bc95c9f59cf72877289f8efd056d0560aea68555a9b9143a554839021"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x21, 0x101}]}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x8, 0x8, 0x4, [@generic={0xd7, 0x3, "b3c2967bd833a5fabfa7b9e10be78eea7be86ed7af10a5ccfc1eca4600d74146ca97cd8f3a210a4e2461673971b4407e451cf1eb2209b2dd51992131ef78e4f9c4364b21ad3e8ce294358e6632c4a13fa361b9ef370d033e3356287e0885b9d3c96d6dce95c1187a2dc011842e2ae8a46aa1453475d9c8a8b76a639b1ec3fba38473da58a37638d0e363764e6226ad015f595a94dd7cf1dfd9cac89f547fe562e0d0ef295a408550fe62fa9f17edf87f810aa0d6d03715ad6a9cd70648080f4757f66f13fa7c79af0bb1965ea876f9f43639de74e7"}, @generic={0x6b, 0x4, "6b4b60f1d1013fd2f57ad1ffbbefb6cbc62811b3171b2e17b6267d96c656979e500c9d902b172aab2ce9830c5be72015ba1ca9a2e174e3d537ab7f22b737bc9704d802f9de81791c706c89f90f506958b078b07e633f74b9c0a93d0032c7a25950b930408aa11ff660"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x7, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x36}, @generic={0x79, 0x31, "10ee9bc7af25a474698088ce4062c552a673f177b191bcbf239d80255bbda569909a4e9606bcff1cd4bc90e9f251a2f165080e67e3bbf9f7a58fb5297baab0ae4329c674fcc7ea7139b3a2a11dc228ab4052d267bbb7c4657f217d0a531e1134092ae240fcd886e3ea1e9d5ccd1fc1a1712344b3731d39"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x6, 0x9, 0x9, [@generic={0xf1, 0x4, "02facb74d2e536e26f05c6c393fd6fc58ec657254c5f4f134126b7dc8ab13165159a1624854d54738d2bc35efb018697846500b40759f2afab8b62814c797f2816e75003e1d6b9ac857bb91ea501dd09c9d10dd64ed026151d377cb4168d01ab45fda0f45033abc1c8854c3a3f8c2759f826e18c4a319bd95391b9da03cfb34c707f06260b95abff7bf0c413e7a1a506de2e8612d65e2f0fae80eac02e59ebbad297bb43379a7de8308c72635b40ae78241f2e23889bcd3daccdaa4de88716c84e1e228105d5304e599b908e2d1f75fdefb5fee223338422c54dd7e9dd8a358b554da0cc4248f37cc82088d57bafb6"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x7bf, 0x81, 0x3, 0x1}}, {{0x9, 0x5, 0x8, 0x2, 0x10, 0x7, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xfd, 0x3}, @generic={0x2c, 0x23, "817a507115c28ae6be5b38ae7cb8e75165753d2a966f290c21094f02bc2fc65ea6ea98bfa6c7372d7c2e"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x8, 0x81, 0x4, 0x2, [@generic={0xdd, 0x23, "6a16aaf602ccefb125e3d1a9cd9b3b54db957a1e3e1123637c62514214ce7056562b1371c8f5f74ce2e0165ab32cae44d1ba941f8e7c71c98bdec569aca66e7328dcf73f06d451afd738c1182d6530d831d8725f47cb2de895e20156693d8c62f2764d9f99fdb51a158f8948bfa8f6bc40b66a97f5c75851b404e425ef9f4fa69755af41eb92862eea24736265eb58d5b92e1da88ae0da4d2ea736659a4a8348176424324555e27459e498cc5bd8e616127ecc8db213ba3c622eded207c6ded4e954d9a09cd165d6cb0c7637c360ae1dfcec7c9ac378ebe3b737e4"}, @generic={0xe9, 0x9, "71cbcd6c6e96718ed3dbe954fcd575987181cd22f30156f4fd9823e08d50e4b645cc50d1a467b69f463677b179ab2f0ce859c3954c0276066970adfdb70e1c2b45e381bdc7d6313a7d5ea0f6c7d2a4294255d1b4230041a7f6ecac81780cc8859805912946bf973a76a15239e064ab25736e14a8fc510696e7e3986a95638c4f3ef15355b11198cea46e2e0473b01f1876df1ef3abf6b54cba294b7a1701dbcd0279d5dbfbe4f67c84338602f70bac49dd15a186986933bf0ffe79f56413d7c04f5c1f376d0bbdcf15f8afb9393d251e440dc57e6f756a6903c3cae69aa3336085519014c289ce"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x81, 0xb, 0x5, [@generic={0xac, 0x22, "d30e67f9697adb516c88769f122ecd126d0b493e0780dc5ba46d52c709bf230a9fe8889332fdb3a2371aa5e135b55f83d283fa31c8181f223c379a36ad31a8da7ae5336e7a893b31de52c8366a25d5fbb2429e24195b7e02fd40ae09a4c15dc4e97a3b07d5bd65fb3ff0b59a076552781cb20e78c1afc3f03e777045a70b4614cde6a5a11daf47aa80c58261c39cbb10e5890bd3442523efae401543c92cf2d759dc6b877371edfdb7f3"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x7}]}}, {{0x9, 0x5, 0x5, 0x4, 0x200, 0x0, 0x6, 0x3, [@generic={0x95, 0xa, "9083eb2fe0c2bb6a5fac57a19eb0c1a014772d094e31b032e79eab12deac00a2a76bdbc3d24f91edd0391529b2cd6b2f414cde5105e654c5b07d0eef986f96ee16161f4bf3e11baf8eb3b5685a209816bbb7eb46350adf6ae6e3d73b4f46a88c935a95a43948f5aac74fe09c125379d1d028db10a6e67e71045335aca2c8a1eb15cd3181d4258f0963f68ffcd07f17cb234cbe"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0x6, 0x9, [@generic={0x54, 0xc, "d946efefe70b3075ad6be42261038d059a33bd4e2d999ea30fc3c2e6de9649c2b6ea2465a1b05e23a77b7264b6a8335131702247894fc5fbd0857668dcfcc4e52e75fcea26c7897cd62d7fc54ccb9cd5b0f3"}]}}]}}]}}]}}, 0x0) 3m15.726069114s ago: executing program 5 (id=942): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x7c0, 0x1125, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xc0, 0x4, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x7, 0x81, 0x1, {0x22, 0x436}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x10, 0x2, 0xa0}}}}}]}}]}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) 2m59.003853849s ago: executing program 34 (id=942): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x7c0, 0x1125, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xc0, 0x4, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x7, 0x81, 0x1, {0x22, 0x436}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x10, 0x2, 0xa0}}}}}]}}]}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) 32.196454307s ago: executing program 4 (id=1677): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0xab42, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, 0x0, &(0x7f00000000c0)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80100) ioctl$PTP_SYS_OFFSET(r2, 0xc0403d08, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x201, 0x25dfdbfe, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}}, 0x80) socket$kcm(0x2d, 0x2, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8914, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000000)={{0x3, 0x3}, {0x3, 0x1}, 0x8bd, 0x1}) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) getpeername$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0x1c) 32.128970359s ago: executing program 4 (id=1678): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') r1 = socket(0x25, 0x80000, 0xffd) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40000020) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r2, 0x8008b705, &(0x7f0000002940)={{}, "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"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = socket$caif_seqpacket(0x25, 0x5, 0x5) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0), 0x40c0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r5, 0x100000000) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r6, &(0x7f00000000c0)="3f121c00eee8140006001e0089e9", 0xe, 0x20044080, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001b80)={'vxcan1\x00'}) socket(0x27, 0x0, 0x72) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r8, 0x113, 0x3, &(0x7f0000000040)=0xc38f, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r10, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001c40)={'syztnl1\x00', &(0x7f0000001bc0)={'syztnl2\x00', 0x0, 0x20, 0x10, 0x7, 0x7, {{0xc, 0x4, 0x3, 0x15, 0x30, 0x64, 0x0, 0x20, 0x4, 0x0, @private=0xa010102, @local, {[@timestamp_prespec={0x44, 0xc, 0x60, 0x3, 0x9, [{@multicast1, 0x5}]}, @rr={0x7, 0xb, 0x7d, [@dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x3, 0xf8}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001d00)={'gre0\x00', &(0x7f0000001c80)={'sit0\x00', 0x0, 0x700, 0x700, 0x2, 0x5, {{0x11, 0x4, 0x0, 0x18, 0x44, 0x64, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@cipso={0x86, 0x12, 0x1, [{0x7, 0x4, 'b+'}, {0x0, 0x8, "b41aac0e6a8a"}]}, @rr={0x7, 0x1b, 0xed, [@empty, @multicast2, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010102]}, @end]}}}}}) r11 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r11, 0x4004ae99, &(0x7f0000001f80)=0xe) 28.818057604s ago: executing program 4 (id=1700): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x2c93a000) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20008094) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x2000}, 0x1c) 27.681995792s ago: executing program 4 (id=1708): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000040)='jffs2\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x60, 0xbb, 0x41, 0x8, 0xc2e, 0x700, 0xe13b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x61, 0x1, 0x2, 0x23, 0x53, 0x83, 0x3, [], [{{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x40, 0x4}}, {{0x9, 0x5, 0x85, 0x3, 0x40, 0xb, 0x2, 0xb}}]}}]}}]}}, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') syz_clone(0x1202400, &(0x7f0000000180)="12c0f603262d6bcae8d19ba7d87900849d1af52e0736e51c0f3c883cdd22dab2e77940f86cf3dbad448bde231f7b8a76a7d106b6635e16a6dc5024a17111de3be9283d4dd3c51da0d4b5c140356ac57600e29f2f3a244bb074374eb136457374aba843e5d39d1a2da39f1e2e2f8c1ba6c0ad3f044dcafacd1e6d991a6d17f526b2bc9e3cdfd650bbb08d3ec2d0d7a01f691a52845b70badcd2ad43e11057d3d5", 0xa0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000380)="d351f51ccf336bda572f91525f5bd8973c0ef1322510f2f83a85003e6206693faccddedfb38d67a30d7fdc6738a32ebc85617dcff09f441e4cb06643a7f87a458223c83ddc17166d8a70a5a2d9e7c95a5cdbfcc2351cf255612147d814188b82abdd720c8c5f551e8b543ec976a4e7823d2f6d0c002fe4c9bcac29a4a1e6ae390742b286506a03ae4fe574bfa053b443bdb49a8c9d43c178095b9a50ff47696c1c5b6867229dbb83a406d5d73bb0945605084cabfac2d224587a63930bda22125f5f687016") chdir(&(0x7f00000000c0)='./bus\x00') r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000140)=0x3, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x124) 26.056410065s ago: executing program 4 (id=1716): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x2c93a000) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20008094) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x2200}, 0x1c) 25.109359328s ago: executing program 4 (id=1722): timer_gettime(0x0, &(0x7f0000000000)) rt_sigprocmask(0x0, &(0x7f0000000040)={[0x80000001]}, &(0x7f0000000080), 0x8) rt_sigtimedwait(&(0x7f00000000c0)={[0x4]}, &(0x7f0000000100), &(0x7f0000000180), 0x8) rmdir(&(0x7f00000001c0)='./file0\x00') timer_create(0x6, &(0x7f0000000340)={0x0, 0x22, 0x4, @thr={&(0x7f0000000200)="66ba3dd85b6028c72371b682d131382c37ee3c4194930376a3e67915b8babed1d4ab933a94573bac448f9529d2053cbd52b856ce954850af9d537a10e70493b1b83d66b91040e37f590d9343542f759349f64dee94926aa06d4092010c834128b9f1eb", &(0x7f0000000280)="9ebf258ebbab519f895009640372dde3d2f07a2e2a3a0458b988042715494a55bf48518a45364aa018971466228acd80f66866fe69c5aa0a0faec29567017729c239d5f207a7e8fb75ca405d308ddcfd21e4dd7ea955bdfb6bd647310e98c39469aee0cf7af8fd4efc6e25a78438b5e8918f11228e1ca07f6333f73fea5d443987a9faa8d9e73cf2b3e6815d9f1aeec1848b515011ad03cba589f37307dc1bb8c7bab8e52db37f9c355193206d"}}, &(0x7f0000000380)=0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000440)={{r1, r2+10000000}, {r3, r4+10000000}}, &(0x7f0000000480)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(0xffffffffffffffff, &(0x7f00000004c0)=0xa, r5, &(0x7f0000000500)=0x8001, 0x3, 0xa) r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x0, @private}, &(0x7f0000000580)=0x10, 0x0) quotactl_fd$Q_SYNC(r6, 0x0, 0x0, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000005c0), 0x200c80, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000600)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) rt_sigaction(0x22, &(0x7f0000000700)={&(0x7f0000000640)="2ef0470fbb71f1c403e90d9601000000d0670f00222e2e36660ff80666410f3833c786820000000064400fddd12e3643da124309c18f697882c7", 0x40000004, &(0x7f0000000680)="646765450fe88f090000000f599e00100000c4e2d1ac7f258fe9f801d7c4431941be0f000000a18fe860852604672e660f72f48a42d9e80f0fbbc0f000009ac4820dab55d8", {[0xffffffff]}}, 0x0, 0x8, &(0x7f0000000740)) timer_delete(r0) ioctl$FBIOGET_CON2FBMAP(r8, 0x460f, &(0x7f0000000780)={0x27, 0x2}) io_setup(0x9ef6, &(0x7f00000007c0)=0x0) io_pgetevents(r9, 0xdeb2, 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000880)={0x77359400}, &(0x7f0000000900)={&(0x7f00000008c0)={[0x5]}, 0x8}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r8) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r10, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x98, r11, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x24009015) r12 = accept$packet(r8, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000b40)=0x14) accept$packet(r12, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000bc0)=0x14) r15 = geteuid() quotactl_fd$Q_GETQUOTA(r6, 0xffffffff80000702, r15, &(0x7f0000000c00)) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000cc0), r10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000e00)={'ip_vti0\x00', &(0x7f0000000d00)={'syztnl0\x00', r14, 0x10, 0x700, 0x8, 0xffffffff, {{0x2d, 0x4, 0x0, 0x8, 0xb4, 0x68, 0x0, 0x3, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}, {[@timestamp={0x44, 0x18, 0xb5, 0x0, 0xb, [0xc, 0x81, 0xf, 0x3, 0x1]}, @ra={0x94, 0x4}, @noop, @ssrr={0x89, 0x2b, 0xb9, [@broadcast, @empty, @multicast1, @private=0xa010100, @loopback, @private=0xa010102, @remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @timestamp={0x44, 0x10, 0x29, 0x0, 0xb, [0x1, 0x0, 0x92bf]}, @lsrr={0x83, 0x17, 0x3f, [@broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0xbc, 0x3, 0x5, [{@empty, 0x9ee}, {@local, 0x1}]}, @timestamp={0x44, 0x18, 0x78, 0x0, 0x0, [0x3, 0x8, 0x1, 0x80, 0x7]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000ec0)={'gre0\x00', &(0x7f0000000e40)={'tunl0\x00', r13, 0x40, 0x7, 0x1000, 0x4a, {{0x16, 0x4, 0x2, 0x6, 0x58, 0x67, 0x0, 0xbc, 0x29, 0x0, @empty, @local, {[@lsrr={0x83, 0x1b, 0x7e, [@local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @broadcast, @local]}, @ssrr={0x89, 0x13, 0x36, [@remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @lsrr={0x83, 0x13, 0xc4, [@multicast2, @private=0xa010102, @multicast2, @rand_addr=0x64010102]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(r8, &(0x7f0000001080)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f00)={0x108, r16, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x108}}, 0x40) 24.560947236s ago: executing program 35 (id=1722): timer_gettime(0x0, &(0x7f0000000000)) rt_sigprocmask(0x0, &(0x7f0000000040)={[0x80000001]}, &(0x7f0000000080), 0x8) rt_sigtimedwait(&(0x7f00000000c0)={[0x4]}, &(0x7f0000000100), &(0x7f0000000180), 0x8) rmdir(&(0x7f00000001c0)='./file0\x00') timer_create(0x6, &(0x7f0000000340)={0x0, 0x22, 0x4, @thr={&(0x7f0000000200)="66ba3dd85b6028c72371b682d131382c37ee3c4194930376a3e67915b8babed1d4ab933a94573bac448f9529d2053cbd52b856ce954850af9d537a10e70493b1b83d66b91040e37f590d9343542f759349f64dee94926aa06d4092010c834128b9f1eb", &(0x7f0000000280)="9ebf258ebbab519f895009640372dde3d2f07a2e2a3a0458b988042715494a55bf48518a45364aa018971466228acd80f66866fe69c5aa0a0faec29567017729c239d5f207a7e8fb75ca405d308ddcfd21e4dd7ea955bdfb6bd647310e98c39469aee0cf7af8fd4efc6e25a78438b5e8918f11228e1ca07f6333f73fea5d443987a9faa8d9e73cf2b3e6815d9f1aeec1848b515011ad03cba589f37307dc1bb8c7bab8e52db37f9c355193206d"}}, &(0x7f0000000380)=0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000440)={{r1, r2+10000000}, {r3, r4+10000000}}, &(0x7f0000000480)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(0xffffffffffffffff, &(0x7f00000004c0)=0xa, r5, &(0x7f0000000500)=0x8001, 0x3, 0xa) r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x0, @private}, &(0x7f0000000580)=0x10, 0x0) quotactl_fd$Q_SYNC(r6, 0x0, 0x0, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000005c0), 0x200c80, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000600)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) rt_sigaction(0x22, &(0x7f0000000700)={&(0x7f0000000640)="2ef0470fbb71f1c403e90d9601000000d0670f00222e2e36660ff80666410f3833c786820000000064400fddd12e3643da124309c18f697882c7", 0x40000004, &(0x7f0000000680)="646765450fe88f090000000f599e00100000c4e2d1ac7f258fe9f801d7c4431941be0f000000a18fe860852604672e660f72f48a42d9e80f0fbbc0f000009ac4820dab55d8", {[0xffffffff]}}, 0x0, 0x8, &(0x7f0000000740)) timer_delete(r0) ioctl$FBIOGET_CON2FBMAP(r8, 0x460f, &(0x7f0000000780)={0x27, 0x2}) io_setup(0x9ef6, &(0x7f00000007c0)=0x0) io_pgetevents(r9, 0xdeb2, 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000880)={0x77359400}, &(0x7f0000000900)={&(0x7f00000008c0)={[0x5]}, 0x8}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r8) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r10, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x98, r11, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x24009015) r12 = accept$packet(r8, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000b40)=0x14) accept$packet(r12, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000bc0)=0x14) r15 = geteuid() quotactl_fd$Q_GETQUOTA(r6, 0xffffffff80000702, r15, &(0x7f0000000c00)) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000cc0), r10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000e00)={'ip_vti0\x00', &(0x7f0000000d00)={'syztnl0\x00', r14, 0x10, 0x700, 0x8, 0xffffffff, {{0x2d, 0x4, 0x0, 0x8, 0xb4, 0x68, 0x0, 0x3, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}, {[@timestamp={0x44, 0x18, 0xb5, 0x0, 0xb, [0xc, 0x81, 0xf, 0x3, 0x1]}, @ra={0x94, 0x4}, @noop, @ssrr={0x89, 0x2b, 0xb9, [@broadcast, @empty, @multicast1, @private=0xa010100, @loopback, @private=0xa010102, @remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @timestamp={0x44, 0x10, 0x29, 0x0, 0xb, [0x1, 0x0, 0x92bf]}, @lsrr={0x83, 0x17, 0x3f, [@broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0xbc, 0x3, 0x5, [{@empty, 0x9ee}, {@local, 0x1}]}, @timestamp={0x44, 0x18, 0x78, 0x0, 0x0, [0x3, 0x8, 0x1, 0x80, 0x7]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000ec0)={'gre0\x00', &(0x7f0000000e40)={'tunl0\x00', r13, 0x40, 0x7, 0x1000, 0x4a, {{0x16, 0x4, 0x2, 0x6, 0x58, 0x67, 0x0, 0xbc, 0x29, 0x0, @empty, @local, {[@lsrr={0x83, 0x1b, 0x7e, [@local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @broadcast, @local]}, @ssrr={0x89, 0x13, 0x36, [@remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @lsrr={0x83, 0x13, 0xc4, [@multicast2, @private=0xa010102, @multicast2, @rand_addr=0x64010102]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(r8, &(0x7f0000001080)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f00)={0x108, r16, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x108}}, 0x40) 8.222565562s ago: executing program 7 (id=1796): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000040)=""/87, &(0x7f0000000100)=0x57) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x2, 0x9, 0x0, 0x0, 0x0, 0xfd, 0x5}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000440)=[@in6={0xa, 0x4e20, 0x1, @mcast1, 0x2ec9}, @in6={0xa, 0x4e20, 0xb3, @mcast1, 0x2}]}, &(0x7f0000000400)=0x48) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f0000002340)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000002380)="0ef9b7cf", 0x4, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x40, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}}, 0x0) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90a, 0x78, '\x00', @string=&(0x7f0000000040)=0x4}}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)={0x20, 0xf, 0x5, {0x5, 0xe, "409187"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r1) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, r8, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x75f}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x80) 7.365702285s ago: executing program 1 (id=1802): syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108edee501030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108edee501030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)={0x2, 0x5, 0xa, 0x9, 0x4, 0x0, 0x70bd2c, 0x25dfdbdd, [@sadb_spirange={0x2, 0x10, 0x4cf, 0x4d5}]}, 0x20}}, 0x8840) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000e40)={0x40, 0x9, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000680)={0x40, 0xc, 0x28, "b13a4df2100346a192a858e4d26026ad44d42aef8a911fa47ef448df0df757bd8e43ab84964f1fe4"}, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000380)={0x40, 0x9, 0x4, "9058e60e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_pts(0xffffffffffffffff, 0x222241) ioctl$TCGETS(r5, 0x5401, &(0x7f0000000780)) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300), &(0x7f0000000740)=0x8) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x80ff, 0x1) (async) r7 = open(&(0x7f0000000000)='./file0\x00', 0x80ff, 0x1) r8 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r8, 0x400, 0x1) fcntl$setlease(r7, 0x400, 0x0) (async) fcntl$setlease(r7, 0x400, 0x0) fcntl$setlease(r8, 0x400, 0x1) syz_usb_control_io$rtl8150(r0, &(0x7f0000000940)={0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="400e860000753700f5ebbaa73ca7f7116871def068fb800328f1c040b120d09d0e1ffb5589b811f01fb55e334feb03f2560ca1c0f3939ec26eb826eca04f246310429707d0d4fee7cd06e525aac3a75d24eb8e69514d869e551ff3d976d5f964e4d87434f62615f98325598d62388f9172ea961cb725bdd22e65b2c7a96e9500"/140], &(0x7f0000000a40)={0x0, 0x3, 0x51, @string={0x51, 0x3, "a3767aedc94d32872af6b1c74b89906562454935e2d97c40e467475aa0969a0b461061c06c841bc43d361a3a531442ac1f8d0f3e0b2e6b92da5c8f838f9de3e3979b22cd5d72f67811f2e4ae541069"}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000ac0)={0x20, 0x31, 0x8f, "1705f437c27642f5127e0aef24390086c1906789217f3a58590de175a1749e87b0a2f1a96b01f4a88fb5f33bd780989c83ac16fe8be5df4bb638633d10d38e6dfcbe0a7169690586a95a9ebe723d0a8435f1d8ea36b317ed1121162f3879ea24f6edd9025d4570c395ab7c2e7d96e25dfd754d04a871ceae0bb493c15964f2231ab335f3e8ef8a98213529fa0840cb"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000c00)={0xc0, 0x5, 0x6, "93bcc173ec0d"}, &(0x7f0000000c40)={0x40, 0x5, 0x4, "49c7d7b6"}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01f4cd002cbd7002057009000052000f84b736e7a8fb"], 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01f4cd002cbd7002057009000052000f84b736e7a8fb"], 0x1c}}, 0x0) r10 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="d417b1e75328ff417ea7fc0692c6c8c73c73984db8feeb3b0252d5c32fb2a8b1185e979cf254cf35d1cd5b54ad76ea31a980a53a3ac8da4b45d8d63817faa8834bac1240d7d195db4f2ffd0f1c3d48688d9e1370fc24e4b1c97a49bb3a9a33288a5f26aaad31ca7adb9e2cac3688de2ec9083e06b2063497969114dc0702f0d9e70a6810f34469bc5a0b0dc6da8181cf0b3d4804332896fffcf102daf8"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000cc0)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000cc0)={'batadv_slave_0\x00'}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000e00), 0x6c0801, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x31) (async) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x31) syz_usb_control_io$cdc_ncm(r10, &(0x7f0000000100)={0x14, &(0x7f00000003c0)={0x232c580497ae6130, 0x10, 0xc1, {0xc1, 0x31, "dffbeae6ad88e4c07d02152edd231d2cbe5265546615312d82b9b89d58f5e6bda5a2ef74bdd92dd3d2c9bb47f5f97aa6c2efe2890efde4de0e4649a7390d7ca62c562efc9566b71ec3ad5d243f46f9c133633e8320964ba19c5f8b825866934c399ac4429680284470241e6e73f6acaabfbeb6cb376ce1bb3b4ae1e49e3c6c2186f930e24b5172a3adc511a15cae3579fbe3913bd85806dd8f18a0c082b9aea0ad0c873b117f513e2f8eb1a4c03500dce277d2de8e2c5baf7008af75c978d6"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d40)={0x44, &(0x7f00000004c0)={0x40, 0x0, 0xe1, "c136ee97b26c4432c3fcbbb7cb605cd326278bf6694a362d41b907f128cac535fc6b0852c6a1c2958c0f7fff7c2fd5d836a42aff59f16d8f732987df80c5f7b2614df1c95c56ca8f1d4246eb6ab1d4f11bf12df4951a9756684db3df05702ca740052f05e7e416a6aceb25df4a4cbee394d3448bb16c34540e83ea0c38bf8e71c95eb8919a95f640d833115415212589f3ee3f22e240dc2621e268f617f68779d9575c927fb80909beda6397c75ae194def546051fec2274005a4d3de239e7e2cd2d4b9d39d45b4a0a311fa18ccd5287ab51e506d5f8dfa6752c1d8e776cc9c0c3"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000200)={0x0, 0x8, 0x1}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0xd839, 0xf800, 0xc, 0x1ff, 0x8, 0x9, 0xc62e, 0x2, 0x83, 0x0, 0x9, 0x3}}, &(0x7f0000000d00)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f00000006c0)={0x20, 0x87, 0x2, 0x101}, &(0x7f0000000dc0)={0x20, 0x89, 0x2, 0x1}}) (async) syz_usb_control_io$cdc_ncm(r10, &(0x7f0000000100)={0x14, &(0x7f00000003c0)={0x232c580497ae6130, 0x10, 0xc1, {0xc1, 0x31, "dffbeae6ad88e4c07d02152edd231d2cbe5265546615312d82b9b89d58f5e6bda5a2ef74bdd92dd3d2c9bb47f5f97aa6c2efe2890efde4de0e4649a7390d7ca62c562efc9566b71ec3ad5d243f46f9c133633e8320964ba19c5f8b825866934c399ac4429680284470241e6e73f6acaabfbeb6cb376ce1bb3b4ae1e49e3c6c2186f930e24b5172a3adc511a15cae3579fbe3913bd85806dd8f18a0c082b9aea0ad0c873b117f513e2f8eb1a4c03500dce277d2de8e2c5baf7008af75c978d6"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d40)={0x44, &(0x7f00000004c0)={0x40, 0x0, 0xe1, "c136ee97b26c4432c3fcbbb7cb605cd326278bf6694a362d41b907f128cac535fc6b0852c6a1c2958c0f7fff7c2fd5d836a42aff59f16d8f732987df80c5f7b2614df1c95c56ca8f1d4246eb6ab1d4f11bf12df4951a9756684db3df05702ca740052f05e7e416a6aceb25df4a4cbee394d3448bb16c34540e83ea0c38bf8e71c95eb8919a95f640d833115415212589f3ee3f22e240dc2621e268f617f68779d9575c927fb80909beda6397c75ae194def546051fec2274005a4d3de239e7e2cd2d4b9d39d45b4a0a311fa18ccd5287ab51e506d5f8dfa6752c1d8e776cc9c0c3"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000200)={0x0, 0x8, 0x1}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0xd839, 0xf800, 0xc, 0x1ff, 0x8, 0x9, 0xc62e, 0x2, 0x83, 0x0, 0x9, 0x3}}, &(0x7f0000000d00)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f00000006c0)={0x20, 0x87, 0x2, 0x101}, &(0x7f0000000dc0)={0x20, 0x89, 0x2, 0x1}}) 6.942490464s ago: executing program 1 (id=1804): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000340001000000000000000000010100800c0007000000000000000000140003"], 0x114}], 0x1}, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r3, 0x0, 0xcf, 0x0, &(0x7f0000000040)) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async, rerun: 32) write$tun(r4, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x2c, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e20, 0x5e21, 0x18, 0x0, @wg=@data={0x4, 0x202, 0x4}}}}, 0x3a) (rerun: 32) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x800, 0x700, 0x1}, 0x20) (async) recvmmsg$unix(r1, &(0x7f00000077c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x63, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fedbdf2539000000080001007063690011000200303030303a30303a31302e30000000000800730000000000080001007063690011000200303030303a30303a31302e30000000000800030005000000"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10}, @CTA_ZONE={0x6}, @CTA_LABELS_MASK={0x1c, 0x17, [0x9, 0x170, 0x7, 0x2, 0x4, 0x4]}, @CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r8, 0x100, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8080) 6.744549689s ago: executing program 1 (id=1805): r0 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000440)={0x80000000, [[0x6, 0x2000, 0x38000, 0x0, 0x5, 0x3, 0xa7, 0x2], [0x2, 0x10, 0x5, 0x9, 0x101, 0x80000000, 0x6, 0x1000], [0x1, 0x72c, 0xb, 0xd4, 0x6, 0x10000005, 0xdfe, 0x8]], '\x00', [{0x81, 0x8, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x3}, {0x6e1, 0x3}, {0x81, 0x4, 0x1, 0x0, 0x1}, {0x33dc, 0x8, 0x0, 0x0, 0x0, 0x1}, {0xe, 0x3, 0x1, 0x1, 0x1, 0x1}, {0x6, 0xa1, 0x1}, {0x0, 0x3, 0x1, 0x0, 0x1, 0x1}, {0x8, 0x6, 0x1, 0x1, 0x0, 0x1}, {0x0, 0x1990, 0x0, 0x1}, {0x5, 0x1ff, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x56, 0x0, 0x1, 0x1}], '\x00', 0x1000}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) fcntl$addseals(r1, 0x409, 0x5) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x6, 0x800000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x82, &(0x7f0000000340)={r3, 0xfffff7fd, 0xfffffff8, 0x8000d}, &(0x7f0000000480)=0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'string\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f29f057acc54d4077549f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r4, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_bond\x00', &(0x7f0000000100)=@ethtool_rxfh={0x46, 0x1000, 0xfff, 0x5, 0x1, '\bx;', 0xf92, [0x2, 0xbb8]}}) syz_usb_control_io$uac1(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 4.858654397s ago: executing program 7 (id=1813): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x1, 0xfffffffc, 0x0, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x6472333b}}}}, 0x30}}, 0x20000040) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x73, 0x9e, 0x61, 0x8, 0xfd9, 0x2c, 0x66b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0xd4, 0x40, 0x0, [{{0x9, 0x4, 0x65, 0x0, 0x0, 0xbe, 0x86, 0x6d, 0x1}}]}}]}}, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x110, r5, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb86}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x874a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7a9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf4f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0x110}}, 0x4) read$char_usb(r3, &(0x7f0000000040)=""/237, 0xed) 3.42664021s ago: executing program 1 (id=1821): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000080)=@ethtool_modinfo={0x42, 0x81, 0x7ff}}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060a00008bfee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) 3.204865573s ago: executing program 1 (id=1823): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc", 0x2aa}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573c21df5", 0xb8}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.159719499s ago: executing program 1 (id=1824): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000680), &(0x7f0000000700)=0x6e) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) socketpair(0x25, 0x2, 0x7f, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x24, &(0x7f0000002300)={{0x12, 0x1, 0x310, 0x1a, 0x11, 0x81, 0x8, 0x16c0, 0x5df, 0xc5a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x0, 0x10, 0x7, [{{0x9, 0x4, 0x21, 0x6, 0x0, 0x3, 0x0, 0x0, 0x7}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) futimesat(r2, 0x0, &(0x7f0000000080)={{0x0, 0x2710}, {0x77359400}}) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000280)=0x101) fcntl$setpipe(r2, 0x407, 0x9) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x23cda01bf437ac26, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b02, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x40, 0x92, [{{0x9, 0x4, 0x0, 0xbe, 0x1, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0xfa3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0xc, 0xe}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x1, 0x6, 0x4, 0x8, 0xf4}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x7, [{0xfb, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, {0x32, &(0x7f00000001c0)=@string={0x32, 0x3, "f20b074b51b68dc10041666ec559ad69f2643264f545346e97eec9c5a4fa8f12bb3d078547898f2631e65e02bad26f48"}}, {0x41, &(0x7f0000000200)=@string={0x41, 0x3, "05ab02e4e7cd08c95f45ac0db0f898a19e8a52d853541cedf2b5ac123bc3a6846c653b4ab1597275e2997b1653909f5b4b29761c56640b83049a2d7ca4a2b8"}}, {0x96, &(0x7f0000000300)=@string={0x96, 0x3, "502f6d9cb1a53a2f94e9e3773de3f28efd4290cea775ed975eae6284afea8fa53f47b8d4d82ac490fe616f859109dd4551be62ce2b0149b96d7b5bc9608876d7b5a4c55dbaeba8cf90d83d806420e2e4517accd623ed1ffb85f94ecdf07fe1a9510438c2e71e4d52be47795f33d9814d1793c98d76351d72308720c6649dcbd0a18e7bf88a0fdc354c21024c9d6aec0ca2d356e4"}}, {0xce, &(0x7f00000003c0)=@string={0xce, 0x3, "6d813227557a1f5825e1f542b50e0bfe5b73726511bf208de7123aee6dd0068234f35e53757efbf79934c556cf8b245d6c6d81f2048ad63bb6e82f1efd612c835f5efd625c0f7d242beba8d8467b9586a286b7e24190b9aea6c13a3b8ba72a05b6770e6896e7e09697d0042acae09bb1f7fb1a17cdbc824d7992a0aef9127582f045a3eb42f1cd018d701d3a26c467494fb30de151e7d67b7ac606c42754979c4490bb0136e2f4870b6bc4e70bce528cc8cb3879defa1007ea0d48111d7ae119bbee3711b98a515d085579a1"}}, {0x5a, &(0x7f00000004c0)=@string={0x5a, 0x3, "49ef9a596baf708104446f4d1104a16b114e2e20b1f1dfc034b0e7be7849c4d0aca2537f7d09b082bf3acf506020911f7c246f501730bc3dd9c66cd8ffe86cfc6f0bb94e9b0ed3a6e0e4c11c396f43228abab04325b0bb71"}}, {0xbc, &(0x7f0000000540)=@string={0xbc, 0x3, "afcf8fe40e7cafe395531d51a31b513e6f75905deff964a85fc6d1efc21f59ef6c34cfb1158a235d51e493f045564139dfc8ea98cbec51d87f82734bbcc94e47e5328bfe019d8ec7cd3e9951a374720b02091f4f01c619b2a3505542f2e65a07c36d1a91e32d3e1b44221e7b63d3e638ff2af0d31f721c9c9930edefa8a0403da8283ca0dce478533959928e6f5e158773f4453ff1e45fed4a3f7487beed4c4d0fcbfc332c1a03478894edd6fcef8e79efdfbbecf8da29feabf7"}}]}) socket$inet6(0xa, 0x3, 0x2f) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}) write$tun(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="034886dd010000000000140000006030030003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000780)={{0x0, 0x9, 0x9, 0x0, 0x1, 0x1, 0x0, 0x8001, 0xad01, 0x3, 0x0, 0x38c3f463, 0x0, 0x6, 0x6}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000840)={r5, 0x9}) 3.060423317s ago: executing program 2 (id=1825): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000001740)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r2, &(0x7f0000000380)={0x28, 0x0, r3, {{0x7, 0x7fffffffffffffff, 0x2}}}, 0x28) (async) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x7ff, 0x0) (async) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x1, 0x400000000000000}}, 0x28) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0x300, 0x0, {0x3}}, 0x14}}, 0x0) (async) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) r8 = openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x600001, 0x4, 0x3}, 0x18) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) (async) fanotify_mark(r8, 0x8, 0x40000000, r11, &(0x7f0000000300)='./file0\x00') 1.955579226s ago: executing program 2 (id=1827): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4e071, 0xffffffffffffffff, 0x80000000) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x15, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c809800000000800000000000000000000000000d63175876b4c69a600", 0xffffffffffffffff}) r4 = socket(0x15, 0x5, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x80, @mcast2}, 0x1c) ppoll(&(0x7f0000000280)=[{r3, 0x200}], 0x1, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x36) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 1.849475009s ago: executing program 6 (id=1828): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x2, 0x2, 0x20, 0x20}, {@in=@loopback, 0x0, 0x32}, @in=@local, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f, 0x4000000}, {0x0, 0x8, 0x4}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe, 0x5c}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x804) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f00000002c0)="e044", 0x2}], 0x1}}], 0x1, 0x2000c000) sendto$inet(r0, &(0x7f0000000080)='t', 0x1, 0x4000080, 0x0, 0x0) 1.67063384s ago: executing program 2 (id=1829): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0xf, 0x17f, 0x7, 0x0, 0xf1, 0xcc26, 0x9, 0x5, 0x2000000000000, 0x9, 0x200000000000, 0x100000000, 0x0, 0xbd9], 0xffff1000, 0x3c4210}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_usb_connect(0x2, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0xd2, 0x48, 0xb7, 0x40, 0x61d, 0xc1a0, 0x4396, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xaa, 0x3, 0x1, 0xf5, 0xb5, 0x35, 0x0, [], [{{0x9, 0x5, 0x80, 0x1, 0x8, 0x0, 0x0, 0x2}}]}}]}}]}}, 0x0) mount(0x0, 0x0, 0x0, 0x200808, 0x0) ptrace$setopts(0x4200, r0, 0x58880000000, 0x300051) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r2) 1.669862127s ago: executing program 6 (id=1830): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0xab42, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, 0x0, &(0x7f00000000c0)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80100) ioctl$PTP_SYS_OFFSET(r2, 0xc0403d08, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$kcm(0x2d, 0x2, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8914, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000000)={{0x3, 0x3}, {0x3, 0x1}, 0x8bd, 0x1}) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000140)) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f00000004c0)={{r3}, "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"}) socket$nl_generic(0x10, 0x3, 0x10) getpeername$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0x1c) 1.605199012s ago: executing program 6 (id=1831): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) dup3(r0, r0, 0x80000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x3ff, 0x30}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYBLOB="04002b00799b2552c94db6079f6b8b68e426c271ed"], 0x13) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000400)=0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="120100020592020881060500c0560102030109021b0001070340f20904"], &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4800, 0x0, 0x0, 0x800}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003900)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xc}, [@typed={0xc, 0x7, 0x0, 0x0, @u64}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@multicast2, 0x1, 0x0, 0x10, 0x0, [{@multicast2}]}}) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r4, 0x4068aea3, &(0x7f0000000140)={0xa4, 0x0, 0x1}) 1.523209971s ago: executing program 7 (id=1832): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc", 0x2aa}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573c21df5", 0xb8}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) 1.414532844s ago: executing program 7 (id=1833): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) (async) r0 = creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x28240, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0x20010, r3, 0xffffffffffff8000) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x1404, 0x4, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c804}, 0x40010) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be00182bfffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) r5 = fanotify_init(0x40, 0x2) (async) r6 = getpid() ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x7, r1, 0x0, 0x10000, 0x0, 0x9, 0x1a9ba8, 0x19e8d}) getpgrp(r6) (async) r7 = fcntl$getown(r5, 0x9) syz_open_procfs(r7, &(0x7f00000000c0)='syscall\x00') 1.312076866s ago: executing program 7 (id=1834): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a40)=ANY=[@ANYBLOB="981300003f000701feffffff00000000017c0000040042800c00018006000600800a0000741302807013178008"], 0x1398}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000200)={0x0, "0b85208b999b09b08101928813f10b8d217825fcf5b9b2af6d43dbff8b55d3b1"}) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f00000000c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x890}, 0x80) 1.189521374s ago: executing program 7 (id=1835): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='huge=always,mode=000']) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_connect(0x2, 0x511, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0xe1, 0x6d, 0xd1, 0x10, 0x41e, 0x405b, 0xafa6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4ff, 0x2, 0x61, 0x0, 0x0, 0x6, [{{0x9, 0x4, 0x17, 0x7, 0x4, 0x8d, 0xc9, 0x9a, 0x75, [@uac_as={[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0xff39, 0x4, "b7fd"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x0, 0x3, 0x5, 0xd, "e33baa506e68729b"}, @as_header={0x7, 0x24, 0x1, 0xff, 0x2, 0x1002}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x2, 0xabc9, 0x5d, "a32fd033"}]}, @generic={0xa0, 0x11, "5c5e5c10d5667032cc75059ca6fdb93b6b19f6066dfcee2cce964c152389871bd24c303b11c1193d9d3e5e77ed54f15091cec71cf6ca17460126b2306a20a4b1b512d0d7a7687a59c7c5639760c1396aaad0187e367fa2981ca31fce52962e5b48881926088db1b2c8e5f34449caa00826ad528d1bd5e283611124918eb4f4ed5038c453cbaf94226dc2fc4e5f497ca60fe70fe5e287a2095079721d9622"}], [{{0x9, 0x5, 0x8, 0x0, 0x40, 0x9, 0x7, 0x7e, [@generic={0xc8, 0x31, "5699c1648adaa87ebe4084e923cb3d495c2a9fc2b4645df7b9ba877b30cb84fefa48af42ed87bea639094394f66e793ccf18d0c5ad33632b9b4faec11a9ff94d7c8baeaad35cb9be728a92f56532e903d0abd42913192418d6e9160920b0bd13a7db3e3949db526422f08b0ad4b3331eb4b4e4608eb10dc6dba79e3bb8eeb1b098b9ada0230975ca19db0a8868623420c60a56e2760820ecb1b4e7854239286db04c05e4bca3176d904dfffe27a173a7375db7c4a65cac6737fc9f576768ca24734668ea62ba"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x810, 0x73, 0x6e, 0x96}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0x11, 0x3, 0x0, [@generic={0xb7, 0x6, "5420c3651a7c8c362ebcc816d2e28ce02ea5ac652b08ebb4acf7d5f4d5e5747370ef6c3c717cf50b4d474aabd04a3f87c2af63e060f11c18c68490bdf49df77cbc183a88f863a346fe6c21cc3f7bfc429285b5604cf8d03a68e786e0493627deb4f89bb2a8c1c80198c55d2eb2b77cb095a9bfa5a7e372282ec4b854e069eda541b044f50d0bba66e7c5720a86363d22587ba5c7ea6aef539f3940956a9f79d47b09b83bf71769d14b58dc8568519a540305d499bc"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0xe, 0x7, 0x6, [@generic={0x70, 0x7, "228406c922fe20ab791df9ff45efe041d001378b3a15faa9b0b8fb9116d4c1e7b35435a6513547e707a9b27cfef112c8ba282f54d65523516f23ae97239c1e3ea1ab9d75ecdd59a1c34287e22f31eabcdcabbdcb56d4d8cab1ce2a81eb57fc44ad62013ff880449a4b96d5d5742b"}]}}]}}, {{0x9, 0x4, 0x3c, 0x2, 0xc, 0xfb, 0xd8, 0xff, 0x9, [], [{{0x9, 0x5, 0x9, 0x10, 0x200, 0xff, 0x8, 0xff}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x0, 0xeb, 0x2}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0x7, 0x9, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x40, 0x3, 0x3}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x6, 0xd, 0x9, [@generic={0x3c, 0x39, "9154e9085eee4fe072a611e8b59ae97e3c8b0b269a9e90b4f0af152a441baaf57a10df123d35b39d38d4a557392c2c07406cc5c93480f2788824"}, @generic={0x51, 0x5, "66b6340ae00c4048fba2dcd895817d35a57031d575bbf55f99d3a776af799259f9c69b3f1757a21acab17556b47b82d952886083be6c565254a877068821f9dbe1bb669d6ce903d1b01052b2f7a307"}]}}, {{0x9, 0x5, 0x8b, 0x0, 0x200, 0x1, 0x2, 0x9}}, {{0x9, 0x5, 0xc, 0x0, 0x0, 0x80, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x400}]}}, {{0x9, 0x5, 0x5, 0x4, 0x10, 0x9, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xf02}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0xa, 0xd5, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x97, 0x1}]}}, {{0x9, 0x5, 0x8, 0x8, 0x18, 0x7, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xa91c}]}}, {{0x9, 0x5, 0x80, 0x4, 0x200, 0x1, 0x2, 0x9}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x7, 0x6, 0x60, [@generic={0xd8, 0x4, "f4abc5dfe23fa721aac837404abcdb0d0c4e99284269ce6dfc8e10875807433536cabb3d3588f4f6bc0209c453a34989947d4c0d8ff757359f9243114fc73dfe12a00b224963b1f581277608eae78cdec695ddd77a27a8de2fbc4346b961a5ff65349990d81cdeddaab61f7cb61f6e37c2d741371f4c3d0aacf592dfaf6e83b3438c914f9182c7d9b6911d70eae274562479a637fb6db9274e66fa9be2d2225fbf5dcd0ecd0f4e6a77a575a0333e7eedb970f0c6e83c11adc109c5fe1355448cbba868c8b38eaf587cb327bf86298e244e95872cfcae"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x9}]}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x110, 0x6, 0x6, 0x5, 0x20, 0x80}, 0x8, &(0x7f00000008c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x4, [{0x5a, &(0x7f0000000900)=@string={0x5a, 0x3, "e1e35a6a027eed358620740f1313a44cf3e868ad132766d56b3d3ee6bcdee0dfa72c03dac8da776dd39316fe1431746647c89e52f51019248835aa0ad2c2134c652ed64b3831a396ed977c7bc0ace1155b532da6f15329e0"}}, {0xf8, &(0x7f0000000980)=@string={0xf8, 0x3, "584243aa0db66b2079bf4d2b80c0dca61c47d50c3ccfe435d8c295ebb95c2d1eab2f6e084c804700d6ef1d1adfa0e658bc8881446a60a5d67ff408e230fa06a4962f4a8111ee03ebea7e0f413328e098be3ae1ce29c8437ea48fa68c6f607e27b7b4693bd1a045cff9b8be482a8d7b7d1b4606f94d110ed60eba786b42956a9a92567dc7e777bf74d22c0f877f36aee851a44a202d754334665e8cfcb0f8ef806fca4be8f78204dede07c6e72ff7a18769e3df9db73dbc9f73b33a1aec0b6c4a554c3734ee4cac8d67895e8954c07fb09ae946703ed9f0dc22fbb371c64709cb194068110da880919c31c4ecbf75f5c7add01f9bff57"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x401}}, {0x6d, &(0x7f0000000ac0)=@string={0x6d, 0x3, "e217df1690632fe649e6e27d235909c1e2d6c0f71a466277af5fe06f920fa4e31b5a75185e1948e6ce44bd61c24714aa8af604e523fb6ea9b51fda5e255948febbeeb6defa39c2b55d9fbe02acb12612cef221c2480e4f28f42a04d313d74e1b717d6d5f795ac5467e4637"}}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x7, 0xd30, &(0x7f0000000d00)={{0x12, 0x1, 0x0, 0x2a, 0x6a, 0xe3, 0x10, 0x6e1, 0xa333, 0x80bd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd1e, 0x4, 0x1, 0x7, 0xa0, 0x8, [{{0x9, 0x4, 0x9c, 0x0, 0xb, 0x26, 0xe1, 0xff, 0x5, [@generic={0xe9, 0x11, "acd2cec0752ae4a9368933e9e05fe17d051cdd58a527e49e340e624a755c866bd835a34741480dd3fcf7191b96052aaf1257dcf23ddc8dafd618d658228f9c7ccc9644157437bdfe3974cc384f447685911707e31a1072bc15a28ac9b369af088de7f703928b3829acccc3a11f5db8c32cb45b0d406edeaed4760ad2bfe67a6b052e91efe2e4262279ed638c0fa3e7616c63c97153c929fa8e8acc862b1f268ba79c4fa695037913c7b8b24f4aa00304c2dac08fc6165879f06e505dfa4c2cc37ebd2d25a70ddc90e659e449fd2dc1e5db4b48c3d25f66357c807d16d46b5ae5fcce52514e3256"}], [{{0x9, 0x5, 0x6, 0x2, 0x20, 0x1, 0x10, 0x5, [@generic={0x60, 0x31, "5a1e4ed0ea6b401411c3bd433f51350bdf4c5e56b7193eff35e5522522ba461b9180a228e56d1c7a39a61687c828441470c2c83fbef9637dd4ad342ac001ffde4287d6c1716cadf11b20ca2a8d3fa207467e37aaeb1a7f8b0e1017eef4e0"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xf73f}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x3, 0xa4, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x5}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x3, 0x0, 0x1a, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xfffe}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0xaf, 0x4, 0x0, [@generic={0x45, 0x4, "e23ddfdd89743bb245532be56e4dbd6c2ce05daea320fe561c32033e027530353e1539bbad209da2096c5c96241b0e69a06fc5e84a8fa5ec6cb89b5044269f67114d84"}, @generic={0x7a, 0x22, "6017728be8a560b5b008f7d73035f5b62203425cd69cdbc30f3303d399d1b1b8c0f19353de012f771ce673b2fd625fcd73896bc2ec5b2f48bffc19f9bcd934d2d620ccb10845d45789d91cfac102a3efa78953f0eb5ce365aecbdc5babd543ee60cd9a8122e254d840e8d3a52d7e8d7f60e541162742043d"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x20, 0x2, 0xad, 0x35, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x3ff}]}}, {{0x9, 0x5, 0x6, 0x2, 0x40, 0x0, 0x7, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0xe0}]}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0x2, 0x7, 0x7a}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x0, 0x7, 0xb, [@generic={0x29, 0x3, "072cbd825a1770691ed3dc79c4c1302bae3d79b0587ae004060316a741ed707f634860328c20ce"}, @generic={0x52, 0xb, "6dee351a8703c2127827122f40f0bf7109642b0bd9f097d0b9eb93454394e2c53b2364ff90993d6899159686e9ece36f01a85a774b1bff14caaf0caaf4356b127e6d70acaa25b44b195c839ace950e9a"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x401}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0xc}]}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0xf8, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1c, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x74, 0x5}]}}, {{0x9, 0x5, 0x9, 0xc, 0x20, 0x4, 0xa, 0x0, [@generic={0x4a, 0x0, "da547b20fc63d9840410b88ff5a1c769e19461008f139b1215c2302006a416c90fbd35b049592ffcedf498b56108c9e3b4a6bdd7188e887f8d9b67d93cf5682c782a4ae17dfcd417"}]}}]}}, {{0x9, 0x4, 0x6e, 0x4, 0xa, 0xf8, 0x32, 0x1b, 0x3, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "b66b9f72"}, {0x5, 0x24, 0x0, 0xcf5}, {0xd, 0x24, 0xf, 0x1, 0x10, 0x9, 0x7fff}, {0x6, 0x24, 0x1a, 0x0, 0x20}, [@network_terminal={0x7, 0x24, 0xa, 0xa, 0x99, 0x9, 0x40}, @mdlm={0x15, 0x24, 0x12, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x400, 0x7, 0x5, 0x1, 0x5}]}, @hid_hid={0x9, 0x21, 0x0, 0xf, 0x1, {0x22, 0x4ea}}], [{{0x9, 0x5, 0x80, 0x2, 0x8, 0x2, 0xc2, 0xba, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x2}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x7, 0x54, 0x8, [@generic={0xa1, 0x21, "2d2c14d94af7e700f12dd65d847af162566193b14da39075fc2afaa5b92e98284ce103cb38b7ab6b2714354ef39831db959d6dd8f0a8a5811b82b75fca87b9ea47225962e16a2403290d64a4f893a20b47ebc2043b98c58655d93b973bb8cc1b87485e3102580b360fdb30905b6c51b98b6a1346229c7e0db1d6072e3e54a5e9a56cb089604a26837734ad46d795af300d9fdf01b05637a20e5c302800d2cc"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x0, 0xe7, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x51}]}}, {{0x9, 0x5, 0x9, 0x4, 0x10, 0xc0, 0x7, 0xa0}}, {{0x9, 0x5, 0x1, 0x1, 0x200, 0x10, 0x0, 0x2}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x9, 0xa, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xa0, 0xff7f}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x3}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x8, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0x9, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x5}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x7f, 0x5, 0x3}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x8, 0x73, 0x5}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x1, 0x4, 0xf3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x1}]}}]}}, {{0x9, 0x4, 0x1, 0x47, 0xa, 0x18, 0x13, 0xa3, 0x0, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "3dd949991c49"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xfffffff7, 0x4, 0x9, 0x1}, [@acm={0x4}, @mbim={0xc, 0x24, 0x1b, 0xe07, 0x2000, 0xf, 0x0, 0x9}, @country_functional={0x6, 0x24, 0x7, 0x5, 0x1f9}, @acm={0x4, 0x24, 0x2, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0xe, 0x6, 0x7, 0x5}, @acm={0x4, 0x24, 0x2, 0x5}]}], [{{0x9, 0x5, 0x8, 0x0, 0x8, 0x3, 0x5, 0x6}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x9d, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xbe, 0x898}, @generic={0xfa, 0x8, "b0b453bd37aa8edd4d777805f2c49645cf40ca2188a2a489650ae9848203fa080c9f04366e41a05ee839f2a8855eff6a369a54f9df6ab7116ddc829d1928ac64eccf726ddfe8dbee593145f70442ea5ff8931168f1783596544e3ee0199d5414af881500874ee33bdd126f19b546fcb3f7eb6708fbace06f51833d83a6bcd6c50816b38cfd0ecad235c3272876ebd6f9b7ce588ccfa71a9f1689769fa6e6b2bec52e28c0c7fab3cdfbfdc9fbcd0862475283d0b12771559a8479612fb2aae0acdd6449f2294cabee29c81ef65f092b2d9a33a84f29a8a5f8c109e60e5ec62ccffc8735dcc0414c5b3f30031ffe5591ac258350e38519fb1a"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x20, 0x1, 0x3, 0x5, [@generic={0x57, 0x5, "81288d489701ef40315685b39995be5e8bd4c889413f36363019352da19b78240d1832ed0fec947687c9032ce66676daa8ab324dc20694d134f4a78a42f07bafa6e99229f69efd5b81a4251f0414505791a8a54ea0"}, @uac_iso={0x7, 0x25, 0x1, 0x2}]}}, {{0x9, 0x5, 0xf, 0x2a9090a84e81af10, 0x8, 0x6, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x9c}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x5, 0x4, 0x10, 0xff, 0x1, 0x9, [@generic={0xb1, 0xd, "04841d200d656e72dbb0e0c5886ac7f4acfdd2fc5c716cf27283cceef01584d5c4de37bde108a52e81d7cc585c298ef92adc354b868b3274adef7a47eb32906e4e5705889a43634f3a3775c5b5d31c98aa9af41fd6548bcd2457406275aebc3ecf194ef80015ae3540776da92a1e78710fd8b3e69892609eb96d47f1d713246db74924f12c5119203df328abdb57bf3c6e3e25a32cc7c38e795a41152ba948a84e3ec01eb9f3cf5deb2b6bde7b7e87"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0xffff}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x40, 0x5, 0x6f, [@generic={0xdf, 0x839ef264fbdd8f4c, "2d287817c2380f89bcc1b06a2cf45c43b5fc47455eed013a7805ef6d99acaf32b9b488d42006b628ffa71118b71ed3dcaaefb5800d8864277f6c6e1c86b9da2592c357253aed704cc7bbf977cc2748afe8e5525e3fb2fb38fc0a070a3bd68f252775d337219e750d70a6f45dbd08810054b143e85c10431d83247c00ec9432d0d0e018a0e60d555b5f60ca4069645369317e1911c863aa9ef56c34e0db37a24836ac1ce40f735bf1f91206ce553790cc41696f18f6aebf1bb6f47359af7d9f95ab56c65d82ec042f099e6ce87fde7e57f54c5a8e4882f8439dcb8a6a1b"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x200, 0x1, 0x40}}, {{0x9, 0x5, 0xd, 0x1, 0x600, 0xc, 0xf0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x8}]}}, {{0x9, 0x5, 0x6, 0x8, 0x40, 0x6c, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xae, 0x4}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0xa7, 0x6, 0x3, [@generic={0x5, 0x1, "a6edec"}]}}]}}, {{0x9, 0x4, 0x71, 0x8, 0xa, 0x15, 0x75, 0x10, 0xca, [@generic={0x7b, 0x23, "93a03002fb1efb2e0bb76ceecec2de9191ffeea3dc2ba2741cad3c186784cdbe522d2385d189100c034a71bf6c00e29482d92c67a4b75babb8982c77570bfb90cfbff0a26ebc44fc7af4f95b7547160c5fffb22aa2dcca0475ef495c030a62f2e621e89eda72c17463a6baa06c56ee18f616f7a1598656f748"}], [{{0x9, 0x5, 0x1, 0x2, 0x0, 0x76, 0x9, 0x3, [@generic={0xd1, 0x2, "ebbe3292e8bb10bb79cbec364915563c3e28a8fbf5195f7a3214a4c8df0eeb31dd4d3d67a061ea46eb8a46909332dbdd76205e5901775852edbdfa2806e3aae04a744f45cc1c79351ed090c33a2c3e29347076150a722a870ffaf2846787f883b6a0ff45ecb1c84df784f69c9863fb8ed82c0d032837049bdd9463a1faff2f070d5e49d188607d9eae91c9aa6d2acf964aa6a94d8afca1361a429f84a1c8a1d7348cc86ff7c40f0c025ef5711dc4f4795ee50fa29d1f331c3d2f08912b2580baf0ab3ca8ab203b06bc8ac6722258a0"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xf9, 0x4, 0x2, [@generic={0x54, 0x5, "45180a92e83bcad5efc3fbffc6763273d5a9263f956bd83c0106c16371a6b9cc06c06a884f500dfb09f677b304cce26a1b36f7f5f9b518384672cd43e84a5a36869263cf85ea6e4b04a3c2fa1ca5849940fe"}, @generic={0xe7, 0x2, "86f3d1d9ed2d3a9cebaf481ff233a7227601afa4114411035fc13e3789db89ff6dd6333bd65a9d9640d2ca8a749fa2e843c0ebafccf108e17dc526452421a4ae4112ae2ceaa1a43fbc4be9603137c09ff19496bd36e608654785ec8fb4327b1b8001ad0ffc0dab1d4d9819bab064247c59040ad0a9d7a00b0bf1e623bc256e5dcdd7df1dc8ce781e240e93317585c32a0e28a35bcfbb62c3a866d9c7364a3162e9b79b72286f033ef15d1f626434f800e6025c070cdd34254a36d9085ec6295d15b1742ab585b435400c68b449928e57a77882deecf60bad6760e48faa1ac384c4a28def3d"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x6, 0x7, 0x4}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x80, 0x6, 0x5}}, {{0x9, 0x5, 0x8, 0x3, 0x400, 0x4, 0xe, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x7ff}]}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0xbe, 0x4, 0x0, [@generic={0xeb, 0x28, "13e9317cb53f3d51895d2d42d544b4346eadece652c432cda79e5f3f9b667c09e8cf7bbd000bd06ad45bb29ffc06d5a5622d07a2690e7fbe2b58af608134716133637be356dd92de1089a07c3a291a632ddc62ff8819b6d599be5d9566bb423efbb32ec155efcf2ce9f644f3cfef3271a49b145594a560c4c48a1263c604d5641282e1135c089538c0c0414794ee52143fd45d9e44273886304f008204d923f917630f025c225837106fa12bddf7a4b0fd00d5fe2a59998e05c367ef7e1cc4bd98756a89977df13f69a0a4fc7f93684acb9fcc81a2e9eb56c1993044115cd1cf13ac498a5080d8f30c"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0xf}]}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xb, 0x1, 0x4}}, {{0x9, 0x5, 0xc, 0x3, 0x40, 0xf3, 0x6, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x683f}, @generic={0x3f, 0x22, "e21b594a53db34255514ff1e24f77784ac78db2663deda664d8ee5a347181add548d5113ae32b2dad77d624b9fc607497c60fc3ad3c942c6c231e44548"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x3a, 0x4, 0x9}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x40, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x3}, @generic={0x23, 0x4, "d0dd0ce75c4b749fe845cd1e7615a7bc164954288eaf3cc5206a7b64e2253207e8"}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x4, 0x3, 0x8, 0x20, 0x5}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x2409}}, {0xae, &(0x7f00000000c0)=@string={0xae, 0x3, "c9d26b85cce3490f5d2f8e070fa3d341fb52e356c51f220cb8768ddfe8c336c94ce5af1883ee38062c4e1983d71507de1fcc591f8533a22bc07e6f452b762a3d153b23db321904db9902773f2c4279ad1865d61b431d0d9639e0714af8091734426d47631763f6f4851d7d535949a62437242479b2a1e843f779a900f61ef7ec4b251d3bc1e5682e108db7ccb950150642b2e77fdaa0641831370a4f0386d68aa7bfd66eb8e04dae12394218"}}, {0x90, &(0x7f00000001c0)=@string={0x90, 0x3, "a16e414a1c0cbb180dcc0183b9e0e6ed79a323465114cf6763ba494a685ce2e97cc3e388dd074f17e870e9e3b7ad2250ee62ee681d405b891a53264cd88f5754321685422387734dc1fb68d0cc58eb8e11552913f393c773f2b3d4b75f421dd2e52b9207de585608910db43a0938c552044956caa575ee5698b633183d95667741a75ada825a51efb35385a00163"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2809}}]}) 826.642055ms ago: executing program 6 (id=1836): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x775a, 0x4}}}, 0x7) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r0, 0x40045436, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@redirect_dir_nofollow}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000180)=ANY=[]) socket$inet_icmp(0x2, 0x2, 0x1) utimes(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)={{}, {0x0, 0x2710}}) 726.18408ms ago: executing program 6 (id=1837): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x1d, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000001280)={{r1}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3f}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4044002}, 0x8000) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x8a, 0x31, 0x7c, 0x40, 0x545, 0x800d, 0x30a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb3, 0x8e, 0xd1}}]}}]}}, 0x0) 268.826508ms ago: executing program 2 (id=1838): r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040), &(0x7f0000000080)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x1) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000080)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90f, 0x8000, '\x00', @p_u8=0x0}}) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="040000000000000002004e237f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) poll(&(0x7f0000000000)=[{r0, 0xd010}], 0x1, 0x9) 98.422719ms ago: executing program 2 (id=1839): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0xab42, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, 0x0, &(0x7f00000000c0)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80100) ioctl$PTP_SYS_OFFSET(r2, 0xc0403d08, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x64, 0x0, 0x1, 0x201, 0x25dfdbfe, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}}, 0x80) r3 = socket$kcm(0x2d, 0x2, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8914, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000000)={{0x3, 0x3}, {0x3, 0x1}, 0x8bd, 0x1}) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000140)) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f00000004c0)={{r3}, "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"}) socket$nl_generic(0x10, 0x3, 0x10) getpeername$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0x1c) 37.188576ms ago: executing program 6 (id=1840): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="40010400d14cf4deddf60700000000000000187003133d5837ecb58f44db54"], 0x0, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000640)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=1841): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x42) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3c1e, 0x200020, 0xdc, 0x8, 0xb85, 0x4, 0x0, 0x0, 0x20, 0xffffff81}}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000414000980100002800c"], 0xa0}}, 0x0) kernel console output (not intermixed with test programs): 1: probe with driver spca1528 failed with error -71 [ 440.190220][ T5947] usb 7-1: USB disconnect, device number 19 [ 440.250364][ T43] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 440.399208][ T5868] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 440.420550][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 440.430257][ T43] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 440.440708][ T43] usb 3-1: config 0 has no interface number 0 [ 440.447839][ T43] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 440.458015][ T43] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 440.469064][ T43] usb 3-1: config 0 interface 41 has no altsetting 0 [ 440.478785][ T43] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 440.491232][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.499438][ T43] usb 3-1: Product: syz [ 440.503765][ T43] usb 3-1: Manufacturer: syz [ 440.509485][ T43] usb 3-1: SerialNumber: syz [ 440.522397][ T43] usb 3-1: config 0 descriptor?? [ 440.532197][ T9946] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 440.542179][ T9946] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 440.602138][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 440.609234][ T5868] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.619461][ T5868] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 440.628724][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.645981][ T5868] usb 2-1: config 0 descriptor?? [ 440.669450][ T5868] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 440.770799][ T9946] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 440.801381][ T9946] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 441.184693][ T5868] gspca_vc032x: reg_w err -71 [ 441.192105][ T5868] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 441.203216][ T5868] usb 2-1: USB disconnect, device number 107 [ 441.472048][ T43] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 441.719361][ T43] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 441.735375][ T9367] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 441.745597][ T43] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 441.768219][ T43] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 441.799626][ T43] usb 3-1: USB disconnect, device number 100 [ 441.908336][ T9367] usb 7-1: config 5 has an invalid interface number: 233 but max is 1 [ 441.916719][ T9367] usb 7-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 441.933426][ T9367] usb 7-1: config 5 has no interface number 1 [ 441.949218][ T9367] usb 7-1: config 5 interface 233 has no altsetting 0 [ 441.963757][ T9367] usb 7-1: string descriptor 0 read error: -71 [ 442.003070][ T9367] usb 7-1: New USB device found, idVendor=1e2d, idProduct=0085, bcdDevice=96.e8 [ 442.012152][ T9367] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.054182][ T9367] usb 7-1: can't set config #5, error -71 [ 442.069750][ T9367] usb 7-1: USB disconnect, device number 20 [ 442.083137][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1198'. [ 442.108230][ T9969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1198'. [ 442.133920][ T9969] nbd: socks must be embedded in a SOCK_ITEM attr [ 443.943855][ T9992] @: renamed from vlan0 (while UP) [ 444.190344][ T9998] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 444.366967][ T9367] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 444.507006][T10007] block nbd6: Attempted send on invalid socket [ 444.524834][T10007] blk_print_req_error: 10 callbacks suppressed [ 444.524857][T10007] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 444.536324][ T9] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 444.553749][T10007] hfsplus: unable to find HFS+ superblock [ 444.559034][ T9367] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 444.584650][ T9367] usb 2-1: config 0 has no interface number 0 [ 444.603286][ T9367] usb 2-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 444.641794][ T9367] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 52, changing to 9 [ 444.657103][T10009] block nbd4: Attempted send on invalid socket [ 444.668501][T10009] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 444.670598][ T9367] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 8241, setting to 1024 [ 444.690880][T10009] XFS (nbd4): SB validate failed with error -5. [ 444.696216][ T9367] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 444.710882][ T9367] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.728349][ T9367] usb 2-1: config 0 descriptor?? [ 444.763491][ T9367] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input34 [ 444.782218][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 444.792172][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 444.812100][ T9] usb 3-1: config 0 has no interface number 0 [ 444.818871][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.851869][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.879385][ T9] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 444.949598][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.975647][ T9] usb 3-1: config 0 descriptor?? [ 445.043907][ C1] usbtouchscreen 2-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 445.055017][ T1212] usb 2-1: USB disconnect, device number 108 [ 445.284701][ T9367] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 445.445110][ T9367] usb 7-1: Using ep0 maxpacket: 32 [ 445.456527][ T9367] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 445.472577][ T9367] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 445.482104][ T9367] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.502821][ T9367] usb 7-1: config 0 descriptor?? [ 445.914447][ T9] usbhid 3-1:0.1: can't add hid device: -71 [ 445.927112][ T9] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 445.961129][ T9] usb 3-1: USB disconnect, device number 101 [ 446.005071][T10022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.030437][T10022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.043873][ T1212] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 446.131126][ T30] audit: type=1326 audit(1757516109.865:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.4.1221" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f27e1d8eba9 code=0x0 [ 446.263764][ T1212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 446.294492][ T1212] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 446.310507][ T1212] usb 2-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 446.319817][ T1212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.327877][ T1212] usb 2-1: Product: syz [ 446.332161][ T1212] usb 2-1: Manufacturer: syz [ 446.343055][ T1212] usb 2-1: SerialNumber: syz [ 446.366354][ T1212] usb 2-1: config 0 descriptor?? [ 446.601860][T10030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.621358][T10030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.661541][ T1212] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 446.752261][ T1212] usb 2-1: USB disconnect, device number 109 [ 446.776073][T10057] fuse: Bad value for 'fd' [ 446.908307][T10059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.909704][ T43] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 446.932481][T10059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.974741][ T9380] udevd[9380]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 447.091361][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 447.112861][ T43] usb 5-1: config 0 has no interfaces? [ 447.123939][ T43] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 447.132987][ T43] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 447.144233][ T43] usb 5-1: Manufacturer: syz [ 447.152328][ T43] usb 5-1: config 0 descriptor?? [ 447.176966][ T5912] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 447.359853][ T5912] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 447.367960][ T5912] usb 3-1: config 0 has no interface number 0 [ 447.374629][ T5912] usb 3-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 447.386884][ T5912] usb 3-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 447.400446][ T5912] usb 3-1: config 0 interface 48 has no altsetting 0 [ 447.414187][ T5912] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 447.430838][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.440042][ T5912] usb 3-1: Product: syz [ 447.444598][ T5912] usb 3-1: Manufacturer: syz [ 447.449245][ T5912] usb 3-1: SerialNumber: syz [ 447.462640][ T5912] usb 3-1: config 0 descriptor?? [ 447.511618][ T43] usb 5-1: USB disconnect, device number 93 [ 447.867535][T10077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.889658][T10077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.310815][T10090] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1237'. [ 448.428570][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.436572][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.491856][ T43] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 448.501361][T10095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.513341][T10095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.667748][ T43] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 448.689747][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.709480][ T43] usb 5-1: Product: syz [ 448.713681][ T43] usb 5-1: Manufacturer: syz [ 448.727056][ T43] usb 5-1: SerialNumber: syz [ 448.749651][ T43] usb 5-1: config 0 descriptor?? [ 448.767388][ T43] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 449.419126][T10087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.446100][T10087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.474316][ T43] gspca_sunplus: reg_r err -71 [ 449.487197][ T43] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 449.499163][ T43] usb 5-1: USB disconnect, device number 94 [ 449.614404][ T866] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 449.775752][ T866] usb 2-1: Using ep0 maxpacket: 8 [ 449.783371][T10128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.798779][ T866] usb 2-1: unable to get BOS descriptor or descriptor too short [ 449.800496][T10128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.818546][ T866] usb 2-1: config 17 has an invalid interface number: 8 but max is 1 [ 449.825492][T10128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.826650][ T866] usb 2-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 449.837496][T10128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.882915][ T866] usb 2-1: config 17 has no interface number 0 [ 449.889187][ T866] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 144, changing to 7 [ 449.907344][ T866] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 57893, setting to 1024 [ 449.920186][ T866] usb 2-1: config 17 interface 8 has no altsetting 0 [ 449.931389][ T866] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 449.940908][ T866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.950235][ T866] usb 2-1: Product: syz [ 449.954526][ T866] usb 2-1: Manufacturer: syz [ 449.959600][ T866] usb 2-1: SerialNumber: syz [ 450.185599][ T5912] hub 3-1:0.48: bad descriptor, ignoring hub [ 450.205793][ T5912] hub 3-1:0.48: probe with driver hub failed with error -5 [ 450.238253][ T5912] f81232 3-1:0.48: f81534a converter detected [ 450.261800][ T866] usb 2-1: selecting invalid altsetting 0 [ 450.273400][ T5912] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 450.287938][ T866] usb 2-1: 8:6 : no UAC_FORMAT_TYPE desc [ 450.306682][ T5912] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 450.314706][ T866] usb 2-1: selecting invalid altsetting 0 [ 450.376510][ T866] usb 2-1: USB disconnect, device number 110 [ 450.486113][ T9355] udevd[9355]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 450.547194][ T5912] usb 3-1: reset high-speed USB device number 102 using dummy_hcd [ 450.728933][ T5912] usb 3-1: device descriptor read/64, error -71 [ 450.948780][T10155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1260'. [ 451.004766][ T5912] usb 3-1: reset high-speed USB device number 102 using dummy_hcd [ 451.085946][T10162] vivid-000: disconnect [ 451.102587][ T1212] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 451.199020][ T5912] usb 3-1: device descriptor read/64, error -71 [ 451.295233][ T1212] usb 5-1: Using ep0 maxpacket: 16 [ 451.303184][ T1212] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 451.324536][ T1212] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 451.346241][ T9] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 451.356605][ T1212] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 451.384963][ T1212] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 451.394518][ T1212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.402801][ T1212] usb 5-1: Product: syz [ 451.407096][ T1212] usb 5-1: Manufacturer: syz [ 451.413643][ T1212] usb 5-1: SerialNumber: syz [ 451.419119][ T9367] usbhid 7-1:0.0: can't add hid device: -32 [ 451.426184][ T9367] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 451.465807][ T5912] usb 3-1: reset high-speed USB device number 102 using dummy_hcd [ 451.510260][ T5912] usb 3-1: device descriptor read/8, error -71 [ 451.555777][ T9] usb 2-1: config 0 has an invalid interface number: 104 but max is 0 [ 451.564510][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.576869][ T9] usb 2-1: config 0 has no interface number 0 [ 451.585238][ T9] usb 2-1: config 0 interface 104 altsetting 2 endpoint 0x82 has invalid maxpacket 832, setting to 64 [ 451.597017][ T9] usb 2-1: config 0 interface 104 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 451.633018][ T9] usb 2-1: config 0 interface 104 has no altsetting 0 [ 451.651246][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=04e2, bcdDevice=1c.4d [ 451.663167][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.687559][ T9] usb 2-1: Product: syz [ 451.693060][ T9] usb 2-1: Manufacturer: syz [ 451.697931][ T9] usb 2-1: SerialNumber: syz [ 451.715441][ T9] usb 2-1: config 0 descriptor?? [ 451.730546][T10162] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 451.764230][ T5912] usb 3-1: reset high-speed USB device number 102 using dummy_hcd [ 451.795983][ T5912] usb 3-1: device descriptor read/8, error -71 [ 451.882207][ T1212] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 451.924386][ T5912] usb 3-1: USB disconnect, device number 102 [ 451.942792][ T5912] f81232 3-1:0.48: device disconnected [ 451.983197][ T9] usb 2-1: USB disconnect, device number 111 [ 451.990463][T10159] vivid-000: reconnect [ 452.203237][T10181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.215044][T10181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.225827][T10181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.237332][T10181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.276361][ T5912] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 452.426029][ T5912] usb 3-1: device descriptor read/64, error -71 [ 452.683055][ T5912] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 452.832626][ T5912] usb 3-1: device descriptor read/64, error -71 [ 452.915185][T10196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.935892][T10196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.969290][ T1212] usb 5-1: 2:1: cannot get freq at ep 0x82 [ 452.982712][ T5912] usb usb3-port1: attempt power cycle [ 453.053727][ T1212] usb 5-1: USB disconnect, device number 95 [ 453.156486][ T9313] udevd[9313]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 453.172800][ T30] audit: type=1400 audit(1757516116.459:409): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name="cha" pid=10201 comm="syz.1.1275" [ 453.348498][ T5912] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 453.388990][ T5912] usb 3-1: device descriptor read/8, error -71 [ 453.773330][ T1212] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 453.944029][ T1212] usb 2-1: Using ep0 maxpacket: 8 [ 453.957134][ T1212] usb 2-1: config 162 has an invalid interface number: 76 but max is 1 [ 453.970925][ T1212] usb 2-1: config 162 has an invalid interface number: 238 but max is 1 [ 453.984111][T10229] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 453.997360][ T1212] usb 2-1: config 162 has an invalid interface number: 253 but max is 1 [ 454.019239][ T1212] usb 2-1: config 162 has 3 interfaces, different from the descriptor's value: 2 [ 454.028569][T10232] comedi comedi3: comedi_config --init_data is deprecated [ 454.050510][ T1212] usb 2-1: config 162 has no interface number 0 [ 454.058857][ T1212] usb 2-1: config 162 has no interface number 1 [ 454.072350][ T1212] usb 2-1: config 162 has no interface number 2 [ 454.078810][ T1212] usb 2-1: config 162 interface 238 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 454.125787][ T1212] usb 2-1: config 162 interface 238 altsetting 5 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 454.170537][ T5912] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 454.170773][ T1212] usb 2-1: config 162 interface 238 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 454.194707][ T1212] usb 2-1: config 162 interface 238 altsetting 5 has 5 endpoint descriptors, different from the interface descriptor's value: 11 [ 454.211154][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.215344][ T1212] usb 2-1: too many endpoints for config 162 interface 253 altsetting 49: 131, using maximum allowed: 30 [ 454.224226][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.235345][ T1212] usb 2-1: config 162 interface 253 altsetting 49 endpoint 0xC has an invalid bInterval 139, changing to 7 [ 454.255487][ T1212] usb 2-1: config 162 interface 253 altsetting 49 has an invalid descriptor for endpoint zero, skipping [ 454.267223][ T1212] usb 2-1: config 162 interface 253 altsetting 49 has an invalid descriptor for endpoint zero, skipping [ 454.269570][ T5912] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 454.283444][ T1212] usb 2-1: config 162 interface 253 altsetting 49 has a duplicate endpoint with address 0xC, skipping [ 454.299867][ T1212] usb 2-1: config 162 interface 253 altsetting 49 has a duplicate endpoint with address 0x9, skipping [ 454.314064][ T1212] usb 2-1: config 162 interface 253 altsetting 49 has 6 endpoint descriptors, different from the interface descriptor's value: 131 [ 454.324579][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.328336][ T1212] usb 2-1: config 162 interface 238 has no altsetting 0 [ 454.342980][ T1212] usb 2-1: config 162 interface 253 has no altsetting 0 [ 454.355242][ T1212] usb 2-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=f2.78 [ 454.357204][T10237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.375342][ T1212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.377509][ T5912] usb 3-1: config 0 descriptor?? [ 454.393122][ T1212] usb 2-1: Product: syz [ 454.403779][ T1212] usb 2-1: Manufacturer: syz [ 454.412165][T10237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.434258][ T1212] usb 2-1: SerialNumber: syz [ 454.679094][T10212] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1278'. [ 454.693884][ T1212] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 454.710372][ T2346] usb 2-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 454.714175][ T1212] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 454.721261][ T2346] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 454.741292][ T1212] usb 2-1: selecting invalid altsetting 0 [ 454.750270][ T5868] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 454.767698][ T1212] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 454.775538][ T1212] usb 2-1: selecting invalid altsetting 0 [ 454.792781][ T1212] usb 2-1: USB disconnect, device number 112 [ 454.843359][ T5912] usbhid 3-1:0.0: can't add hid device: -71 [ 454.850580][ T5912] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 454.880282][ T5912] usb 3-1: USB disconnect, device number 106 [ 454.906199][ T5868] usb 5-1: device descriptor read/64, error -71 [ 455.184179][ T5868] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 455.334399][ T5868] usb 5-1: device descriptor read/64, error -71 [ 455.486202][ T5868] usb usb5-port1: attempt power cycle [ 455.499302][T10243] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1290'. [ 455.508369][T10243] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1290'. [ 455.528217][T10243] netlink: 'syz.2.1290': attribute type 4 has an invalid length. [ 455.543499][T10243] netlink: 'syz.2.1290': attribute type 4 has an invalid length. [ 455.857903][ T5868] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 455.891053][ T5868] usb 5-1: device descriptor read/8, error -71 [ 456.157814][ T5868] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 456.190714][ T5868] usb 5-1: device descriptor read/8, error -71 [ 456.308534][ T5868] usb usb5-port1: unable to enumerate USB device [ 457.050840][T10260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1297'. [ 457.061491][T10260] openvswitch: netlink: Flow key attr not present in new flow. [ 457.470512][ T6699] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 457.501600][T10265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.514834][T10265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.632337][ T6699] usb 3-1: device descriptor read/64, error -71 [ 457.888900][ T6699] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 458.027874][ T6699] usb 3-1: device descriptor read/64, error -71 [ 458.156535][ T6699] usb usb3-port1: attempt power cycle [ 458.170043][T10279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.187055][T10279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.531910][ T6699] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 458.574587][ T6699] usb 3-1: device descriptor read/8, error -71 [ 458.863232][ T6699] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 458.906821][ T6699] usb 3-1: device descriptor read/8, error -71 [ 459.027924][ T6699] usb usb3-port1: unable to enumerate USB device [ 459.132286][T10298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.145107][T10298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.321481][ T9367] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 459.482709][ T9367] usb 5-1: Using ep0 maxpacket: 16 [ 459.495133][ T9367] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.527005][ T9367] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.546931][ T9367] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 459.580062][ T9367] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 459.601198][ T9367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.624278][ T9367] usb 5-1: config 0 descriptor?? [ 460.276996][ T6699] usb 5-1: USB disconnect, device number 100 [ 460.679905][ T6699] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 460.818222][ T6699] usb 5-1: device descriptor read/64, error -71 [ 461.087601][ T6699] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 461.144917][T10313] netlink: 388 bytes leftover after parsing attributes in process `syz.6.1316'. [ 461.167212][T10313] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1316'. [ 461.250466][ T6699] usb 5-1: device descriptor read/64, error -71 [ 461.299269][T10320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.315011][T10319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.315369][T10320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.336532][T10319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.384722][ T6699] usb usb5-port1: attempt power cycle [ 461.748227][ T6699] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 461.770259][ T6699] usb 5-1: device descriptor read/8, error -71 [ 462.037081][ T6699] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 462.117130][ T6699] usb 5-1: device descriptor read/8, error -71 [ 462.198576][T10323] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1319'. [ 462.224209][T10323] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1319'. [ 462.251880][ T6699] usb usb5-port1: unable to enumerate USB device [ 462.258818][T10323] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1319'. [ 462.503081][ T52] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 462.956258][ T9] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 463.014518][T10358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.023710][T10358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.030614][T10357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.045333][T10357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.117018][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 463.149297][ T9] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 463.168835][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.201908][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.213423][ T9] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 463.222461][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.243709][ T9] usb 3-1: config 0 descriptor?? [ 463.502277][T10350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.521971][T10350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.558452][T10350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.578051][T10350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.608624][T10350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.632198][T10350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.659305][T10350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.695199][T10350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.713618][T10350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.723678][T10350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.762023][ T9] hid-led 0003:27B8:01ED.0019: item fetching failed at offset 0/2 [ 463.781264][ T9] hid-led 0003:27B8:01ED.0019: probe with driver hid-led failed with error -22 [ 464.666950][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 465.944963][ T6699] usb 3-1: USB disconnect, device number 111 [ 466.064958][T10396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.094095][T10396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.106949][T10397] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1340'. [ 466.116870][T10394] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1340'. [ 466.143276][T10396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.173072][T10396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.256908][T10400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.272355][T10400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.312930][T10405] 9pnet_fd: Insufficient options for proto=fd [ 491.587737][T10415] 9pnet_fd: Insufficient options for proto=fd [ 491.746076][ T5868] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 491.908236][ T5868] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 491.920387][ T5868] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 491.936181][ T5868] usb 3-1: config 0 interface 0 has no altsetting 0 [ 491.945165][ T5868] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 491.955527][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.975411][ T5868] usb 3-1: config 0 descriptor?? [ 491.982475][T10413] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 492.444834][ T5868] elo 0003:04E7:0030.001A: unknown main item tag 0x0 [ 492.457041][ T5868] elo 0003:04E7:0030.001A: item fetching failed at offset 3/5 [ 492.466712][ T5868] elo 0003:04E7:0030.001A: parse failed [ 492.472397][ T5868] elo 0003:04E7:0030.001A: probe with driver elo failed with error -22 [ 492.494593][ T9367] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 492.556818][T10436] (syz.6.1356,10436,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 492.570128][T10436] (syz.6.1356,10436,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 492.657617][T10413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.677759][ T9367] usb 5-1: config index 0 descriptor too short (expected 52, got 45) [ 492.679279][T10413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.696712][ T9367] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.717659][ T9367] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 492.740001][ T9367] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 492.753468][ T5912] usb 3-1: USB disconnect, device number 112 [ 492.780818][ T9367] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 492.810152][T10442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.818980][ T9367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.836395][T10442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.846706][ T9367] usb 5-1: config 0 descriptor?? [ 492.857001][T10426] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 493.584562][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1360'. [ 493.786127][T10453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.801340][T10453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.920470][T10458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.929949][T10458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.940941][ T9367] usbhid 5-1:0.0: can't add hid device: -71 [ 493.946976][ T9367] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 493.972545][ T9367] usb 5-1: USB disconnect, device number 105 [ 494.277297][T10458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.297834][T10458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.321699][T10458] netlink: 'syz.6.1363': attribute type 3 has an invalid length. [ 494.345234][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1363'. [ 494.393504][T10461] binder_alloc: binder_alloc_mmap_handler: 10460 200000735000-200000736000 already mapped failed -16 [ 494.664620][ T866] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 494.824967][ T5868] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 494.835638][ T866] usb 3-1: Using ep0 maxpacket: 16 [ 494.842778][ T866] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 494.853556][ T866] usb 3-1: config 252 has no interface number 0 [ 494.860524][ T866] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 494.880646][ T866] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 494.897349][ T866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.906718][ T866] usb 3-1: Product: syz [ 494.911942][ T866] usb 3-1: Manufacturer: syz [ 494.916542][ T866] usb 3-1: SerialNumber: syz [ 494.941597][T10465] tmpfs: Bad value for 'mpol' [ 494.965072][ T866] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 495.018485][ T5868] usb 5-1: Using ep0 maxpacket: 32 [ 495.027846][ T5868] usb 5-1: config 0 has an invalid interface number: 121 but max is 0 [ 495.049438][ T5868] usb 5-1: config 0 has no interface number 0 [ 495.055587][ T5868] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 495.070950][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.093373][ T5868] usb 5-1: config 0 descriptor?? [ 495.180055][ T9367] usb 3-1: USB disconnect, device number 113 [ 495.186227][ T12] usb 3-1: Failed to submit usb control message: -71 [ 495.209867][ T12] usb 3-1: unable to send the bmi data to the device: -71 [ 495.217944][ T12] usb 3-1: unable to get target info from device [ 495.241914][ T12] usb 3-1: could not get target info (-71) [ 495.248517][ T12] usb 3-1: could not probe fw (-71) [ 495.425926][T10463] overlayfs: workdir and upperdir must reside under the same mount [ 495.486235][ T5868] usb 5-1: string descriptor 0 read error: -32 [ 495.495981][ T5868] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 495.510469][ T5868] gspca_vc032x: reg_r err -32 [ 495.529842][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 495.536708][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 495.546326][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 495.552822][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 495.559967][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 495.566843][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 495.572278][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 495.593796][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 495.626238][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 495.640434][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 495.645730][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 495.668501][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 495.680020][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 495.681217][T10484] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 495.688080][T10485] comedi comedi0: Minor 3 specified more than once! [ 495.702536][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 495.707824][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 495.716428][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 495.716511][T10484] qnx6: wrong signature (magic) in superblock #1. [ 495.721717][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 495.721730][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 495.721740][ T5868] gspca_vc032x: Unknown sensor... [ 495.721819][ T5868] vc032x 5-1:0.121: probe with driver vc032x failed with error -22 [ 495.743410][T10484] qnx6: unable to read the first superblock [ 495.755339][ T5868] usb 5-1: USB disconnect, device number 106 [ 495.972144][T10491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.990666][T10491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.164538][T10495] netlink: 'syz.4.1376': attribute type 5 has an invalid length. [ 496.172520][T10495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1376'. [ 496.181475][T10495] netlink: 'syz.4.1376': attribute type 1 has an invalid length. [ 496.482045][ T866] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 496.536255][ T5868] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 496.642436][ T866] usb 3-1: Using ep0 maxpacket: 16 [ 496.651744][ T866] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 496.661550][ T866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.670749][ T866] usb 3-1: Product: syz [ 496.678811][ T866] usb 3-1: Manufacturer: syz [ 496.683408][ T866] usb 3-1: SerialNumber: syz [ 496.699940][ T866] r8152-cfgselector 3-1: Unknown version 0x0000 [ 496.706210][ T866] r8152-cfgselector 3-1: config 0 descriptor?? [ 496.717187][ T5868] usb 5-1: Using ep0 maxpacket: 16 [ 496.729682][ T5868] usb 5-1: config 0 has no interfaces? [ 496.749891][ T5868] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 496.769800][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.777929][ T5868] usb 5-1: Product: syz [ 496.788712][ T5868] usb 5-1: Manufacturer: syz [ 496.795759][ T5868] usb 5-1: SerialNumber: syz [ 496.816289][ T5868] usb 5-1: config 0 descriptor?? [ 496.838686][T10505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.850200][T10505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.933063][ T866] r8152-cfgselector 3-1: Unknown version 0x0000 [ 496.941180][ T866] r8152-cfgselector 3-1: bad CDC descriptors [ 497.053030][ T5868] usb 5-1: USB disconnect, device number 107 [ 497.168159][ T866] r8152-cfgselector 3-1: USB disconnect, device number 114 [ 497.629943][T10509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.642086][T10509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.655393][T10509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.666089][T10509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.264481][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1389'. [ 498.299422][ T5912] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 498.401772][T10531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.405264][T10535] overlayfs: conflicting options: userxattr,metacopy=on [ 498.417958][T10531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.472657][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 498.491526][ T5912] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b [ 498.506444][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.514643][ T5912] usb 5-1: Product: syz [ 498.518802][ T5912] usb 5-1: Manufacturer: syz [ 498.523395][ T5912] usb 5-1: SerialNumber: syz [ 498.531966][ T5912] usb 5-1: config 0 descriptor?? [ 498.695906][ T866] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 498.753635][T10520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.762483][T10520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.771510][T10520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.781845][T10520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.793701][T10536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.804061][T10536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.872158][ T866] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 498.889654][ T866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.905877][ T5912] usb 5-1: USB disconnect, device number 108 [ 498.931520][ T866] usb 3-1: Product: syz [ 498.955534][ T866] usb 3-1: Manufacturer: syz [ 498.981015][ T866] usb 3-1: SerialNumber: syz [ 499.024433][ T866] usb 3-1: config 0 descriptor?? [ 499.107471][T10543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1392'. [ 499.455129][T10552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.477001][T10552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.626695][ T866] usb 3-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 499.654483][ T866] f81604 3-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 499.670100][ T866] f81604 3-1:0.0: probe with driver f81604 failed with error -71 [ 499.712247][ T866] usb 3-1: USB disconnect, device number 115 [ 500.040347][T10570] syzkaller1: entered promiscuous mode [ 500.052680][T10570] syzkaller1: entered allmulticast mode [ 500.679202][T10596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.690597][T10596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.693866][T10597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.734904][T10597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.749615][T10596] netlink: 'syz.6.1410': attribute type 11 has an invalid length. [ 500.870688][ T866] IPVS: starting estimator thread 0... [ 500.982856][T10601] IPVS: using max 30 ests per chain, 72000 per kthread [ 501.153823][ T866] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 501.303507][ T866] usb 3-1: device descriptor read/64, error -71 [ 501.560183][ T866] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 501.624189][ T5868] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 501.720467][ T866] usb 3-1: device descriptor read/64, error -71 [ 501.786398][ T5868] usb 5-1: Using ep0 maxpacket: 8 [ 501.797856][ T5868] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 501.811075][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.820352][ T5868] usb 5-1: Product: syz [ 501.824574][ T5868] usb 5-1: Manufacturer: syz [ 501.829472][ T5868] usb 5-1: SerialNumber: syz [ 501.837757][ T5868] usb 5-1: config 0 descriptor?? [ 501.848361][ T5868] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 501.857649][ T866] usb usb3-port1: attempt power cycle [ 502.233555][ T866] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 502.255532][ T866] usb 3-1: device descriptor read/8, error -71 [ 502.296781][ T5868] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 502.307244][ T5868] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 502.322864][ T5868] usb 5-1: USB disconnect, device number 109 [ 502.511583][ T866] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 502.544490][ T866] usb 3-1: device descriptor read/8, error -71 [ 502.661903][ T866] usb usb3-port1: unable to enumerate USB device [ 503.073262][T10611] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 503.082439][T10611] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 503.090790][T10611] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 503.100429][T10611] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 503.429039][T10616] overlayfs: failed to resolve './file1': -2 [ 503.437040][T10616] overlayfs: failed to resolve './file1/file0': -2 [ 503.441663][ T9] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 503.614518][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.626352][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 503.638187][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.654867][ T9] usb 5-1: config 0 descriptor?? [ 503.676655][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 503.972336][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 504.104795][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 504.117885][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 504.135707][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 504.145338][ T30] audit: type=1326 audit(1757516164.137:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.6.1421" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a7dd8eba9 code=0x0 [ 504.155904][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 504.193914][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 504.204124][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 504.211306][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 504.259244][ T30] audit: type=1326 audit(1757516164.249:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.6.1421" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a7dd8eba9 code=0x0 [ 504.434068][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 504.443372][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 504.451423][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 504.459800][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 504.466987][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 504.475504][ T9] pwc: recv_control_msg error -32 req 02 val 2800 [ 504.542703][ T6699] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 504.700962][T10614] comedi comedi2: dt2801: a I/O base address must be specified [ 504.714927][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 504.723432][ T6699] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 504.728195][ T9] pwc: Registered as video103. [ 504.745839][ T6699] usb 3-1: config 0 has no interface number 0 [ 504.754341][ T6699] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 504.766338][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input36 [ 504.786703][ T9] usb 5-1: USB disconnect, device number 110 [ 504.790444][ T6699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.801747][ T6699] usb 3-1: Product: syz [ 504.820640][ T6699] usb 3-1: Manufacturer: syz [ 504.825251][ T6699] usb 3-1: SerialNumber: syz [ 504.867609][ T6699] usb 3-1: config 0 descriptor?? [ 505.079582][T10638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.093208][T10638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.127399][ T6699] usb 3-1: Firmware version (0.0) predates our first public release. [ 505.154766][ T6699] usb 3-1: Please update to version 0.2 or newer [ 505.224236][ T6699] usb 3-1: USB disconnect, device number 120 [ 505.388376][T10657] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1425'. [ 506.398541][T10700] comedi comedi0: adq12b: I/O port conflict (0x8,16) [ 506.510065][ T9367] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 506.583374][T10704] netlink: 'syz.6.1436': attribute type 21 has an invalid length. [ 506.591796][T10704] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1436'. [ 506.684065][ T9367] usb 5-1: unable to get BOS descriptor or descriptor too short [ 506.701355][ T9367] usb 5-1: config 13 has an invalid interface number: 50 but max is 3 [ 506.717908][ T9367] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 506.750053][ T9367] usb 5-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 506.783170][ T9367] usb 5-1: config 13 has no interface number 0 [ 506.805607][ T9367] usb 5-1: config 13 interface 50 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 506.834529][ T9367] usb 5-1: config 13 interface 50 has no altsetting 0 [ 506.854699][ T9367] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 506.885913][ T9367] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.918882][ T9367] usb 5-1: Product: syz [ 506.948275][ T9367] usb 5-1: Manufacturer: syz [ 506.952906][ T9367] usb 5-1: SerialNumber: syz [ 506.994379][ T9] kernel write not supported for file /snd/seq (pid: 9 comm: kworker/0:0) [ 507.019125][T10717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.042584][T10718] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 507.053304][T10718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1439'. [ 507.064557][T10717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.066224][T10718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1439'. [ 507.107190][T10718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1439'. [ 507.247444][ T9367] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 507.250553][ T44] usb 5-1: Failed to submit usb control message: -71 [ 507.266592][ T9367] usb 5-1: USB disconnect, device number 111 [ 507.310799][ T44] usb 5-1: unable to send the bmi data to the device: -71 [ 507.332081][ T44] usb 5-1: unable to get target info from device [ 507.343742][T10732] dlm: Unknown command passed to DLM device : 0 [ 507.343742][T10732] [ 507.363040][ T44] usb 5-1: could not get target info (-71) [ 507.377472][ T44] usb 5-1: could not probe fw (-71) [ 507.643026][ T9] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 507.793008][ T9] usb 3-1: device descriptor read/64, error -71 [ 507.856359][T10749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.872179][T10749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.071481][ T9] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 508.231143][ T9] usb 3-1: device descriptor read/64, error -71 [ 508.360533][ T9] usb usb3-port1: attempt power cycle [ 508.738060][ T9] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 508.766220][ T9] usb 3-1: device descriptor read/8, error -71 [ 508.777761][T10761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.786510][T10761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.022910][ T9] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 509.054796][ T9] usb 3-1: device descriptor read/8, error -71 [ 509.119398][T10763] netlink: 'syz.4.1452': attribute type 12 has an invalid length. [ 509.127321][T10763] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1452'. [ 509.172399][ T9] usb usb3-port1: unable to enumerate USB device [ 509.631548][ T9] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 509.789230][T10778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.802715][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 509.804090][T10778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.811026][ T9] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 509.826154][ T9] usb 5-1: config 0 has no interface number 0 [ 509.832257][ T9] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 509.844604][ T9] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 509.858101][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 509.870057][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.878392][ T9] usb 5-1: Product: syz [ 509.882965][ T9] usb 5-1: Manufacturer: syz [ 509.889293][ T9] usb 5-1: SerialNumber: syz [ 509.910533][ T9] usb 5-1: config 0 descriptor?? [ 510.145506][T10780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.157521][T10780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.174824][ T9] radio-si470x 5-1:0.35: this is not a si470x device. [ 510.221500][ T9] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 510.238005][ T9] usb 5-1: USB disconnect, device number 112 [ 510.936058][ T6699] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 511.116154][T10806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.122728][ T6699] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 511.130839][T10806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.133805][ T5912] usb 5-1: new low-speed USB device number 113 using dummy_hcd [ 511.167454][ T6699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.176918][ T6699] usb 3-1: Product: syz [ 511.188341][ T6699] usb 3-1: Manufacturer: syz [ 511.195743][ T6699] usb 3-1: SerialNumber: syz [ 511.218098][ T6699] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 511.242917][ T43] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 511.344393][ T5912] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 511.363385][ T5912] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 511.376472][ T5912] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 511.406286][ T5912] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 511.438304][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 511.459863][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 511.492057][ T5912] usb 5-1: string descriptor 0 read error: -22 [ 511.502460][ T5912] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 511.522955][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.561005][ T5912] usb 5-1: config 0 descriptor?? [ 511.578759][T10799] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 511.600305][ T5912] hub 5-1:0.0: bad descriptor, ignoring hub [ 511.606270][ T5912] hub 5-1:0.0: probe with driver hub failed with error -5 [ 511.662964][ T5912] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input37 [ 511.846460][ T9] usb 5-1: USB disconnect, device number 113 [ 511.920052][T10790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.930921][T10790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.954084][ T5912] usb 3-1: USB disconnect, device number 125 [ 512.115972][T10826] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 512.394358][ T43] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 512.419244][ T43] ath9k_htc: Failed to initialize the device [ 512.433177][ T5912] usb 3-1: ath9k_htc: USB layer deinitialized [ 512.660260][T10849] kvm: pic: non byte read [ 512.669335][T10849] kvm: pic: level sensitive irq not supported [ 512.669433][T10849] kvm: pic: non byte read [ 512.692704][T10849] kvm: pic: level sensitive irq not supported [ 512.692762][T10849] kvm: pic: non byte read [ 512.715083][T10849] kvm: pic: level sensitive irq not supported [ 512.715143][T10849] kvm: pic: non byte read [ 512.726321][T10849] kvm: pic: level sensitive irq not supported [ 512.726380][T10849] kvm: pic: non byte read [ 512.738705][T10849] kvm: pic: level sensitive irq not supported [ 512.738763][T10849] kvm: pic: non byte read [ 512.749810][T10849] kvm: pic: level sensitive irq not supported [ 512.749866][T10849] kvm: pic: non byte read [ 512.760920][T10849] kvm: pic: level sensitive irq not supported [ 512.760973][T10849] kvm: pic: non byte read [ 512.772060][T10849] kvm: pic: level sensitive irq not supported [ 512.772114][T10849] kvm: pic: non byte read [ 512.977188][T10856] bond0: entered promiscuous mode [ 512.983128][T10856] bond0: entered allmulticast mode [ 513.348997][T10865] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 513.355704][T10865] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 513.395322][T10865] vhci_hcd vhci_hcd.0: Device attached [ 513.420949][T10865] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 513.427571][T10865] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 513.489311][T10865] vhci_hcd vhci_hcd.0: Device attached [ 513.509652][T10875] vhci_hcd: connection closed [ 513.511159][T10872] vhci_hcd: connection closed [ 513.533492][ T12] vhci_hcd: stop threads [ 513.551238][ T5912] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 513.578119][ T12] vhci_hcd: release socket [ 513.595344][ T12] vhci_hcd: disconnect device [ 513.614723][T10881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.623480][ T12] vhci_hcd: stop threads [ 513.627837][ T12] vhci_hcd: release socket [ 513.634126][ T12] vhci_hcd: disconnect device [ 513.651224][ T9] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 513.659204][T10881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.680163][ T9] usb 37-1: enqueue for inactive port 0 [ 513.709793][T10881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.737064][T10881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.751242][ T5912] usb 5-1: Using ep0 maxpacket: 32 [ 513.770533][ T5912] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 513.780092][ T9] vhci_hcd: vhci_device speed not set [ 513.793002][ T5912] usb 5-1: config 0 has no interface number 0 [ 513.814398][ T5912] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 513.824339][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.846638][ T5912] usb 5-1: Product: syz [ 513.850820][ T5912] usb 5-1: Manufacturer: syz [ 513.875659][ T5912] usb 5-1: SerialNumber: syz [ 513.891822][ T5912] usb 5-1: config 0 descriptor?? [ 513.914220][ T5912] smsc95xx v2.0.0 [ 514.106951][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 514.119128][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 514.414285][ T5912] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 514.429589][ T5912] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 514.612127][T10898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.645141][T10898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.659136][ T5912] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 514.692669][ T5912] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 514.729994][ T5912] usb 5-1: USB disconnect, device number 114 [ 515.062445][T10910] pim6reg1: entered promiscuous mode [ 515.094340][T10910] pim6reg1: entered allmulticast mode [ 515.408150][T10917] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1491'. [ 515.429098][ T9] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 515.612818][ T9] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 515.657926][ T9] usb 3-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 515.694926][ T9] usb 3-1: config 2 interface 0 has no altsetting 0 [ 515.695149][T10924] comedi comedi1: pcl726: I/O port conflict (0x8,16) [ 515.710336][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 515.746548][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.754584][ T9] usb 3-1: Product: syz [ 515.773717][T10924] rose0: entered promiscuous mode [ 515.781445][ T9] usb 3-1: Manufacturer: syz [ 515.786046][ T9] usb 3-1: SerialNumber: syz [ 515.791848][T10924] rose0: entered allmulticast mode [ 515.809158][T10924] bond0: (slave rose0): Enslaving as an active interface with an up link [ 515.830742][T10931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.861573][T10931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.079419][T10913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.094792][T10913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.146819][T10913] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 516.163371][T10913] overlayfs: failed to set xattr on upper [ 516.180011][T10913] overlayfs: ...falling back to index=off. [ 516.195738][T10913] overlayfs: ...falling back to uuid=null. [ 516.305418][ T9] ims_pcu 3-1:2.0: Missing CDC union descriptor [ 516.311771][ T9] ims_pcu 3-1:2.0: probe with driver ims_pcu failed with error -22 [ 516.366695][ T9] usb 3-1: USB disconnect, device number 126 [ 516.409371][ T5912] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 516.569985][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 516.589998][ T5912] usb 5-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 516.610162][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 516.633783][ T5912] usb 5-1: Product: syz [ 516.645712][ T5912] usb 5-1: Manufacturer: syz [ 516.661290][ T5912] usb 5-1: SerialNumber: syz [ 516.676155][ T5912] usb 5-1: config 0 descriptor?? [ 516.733860][T10956] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 516.752522][T10956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.764937][T10956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.826844][ T9] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 516.915825][T10942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.930052][T10942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.952867][T10942] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1495'. [ 516.998960][ T9] usb 3-1: config 0 has an invalid interface number: 208 but max is 0 [ 517.015719][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.036144][ T9] usb 3-1: config 0 has no interface number 0 [ 517.046474][ T9] usb 3-1: config 0 interface 208 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 517.061698][ T5912] usb 5-1: USB disconnect, device number 115 [ 517.083193][ T9] usb 3-1: config 0 interface 208 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 517.093137][ T9] usb 3-1: config 0 interface 208 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 517.119621][ T9] usb 3-1: config 0 interface 208 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 517.142318][ T9355] udevd[9355]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 517.160999][ T9] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010b, bcdDevice=ff.b1 [ 517.170537][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.178540][ T9] usb 3-1: Product: syz [ 517.193595][ T9] usb 3-1: Manufacturer: syz [ 517.198220][ T9] usb 3-1: SerialNumber: syz [ 517.223978][ T9] usb 3-1: config 0 descriptor?? [ 517.231428][ T9] kvaser_usb 3-1:0.208: error -ENODEV: Cannot get usb endpoint(s) [ 517.322431][T10961] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1500'. [ 517.460776][T10949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.489884][T10949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.697334][ T5912] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 517.887272][ T5912] usb 5-1: Using ep0 maxpacket: 32 [ 517.900209][ T5912] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 517.928703][ T5912] usb 5-1: config 0 has no interface number 0 [ 517.939573][ T5912] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 517.961739][ T5912] usb 5-1: config 0 interface 85 has no altsetting 0 [ 517.981969][ T5912] usb 5-1: New USB device found, idVendor=1aac, idProduct=0219, bcdDevice=f0.72 [ 517.993320][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.012928][ T5912] usb 5-1: Product: syz [ 518.018348][ T5912] usb 5-1: Manufacturer: syz [ 518.022473][T10987] kAFS: unable to lookup cell '(,c¾Ì' [ 518.029968][ T5912] usb 5-1: SerialNumber: syz [ 518.049703][ T5912] usb 5-1: config 0 descriptor?? [ 518.158388][T10993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.173049][T10993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.478559][T10997] program syz.1.1512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 518.513243][ T5912] usb 5-1: USB disconnect, device number 116 [ 518.860568][ T5912] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 519.064791][ T5912] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 519.081937][ T5912] usb 5-1: can't read configurations, error -61 [ 519.116871][T11013] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1516'. [ 519.127954][T11014] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1517'. [ 519.183403][T11013] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.1516'. [ 519.243667][ T5912] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 519.415526][ T5912] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 519.423130][ T5912] usb 5-1: can't read configurations, error -61 [ 519.447168][ T5912] usb usb5-port1: attempt power cycle [ 519.482036][T11019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 519.580196][ T2346] pvrusb2: request_firmware fatal error with code=-110 [ 519.622024][ T2346] pvrusb2: Failure uploading firmware1 [ 519.633118][ T9367] usb 3-1: USB disconnect, device number 127 [ 519.641092][ T2346] pvrusb2: Device initialization was not successful. [ 519.650191][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 519.697323][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 519.719898][T11029] fuseblk: Unknown parameter 'Þ“ˆ@·”^Üf' [ 519.727641][ T2346] pvrusb2: Invalid write control endpoint [ 519.737309][ T1212] pvrusb2: Device being rendered inoperable [ 519.770299][ T2346] usb 2-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 519.810482][ T2346] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 519.831966][ T5912] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 519.887325][ T5912] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 519.899582][ T5912] usb 5-1: can't read configurations, error -61 [ 520.097624][ T5912] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 520.132054][ T5912] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 520.139643][ T5912] usb 5-1: can't read configurations, error -61 [ 520.162122][ T5912] usb usb5-port1: unable to enumerate USB device [ 521.145723][ T6699] usb 5-1: new full-speed USB device number 121 using dummy_hcd [ 521.345226][ T6699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 521.355432][T11078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.360968][ T6699] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 521.382577][T11078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.428931][ T6699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.484832][ T6699] usb 5-1: config 0 descriptor?? [ 521.527004][T11058] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 522.028833][ T6699] elan 0003:04F3:0755.001B: unknown main item tag 0x0 [ 522.051401][ T6699] elan 0003:04F3:0755.001B: unknown main item tag 0x0 [ 522.063198][ T6699] elan 0003:04F3:0755.001B: unknown main item tag 0x0 [ 522.072565][ T6699] elan 0003:04F3:0755.001B: unknown main item tag 0x0 [ 522.080002][ T6699] elan 0003:04F3:0755.001B: unknown main item tag 0x0 [ 522.093162][ T6699] elan 0003:04F3:0755.001B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 522.460946][T11091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.469714][T11091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.895933][T11102] PKCS7: Unknown OID: [4] 5.25.373.87(bad) [ 522.906001][T11102] PKCS7: Only support pkcs7_signedData type [ 523.242047][ T9367] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 523.414340][ T9367] usb 3-1: Using ep0 maxpacket: 8 [ 523.424029][ T43] usb 5-1: reset full-speed USB device number 121 using dummy_hcd [ 523.431761][ T9367] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 523.463569][ T9367] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 523.478288][ T9367] usb 3-1: config 0 interface 0 has no altsetting 0 [ 523.484965][ T9367] usb 3-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 523.494666][T11108] comedi comedi1: pcl726: I/O port conflict (0x8,16) [ 523.503790][ T9367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.513198][T11108] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 523.530688][ T9367] usb 3-1: config 0 descriptor?? [ 524.019051][ T9367] elecom 0003:056E:011C.001C: hidraw1: USB HID vf4.f6 Device [HID 056e:011c] on usb-dummy_hcd.2-1/input0 [ 524.111519][T11124] netlink: 'syz.6.1550': attribute type 2 has an invalid length. [ 524.122404][T11124] netlink: 'syz.6.1550': attribute type 1 has an invalid length. [ 524.228028][ T5947] usb 3-1: USB disconnect, device number 2 [ 524.442994][T11132] netlink: 'syz.6.1553': attribute type 2 has an invalid length. [ 524.448105][ T6699] usb 5-1: USB disconnect, device number 121 [ 524.452612][T11132] netlink: 17267 bytes leftover after parsing attributes in process `syz.6.1553'. [ 524.469495][T11132] tmpfs: Bad value for 'mpol' [ 524.484038][T11132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.498080][T11132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.630405][ T6699] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 524.790839][ T6699] usb 5-1: Using ep0 maxpacket: 32 [ 524.810742][ T6699] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.833801][ T6699] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.859625][ T6699] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 524.878180][ T6699] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 524.894644][ T6699] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 524.905475][ T6699] usb 5-1: Product: syz [ 524.909978][T11134] comedi comedi1: pcl726: I/O port conflict (0x8,16) [ 524.911692][ T6699] usb 5-1: Manufacturer: syz [ 524.922236][ T6699] usb 5-1: SerialNumber: syz [ 524.926552][T11134] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 524.947783][ T6699] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input39 [ 524.991260][ T6699] input: failed to attach handler mousedev to device input39, error: -5 [ 525.187940][ T9] usb 5-1: USB disconnect, device number 122 [ 525.241606][ T9] appletouch 5-1:1.0: input: appletouch disconnected [ 525.357341][ T9367] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 525.517747][ T9367] usb 3-1: Using ep0 maxpacket: 32 [ 525.540350][ T9367] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 16 [ 525.583540][ T9367] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 525.603627][ T9367] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0 [ 525.615615][ T9367] usb 3-1: config 1 interface 0 has no altsetting 0 [ 525.624825][ T9367] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 525.634212][ T9367] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.636838][T11144] 9pnet_fd: Insufficient options for proto=fd [ 525.642812][ T9367] usb 3-1: Product: syz [ 525.656801][ T9367] usb 3-1: Manufacturer: syz [ 525.661422][ T9367] usb 3-1: SerialNumber: syz [ 525.677936][T11138] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 525.775905][T11149] autofs: Bad value for 'fd' [ 525.872579][T11157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.901946][T11157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.917667][T11138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.935212][T11138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.962446][ T9367] usb 3-1: bad CDC descriptors [ 525.968617][T11161] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 525.975961][ T9367] usb 3-1: USB disconnect, device number 3 [ 526.298857][ T43] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 526.447861][ T43] usb 5-1: device descriptor read/64, error -71 [ 526.559988][T11165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.581310][T11165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.616555][T11167] comedi comedi0: Minor 3 specified more than once! [ 526.704390][ T43] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 526.843458][ T43] usb 5-1: device descriptor read/64, error -71 [ 526.889650][ T9367] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 526.961204][ T43] usb usb5-port1: attempt power cycle [ 527.090839][ T9367] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.110621][ T9367] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 527.126890][ T9367] usb 3-1: config 0 interface 0 has no altsetting 0 [ 527.134130][ T9367] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 527.143935][ T9367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.169473][ T9367] usb 3-1: config 0 descriptor?? [ 527.325217][ T43] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 527.368086][ T43] usb 5-1: device descriptor read/8, error -71 [ 527.478295][T11182] random: crng reseeded on system resumption [ 527.630350][ T9367] usbhid 3-1:0.0: can't add hid device: -71 [ 527.634450][ T43] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 527.648434][ T9367] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 527.661366][ T9367] usb 3-1: USB disconnect, device number 4 [ 527.678158][ T43] usb 5-1: device descriptor read/8, error -71 [ 527.805880][ T43] usb usb5-port1: unable to enumerate USB device [ 528.344840][T11184] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 528.363824][T11186] netlink: 200 bytes leftover after parsing attributes in process `syz.6.1573'. [ 528.446428][T11188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.465214][T11188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.404489][T11205] kAFS: unable to lookup cell '.,c¾ûL' [ 529.424021][T11205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1579'. [ 529.486468][T11209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.528749][T11209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.625395][T11213] netlink: 13588 bytes leftover after parsing attributes in process `syz.4.1583'. [ 529.731973][T11215] netlink: 'syz.4.1584': attribute type 2 has an invalid length. [ 529.840353][ T9367] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 530.011771][ T9367] usb 3-1: config 0 has an invalid descriptor of length 98, skipping remainder of the config [ 530.050496][ T9367] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 530.059535][ T9367] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 530.103976][ T9367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.150445][ T9367] usb 3-1: config 0 descriptor?? [ 530.883257][T11241] netlink: 200 bytes leftover after parsing attributes in process `syz.6.1593'. [ 531.017021][T11244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.047697][T11244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.354767][ T6699] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 531.517085][ T6699] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.536809][ T6699] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 531.558050][ T6699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.582107][ T6699] usb 5-1: config 0 descriptor?? [ 531.603069][ T6699] pwc: Askey VC010 type 2 USB webcam detected. [ 531.898854][ T30] audit: type=1326 audit(1757516190.103:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11251 comm="syz.6.1597" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a7dd8eba9 code=0x0 [ 532.029359][ T6699] pwc: recv_control_msg error -32 req 02 val 2b00 [ 532.036663][ T6699] pwc: recv_control_msg error -32 req 02 val 2700 [ 532.047413][ T6699] pwc: recv_control_msg error -32 req 02 val 2c00 [ 532.054881][ T6699] pwc: recv_control_msg error -32 req 04 val 1000 [ 532.063105][ T6699] pwc: recv_control_msg error -32 req 04 val 1300 [ 532.070252][ T6699] pwc: recv_control_msg error -32 req 04 val 1400 [ 532.077952][ T6699] pwc: recv_control_msg error -32 req 02 val 2000 [ 532.301530][ T6699] pwc: recv_control_msg error -32 req 04 val 1500 [ 532.308953][ T6699] pwc: recv_control_msg error -32 req 02 val 2500 [ 532.316181][ T6699] pwc: recv_control_msg error -32 req 02 val 2400 [ 532.329462][ T6699] pwc: recv_control_msg error -32 req 02 val 2600 [ 532.336805][ T6699] pwc: recv_control_msg error -32 req 02 val 2900 [ 532.345672][ T6699] pwc: recv_control_msg error -32 req 02 val 2800 [ 532.570383][ T6699] pwc: recv_control_msg error -71 req 04 val 1200 [ 532.592391][ T6699] pwc: Registered as video103. [ 532.602785][ T6699] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input41 [ 532.626228][ T6699] usb 5-1: USB disconnect, device number 127 [ 532.838061][ T43] usb 3-1: USB disconnect, device number 5 [ 533.035398][T11267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.048940][T11267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.557866][ T5868] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 533.729430][ T5868] usb 5-1: Using ep0 maxpacket: 32 [ 533.738105][ T5868] usb 5-1: unable to get BOS descriptor or descriptor too short [ 533.753843][ T5868] usb 5-1: config 125 has an invalid interface number: 27 but max is 0 [ 533.768103][ T5868] usb 5-1: config 125 has no interface number 0 [ 533.788029][ T5868] usb 5-1: config 125 interface 27 has no altsetting 0 [ 533.811426][ T5868] usb 5-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70 [ 533.831234][T11279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.833884][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.864572][ T5868] usb 5-1: Product: syz [ 533.869335][T11279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.876403][ T5868] usb 5-1: Manufacturer: syz [ 533.903497][ T5868] usb 5-1: SerialNumber: syz [ 534.157092][T11275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.176670][T11275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.334811][T11287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.359394][T11287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.375873][T11292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1612'. [ 534.466603][ T5868] hub 5-1:125.27: bad descriptor, ignoring hub [ 534.494548][ T5868] hub 5-1:125.27: probe with driver hub failed with error -5 [ 534.532533][ T5868] sierra 5-1:125.27: Sierra USB modem converter detected [ 534.562488][ T5868] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 534.598059][ T5868] usb 5-1: USB disconnect, device number 2 [ 534.606629][T11297] netlink: 'syz.2.1614': attribute type 1 has an invalid length. [ 534.619313][ T5868] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 534.634888][ T5868] sierra 5-1:125.27: device disconnected [ 534.635112][ T30] audit: type=1326 audit(1757516192.666:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11293 comm="syz.2.1614" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4295b8eba9 code=0x0 [ 534.690884][ T30] audit: type=1326 audit(1757516192.713:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11293 comm="syz.2.1614" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4295b8eba9 code=0x0 [ 534.712698][ C0] vkms_vblank_simulate: vblank timer overrun [ 534.897519][T11303] program syz.6.1616 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 535.590594][T11302] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1616'. [ 535.622812][T11302] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1616'. [ 535.655301][T11302] netlink: 'syz.6.1616': attribute type 5 has an invalid length. [ 535.684459][T11302] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1616'. [ 535.887683][ T9367] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 535.944508][T11322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.975330][T11322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.039686][ T9367] usb 5-1: device descriptor read/64, error -71 [ 536.315274][ T9367] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 536.486326][ T9367] usb 5-1: device descriptor read/64, error -71 [ 536.604295][ T9367] usb usb5-port1: attempt power cycle [ 536.694522][T11331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.717928][T11331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.978092][ T9367] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 537.010852][ T9367] usb 5-1: device descriptor read/8, error -71 [ 537.266676][ T9367] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 537.310041][ T9367] usb 5-1: device descriptor read/8, error -71 [ 537.427461][ T9367] usb usb5-port1: unable to enumerate USB device [ 537.737309][ T9367] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 537.931327][ T9367] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.950984][ T9367] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 537.970961][ T9367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.995404][ T9367] usb 3-1: config 0 descriptor?? [ 538.016705][ T9367] pwc: Askey VC010 type 2 USB webcam detected. [ 538.431672][ T9367] pwc: recv_control_msg error -32 req 02 val 2b00 [ 538.440649][ T9367] pwc: recv_control_msg error -32 req 02 val 2700 [ 538.464952][ T9367] pwc: recv_control_msg error -32 req 02 val 2c00 [ 538.472864][ T9367] pwc: recv_control_msg error -32 req 04 val 1000 [ 538.488462][ T9367] pwc: recv_control_msg error -32 req 04 val 1300 [ 538.508174][ T9367] pwc: recv_control_msg error -32 req 04 val 1400 [ 538.517739][ T9367] pwc: recv_control_msg error -32 req 02 val 2000 [ 538.743160][ T9367] pwc: recv_control_msg error -32 req 04 val 1500 [ 538.750204][ T9367] pwc: recv_control_msg error -32 req 02 val 2500 [ 538.757990][ T9367] pwc: recv_control_msg error -32 req 02 val 2400 [ 538.786089][ T9367] pwc: recv_control_msg error -32 req 02 val 2600 [ 538.795671][ T9367] pwc: recv_control_msg error -32 req 02 val 2900 [ 538.819870][ T9367] pwc: recv_control_msg error -32 req 02 val 2800 [ 538.826806][ C0] raw-gadget.3 gadget.2: ignoring, device is not running [ 538.836635][ T9367] pwc: recv_control_msg error -32 req 04 val 1100 [ 538.844542][ C0] raw-gadget.3 gadget.2: ignoring, device is not running [ 538.863100][ T9367] pwc: recv_control_msg error -32 req 04 val 1200 [ 538.877749][ T9367] pwc: Registered as video103. [ 538.883875][ T30] audit: type=1326 audit(1757516196.642:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11351 comm="syz.6.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7dd8eba9 code=0x7ffc0000 [ 538.918758][ T9367] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input42 [ 538.931287][ T30] audit: type=1326 audit(1757516196.642:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11351 comm="syz.6.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7dd8eba9 code=0x7ffc0000 [ 538.953611][ C0] vkms_vblank_simulate: vblank timer overrun [ 538.985167][ T9367] usb 3-1: USB disconnect, device number 6 [ 539.084168][ T30] audit: type=1326 audit(1757516196.689:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11351 comm="syz.6.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9a7dd8eba9 code=0x7ffc0000 [ 539.126562][ T30] audit: type=1326 audit(1757516196.689:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11351 comm="syz.6.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7dd8eba9 code=0x7ffc0000 [ 539.148918][ C0] vkms_vblank_simulate: vblank timer overrun [ 539.183794][T11359] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 539.186489][ T30] audit: type=1326 audit(1757516196.689:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11351 comm="syz.6.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7dd8eba9 code=0x7ffc0000 [ 539.235047][ T30] audit: type=1326 audit(1757516196.717:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11351 comm="syz.6.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9a7dd8eba9 code=0x7ffc0000 [ 539.257279][ C0] vkms_vblank_simulate: vblank timer overrun [ 539.264948][ T30] audit: type=1326 audit(1757516196.717:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11351 comm="syz.6.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7dd8eba9 code=0x7ffc0000 [ 539.335966][ T30] audit: type=1326 audit(1757516196.717:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11351 comm="syz.6.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7dd8eba9 code=0x7ffc0000 [ 539.361752][ T30] audit: type=1326 audit(1757516196.717:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11351 comm="syz.6.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f9a7dd8eba9 code=0x7ffc0000 [ 539.384984][ T30] audit: type=1326 audit(1757516196.717:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11351 comm="syz.6.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7dd8eba9 code=0x7ffc0000 [ 539.790775][T11390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.834265][T11390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.884694][T11387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.910075][T11387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.935396][T11374] Bluetooth: hci4: Unknown advertising packet type: 0x30 [ 539.935446][T11374] Bluetooth: hci4: adv larger than maximum supported [ 539.944459][T11374] Bluetooth: hci4: Malformed LE Event: 0x0d [ 540.162225][T11407] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1653'. [ 540.225372][T11409] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 540.316441][T11415] syzkaller1: entered promiscuous mode [ 540.322938][T11415] syzkaller1: entered allmulticast mode [ 540.345687][ T9367] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 540.536075][ T9367] usb 3-1: Using ep0 maxpacket: 32 [ 540.552100][ T9367] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.575425][ T9367] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 540.592331][ T9367] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.604972][ T9367] usb 3-1: Product: syz [ 540.609179][ T9367] usb 3-1: Manufacturer: syz [ 540.620889][ T9367] usb 3-1: SerialNumber: syz [ 540.645097][ T9367] usb 3-1: config 0 descriptor?? [ 540.657957][ T9367] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 540.689313][T11423] netlink: 56537 bytes leftover after parsing attributes in process `syz.6.1658'. [ 540.858777][ T9] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 540.888223][ T9367] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 540.907226][ T9367] quatech2 3-1:0.0: probe with driver quatech2 failed with error -8 [ 541.069170][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 541.101596][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.121585][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 541.132052][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.146756][ T9] usb 5-1: config 0 descriptor?? [ 541.436607][T11442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.445343][T11442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.458604][T11442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.467337][T11442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.539194][T11445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.552968][T11445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.724698][T11374] Bluetooth: hci4: command 0x0405 tx timeout [ 542.132596][T11447] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 542.199622][T11449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.216621][T11450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.217836][T11449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.233311][T11450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.243312][T11449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.254625][T11449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.334396][ T43] usb 3-1: USB disconnect, device number 7 [ 543.809353][ T43] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 543.818447][ T9367] usb 5-1: USB disconnect, device number 7 [ 543.978208][ T43] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.001084][ T43] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.024548][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 544.031182][ T43] usb 3-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 544.071123][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.098841][ T43] usb 3-1: config 0 descriptor?? [ 544.110528][T11473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.136420][T11473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.157434][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1674'. [ 544.167009][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1674'. [ 544.210955][T11477] netlink: 'syz.4.1676': attribute type 13 has an invalid length. [ 544.542703][ T43] holtek_mouse 0003:04D9:A04A.001E: item fetching failed at offset 5/7 [ 544.561183][ T43] holtek_mouse 0003:04D9:A04A.001E: hid parse failed: -22 [ 544.569414][ T43] holtek_mouse 0003:04D9:A04A.001E: probe with driver holtek_mouse failed with error -22 [ 544.611140][ T9367] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 544.773736][ T43] usb 3-1: USB disconnect, device number 8 [ 544.805586][ T9367] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 544.832446][ T9367] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 544.843529][ T9367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 544.852008][ T9367] usb 5-1: SerialNumber: syz [ 544.966970][T11485] syzkaller1: entered allmulticast mode [ 545.160486][T11487] netlink: 'syz.6.1681': attribute type 1 has an invalid length. [ 545.168520][T11487] netlink: 'syz.6.1681': attribute type 1 has an invalid length. [ 545.322819][T11494] mmap: syz.6.1683 (11494): VmData 37588992 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 545.543142][ T9367] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 545.608990][T11503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.639172][T11503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.704402][T11503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.735413][T11503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.491328][T11522] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1689'. [ 546.512372][T11522] 0ªî{: renamed from macvtap0 (while UP) [ 546.535294][T11522] 0ªî{: entered allmulticast mode [ 546.559457][T11522] veth0_macvtap: entered allmulticast mode [ 546.565711][T11522] A link change request failed with some changes committed already. Interface 30ªî{ may have been left with an inconsistent configuration, please check. [ 546.746884][T11530] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 547.392126][T11558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.413123][T11558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.605449][ T9] usb 5-1: USB disconnect, device number 8 [ 547.635897][ T9] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 548.654251][T11604] comedi comedi1: pcl726: I/O port conflict (0x8,16) [ 548.662365][T11604] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 548.930603][ T9] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 549.037165][ T43] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 549.133113][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.151352][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 549.184400][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 549.207673][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 549.230502][ T9] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 549.239718][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.240685][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 549.254094][ T9] usb 3-1: config 0 descriptor?? [ 549.290038][ T9] gspca_main: spca561-2.14.0 probing abcd:cdee [ 549.298064][ T43] usb 5-1: config 162 has an invalid interface number: 97 but max is 0 [ 549.321077][ T43] usb 5-1: config 162 has no interface number 0 [ 549.328681][ T43] usb 5-1: config 162 interface 97 has no altsetting 0 [ 549.348839][ T43] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 549.368974][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.384689][ T43] usb 5-1: Product: syz [ 549.388871][ T43] usb 5-1: Manufacturer: syz [ 549.416753][ T43] usb 5-1: SerialNumber: syz [ 549.481588][ T9] spca561 3-1:0.0: probe with driver spca561 failed with error -22 [ 549.519692][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 549.520121][T11631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.537122][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 549.564713][T11631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.670585][ T9] usb 3-1: USB disconnect, device number 9 [ 550.796180][T11665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.825411][T11665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.931060][ T43] metro_usb 5-1:162.97: Metrologic USB to Serial converter detected [ 550.958031][ T43] usb 5-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 550.967794][ T1087] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.994353][T11670] comedi comedi1: pcl726: I/O port conflict (0x8,16) [ 551.006059][ T43] usb 5-1: USB disconnect, device number 9 [ 551.055754][ T43] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 551.065406][T11670] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 551.102181][ T43] metro_usb 5-1:162.97: device disconnected [ 551.137194][ T1087] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.237773][ T1087] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.322164][ T1087] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.346219][ T9] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 551.540390][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.576757][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 551.595418][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 551.627461][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 551.666804][ T1087] bridge_slave_1: left allmulticast mode [ 551.677793][ T9] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 551.686836][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.709754][ T1087] bridge_slave_1: left promiscuous mode [ 551.715606][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.719159][ T9] usb 3-1: config 0 descriptor?? [ 551.748144][ T9] gspca_main: spca561-2.14.0 probing abcd:cdee [ 551.764554][ T1087] bridge_slave_0: left allmulticast mode [ 551.785682][ T1087] bridge_slave_0: left promiscuous mode [ 551.791434][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.967756][ T9] spca561 3-1:0.0: probe with driver spca561 failed with error -22 [ 551.996252][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 552.019737][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 552.166742][ T9] usb 3-1: USB disconnect, device number 10 [ 552.879877][T11374] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 552.890136][T11374] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 552.904187][T11374] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 552.921991][T11374] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 552.939325][T11374] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 553.111537][T11707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.128588][T11707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.153961][ T1087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.167002][ T1087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.179329][ T1087] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 553.197533][ T1087] bond0 (unregistering): Released all slaves [ 553.249876][T11707] can0: slcan on ttyS3. [ 553.306974][ T1087] tipc: Disabling bearer [ 553.325407][T11708] can0 (unregistered): slcan off ttyS3. [ 553.347564][ T1087] tipc: Left network mode [ 553.655471][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 553.780825][ T1087] hsr_slave_0: left promiscuous mode [ 553.812306][ T1087] hsr_slave_1: left promiscuous mode [ 553.823988][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 553.877636][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 553.910194][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 553.927420][ T1087] veth1_macvtap: left promiscuous mode [ 553.937437][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 553.951186][ T1087] veth0_macvtap: left promiscuous mode [ 553.958902][ T1087] veth1_vlan: left promiscuous mode [ 553.979229][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 553.988697][ T1087] veth0_vlan: left promiscuous mode [ 554.001782][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.027463][ T9] usb 3-1: config 0 descriptor?? [ 554.039560][T11728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.076966][T11728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.115293][T11732] netlink: 'syz.1.1729': attribute type 10 has an invalid length. [ 554.139398][T11732] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1729'. [ 554.257353][ T9] hdpvr 3-1:0.0: unexpected answer of status request, len -71 [ 554.283702][ T9] hdpvr 3-1:0.0: device init failed [ 554.299877][ T9] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 554.331794][ T9] usb 3-1: USB disconnect, device number 11 [ 554.721763][T11737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.734176][T11737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.786505][ T1087] team0 (unregistering): Port device team_slave_1 removed [ 554.874723][ T1087] team0 (unregistering): Port device team_slave_0 removed [ 555.154984][T11374] Bluetooth: hci0: command tx timeout [ 555.239571][ T5963] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 555.397996][ T5963] usb 3-1: device descriptor read/64, error -71 [ 555.434164][T11745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.444244][T11745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.618782][T11732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.640284][T11732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.655295][ T5963] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 555.666183][T11732] bond0 (unregistering): Released all slaves [ 555.714405][T11702] chnl_net:caif_netlink_parms(): no params data found [ 555.816293][ T5963] usb 3-1: device descriptor read/64, error -71 [ 555.936684][ T5963] usb usb3-port1: attempt power cycle [ 556.056482][T11702] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.092040][T11702] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.110651][T11702] bridge_slave_0: entered allmulticast mode [ 556.131303][T11702] bridge_slave_0: entered promiscuous mode [ 556.155140][T11702] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.173402][T11702] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.189444][T11702] bridge_slave_1: entered allmulticast mode [ 556.208677][T11702] bridge_slave_1: entered promiscuous mode [ 556.295261][T11764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.329089][T11764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.330783][ T5963] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 556.372222][ T5963] usb 3-1: device descriptor read/8, error -71 [ 556.388197][T11702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.426313][T11702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.494635][T11770] binder: BINDER_SET_CONTEXT_MGR already set [ 556.511278][T11770] binder: 11767:11770 ioctl 4018620d 200000000100 returned -16 [ 556.547347][T11768] binder: 11767:11768 ioctl 5501 0 returned -22 [ 556.550745][T11702] team0: Port device team_slave_0 added [ 556.576750][T11702] team0: Port device team_slave_1 added [ 556.627477][ T5963] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 556.674396][T11702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.681603][ T5963] usb 3-1: device descriptor read/8, error -71 [ 556.691726][T11702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.744944][T11702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.763483][T11702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.777247][T11702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.803137][ C0] vkms_vblank_simulate: vblank timer overrun [ 556.820051][ T5963] usb usb3-port1: unable to enumerate USB device [ 556.828429][T11702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.996299][T11702] hsr_slave_0: entered promiscuous mode [ 557.014133][T11702] hsr_slave_1: entered promiscuous mode [ 557.376025][T11374] Bluetooth: hci0: command tx timeout [ 557.570469][T11702] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 557.594721][T11702] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 557.618564][T11702] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 557.641207][T11702] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 557.875033][T11702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.922249][T11702] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.939844][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.947025][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.986886][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.994032][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.532262][T11702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.624355][T11815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1744'. [ 558.857502][T11822] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1746'. [ 559.067385][T11829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.076321][T11829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.142785][T11702] veth0_vlan: entered promiscuous mode [ 559.157235][T11702] veth1_vlan: entered promiscuous mode [ 559.197382][T11702] veth0_macvtap: entered promiscuous mode [ 559.212272][T11702] veth1_macvtap: entered promiscuous mode [ 559.236798][T11702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.260930][T11702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.284469][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.304241][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.350231][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.368558][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.446944][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.465764][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.498077][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.508598][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.600935][T11374] Bluetooth: hci0: command tx timeout [ 559.863828][T11836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.869177][T11843] misc userio: The device must be registered before sending interrupts [ 559.900872][T11836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.216730][T11851] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1754'. [ 560.582909][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 560.631000][T11856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.663139][T11856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.769643][ T9] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 560.793444][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.810590][ T9] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 560.816077][T11859] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1757'. [ 560.842452][ T9] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 560.850975][ T9] usb 3-1: Manufacturer: syz [ 560.864173][ T9] usb 3-1: config 0 descriptor?? [ 560.946778][ T9] rc_core: IR keymap rc-hauppauge not found [ 560.953989][ T9] Registered IR keymap rc-empty [ 560.962397][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 560.977782][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input44 [ 561.293712][T11865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.307069][T11865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.316557][ C0] igorplugusb 3-1:0.0: receive overflow, at least 33 lost [ 561.331757][T11865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.344340][T11865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.525526][T11872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.532031][ T5912] usb 3-1: USB disconnect, device number 16 [ 561.536882][T11872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.823056][T11374] Bluetooth: hci0: command tx timeout [ 562.180103][T11374] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 562.303296][T11879] comedi comedi1: pcl726: I/O port conflict (0x8,16) [ 562.315330][T11879] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 562.472785][T11887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.488030][T11887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.582076][ T9367] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 562.744417][ T9367] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.758628][ T9367] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 562.773347][ T9367] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 562.785241][ T9367] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 562.800351][ T9367] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 562.812279][ T9367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.834567][ T9367] usb 3-1: config 0 descriptor?? [ 562.854571][ T9367] gspca_main: spca561-2.14.0 probing abcd:cdee [ 563.098546][ T9367] spca561 3-1:0.0: probe with driver spca561 failed with error -22 [ 563.139312][ T9367] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 563.164591][ T9367] usb 3-1: MIDIStreaming interface descriptor not found [ 563.269332][T11892] o2cb: This node has not been configured. [ 563.298690][ T9367] usb 3-1: USB disconnect, device number 17 [ 563.319727][T11892] o2cb: Cluster check failed. Fix errors before retrying. [ 563.343346][T11892] (syz.1.1768,11892,1):user_dlm_register:674 ERROR: status = -22 [ 563.365680][T11892] (syz.1.1768,11892,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 563.397071][T11893] o2cb: This node has not been configured. [ 563.409072][T11893] o2cb: Cluster check failed. Fix errors before retrying. [ 563.418183][T11893] (syz.1.1768,11893,1):user_dlm_register:674 ERROR: status = -22 [ 563.434299][T11893] (syz.1.1768,11893,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 563.459394][T11897] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1769'. [ 563.569299][T11900] netlink: del zone limit has 4 unknown bytes [ 563.948384][T11916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.967268][T11916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.185633][ T9367] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 564.346995][ T9367] usb 3-1: Using ep0 maxpacket: 16 [ 564.378957][ T9367] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 564.387310][ T9367] usb 3-1: config 0 has no interface number 0 [ 564.408883][ T9367] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 564.429439][ T9367] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 564.448143][ T9367] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.448169][ T9367] usb 3-1: Product: syz [ 564.448186][ T9367] usb 3-1: Manufacturer: syz [ 564.448203][ T9367] usb 3-1: SerialNumber: syz [ 564.460965][ T9367] usb 3-1: config 0 descriptor?? [ 564.760265][T11933] comedi comedi1: pcl726: I/O port conflict (0x8,16) [ 564.768877][T11933] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 564.896401][ T9367] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 564.919150][ T9367] usb 3-1: USB disconnect, device number 18 [ 565.313067][T11939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.323783][T11939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.325197][T11938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.352625][T11938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.757208][ T6699] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 565.917516][ T6699] usb 3-1: device descriptor read/64, error -71 [ 566.000295][T11947] Bluetooth: MGMT ver 1.23 [ 566.010476][T11948] program syz.6.1785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 566.075651][T11951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.089948][T11951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.143651][T11951] sp0: Synchronizing with TNC [ 566.174152][ T6699] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 566.211753][T11951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.222392][T11951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.235471][T11951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.246690][T11951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.323781][ T6699] usb 3-1: device descriptor read/64, error -71 [ 566.441655][ T6699] usb usb3-port1: attempt power cycle [ 566.815653][ T6699] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 566.848577][ T6699] usb 3-1: device descriptor read/8, error -71 [ 566.916723][T11955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.935144][T11955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.104391][ T6699] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 567.136986][ T6699] usb 3-1: device descriptor read/8, error -71 [ 567.265100][ T6699] usb usb3-port1: unable to enumerate USB device [ 568.027717][T11970] netlink: 'syz.6.1794': attribute type 12 has an invalid length. [ 568.045008][T11970] netlink: 172 bytes leftover after parsing attributes in process `syz.6.1794'. [ 568.082670][ C0] Unknown status report in ack skb [ 568.091237][T11972] netlink: 1347 bytes leftover after parsing attributes in process `syz.7.1793'. [ 568.242696][T11977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.282065][T11977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.813025][T11981] netlink: 'syz.2.1798': attribute type 32 has an invalid length. [ 569.148325][T11990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.186207][T11990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.285266][T11993] comedi comedi1: pcl726: I/O port conflict (0x8,16) [ 569.307987][T11993] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 569.606599][ T5948] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 569.821510][ T5948] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.836524][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 569.848920][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 569.852457][T12009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.870363][ T5948] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 569.884625][ T5948] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 569.893675][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.894782][T12009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.903762][T12008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.938929][ T5948] usb 3-1: config 0 descriptor?? [ 569.952544][T12008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.973818][ T5948] gspca_main: spca561-2.14.0 probing abcd:cdee [ 570.192500][ T5948] spca561 3-1:0.0: probe with driver spca561 failed with error -22 [ 570.212692][ T5948] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 570.232954][ T5948] usb 3-1: MIDIStreaming interface descriptor not found [ 570.344212][T12022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.354619][ T5948] usb 3-1: USB disconnect, device number 23 [ 570.392576][T12022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.083053][T12046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.102785][T12046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.152553][T12046] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 571.941149][T12081] comedi comedi1: pcl726: I/O port conflict (0x8,16) [ 571.965215][T12081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.987814][T12081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.054153][ T6699] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 572.228552][ T6699] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 572.238232][ T6699] usb 3-1: config 0 has no interface number 0 [ 572.244349][ T6699] usb 3-1: config 0 interface 41 has no altsetting 0 [ 572.254204][ T6699] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 572.269464][ T6699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.277679][ T6699] usb 3-1: Product: syz [ 572.282238][ T6699] usb 3-1: Manufacturer: syz [ 572.288157][ T6699] usb 3-1: SerialNumber: syz [ 572.301181][ T6699] usb 3-1: config 0 descriptor?? [ 572.743628][T12073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.770842][T12073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.781640][ T6699] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 572.802417][T11374] Bluetooth: hci4: unexpected event 0x01 length: 4 > 1 [ 572.807429][T12090] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 572.825705][ T6699] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 572.841718][ T6699] usb 3-1: USB disconnect, device number 24 [ 572.850476][T12090] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 573.105561][T12099] netlink: 'syz.1.1821': attribute type 6 has an invalid length. [ 573.152446][T12105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.186124][T12105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.207499][T12104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.225369][T12104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.262290][T12103] (syz.6.1822,12103,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 573.700621][ T6699] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 573.922773][ T6699] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 573.942876][T12123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.952598][ T6699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.961142][T12123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.972591][ T6699] usb 3-1: config 0 descriptor?? [ 574.211442][ T6699] kaweth 3-1:0.0: Firmware present in device. [ 574.468328][ T6699] kaweth 3-1:0.0: Error reading configuration (-71), no net device created [ 574.500270][ T6699] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 574.547296][ T6699] usb 3-1: USB disconnect, device number 25 [ 574.871067][T12144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.879988][T12144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.899762][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1831'. [ 575.090105][ T43] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 575.202015][T12154] openvswitch: netlink: Duplicate or invalid key (type 0). [ 575.211017][T12154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 575.279214][ T43] usb 3-1: config 0 has an invalid interface number: 170 but max is 0 [ 575.296116][ T43] usb 3-1: config 0 has no interface number 0 [ 575.302234][ T43] usb 3-1: config 0 interface 170 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 575.313740][ T43] usb 3-1: config 0 interface 170 has no altsetting 0 [ 575.325110][ T43] usb 3-1: New USB device found, idVendor=061d, idProduct=c1a0, bcdDevice=43.96 [ 575.334545][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.344309][ T43] usb 3-1: Product: syz [ 575.348713][ T43] usb 3-1: Manufacturer: syz [ 575.355272][ T43] usb 3-1: SerialNumber: syz [ 575.364921][ T43] usb 3-1: config 0 descriptor?? [ 575.376876][ T43] quatech2 3-1:0.170: Quatech 2nd gen USB to Serial Driver converter detected [ 575.601821][ T43] usb 3-1: qt2_attach - failed to power on unit: -71 [ 575.612388][T11374] Bluetooth: hci4: unexpected event 0x01 length: 4 > 1 [ 575.621300][T12158] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 575.625654][ T43] quatech2 3-1:0.170: probe with driver quatech2 failed with error -71 [ 575.629295][T12158] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 575.668457][ T43] usb 3-1: USB disconnect, device number 26 [ 575.768852][T12160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.781919][T12160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.366048][ T31] INFO: task syz.5.942:9199 blocked for more than 143 seconds. [ 576.384735][ T31] Not tainted syzkaller #0 [ 576.389685][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 576.461590][ T31] task:syz.5.942 state:D stack:26792 pid:9199 tgid:9198 ppid:6063 task_flags:0x400140 flags:0x00004004 [ 576.505523][T12168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.506878][ T31] Call Trace: [ 576.524837][T12168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.528366][ T31] [ 576.544065][ T31] __schedule+0x1798/0x4cc0 [ 576.560956][ T31] ? __pfx___schedule+0x10/0x10 [ 576.577027][ T31] ? schedule+0x91/0x360 [ 576.587133][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1841'. [ 576.592148][ T31] schedule+0x165/0x360 [ 576.604831][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1841'. [ 576.618808][ T31] bit_wait+0x11/0xd0 [ 576.625638][ T31] __wait_on_bit+0xb9/0x310 [ 576.637294][ T31] ? __pfx_bit_wait+0x10/0x10 [ 576.647174][ T31] ? __pfx_bit_wait+0x10/0x10 [ 576.659258][ T31] out_of_line_wait_on_bit+0x123/0x170 [ 576.674740][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 576.691652][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 576.700895][ T31] ? rcu_is_watching+0x15/0xb0 [ 576.711893][ T31] __fscache_acquire_volume+0xbf5/0xe80 [ 576.725975][ T31] v9fs_cache_session_get_cookie+0x121/0x1c0 [ 576.742813][ T31] v9fs_session_init+0x1591/0x19a0 [ 576.753603][ T31] ? __pfx_v9fs_session_init+0x10/0x10 [ 576.759938][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 576.775553][ T31] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 576.786330][ T31] v9fs_mount+0xc8/0xa50 [ 576.797088][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 576.802102][ T31] ? __pfx_v9fs_mount+0x10/0x10 [ 576.806990][ T31] legacy_get_tree+0xfd/0x1a0 [ 576.822879][ T31] ? __pfx_v9fs_mount+0x10/0x10 [ 576.827759][ T31] vfs_get_tree+0x8f/0x2b0 [ 576.832200][ T31] do_new_mount+0x302/0xa10 [ 576.866904][ T31] ? apparmor_capable+0x137/0x1b0 [ 576.882835][ T31] ? __pfx_do_new_mount+0x10/0x10 [ 576.894337][ T31] ? ns_capable+0x8a/0xf0 [ 576.905974][ T31] ? path_mount+0x61c/0xfe0 [ 576.915115][ T31] ? kmem_cache_free+0x19a/0x690 [ 576.936157][ T31] __se_sys_mount+0x313/0x410 [ 576.961193][ T31] ? __pfx___se_sys_mount+0x10/0x10 [ 576.979037][ T31] ? do_syscall_64+0xbe/0xfa0 [ 576.994155][ T31] ? __x64_sys_mount+0x20/0xc0 [ 577.016936][ T31] do_syscall_64+0xfa/0xfa0 [ 577.021495][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 577.079205][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.085314][ T31] ? clear_bhb_loop+0x60/0xb0 [ 577.088760][ T9367] usb 7-1: USB disconnect, device number 21 [ 577.121318][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.132330][ T31] RIP: 0033:0x7fd8e158eba9 [ 577.139969][ T31] RSP: 002b:00007fd8e2497038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 577.148824][ T31] RAX: ffffffffffffffda RBX: 00007fd8e17d5fa0 RCX: 00007fd8e158eba9 [ 577.158574][ T31] RDX: 0000200000000080 RSI: 00002000000002c0 RDI: 0000000000000000 [ 577.166862][ T31] RBP: 00007fd8e1611e19 R08: 0000200000000400 R09: 0000000000000000 [ 577.175265][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.183238][ T31] R13: 00007fd8e17d6038 R14: 00007fd8e17d5fa0 R15: 00007ffe7c9eb428 [ 577.192208][ T31] [ 577.195380][ T31] [ 577.195380][ T31] Showing all locks held in the system: [ 577.204941][ T31] 1 lock held by khungtaskd/31: [ 577.209913][ T31] #0: ffffffff8e53c560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 577.225023][ T31] 5 locks held by kworker/u8:6/1107: [ 577.230380][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 577.240367][ T31] #1: ffff8880b8624008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 577.249282][ T31] #2: ffffffff9a1ac720 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 577.259666][ T31] #3: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 577.269654][ T31] #4: ffff8880b8624008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 577.278596][ T31] 6 locks held by kworker/0:2/1212: [ 577.283830][ T31] #0: ffff888021aead48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 577.295232][ T31] #1: ffffc90003fbfba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 577.307175][ T31] #2: ffff888144b4b198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 577.316306][ T31] #3: ffff88807aa84198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 577.326597][ T31] #4: ffff88807c7ce160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 577.339055][ T31] #5: ffff888051390188 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_disconnect+0x6d/0x500 [ 577.349549][ T31] 2 locks held by pvrusb2-context/2346: [ 577.355083][ T31] #0: ffff888051390188 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_initialize+0xc6/0x3ac0 [ 577.365578][ T31] #1: ffffffff8e3e2790 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0 [ 577.376006][ T31] 2 locks held by getty/5626: [ 577.380763][ T31] #0: ffff88814cd8b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 577.390567][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 577.400702][ T31] 1 lock held by syz.1.965/9259: [ 577.405631][ T31] #0: ffffffff8e541ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 577.416523][ T31] 4 locks held by udevd/9314: [ 577.421275][ T31] #0: ffff888064008790 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 577.430872][ T31] #1: ffff88805ac1dc88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 577.440550][ T31] #2: ffff88814d16c968 (kn->active#26){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 577.450133][ T31] #3: ffff88807aa84198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 577.459539][ T31] 1 lock held by syz.2.1841/12169: [ 577.464762][ T31] #0: ffffffff8e541ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 577.475736][ T31] [ 577.519963][ T31] ============================================= [ 577.519963][ T31] [ 577.561458][ T31] NMI backtrace for cpu 1 [ 577.561484][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 577.561507][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 577.561519][ T31] Call Trace: [ 577.561528][ T31] [ 577.561537][ T31] dump_stack_lvl+0x189/0x250 [ 577.561563][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 577.561583][ T31] ? __pfx__printk+0x10/0x10 [ 577.561624][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 577.561651][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 577.561678][ T31] ? __pfx__printk+0x10/0x10 [ 577.561710][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 577.561735][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 577.561763][ T31] watchdog+0xf60/0xfa0 [ 577.561789][ T31] ? watchdog+0x1e2/0xfa0 [ 577.561821][ T31] kthread+0x711/0x8a0 [ 577.561854][ T31] ? __pfx_watchdog+0x10/0x10 [ 577.561873][ T31] ? __pfx_kthread+0x10/0x10 [ 577.561904][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 577.561931][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 577.561959][ T31] ? __pfx_kthread+0x10/0x10 [ 577.561988][ T31] ret_from_fork+0x47c/0x820 [ 577.562014][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 577.562045][ T31] ? __switch_to_asm+0x39/0x70 [ 577.562065][ T31] ? __switch_to_asm+0x33/0x70 [ 577.562084][ T31] ? __pfx_kthread+0x10/0x10 [ 577.562114][ T31] ret_from_fork_asm+0x1a/0x30 [ 577.562152][ T31] [ 577.562160][ T31] Sending NMI from CPU 1 to CPUs 0: [ 577.708180][ C0] NMI backtrace for cpu 0 [ 577.708197][ C0] CPU: 0 UID: 0 PID: 9259 Comm: syz.1.965 Not tainted syzkaller #0 PREEMPT(full) [ 577.708218][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 577.708230][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 577.708256][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 eb 89 a6 f5 cc [ 577.708272][ C0] RSP: 0018:ffffc90003087430 EFLAGS: 00000082 [ 577.708289][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 25668860e659f900 [ 577.708301][ C0] RDX: 0000000000000001 RSI: ffffffff8de8f7b6 RDI: ffffffff8c04f000 [ 577.708314][ C0] RBP: ffffffff8173fd35 R08: 0000000000000000 R09: ffffffff8173fd35 [ 577.708327][ C0] R10: ffffc90003087608 R11: fffff52000610ecd R12: 0000000000000002 [ 577.708340][ C0] R13: ffffffff8e53c560 R14: 0000000000000000 R15: 0000000000000246 [ 577.708352][ C0] FS: 0000000000000000(0000) GS:ffff8881257b1000(0000) knlGS:0000000000000000 [ 577.708367][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 577.708379][ C0] CR2: 00005638e3b3ff70 CR3: 000000000e338000 CR4: 00000000003526f0 [ 577.708395][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 577.708406][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 577.708418][ C0] Call Trace: [ 577.708425][ C0] [ 577.708432][ C0] lock_acquire+0x130/0x360 [ 577.708455][ C0] ? __unwind_start+0xf8/0x760 [ 577.708477][ C0] ? unwind_next_frame+0xa5/0x2390 [ 577.708499][ C0] unwind_next_frame+0xc2/0x2390 [ 577.708520][ C0] ? unwind_next_frame+0xa5/0x2390 [ 577.708543][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 577.708563][ C0] ? get_stack_info_noinstr+0x1b/0x130 [ 577.708587][ C0] __unwind_start+0x5b9/0x760 [ 577.708609][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 577.708635][ C0] arch_stack_walk+0xe4/0x150 [ 577.708659][ C0] ? __unwind_start+0xf8/0x760 [ 577.708682][ C0] stack_trace_save+0x9c/0xe0 [ 577.708704][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 577.708734][ C0] save_stack+0xf5/0x1f0 [ 577.708753][ C0] ? __pfx_save_stack+0x10/0x10 [ 577.708783][ C0] __reset_page_owner+0x71/0x1f0 [ 577.708801][ C0] __free_frozen_pages+0xbc4/0xd30 [ 577.708824][ C0] vfree+0x25a/0x400 [ 577.708840][ C0] ? __pfx_kcov_close+0x10/0x10 [ 577.708858][ C0] kcov_close+0x28/0x50 [ 577.708873][ C0] __fput+0x449/0xa70 [ 577.708893][ C0] task_work_run+0x1d4/0x260 [ 577.708910][ C0] ? __pfx_task_work_run+0x10/0x10 [ 577.708926][ C0] ? do_exit+0x6b0/0x2300 [ 577.708950][ C0] ? kmem_cache_free+0x19a/0x690 [ 577.708971][ C0] do_exit+0x6b5/0x2300 [ 577.708998][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 577.709021][ C0] ? do_raw_spin_lock+0x121/0x290 [ 577.709046][ C0] ? __pfx_do_exit+0x10/0x10 [ 577.709077][ C0] do_group_exit+0x21c/0x2d0 [ 577.709092][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 577.709117][ C0] get_signal+0x1286/0x1340 [ 577.709144][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 577.709163][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 577.709181][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 577.709202][ C0] ? exit_to_user_mode_loop+0x40/0x130 [ 577.709221][ C0] exit_to_user_mode_loop+0x75/0x130 [ 577.709240][ C0] do_syscall_64+0x2bd/0xfa0 [ 577.709263][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 577.709287][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.709304][ C0] ? clear_bhb_loop+0x60/0xb0 [ 577.709322][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.709339][ C0] RIP: 0033:0x7f4037dc1465 [ 577.709354][ C0] Code: Unable to access opcode bytes at 0x7f4037dc143b. [ 577.709363][ C0] RSP: 002b:00007f4038b6af80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 577.709381][ C0] RAX: fffffffffffffdfc RBX: 00007f4037fd5fa0 RCX: 00007f4037dc1465 [ 577.709394][ C0] RDX: 00007f4038b6afc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 577.709406][ C0] RBP: 00007f4037e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 577.709418][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 577.709429][ C0] R13: 00007f4037fd6038 R14: 00007f4037fd5fa0 R15: 00007ffea35d6368 [ 577.709449][ C0] [ 578.118045][ C0] vkms_vblank_simulate: vblank timer overrun [ 578.281169][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 578.288050][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 578.297163][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 578.307215][ T31] Call Trace: [ 578.310493][ T31] [ 578.313595][ T31] dump_stack_lvl+0x99/0x250 [ 578.318189][ T31] ? __asan_memcpy+0x40/0x70 [ 578.322792][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 578.327988][ T31] ? __pfx__printk+0x10/0x10 [ 578.332597][ T31] vpanic+0x237/0x6d0 [ 578.336587][ T31] ? __pfx_vpanic+0x10/0x10 [ 578.341098][ T31] ? preempt_schedule_common+0x83/0xd0 [ 578.346575][ T31] panic+0xb9/0xc0 [ 578.350301][ T31] ? __pfx_panic+0x10/0x10 [ 578.354735][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 578.360122][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 578.366282][ T31] watchdog+0xf9f/0xfa0 [ 578.370446][ T31] ? watchdog+0x1e2/0xfa0 [ 578.374867][ T31] kthread+0x711/0x8a0 [ 578.378949][ T31] ? __pfx_watchdog+0x10/0x10 [ 578.383634][ T31] ? __pfx_kthread+0x10/0x10 [ 578.388241][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 578.393452][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 578.398667][ T31] ? __pfx_kthread+0x10/0x10 [ 578.403258][ T31] ret_from_fork+0x47c/0x820 [ 578.407844][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 578.412949][ T31] ? __switch_to_asm+0x39/0x70 [ 578.417703][ T31] ? __switch_to_asm+0x33/0x70 [ 578.422470][ T31] ? __pfx_kthread+0x10/0x10 [ 578.427068][ T31] ret_from_fork_asm+0x1a/0x30 [ 578.431836][ T31] [ 578.435081][ T31] Kernel Offset: disabled [ 578.439391][ T31] Rebooting in 86400 seconds..